ELSA-2021-2168

ELSA-2021-2168 - kernel security and bug fix update

Type:SECURITY
Severity:IMPORTANT
Release Date:2021-06-02

Description


[4.18.0-305.3.1_4.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-11.0.5

[4.18.0-305.3.1_4]
- Revert 'uio: use request_threaded_irq instead' (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]

[4.18.0-305.2.1_4]
- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu->run->internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert '[tools] tools/power turbostat: Enable accumulate RAPL display' (Prarit Bhargava) [1952987 1944699]

[4.18.0-305.1.1_4]
- ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe (Jaroslav Kysela) [1954545 1870724]
- ALSA: usb-audio: fix use after free in usb_audio_disconnect (Jaroslav Kysela) [1954545 1870724]
- ALSA: usb-audio: Disable USB autosuspend properly in setup_disable_autosuspend() (Jaroslav Kysela) [1954545 1870724]
- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1945123 1924230]
- geneve: do not modify the shared tunnel info when PMTU triggers an ICMP reply (Antoine Tenart) [1944667 1941753]
- vxlan: do not modify the shared tunnel info when PMTU triggers an ICMP reply (Antoine Tenart) [1944667 1941753]
- redhat: switch to zstream (Jan Stancek)


Related CVEs


CVE-2021-3501
CVE-2021-3543

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 8 (aarch64) kernel-4.18.0-305.3.1.el8_4.src.rpm946670ddeca8c543e2b1fe3c48bc0c24-
bpftool-4.18.0-305.3.1.el8_4.aarch64.rpm1cc1a50e60d2dbdff4c87780e37d743c-
kernel-cross-headers-4.18.0-305.3.1.el8_4.aarch64.rpmf782b9946fe5c0f9b875c755328d3b30-
kernel-headers-4.18.0-305.3.1.el8_4.aarch64.rpmbfff25736fd1f4155963031d11dd3723-
kernel-tools-4.18.0-305.3.1.el8_4.aarch64.rpmba61db67e7c42f2ce177d3a32590ba95-
kernel-tools-libs-4.18.0-305.3.1.el8_4.aarch64.rpme072077a19dee074626ee43e957c0771-
kernel-tools-libs-devel-4.18.0-305.3.1.el8_4.aarch64.rpm7d3ada94038b237e1fcdc67f4a077174-
perf-4.18.0-305.3.1.el8_4.aarch64.rpme91953709e690bad463bf6a315d58d76-
python3-perf-4.18.0-305.3.1.el8_4.aarch64.rpm005a7aee9c6383dd76ceca7a41413dad-
Oracle Linux 8 (x86_64) kernel-4.18.0-305.3.1.el8_4.src.rpm946670ddeca8c543e2b1fe3c48bc0c24-
bpftool-4.18.0-305.3.1.el8_4.x86_64.rpm9d19d4b7c291a588d3fd737ed0bcd178-
kernel-4.18.0-305.3.1.el8_4.x86_64.rpm5638b448f2464a24adfa64b3363be08f-
kernel-abi-stablelists-4.18.0-305.3.1.el8_4.noarch.rpm31a52ebf0b099843558b5f41f1aa91ac-
kernel-core-4.18.0-305.3.1.el8_4.x86_64.rpm328b53e7e1f0b3a61cae575e5f30fcb7-
kernel-cross-headers-4.18.0-305.3.1.el8_4.x86_64.rpm7700a4f983a8f617615345a43d7d4b7d-
kernel-debug-4.18.0-305.3.1.el8_4.x86_64.rpmf6f987862f7aca2859b93bb6ecc29c47-
kernel-debug-core-4.18.0-305.3.1.el8_4.x86_64.rpm19c874c96a8038fdd66d7b304cc66351-
kernel-debug-devel-4.18.0-305.3.1.el8_4.x86_64.rpm9b849f2e963e82f940d59cf0fff5f6bc-
kernel-debug-modules-4.18.0-305.3.1.el8_4.x86_64.rpme5abe524cd69faf870c2b17270eda11a-
kernel-debug-modules-extra-4.18.0-305.3.1.el8_4.x86_64.rpmce3da77dbea63ad0525ccb2c918b3d7b-
kernel-devel-4.18.0-305.3.1.el8_4.x86_64.rpm9447ab1715f865b6d42407b2f49dd1e1-
kernel-doc-4.18.0-305.3.1.el8_4.noarch.rpm5ce1d90263c8b696f45b98b1319cf0b3-
kernel-headers-4.18.0-305.3.1.el8_4.x86_64.rpm0e7a4726e816156f6e305e533efca299-
kernel-modules-4.18.0-305.3.1.el8_4.x86_64.rpm9dc43ee631649ddf7e3b214ad38cacb4-
kernel-modules-extra-4.18.0-305.3.1.el8_4.x86_64.rpm79df447aa0b2736cd55717cb8832ff49-
kernel-tools-4.18.0-305.3.1.el8_4.x86_64.rpm30e6c1bf5d3528d8406503d5e5c79887-
kernel-tools-libs-4.18.0-305.3.1.el8_4.x86_64.rpmfe6b15052a167c85279040b83681d9fb-
kernel-tools-libs-devel-4.18.0-305.3.1.el8_4.x86_64.rpm3d145eda2a57c93ac9d7c642d98d7cab-
perf-4.18.0-305.3.1.el8_4.x86_64.rpmc628455b0285cfd55c42d4afaf2ad4da-
python3-perf-4.18.0-305.3.1.el8_4.x86_64.rpmf6b5dd2117c439036ea9eb0e570e5050-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete