ELSA-2024-12266

ELSA-2024-12266 - kernel security update

Type:SECURITY
Severity:IMPORTANT
Release Date:2024-04-03

Description


[4.18.0-513.18.1.0.1_9.OL8]
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters [Orabug: 36461932] {CVE-2024-1086}

[4.18.0-513.18.1_9.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Drop not needed patch


Related CVEs


CVE-2024-1086

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-513.18.1.0.1.el8_9.src.rpmc3a2e52a453d00a0c4a7b48fdabde143-ol8_aarch64_baseos_latest
kernel-4.18.0-513.18.1.0.1.el8_9.src.rpmc3a2e52a453d00a0c4a7b48fdabde143-ol8_aarch64_codeready_builder
kernel-4.18.0-513.18.1.0.1.el8_9.src.rpmc3a2e52a453d00a0c4a7b48fdabde143-ol8_aarch64_u9_baseos_patch
bpftool-4.18.0-513.18.1.0.1.el8_9.aarch64.rpm1c1f5b9a3ca59bcef0b63a3162636093-ol8_aarch64_baseos_latest
bpftool-4.18.0-513.18.1.0.1.el8_9.aarch64.rpm1c1f5b9a3ca59bcef0b63a3162636093-ol8_aarch64_u9_baseos_patch
kernel-cross-headers-4.18.0-513.18.1.0.1.el8_9.aarch64.rpmbd4b7fd3b072221ac05fd72be9428f19-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-513.18.1.0.1.el8_9.aarch64.rpmbd4b7fd3b072221ac05fd72be9428f19-ol8_aarch64_u9_baseos_patch
kernel-headers-4.18.0-513.18.1.0.1.el8_9.aarch64.rpm402b83f4ff47bfec0e51f12ff1ed4f6e-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-513.18.1.0.1.el8_9.aarch64.rpm402b83f4ff47bfec0e51f12ff1ed4f6e-ol8_aarch64_u9_baseos_patch
kernel-tools-4.18.0-513.18.1.0.1.el8_9.aarch64.rpmb26e0e9a1f9e484b6d1f2dde9f57cd4a-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-513.18.1.0.1.el8_9.aarch64.rpmb26e0e9a1f9e484b6d1f2dde9f57cd4a-ol8_aarch64_u9_baseos_patch
kernel-tools-libs-4.18.0-513.18.1.0.1.el8_9.aarch64.rpmbb23d10d2ae8a051f0fd786730c8f900-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-513.18.1.0.1.el8_9.aarch64.rpmbb23d10d2ae8a051f0fd786730c8f900-ol8_aarch64_u9_baseos_patch
kernel-tools-libs-devel-4.18.0-513.18.1.0.1.el8_9.aarch64.rpmfcb53fb036b6c0448e4371b55da61b15-ol8_aarch64_codeready_builder
perf-4.18.0-513.18.1.0.1.el8_9.aarch64.rpme8d4ab616c9c7ff37a5ab1e90f39c2d3-ol8_aarch64_baseos_latest
perf-4.18.0-513.18.1.0.1.el8_9.aarch64.rpme8d4ab616c9c7ff37a5ab1e90f39c2d3-ol8_aarch64_u9_baseos_patch
python3-perf-4.18.0-513.18.1.0.1.el8_9.aarch64.rpmcf468fbd1ae9c9d313ab29ef5df64a1d-ol8_aarch64_baseos_latest
python3-perf-4.18.0-513.18.1.0.1.el8_9.aarch64.rpmcf468fbd1ae9c9d313ab29ef5df64a1d-ol8_aarch64_u9_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-513.18.1.0.1.el8_9.src.rpmc3a2e52a453d00a0c4a7b48fdabde143-ol8_x86_64_baseos_latest
kernel-4.18.0-513.18.1.0.1.el8_9.src.rpmc3a2e52a453d00a0c4a7b48fdabde143-ol8_x86_64_codeready_builder
kernel-4.18.0-513.18.1.0.1.el8_9.src.rpmc3a2e52a453d00a0c4a7b48fdabde143-ol8_x86_64_u9_baseos_patch
bpftool-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm48bc28d1b3666ae7a2ffd0fccd93351e-ol8_x86_64_baseos_latest
bpftool-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm48bc28d1b3666ae7a2ffd0fccd93351e-ol8_x86_64_u9_baseos_patch
kernel-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm31e840787a4bb803a470497cc654714b-ol8_x86_64_baseos_latest
kernel-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm31e840787a4bb803a470497cc654714b-ol8_x86_64_u9_baseos_patch
kernel-abi-stablelists-4.18.0-513.18.1.0.1.el8_9.noarch.rpm5bd5c84e63f3bf460f7ac710949a94b6-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-513.18.1.0.1.el8_9.noarch.rpm5bd5c84e63f3bf460f7ac710949a94b6-ol8_x86_64_u9_baseos_patch
kernel-core-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm3e62bc499f1d274c17530fdd0765ce4e-ol8_x86_64_baseos_latest
kernel-core-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm3e62bc499f1d274c17530fdd0765ce4e-ol8_x86_64_u9_baseos_patch
kernel-cross-headers-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm18328777b90e228336877713ecb92933-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm18328777b90e228336877713ecb92933-ol8_x86_64_u9_baseos_patch
kernel-debug-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm334f2c901d06957e07be1f4c525efb78-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm334f2c901d06957e07be1f4c525efb78-ol8_x86_64_u9_baseos_patch
kernel-debug-core-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm280e75bb9d94f28667b3386c72b19282-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm280e75bb9d94f28667b3386c72b19282-ol8_x86_64_u9_baseos_patch
kernel-debug-devel-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm6f5f5dcd2793e413f511edb0a685307d-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm6f5f5dcd2793e413f511edb0a685307d-ol8_x86_64_u9_baseos_patch
kernel-debug-modules-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm139caee528ded75cbdd53d2c50d1db62-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm139caee528ded75cbdd53d2c50d1db62-ol8_x86_64_u9_baseos_patch
kernel-debug-modules-extra-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm701e4284609cb697052ffe1723afe5fb-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm701e4284609cb697052ffe1723afe5fb-ol8_x86_64_u9_baseos_patch
kernel-devel-4.18.0-513.18.1.0.1.el8_9.x86_64.rpmc44a1ade940858f5cc3802ff6be40296-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-513.18.1.0.1.el8_9.x86_64.rpmc44a1ade940858f5cc3802ff6be40296-ol8_x86_64_u9_baseos_patch
kernel-doc-4.18.0-513.18.1.0.1.el8_9.noarch.rpmbdadefa0e84e35e7eec4f6f0e072a054-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-513.18.1.0.1.el8_9.noarch.rpmbdadefa0e84e35e7eec4f6f0e072a054-ol8_x86_64_u9_baseos_patch
kernel-headers-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm468dd7bba5c1e9e84fadf976a99e8256-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm468dd7bba5c1e9e84fadf976a99e8256-ol8_x86_64_u9_baseos_patch
kernel-modules-4.18.0-513.18.1.0.1.el8_9.x86_64.rpme6233b2a18864af59ebe60b43d6219c3-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-513.18.1.0.1.el8_9.x86_64.rpme6233b2a18864af59ebe60b43d6219c3-ol8_x86_64_u9_baseos_patch
kernel-modules-extra-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm1a6d8b5ceddd7df2eb7f3e936c682d4c-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm1a6d8b5ceddd7df2eb7f3e936c682d4c-ol8_x86_64_u9_baseos_patch
kernel-tools-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm08fc23ee90d6a30c9ad1a1bb693e99d8-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm08fc23ee90d6a30c9ad1a1bb693e99d8-ol8_x86_64_u9_baseos_patch
kernel-tools-libs-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm551f3de07c3c8984ff24b18d3938ec4b-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm551f3de07c3c8984ff24b18d3938ec4b-ol8_x86_64_u9_baseos_patch
kernel-tools-libs-devel-4.18.0-513.18.1.0.1.el8_9.x86_64.rpmf7a65bb4ab67b7819f0b675bc67fb246-ol8_x86_64_codeready_builder
perf-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm8231e3a309b0a3391a271e7269c4bff2-ol8_x86_64_baseos_latest
perf-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm8231e3a309b0a3391a271e7269c4bff2-ol8_x86_64_u9_baseos_patch
python3-perf-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm64350565793d167f5d61085dea764245-ol8_x86_64_baseos_latest
python3-perf-4.18.0-513.18.1.0.1.el8_9.x86_64.rpm64350565793d167f5d61085dea764245-ol8_x86_64_u9_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete