ELSA-2021-0003

ELSA-2021-0003 - kernel security and bug fix update

Type:SECURITY
Impact:IMPORTANT
Release Date:2021-01-05

Description


[4.18.0-240.10.1_3.OL8]
- Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.3.el7

[4.18.0-240.10.1_3]
- [net] SUNRPC: Signalled ASYNC tasks need to exit (Scott Mayhew) [1907667 1872310]

[4.18.0-240.9.1_3]
- [net] tunnels: Fix off-by-one in lower MTU bounds for ICMP/ICMPv6 replies (Antoine Tenart) [1902082 1895765]
- [net] net-sysfs: add backlog len and CPU id to softnet data (Paolo Abeni) [1883314 1866909]
- [net] try to avoid unneeded backlog flush (Paolo Abeni) [1883314 1866909]
- [net] skbuff: fix a data race in skb_queue_len() (Paolo Abeni) [1883314 1866909]
- [powerpc] mm/mmu_gather: invalidate TLB correctly on batch allocation failure and flush (Diego Domingos) [1899208 1805031]
- [powerpc] powerpc/mmu_gather: enable RCU_TABLE_FREE even for !SMP case (Diego Domingos) [1899208 1805031]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1892665 1892666] {CVE-2020-25211}
- [char] random: decouple random and urandom extrng fops (Vladis Dronov) [1899584 1890711]
- [char] random: Add a poll handler to extrng_fops (Vladis Dronov) [1886192 1884857]


Related CVEs


CVE-2020-25211

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-240.10.1.el8_3.src.rpmab7218c042fa806456f7c7a42e62b5c9f117b053e3fe0157a14ca2a0c84b257b-ol8_aarch64_baseos_latest
kernel-4.18.0-240.10.1.el8_3.src.rpmab7218c042fa806456f7c7a42e62b5c9f117b053e3fe0157a14ca2a0c84b257b-ol8_aarch64_codeready_builder
kernel-4.18.0-240.10.1.el8_3.src.rpmab7218c042fa806456f7c7a42e62b5c9f117b053e3fe0157a14ca2a0c84b257b-ol8_aarch64_u3_baseos_patch
bpftool-4.18.0-240.10.1.el8_3.aarch64.rpmd83ad8ba196f02c7dfcc38650360ada1f73056247aa454622f4408034e55a08c-ol8_aarch64_baseos_latest
bpftool-4.18.0-240.10.1.el8_3.aarch64.rpmd83ad8ba196f02c7dfcc38650360ada1f73056247aa454622f4408034e55a08c-ol8_aarch64_u3_baseos_patch
kernel-cross-headers-4.18.0-240.10.1.el8_3.aarch64.rpm1d525c490b8c0ac00d91c972afb4381415cdd94f568481e6f80f546d9a54f0bd-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-240.10.1.el8_3.aarch64.rpm1d525c490b8c0ac00d91c972afb4381415cdd94f568481e6f80f546d9a54f0bd-ol8_aarch64_u3_baseos_patch
kernel-headers-4.18.0-240.10.1.el8_3.aarch64.rpm561b5f2357445e4b7268eb6140be0e7df530e86bd85517634b0b6d937fa72ef4-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-240.10.1.el8_3.aarch64.rpm561b5f2357445e4b7268eb6140be0e7df530e86bd85517634b0b6d937fa72ef4-ol8_aarch64_u3_baseos_patch
kernel-tools-4.18.0-240.10.1.el8_3.aarch64.rpm7cc2cd712ce841a8e5a3c563566752136c1b901fb12f04b0cdda370a41763dca-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-240.10.1.el8_3.aarch64.rpm7cc2cd712ce841a8e5a3c563566752136c1b901fb12f04b0cdda370a41763dca-ol8_aarch64_u3_baseos_patch
kernel-tools-libs-4.18.0-240.10.1.el8_3.aarch64.rpmaf21011794c3ec7f1daba342d478c7f49845f2830aa114bfdac78e459f28cf1f-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-240.10.1.el8_3.aarch64.rpmaf21011794c3ec7f1daba342d478c7f49845f2830aa114bfdac78e459f28cf1f-ol8_aarch64_u3_baseos_patch
kernel-tools-libs-devel-4.18.0-240.10.1.el8_3.aarch64.rpm3847b02801683f666aa31685f590074abdbd78c8672da0c1110e477f6df339f2-ol8_aarch64_codeready_builder
perf-4.18.0-240.10.1.el8_3.aarch64.rpmc703ff9b8e8c66eea25787be78d37e026a96a1fdce16e05927d15e553bba573e-ol8_aarch64_baseos_latest
perf-4.18.0-240.10.1.el8_3.aarch64.rpmc703ff9b8e8c66eea25787be78d37e026a96a1fdce16e05927d15e553bba573e-ol8_aarch64_u3_baseos_patch
python3-perf-4.18.0-240.10.1.el8_3.aarch64.rpme5752ad2c1d93ed0959c1ee14549f661b9c0e8c8bd0f0205434abef353602868-ol8_aarch64_baseos_latest
python3-perf-4.18.0-240.10.1.el8_3.aarch64.rpme5752ad2c1d93ed0959c1ee14549f661b9c0e8c8bd0f0205434abef353602868-ol8_aarch64_u3_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-240.10.1.el8_3.src.rpmab7218c042fa806456f7c7a42e62b5c9f117b053e3fe0157a14ca2a0c84b257b-ol8_x86_64_baseos_latest
kernel-4.18.0-240.10.1.el8_3.src.rpmab7218c042fa806456f7c7a42e62b5c9f117b053e3fe0157a14ca2a0c84b257b-ol8_x86_64_codeready_builder
kernel-4.18.0-240.10.1.el8_3.src.rpmab7218c042fa806456f7c7a42e62b5c9f117b053e3fe0157a14ca2a0c84b257b-ol8_x86_64_u3_baseos_patch
bpftool-4.18.0-240.10.1.el8_3.x86_64.rpmae4538b3656b0cf407b8798a69ea030b8a364fe2d23364fc85f7d4fed4d8dffe-ol8_x86_64_baseos_latest
bpftool-4.18.0-240.10.1.el8_3.x86_64.rpmae4538b3656b0cf407b8798a69ea030b8a364fe2d23364fc85f7d4fed4d8dffe-ol8_x86_64_u3_baseos_patch
kernel-4.18.0-240.10.1.el8_3.x86_64.rpmd99e8fd231ca7211c3706cf868bd5e750f8f7ac0fe5105ef7440a4d0a3db53fd-ol8_x86_64_baseos_latest
kernel-4.18.0-240.10.1.el8_3.x86_64.rpmd99e8fd231ca7211c3706cf868bd5e750f8f7ac0fe5105ef7440a4d0a3db53fd-ol8_x86_64_u3_baseos_patch
kernel-abi-whitelists-4.18.0-240.10.1.el8_3.noarch.rpma18e5a68b415a47139f4ffd198fa2ca8c829f94e2f305d7601149e0da274babd-ol8_x86_64_baseos_latest
kernel-abi-whitelists-4.18.0-240.10.1.el8_3.noarch.rpma18e5a68b415a47139f4ffd198fa2ca8c829f94e2f305d7601149e0da274babd-ol8_x86_64_u3_baseos_patch
kernel-core-4.18.0-240.10.1.el8_3.x86_64.rpmca62917fd36810611a5ef8841a9876c749b149995e7f8e9dd849086579d0f4c8-ol8_x86_64_baseos_latest
kernel-core-4.18.0-240.10.1.el8_3.x86_64.rpmca62917fd36810611a5ef8841a9876c749b149995e7f8e9dd849086579d0f4c8-ol8_x86_64_u3_baseos_patch
kernel-cross-headers-4.18.0-240.10.1.el8_3.x86_64.rpm069ab6c3218f10bb27330175e5d8415eb36e43af3f33895cab8bc7815135d3ec-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-240.10.1.el8_3.x86_64.rpm069ab6c3218f10bb27330175e5d8415eb36e43af3f33895cab8bc7815135d3ec-ol8_x86_64_u3_baseos_patch
kernel-debug-4.18.0-240.10.1.el8_3.x86_64.rpm49554ea305d386b3f64becfac6c7d5318e14676e328aa8716c81d5b3cfb1cb34-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-240.10.1.el8_3.x86_64.rpm49554ea305d386b3f64becfac6c7d5318e14676e328aa8716c81d5b3cfb1cb34-ol8_x86_64_u3_baseos_patch
kernel-debug-core-4.18.0-240.10.1.el8_3.x86_64.rpmd2e90c241d229ea02ab1976d1fa77907069a3fe0d677b8c33226c5b3bb0f8d2e-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-240.10.1.el8_3.x86_64.rpmd2e90c241d229ea02ab1976d1fa77907069a3fe0d677b8c33226c5b3bb0f8d2e-ol8_x86_64_u3_baseos_patch
kernel-debug-devel-4.18.0-240.10.1.el8_3.x86_64.rpmd10a33a25e408fa13ce98b6c926952c8f892ff8063e3054aabd6460f0d1ce1f8-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-240.10.1.el8_3.x86_64.rpmd10a33a25e408fa13ce98b6c926952c8f892ff8063e3054aabd6460f0d1ce1f8-ol8_x86_64_u3_baseos_patch
kernel-debug-modules-4.18.0-240.10.1.el8_3.x86_64.rpma60cbf4c2173a4dcb50cc6a20269bef3eef6be1d0ff15d1b5376add47b9247df-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-240.10.1.el8_3.x86_64.rpma60cbf4c2173a4dcb50cc6a20269bef3eef6be1d0ff15d1b5376add47b9247df-ol8_x86_64_u3_baseos_patch
kernel-debug-modules-extra-4.18.0-240.10.1.el8_3.x86_64.rpm3c6a992cb90808ade88484ee6acbd99faeae08f4bc697bbf14781639fdcad1e1-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-240.10.1.el8_3.x86_64.rpm3c6a992cb90808ade88484ee6acbd99faeae08f4bc697bbf14781639fdcad1e1-ol8_x86_64_u3_baseos_patch
kernel-devel-4.18.0-240.10.1.el8_3.x86_64.rpm83e3998094f4f67ccc0108ea5cd0730552bc00619e2621b7232466fde43887eb-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-240.10.1.el8_3.x86_64.rpm83e3998094f4f67ccc0108ea5cd0730552bc00619e2621b7232466fde43887eb-ol8_x86_64_u3_baseos_patch
kernel-doc-4.18.0-240.10.1.el8_3.noarch.rpmc826b6aaaac209bfb1fa834164c142665d42257fec9d096768f6da79f0c99d4e-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-240.10.1.el8_3.noarch.rpmc826b6aaaac209bfb1fa834164c142665d42257fec9d096768f6da79f0c99d4e-ol8_x86_64_u3_baseos_patch
kernel-headers-4.18.0-240.10.1.el8_3.x86_64.rpmb59c010370ced47fba45310f5b1fa389e0f2e40cd83a6bb6adf5f795d18acbe3-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-240.10.1.el8_3.x86_64.rpmb59c010370ced47fba45310f5b1fa389e0f2e40cd83a6bb6adf5f795d18acbe3-ol8_x86_64_u3_baseos_patch
kernel-modules-4.18.0-240.10.1.el8_3.x86_64.rpmc5a21909aaf066580062ed939dbdfd952fb96b3658e58fba034a6bf4994280b3-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-240.10.1.el8_3.x86_64.rpmc5a21909aaf066580062ed939dbdfd952fb96b3658e58fba034a6bf4994280b3-ol8_x86_64_u3_baseos_patch
kernel-modules-extra-4.18.0-240.10.1.el8_3.x86_64.rpm68250397a918917a1b71dfbfa9dc2d27cb22e5280cd043821879d3df5324230d-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-240.10.1.el8_3.x86_64.rpm68250397a918917a1b71dfbfa9dc2d27cb22e5280cd043821879d3df5324230d-ol8_x86_64_u3_baseos_patch
kernel-tools-4.18.0-240.10.1.el8_3.x86_64.rpm86bdc6ead4e3669ad173b9b9affc4e9e3f4792ec6f9d1f7d8783ed07e089f03d-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-240.10.1.el8_3.x86_64.rpm86bdc6ead4e3669ad173b9b9affc4e9e3f4792ec6f9d1f7d8783ed07e089f03d-ol8_x86_64_u3_baseos_patch
kernel-tools-libs-4.18.0-240.10.1.el8_3.x86_64.rpmec71c0544c96d917c1a5f88fb1a849854cac99b17ee55e81caa08fd038f42ed0-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-240.10.1.el8_3.x86_64.rpmec71c0544c96d917c1a5f88fb1a849854cac99b17ee55e81caa08fd038f42ed0-ol8_x86_64_u3_baseos_patch
kernel-tools-libs-devel-4.18.0-240.10.1.el8_3.x86_64.rpmc3d30a2a1a2a07cd635e7088b8d92d0073eed82ce3fd0865ef94f9da0c5f3fba-ol8_x86_64_codeready_builder
perf-4.18.0-240.10.1.el8_3.x86_64.rpmfdb0c143fa3db06a59e2060a6bf6a09fca5b8a8bda5ab6d9e3cdc5c7d7d764c3-ol8_x86_64_baseos_latest
perf-4.18.0-240.10.1.el8_3.x86_64.rpmfdb0c143fa3db06a59e2060a6bf6a09fca5b8a8bda5ab6d9e3cdc5c7d7d764c3-ol8_x86_64_u3_baseos_patch
python3-perf-4.18.0-240.10.1.el8_3.x86_64.rpmfb2814ad4791b10ce97ec570f29d76a543f6ffdb188483662174aff6ee6e4f68-ol8_x86_64_baseos_latest
python3-perf-4.18.0-240.10.1.el8_3.x86_64.rpmfb2814ad4791b10ce97ec570f29d76a543f6ffdb188483662174aff6ee6e4f68-ol8_x86_64_u3_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete