ELSA-2022-4642

ELSA-2022-4642 - kernel security and bug fix update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2022-05-19

Description

[3.10.0-1160.66.1.OL7]
- Update Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.9
- Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)

[3.10.0-1160.66.1]
- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]

[3.10.0-1160.65.1]
- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]

[3.10.0-1160.64.1]
- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}

[3.10.0-1160.63.1]
- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]

Related CVEs

CVE-2022-0492

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	kernel-3.10.0-1160.66.1.el7.src.rpm	2ee6ca08f1a6cbdca81347a19ef22fa7	-
	bpftool-3.10.0-1160.66.1.el7.x86_64.rpm	e9a12cc32885be4f352c0ee9095c34e3	-
	kernel-3.10.0-1160.66.1.el7.x86_64.rpm	7bd8068f1fd0878632595e9e8e012d9e	-
	kernel-abi-whitelists-3.10.0-1160.66.1.el7.noarch.rpm	41304a2d9083260d1b1c02c03a2db573	-
	kernel-debug-3.10.0-1160.66.1.el7.x86_64.rpm	d79ddac5aa72900fbdd240fac93aede1	-
	kernel-debug-devel-3.10.0-1160.66.1.el7.x86_64.rpm	7d32d22c1e35f199f964baa1d10e2dab	-
	kernel-devel-3.10.0-1160.66.1.el7.x86_64.rpm	229799b6e4149c1b1a290f7601f3cc06	-
	kernel-doc-3.10.0-1160.66.1.el7.noarch.rpm	a2b46201b25989adad64048f24fcfe83	-
	kernel-headers-3.10.0-1160.66.1.el7.x86_64.rpm	0ac6fd7e64430dc64c80bb0d9a25688d	-
	kernel-tools-3.10.0-1160.66.1.el7.x86_64.rpm	e4a24ba07be5dadaf46c68cf887e5e77	-
	kernel-tools-libs-3.10.0-1160.66.1.el7.x86_64.rpm	b106f5ac921bb61beacb23bdb769b9b8	-
	kernel-tools-libs-devel-3.10.0-1160.66.1.el7.x86_64.rpm	71dd549dd569b8c6555311e96a97a7f7	-
	perf-3.10.0-1160.66.1.el7.x86_64.rpm	239e3b3fc8126252caf1159e76156539	-
	python-perf-3.10.0-1160.66.1.el7.x86_64.rpm	f787bac978cc95bbe7e5a71fa78fe4b4	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team