ELSA-2021-4647

ELSA-2021-4647 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2021-11-18

Description


[4.18.0-348.2.1_5.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-11.0.5

[4.18.0-348.2.1_5]
- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb->csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]

[4.18.0-348.1.1_5]
- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)


Related CVEs


CVE-2021-20317
CVE-2021-43267

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-348.2.1.el8_5.src.rpm98d92d6b3be3f812e93953f4fee86a0a9f5089d2d774c90a2d21fdfb9199c6f4-ol8_aarch64_baseos_latest
kernel-4.18.0-348.2.1.el8_5.src.rpm98d92d6b3be3f812e93953f4fee86a0a9f5089d2d774c90a2d21fdfb9199c6f4-ol8_aarch64_codeready_builder
kernel-4.18.0-348.2.1.el8_5.src.rpm98d92d6b3be3f812e93953f4fee86a0a9f5089d2d774c90a2d21fdfb9199c6f4-ol8_aarch64_u5_baseos_patch
bpftool-4.18.0-348.2.1.el8_5.aarch64.rpm85fb801e57cfb0a18fccab04e0d274d5e1b19f58156b38ddc03d8096f6496a23-ol8_aarch64_baseos_latest
bpftool-4.18.0-348.2.1.el8_5.aarch64.rpm85fb801e57cfb0a18fccab04e0d274d5e1b19f58156b38ddc03d8096f6496a23-ol8_aarch64_u5_baseos_patch
kernel-cross-headers-4.18.0-348.2.1.el8_5.aarch64.rpm4afe92f4994c16a986c095669790b08e2cd92cb0d0afb808bb11e1fad8550c35-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-348.2.1.el8_5.aarch64.rpm4afe92f4994c16a986c095669790b08e2cd92cb0d0afb808bb11e1fad8550c35-ol8_aarch64_u5_baseos_patch
kernel-headers-4.18.0-348.2.1.el8_5.aarch64.rpm603279e4eab33b2393699e3e5ff7d54de8d8681672e1d6f994467c546f9d5189-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-348.2.1.el8_5.aarch64.rpm603279e4eab33b2393699e3e5ff7d54de8d8681672e1d6f994467c546f9d5189-ol8_aarch64_u5_baseos_patch
kernel-tools-4.18.0-348.2.1.el8_5.aarch64.rpm2d01eb44f74ab537f10247a71414ce929deb7056787d0b25a563f64792a5bbda-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-348.2.1.el8_5.aarch64.rpm2d01eb44f74ab537f10247a71414ce929deb7056787d0b25a563f64792a5bbda-ol8_aarch64_u5_baseos_patch
kernel-tools-libs-4.18.0-348.2.1.el8_5.aarch64.rpmf769fc1db7af563542116177969b3cd2bcbf729182f112d1e8b608951a0c5d7e-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-348.2.1.el8_5.aarch64.rpmf769fc1db7af563542116177969b3cd2bcbf729182f112d1e8b608951a0c5d7e-ol8_aarch64_u5_baseos_patch
kernel-tools-libs-devel-4.18.0-348.2.1.el8_5.aarch64.rpm67bd836d4aee89e00b780772860c81995dbe7e3239a6fb5ed432ef69f00283bf-ol8_aarch64_codeready_builder
perf-4.18.0-348.2.1.el8_5.aarch64.rpmbc96e175e42b7a786ef56fa6ce00c5459ebd45d0000b0dec41d42ddf44521103-ol8_aarch64_baseos_latest
perf-4.18.0-348.2.1.el8_5.aarch64.rpmbc96e175e42b7a786ef56fa6ce00c5459ebd45d0000b0dec41d42ddf44521103-ol8_aarch64_u5_baseos_patch
python3-perf-4.18.0-348.2.1.el8_5.aarch64.rpm5bd14bd9646ca79982bc54c025969456b6c84a33a64bed81428e070655cdf3e0-ol8_aarch64_baseos_latest
python3-perf-4.18.0-348.2.1.el8_5.aarch64.rpm5bd14bd9646ca79982bc54c025969456b6c84a33a64bed81428e070655cdf3e0-ol8_aarch64_u5_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-348.2.1.el8_5.src.rpm98d92d6b3be3f812e93953f4fee86a0a9f5089d2d774c90a2d21fdfb9199c6f4-ol8_x86_64_baseos_latest
kernel-4.18.0-348.2.1.el8_5.src.rpm98d92d6b3be3f812e93953f4fee86a0a9f5089d2d774c90a2d21fdfb9199c6f4-ol8_x86_64_codeready_builder
kernel-4.18.0-348.2.1.el8_5.src.rpm98d92d6b3be3f812e93953f4fee86a0a9f5089d2d774c90a2d21fdfb9199c6f4-ol8_x86_64_u5_baseos_patch
bpftool-4.18.0-348.2.1.el8_5.x86_64.rpmabaccccbfb72021f5b71197cb9c82e8372aee35f2f08c9c361edb5b7854f1e88-ol8_x86_64_baseos_latest
bpftool-4.18.0-348.2.1.el8_5.x86_64.rpmabaccccbfb72021f5b71197cb9c82e8372aee35f2f08c9c361edb5b7854f1e88-ol8_x86_64_u5_baseos_patch
kernel-4.18.0-348.2.1.el8_5.x86_64.rpm87e5cbd88492ece848bad83440ba18ffbf101bd6d5018a2b730aca7621f41994-ol8_x86_64_baseos_latest
kernel-4.18.0-348.2.1.el8_5.x86_64.rpm87e5cbd88492ece848bad83440ba18ffbf101bd6d5018a2b730aca7621f41994-ol8_x86_64_u5_baseos_patch
kernel-abi-stablelists-4.18.0-348.2.1.el8_5.noarch.rpmfd507c09e31332f6ba397d45ac38166e78bcbfec25a9855ac9180173b5e50267-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-348.2.1.el8_5.noarch.rpmfd507c09e31332f6ba397d45ac38166e78bcbfec25a9855ac9180173b5e50267-ol8_x86_64_u5_baseos_patch
kernel-core-4.18.0-348.2.1.el8_5.x86_64.rpm9dad492c188b2cae4a0bc937cc1adafa19846b3186ee8f569abdeb0f35638936-ol8_x86_64_baseos_latest
kernel-core-4.18.0-348.2.1.el8_5.x86_64.rpm9dad492c188b2cae4a0bc937cc1adafa19846b3186ee8f569abdeb0f35638936-ol8_x86_64_u5_baseos_patch
kernel-cross-headers-4.18.0-348.2.1.el8_5.x86_64.rpm1a3c5197a487e9259e2006bb049539e82c2302b56d7b0cedfb77d0f991b59bc1-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-348.2.1.el8_5.x86_64.rpm1a3c5197a487e9259e2006bb049539e82c2302b56d7b0cedfb77d0f991b59bc1-ol8_x86_64_u5_baseos_patch
kernel-debug-4.18.0-348.2.1.el8_5.x86_64.rpm8cb5cf8d92756df05c962a07fb428fc26dcaab1ee3028b72470c0d23ed88557b-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-348.2.1.el8_5.x86_64.rpm8cb5cf8d92756df05c962a07fb428fc26dcaab1ee3028b72470c0d23ed88557b-ol8_x86_64_u5_baseos_patch
kernel-debug-core-4.18.0-348.2.1.el8_5.x86_64.rpm63a3a164bf1cc256955805487ea22051fdfb74a545bbe0ca50ac7f6c68a5c9f4-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-348.2.1.el8_5.x86_64.rpm63a3a164bf1cc256955805487ea22051fdfb74a545bbe0ca50ac7f6c68a5c9f4-ol8_x86_64_u5_baseos_patch
kernel-debug-devel-4.18.0-348.2.1.el8_5.x86_64.rpm33f5f1857718c1eb7fc6bbc7a634f9c52a86bf37c8c06da7800fadc8654be316-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-348.2.1.el8_5.x86_64.rpm33f5f1857718c1eb7fc6bbc7a634f9c52a86bf37c8c06da7800fadc8654be316-ol8_x86_64_u5_baseos_patch
kernel-debug-modules-4.18.0-348.2.1.el8_5.x86_64.rpm6ad85562f210e544f54a025c9c74012b13c7141fe1be387d3cb28a478dd67a1c-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-348.2.1.el8_5.x86_64.rpm6ad85562f210e544f54a025c9c74012b13c7141fe1be387d3cb28a478dd67a1c-ol8_x86_64_u5_baseos_patch
kernel-debug-modules-extra-4.18.0-348.2.1.el8_5.x86_64.rpmf9d420c42ebd7e59dbb20cfd5d78b13da1665bf9b70fa97c72a7c0195a67ef6a-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-348.2.1.el8_5.x86_64.rpmf9d420c42ebd7e59dbb20cfd5d78b13da1665bf9b70fa97c72a7c0195a67ef6a-ol8_x86_64_u5_baseos_patch
kernel-devel-4.18.0-348.2.1.el8_5.x86_64.rpmbdb26a526ed2d92a1b6ca79dcb86a4a8742875de060651419a92e7d9a6248261-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-348.2.1.el8_5.x86_64.rpmbdb26a526ed2d92a1b6ca79dcb86a4a8742875de060651419a92e7d9a6248261-ol8_x86_64_u5_baseos_patch
kernel-doc-4.18.0-348.2.1.el8_5.noarch.rpm3516b4383d91fbc5108728ca2230a469de8f1f6503a52c2250c7307e75a54e1a-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-348.2.1.el8_5.noarch.rpm3516b4383d91fbc5108728ca2230a469de8f1f6503a52c2250c7307e75a54e1a-ol8_x86_64_u5_baseos_patch
kernel-headers-4.18.0-348.2.1.el8_5.x86_64.rpmabe5faf83ed16cbb090c8c41074767dbce6ebbce3b4bb04c7413de126aba6920-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-348.2.1.el8_5.x86_64.rpmabe5faf83ed16cbb090c8c41074767dbce6ebbce3b4bb04c7413de126aba6920-ol8_x86_64_u5_baseos_patch
kernel-modules-4.18.0-348.2.1.el8_5.x86_64.rpm263b4a3c2d1db3f80bfe46cfa581019d07ceda47c6e879ae9b682f8176dc109c-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-348.2.1.el8_5.x86_64.rpm263b4a3c2d1db3f80bfe46cfa581019d07ceda47c6e879ae9b682f8176dc109c-ol8_x86_64_u5_baseos_patch
kernel-modules-extra-4.18.0-348.2.1.el8_5.x86_64.rpmc2afb8b2a7b7c8a92fa83b8c9bd38a0e6ec745903f0bc3fd1c83e5d5285c44be-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-348.2.1.el8_5.x86_64.rpmc2afb8b2a7b7c8a92fa83b8c9bd38a0e6ec745903f0bc3fd1c83e5d5285c44be-ol8_x86_64_u5_baseos_patch
kernel-tools-4.18.0-348.2.1.el8_5.x86_64.rpm06f7ea6e3bc6fff8842567c6d7b90b4093d7de03547cddd209a73100ac6e3cce-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-348.2.1.el8_5.x86_64.rpm06f7ea6e3bc6fff8842567c6d7b90b4093d7de03547cddd209a73100ac6e3cce-ol8_x86_64_u5_baseos_patch
kernel-tools-libs-4.18.0-348.2.1.el8_5.x86_64.rpmdc200f1092494cfa2a9bd264864dd1ab8eac29522c8b8008e58f6cda39ada1b6-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-348.2.1.el8_5.x86_64.rpmdc200f1092494cfa2a9bd264864dd1ab8eac29522c8b8008e58f6cda39ada1b6-ol8_x86_64_u5_baseos_patch
kernel-tools-libs-devel-4.18.0-348.2.1.el8_5.x86_64.rpma30aa195a5dcc2aa552cb6c9e661dab9c9e6fe3410f2efc100581971e0cfdc54-ol8_x86_64_codeready_builder
perf-4.18.0-348.2.1.el8_5.x86_64.rpm0e00a17dc87a00a4f05a86a38244607414d9c988093e802191b311282c0a217b-ol8_x86_64_baseos_latest
perf-4.18.0-348.2.1.el8_5.x86_64.rpm0e00a17dc87a00a4f05a86a38244607414d9c988093e802191b311282c0a217b-ol8_x86_64_u5_baseos_patch
python3-perf-4.18.0-348.2.1.el8_5.x86_64.rpmc91e4b68b9857c2d8e1b88d7c71fe6d5a7f6f694d4ccdda1d5fb6739a27ec4c5-ol8_x86_64_baseos_latest
python3-perf-4.18.0-348.2.1.el8_5.x86_64.rpmc91e4b68b9857c2d8e1b88d7c71fe6d5a7f6f694d4ccdda1d5fb6739a27ec4c5-ol8_x86_64_u5_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete