ELSA-2021-4404

ELSA-2021-4404 - kexec-tools security, bug fix, and enhancement update

Type:	SECURITY
Impact:	LOW
Release Date:	2021-11-16

Description

[2.0.20-57.0.3]
- Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]

[2.0.20-57.0.2]
- Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]

[2.0.20-57.0.1]
- makedumpfile: Add support for newer kernels up to v5.12 [Orabug: 33250117]

[2.0.20-57]
- kdumpctl: enable secure boot on ppc64le LPARs

[2.0.20-56]
- kdumpctl: fix a typo

[2.0.20-55]
- kdump/ppc64: migration action registration clean up

[2.0.20-54]
- kdump/ppc64: rebuild initramfs image after migration
- Check the existence of /sys/bus/ccwgroup/devices/*/online beforehand
- kdump.sysconfig.s390: Remove 'prot_virt' from kdump kernel cmdline

[2.0.20-53]
- check for invalid physical address of /proc/kcore when making ELF dumpfile
- check for invalid physical address of /proc/kcore when finding max_paddr
- fix format issue in find_online_znet_device
- check the existence of /sys/bus/ccwgroup/devices before trying to find online network device
- kdump-lib.sh: fix a warning in prepare_kdump_bootinfo()

[2.0.20-52]
- Write to /var/lib/kdump if not writable
- Iterate /sys/bus/ccwgroup/devices to tell if we should set up rd.znet
- mkdumprd: display the absolute path of dump location in the check_user_configured_target()

[2.0.20-51]
- Stop reloading kdump service on CPU hotplug event for FADump
- fadump: improve fadump-howto.txt about remote dump target setup

[2.0.20-50]
- rd.route should use the name from kdump_setup_ifname
- get kdump ifname once in kdump_install_netdev

[2.0.20-49]
- kdump-lib.sh: fix the case if no enough total RAM for kdump in get_recommend_size()

[2.0.20-48]
- kdumpctl: Add kdumpctl estimate
- mkdumprd: make use of the new get_luks_crypt_dev helper
- kdump-lib.sh: introduce a helper to get all crypt dev used by kdump
- kdump-lib.sh: introduce a helper to get underlying crypt device
- RHEL-only: keep total memory size coherent to RHEL-only kernel patch
- Show write byte size in report messages
- Add shorthand --show-stats option to show report stats
- Add --dry-run option to prevent writing the dumpfile
- kdump-lib.sh: introduce functions to return recommened mem size

[2.0.20-47]
- Implement IP netmask calculation to replace 'ipcalc -m'
- kdumpctl: fix check_config error when kdump.conf is empty
- Fix incorrect vmcore permissions when dumped through ssh
- Fix incorrect permissions on kdump dmesg file

Related CVEs

CVE-2021-20269

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kexec-tools-2.0.20-57.0.3.el8.src.rpm	d550a47f88fb17695c6379b077c143d3fb038474fb4c643b33a26c33469d81bd	-	ol8_aarch64_baseos_latest
	kexec-tools-2.0.20-57.0.3.el8.src.rpm	d550a47f88fb17695c6379b077c143d3fb038474fb4c643b33a26c33469d81bd	-	ol8_aarch64_u5_baseos_base
	kexec-tools-2.0.20-57.0.3.el8.aarch64.rpm	a04dafc372ac9dee48d379cb76350ef2eee79e8480f4a80069ac193af0a38d05	-	ol8_aarch64_baseos_latest
	kexec-tools-2.0.20-57.0.3.el8.aarch64.rpm	a04dafc372ac9dee48d379cb76350ef2eee79e8480f4a80069ac193af0a38d05	-	ol8_aarch64_u5_baseos_base
Oracle Linux 8 (x86_64)	kexec-tools-2.0.20-57.0.3.el8.src.rpm	d550a47f88fb17695c6379b077c143d3fb038474fb4c643b33a26c33469d81bd	-	ol8_x86_64_baseos_latest
	kexec-tools-2.0.20-57.0.3.el8.src.rpm	d550a47f88fb17695c6379b077c143d3fb038474fb4c643b33a26c33469d81bd	-	ol8_x86_64_u5_baseos_base
	kexec-tools-2.0.20-57.0.3.el8.x86_64.rpm	49be278e136ef7c4fa1395427e48b0af933c1ab8e20e26d82409b24029c151ac	-	ol8_x86_64_baseos_latest
	kexec-tools-2.0.20-57.0.3.el8.x86_64.rpm	49be278e136ef7c4fa1395427e48b0af933c1ab8e20e26d82409b24029c151ac	-	ol8_x86_64_u5_baseos_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team