ELSA-2021-4647

ELSA-2021-4647 - kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2021-11-18

Description

[4.18.0-348.2.1_5.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-11.0.5

[4.18.0-348.2.1_5]
- tipc: fix size validations for the MSG_CRYPTO type (Bruno Meneguele) [2020506 2020507] {CVE-2021-43267}
- net: Fix skb->csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005981 1975193]

[4.18.0-348.1.1_5]
- lib/timerqueue: Rely on rbtree semantics for next timer (Phil Auld) [2014677 2007099] {CVE-2021-20317}
- mm/hmm: make HMM_MIRROR an implicit option (Rafael Aquini) [2017519 1998534]
- mm/hmm: allow HMM_MIRROR on all architectures with MMU (Rafael Aquini) [2017519 1998534]
- mm: don't select MIGRATE_VMA_HELPER from HMM_MIRROR (Rafael Aquini) [2017519 1998534]
- mm: sort out the DEVICE_PRIVATE Kconfig mess (Rafael Aquini) [2017519 1998534]
- ceph: skip existing superblocks that are blocklisted or shut down when mounting (Jeffrey Layton) [2017071 2011462]
- redhat: switch release to zstream (Bruno Meneguele)

Related CVEs

CVE-2021-20317

CVE-2021-43267

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	kernel-4.18.0-348.2.1.el8_5.src.rpm	97e901521369e2d9ec7d6f37ee06ff86	-
	bpftool-4.18.0-348.2.1.el8_5.aarch64.rpm	8685c948d1aaaa3befa2c4a000a91a33	-
	kernel-cross-headers-4.18.0-348.2.1.el8_5.aarch64.rpm	a1a90fd5399d065b8a22f3b202809595	-
	kernel-headers-4.18.0-348.2.1.el8_5.aarch64.rpm	59216ce121a22ff81828b81564f3c510	-
	kernel-tools-4.18.0-348.2.1.el8_5.aarch64.rpm	8dccda11d1e41fbfefe39e25b96a47aa	-
	kernel-tools-libs-4.18.0-348.2.1.el8_5.aarch64.rpm	e5fd521fb9180e8135de79d02cf53d9a	-
	kernel-tools-libs-devel-4.18.0-348.2.1.el8_5.aarch64.rpm	30c93c656289cf4a08c9dd9a978cf35a	-
	perf-4.18.0-348.2.1.el8_5.aarch64.rpm	b5f4de5970b801d038f0fe9a447ae619	-
	python3-perf-4.18.0-348.2.1.el8_5.aarch64.rpm	455ea933a4aac61a36cbc1dd4b749349	-
Oracle Linux 8 (x86_64)	kernel-4.18.0-348.2.1.el8_5.src.rpm	97e901521369e2d9ec7d6f37ee06ff86	-
	bpftool-4.18.0-348.2.1.el8_5.x86_64.rpm	b725f4cdf47dc8500cbbd2abfac4caf9	-
	kernel-4.18.0-348.2.1.el8_5.x86_64.rpm	87697144202ab6cb5f569038faf12bef	-
	kernel-abi-stablelists-4.18.0-348.2.1.el8_5.noarch.rpm	f4c4dff13d663e66cff7d6450810b9e4	-
	kernel-core-4.18.0-348.2.1.el8_5.x86_64.rpm	a3ff64d349e64d60f6c3d680af951afe	-
	kernel-cross-headers-4.18.0-348.2.1.el8_5.x86_64.rpm	3b5b4762772c194718578ef15d81d856	-
	kernel-debug-4.18.0-348.2.1.el8_5.x86_64.rpm	3fc31811ab66136ad720826a63183310	-
	kernel-debug-core-4.18.0-348.2.1.el8_5.x86_64.rpm	a28be97d8d65e5529e03222374104601	-
	kernel-debug-devel-4.18.0-348.2.1.el8_5.x86_64.rpm	32a8faeb1f97e2e88f51bd20c1d3a35c	-
	kernel-debug-modules-4.18.0-348.2.1.el8_5.x86_64.rpm	17f725507f43d683f9ce8b9687868215	-
	kernel-debug-modules-extra-4.18.0-348.2.1.el8_5.x86_64.rpm	d096e02b50f61e7e339d5705399bb166	-
	kernel-devel-4.18.0-348.2.1.el8_5.x86_64.rpm	805b9ca277aa51332f54437b5e0cae59	-
	kernel-doc-4.18.0-348.2.1.el8_5.noarch.rpm	ac5e19b2fd20fd08d70e9b0f60cff916	-
	kernel-headers-4.18.0-348.2.1.el8_5.x86_64.rpm	e16e36d7ac367f9fe4cbf3fcdf286c5c	-
	kernel-modules-4.18.0-348.2.1.el8_5.x86_64.rpm	73327f4ef67b8fa58a60f796c055a262	-
	kernel-modules-extra-4.18.0-348.2.1.el8_5.x86_64.rpm	533bb180f6b5801b4fb7b46f1ffd0506	-
	kernel-tools-4.18.0-348.2.1.el8_5.x86_64.rpm	9224683803331b6580e38dbec442c1a0	-
	kernel-tools-libs-4.18.0-348.2.1.el8_5.x86_64.rpm	3bdf815ee76d094518e6060e807dd13f	-
	kernel-tools-libs-devel-4.18.0-348.2.1.el8_5.x86_64.rpm	8cb3eb7cecab1e620278f6d834054c0c	-
	perf-4.18.0-348.2.1.el8_5.x86_64.rpm	9190c883885ef3574b48d50eded50c49	-
	python3-perf-4.18.0-348.2.1.el8_5.x86_64.rpm	71a64ec19ca8c16d418b945f8a10bf59	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team