ELSA-2020-4685

ELSA-2020-4685 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2020-11-13

Description

[4.18.0-240.1.1_3.OL8]
- Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.3.el7

[4.18.0-240.1.1_3]
- [net] Bluetooth: fix kernel oops in store_pending_adv_report (Gopal Tiwari) [1888454 1888455] {CVE-2020-24490}
- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888257 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888806 1888807] {CVE-2020-12352}

Related CVEs

CVE-2020-24490

CVE-2020-25662

CVE-2020-25661

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-240.1.1.el8_3.src.rpm	c811e69e390116e5328c9443825d52d07f395f62f191a6ab2d9973f27432fedd	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-240.1.1.el8_3.src.rpm	c811e69e390116e5328c9443825d52d07f395f62f191a6ab2d9973f27432fedd	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-240.1.1.el8_3.src.rpm	c811e69e390116e5328c9443825d52d07f395f62f191a6ab2d9973f27432fedd	-	ol8_aarch64_u3_baseos_patch
	bpftool-4.18.0-240.1.1.el8_3.aarch64.rpm	a5fa233b1932d29c95b3fd56be2756931c413e7cfd44b6c6146b879e26195bd8	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-240.1.1.el8_3.aarch64.rpm	a5fa233b1932d29c95b3fd56be2756931c413e7cfd44b6c6146b879e26195bd8	-	ol8_aarch64_u3_baseos_patch
	kernel-cross-headers-4.18.0-240.1.1.el8_3.aarch64.rpm	034f1ab4c95bda69126079da525821d1352c94500238e50502ef88e8888e5fd0	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-240.1.1.el8_3.aarch64.rpm	034f1ab4c95bda69126079da525821d1352c94500238e50502ef88e8888e5fd0	-	ol8_aarch64_u3_baseos_patch
	kernel-tools-4.18.0-240.1.1.el8_3.aarch64.rpm	534cc80ee37d2a32e5b8c3c29c77d597f342010974ed30a1c1fbd9de353027f7	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-240.1.1.el8_3.aarch64.rpm	534cc80ee37d2a32e5b8c3c29c77d597f342010974ed30a1c1fbd9de353027f7	-	ol8_aarch64_u3_baseos_patch
	kernel-tools-libs-4.18.0-240.1.1.el8_3.aarch64.rpm	dce068e8552520866be6fbc9d40e77e2295dba4d279504fbaa0e9a7341f58a40	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-240.1.1.el8_3.aarch64.rpm	dce068e8552520866be6fbc9d40e77e2295dba4d279504fbaa0e9a7341f58a40	-	ol8_aarch64_u3_baseos_patch
	kernel-tools-libs-devel-4.18.0-240.1.1.el8_3.aarch64.rpm	5f3a2649323b9c4d97a9a43ef92ce487ac420acf4cee64012fa076774af9b3cd	-	ol8_aarch64_codeready_builder
	perf-4.18.0-240.1.1.el8_3.aarch64.rpm	7a06f7356c232dd31a2a78e6c236eef7839e1cf68f32221985545e978639a948	-	ol8_aarch64_baseos_latest
	perf-4.18.0-240.1.1.el8_3.aarch64.rpm	7a06f7356c232dd31a2a78e6c236eef7839e1cf68f32221985545e978639a948	-	ol8_aarch64_u3_baseos_patch
	python3-perf-4.18.0-240.1.1.el8_3.aarch64.rpm	f30457b8357dd28223123f9716d10da1e6e8cffbb4a9fb6e905245479fe5f8ab	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-240.1.1.el8_3.aarch64.rpm	f30457b8357dd28223123f9716d10da1e6e8cffbb4a9fb6e905245479fe5f8ab	-	ol8_aarch64_u3_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-240.1.1.el8_3.src.rpm	c811e69e390116e5328c9443825d52d07f395f62f191a6ab2d9973f27432fedd	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-240.1.1.el8_3.src.rpm	c811e69e390116e5328c9443825d52d07f395f62f191a6ab2d9973f27432fedd	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-240.1.1.el8_3.src.rpm	c811e69e390116e5328c9443825d52d07f395f62f191a6ab2d9973f27432fedd	-	ol8_x86_64_u3_baseos_patch
	bpftool-4.18.0-240.1.1.el8_3.x86_64.rpm	da4ffdb8d2f9333e071cb75be618046bcba5459c810539ee03df7fb3549d6618	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-240.1.1.el8_3.x86_64.rpm	da4ffdb8d2f9333e071cb75be618046bcba5459c810539ee03df7fb3549d6618	-	ol8_x86_64_u3_baseos_patch
	kernel-4.18.0-240.1.1.el8_3.x86_64.rpm	7608e21cb6a9a51a61796c4ee3304e6ddf4f35ecd875661bc962743ecf780e2a	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-240.1.1.el8_3.x86_64.rpm	7608e21cb6a9a51a61796c4ee3304e6ddf4f35ecd875661bc962743ecf780e2a	-	ol8_x86_64_u3_baseos_patch
	kernel-abi-whitelists-4.18.0-240.1.1.el8_3.noarch.rpm	23fdedc112a822339bc8c73280f0547a36fadc5e87febda9eef6af9e826794a8	-	ol8_x86_64_baseos_latest
	kernel-abi-whitelists-4.18.0-240.1.1.el8_3.noarch.rpm	23fdedc112a822339bc8c73280f0547a36fadc5e87febda9eef6af9e826794a8	-	ol8_x86_64_u3_baseos_patch
	kernel-core-4.18.0-240.1.1.el8_3.x86_64.rpm	606a522e6ad079b72dacb92dfa2dbfbf50bb250b0de0eb75452fc45be2b3fed0	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-240.1.1.el8_3.x86_64.rpm	606a522e6ad079b72dacb92dfa2dbfbf50bb250b0de0eb75452fc45be2b3fed0	-	ol8_x86_64_u3_baseos_patch
	kernel-cross-headers-4.18.0-240.1.1.el8_3.x86_64.rpm	d0009cda3023d34e547ed30370c0620cf6b89d50fcd5ad021164e016203ade2b	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-240.1.1.el8_3.x86_64.rpm	d0009cda3023d34e547ed30370c0620cf6b89d50fcd5ad021164e016203ade2b	-	ol8_x86_64_u3_baseos_patch
	kernel-debug-4.18.0-240.1.1.el8_3.x86_64.rpm	0c8e572f74748070b0d1dc4facb5bd84b079bb229122f788b0c08c06576036c0	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-240.1.1.el8_3.x86_64.rpm	0c8e572f74748070b0d1dc4facb5bd84b079bb229122f788b0c08c06576036c0	-	ol8_x86_64_u3_baseos_patch
	kernel-debug-core-4.18.0-240.1.1.el8_3.x86_64.rpm	96a599e83469a91df8b7e353b7f351a643780a9177ab4295c7424257500f819e	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-240.1.1.el8_3.x86_64.rpm	96a599e83469a91df8b7e353b7f351a643780a9177ab4295c7424257500f819e	-	ol8_x86_64_u3_baseos_patch
	kernel-debug-devel-4.18.0-240.1.1.el8_3.x86_64.rpm	390966068f5fb880a2203879b1ad37c2a572e74d915e206ad405338c5f15de79	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-240.1.1.el8_3.x86_64.rpm	390966068f5fb880a2203879b1ad37c2a572e74d915e206ad405338c5f15de79	-	ol8_x86_64_u3_baseos_patch
	kernel-debug-modules-4.18.0-240.1.1.el8_3.x86_64.rpm	af0f4c894cef575a004d34e62480e9781b7b293f1b9033288fb16a563fc78689	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-240.1.1.el8_3.x86_64.rpm	af0f4c894cef575a004d34e62480e9781b7b293f1b9033288fb16a563fc78689	-	ol8_x86_64_u3_baseos_patch
	kernel-debug-modules-extra-4.18.0-240.1.1.el8_3.x86_64.rpm	acae889ce214602435e8fffed0c534525136d9c01a311269672da346aac748ab	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-240.1.1.el8_3.x86_64.rpm	acae889ce214602435e8fffed0c534525136d9c01a311269672da346aac748ab	-	ol8_x86_64_u3_baseos_patch
	kernel-devel-4.18.0-240.1.1.el8_3.x86_64.rpm	763fd26202e7840644122dcb4a6b995107e8be1494e893435b17069cdcfdbd03	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-240.1.1.el8_3.x86_64.rpm	763fd26202e7840644122dcb4a6b995107e8be1494e893435b17069cdcfdbd03	-	ol8_x86_64_u3_baseos_patch
	kernel-doc-4.18.0-240.1.1.el8_3.noarch.rpm	c21b359d78c19c3511c28b040c8c613ebf347bf2a224cbc02dc8a5753b4f46cf	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-240.1.1.el8_3.noarch.rpm	c21b359d78c19c3511c28b040c8c613ebf347bf2a224cbc02dc8a5753b4f46cf	-	ol8_x86_64_u3_baseos_patch
	kernel-headers-4.18.0-240.1.1.el8_3.x86_64.rpm	047e40809a3554850b7d7a671e86dfe6ab0400af9642c6a45455d62e54244664	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-240.1.1.el8_3.x86_64.rpm	047e40809a3554850b7d7a671e86dfe6ab0400af9642c6a45455d62e54244664	-	ol8_x86_64_u3_baseos_patch
	kernel-modules-4.18.0-240.1.1.el8_3.x86_64.rpm	65c5fae8f6a8824669a39939a58cc0176ff6df7381c6f84aa4af48979c30ef11	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-240.1.1.el8_3.x86_64.rpm	65c5fae8f6a8824669a39939a58cc0176ff6df7381c6f84aa4af48979c30ef11	-	ol8_x86_64_u3_baseos_patch
	kernel-modules-extra-4.18.0-240.1.1.el8_3.x86_64.rpm	9dca5aa4e1a9bece2d45aafc82ea4ae27a05a07ea1d5189bedec1b9ba900b944	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-240.1.1.el8_3.x86_64.rpm	9dca5aa4e1a9bece2d45aafc82ea4ae27a05a07ea1d5189bedec1b9ba900b944	-	ol8_x86_64_u3_baseos_patch
	kernel-tools-4.18.0-240.1.1.el8_3.x86_64.rpm	3ee7288af153eaca67fecbd2d418ddfb8e5c401e961bce6d9db537c3c1270b82	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-240.1.1.el8_3.x86_64.rpm	3ee7288af153eaca67fecbd2d418ddfb8e5c401e961bce6d9db537c3c1270b82	-	ol8_x86_64_u3_baseos_patch
	kernel-tools-libs-4.18.0-240.1.1.el8_3.x86_64.rpm	ac9cffb2b865afa417cbaa88cfd40ba449177e0a9d16e546b4a70176a53857f3	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-240.1.1.el8_3.x86_64.rpm	ac9cffb2b865afa417cbaa88cfd40ba449177e0a9d16e546b4a70176a53857f3	-	ol8_x86_64_u3_baseos_patch
	kernel-tools-libs-devel-4.18.0-240.1.1.el8_3.x86_64.rpm	9e0a2cd5bad87cfb04882ac75815624424b18e26184f243324954bab7644b351	-	ol8_x86_64_codeready_builder
	perf-4.18.0-240.1.1.el8_3.x86_64.rpm	24949f2bc27fe1a12e0f7f5161a5b3d9e8e8b00af8192ff369623f4c88dc538b	-	ol8_x86_64_baseos_latest
	perf-4.18.0-240.1.1.el8_3.x86_64.rpm	24949f2bc27fe1a12e0f7f5161a5b3d9e8e8b00af8192ff369623f4c88dc538b	-	ol8_x86_64_u3_baseos_patch
	python3-perf-4.18.0-240.1.1.el8_3.x86_64.rpm	ef9f56a192fab09168cc566e39aaa9d3a1f6d0b2a1144da773666c6c0f8fdcab	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-240.1.1.el8_3.x86_64.rpm	ef9f56a192fab09168cc566e39aaa9d3a1f6d0b2a1144da773666c6c0f8fdcab	-	ol8_x86_64_u3_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team