Stay Connected:

ELSA-2023-1703

ELSA-2023-1703 - kernel security and bug fix update

Type:SECURITY
Impact:IMPORTANT
Release Date:2023-04-12

Description


- [5.14.0-162.23.1_1.OL9]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]

[5.14.0-162.23.1_1]
- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165344 2165345] {CVE-2023-0386}
- intel_idle: make SPR C1 and C1E be independent (David Arcari) [2168361 2125352]
- intel_idle: Add a new flag to initialize the AMX state (David Arcari) [2168361 2117766]
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle (David Arcari) [2168361 2117766]
- x86/insn: Add AMX instructions to the x86 instruction decoder (Michael Petlan) [2168361 2140492]
- futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2168836 2161817]
- tun: avoid double free in tun_free_netdev (Jon Maloy) [2156373 2156374] {CVE-2022-4744}


Related CVEs


CVE-2023-0386

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-162.23.1.el9_1.src.rpm598a8f8796eb210c82fb2a91ea609d763738a7497544b68dd51ac9a161c80b11-ol9_aarch64_appstream
kernel-5.14.0-162.23.1.el9_1.src.rpm598a8f8796eb210c82fb2a91ea609d763738a7497544b68dd51ac9a161c80b11-ol9_aarch64_baseos_latest
kernel-5.14.0-162.23.1.el9_1.src.rpm598a8f8796eb210c82fb2a91ea609d763738a7497544b68dd51ac9a161c80b11-ol9_aarch64_codeready_builder
kernel-5.14.0-162.23.1.el9_1.src.rpm598a8f8796eb210c82fb2a91ea609d763738a7497544b68dd51ac9a161c80b11-ol9_aarch64_u1_baseos_patch
bpftool-5.14.0-162.23.1.el9_1.aarch64.rpmf2edc5e743837be5fda382d05da3cbef58daa5ad8c1373df2cdc254808196afe-ol9_aarch64_baseos_latest
bpftool-5.14.0-162.23.1.el9_1.aarch64.rpmf2edc5e743837be5fda382d05da3cbef58daa5ad8c1373df2cdc254808196afe-ol9_aarch64_u1_baseos_patch
kernel-cross-headers-5.14.0-162.23.1.el9_1.aarch64.rpm1a3aa22585d9a6b5c484d9ea7041ca6c6ba2129d834b34c521df5ff5e98cd42e-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-162.23.1.el9_1.aarch64.rpm80fcc1fd13c22702b363e73effbe0a5f31d73f57b471417c20eea68598ed2d78-ol9_aarch64_appstream
kernel-tools-5.14.0-162.23.1.el9_1.aarch64.rpm58bd56acd7ea40d593d0678737c7ef0c528df882ecf2d60ee7bbbbd27f7580bd-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-162.23.1.el9_1.aarch64.rpm58bd56acd7ea40d593d0678737c7ef0c528df882ecf2d60ee7bbbbd27f7580bd-ol9_aarch64_u1_baseos_patch
kernel-tools-libs-5.14.0-162.23.1.el9_1.aarch64.rpm4513d0d5d1cad14c703a5f2f261a6b1427b5afac5c327d84ad7ead47a079ac38-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-162.23.1.el9_1.aarch64.rpm4513d0d5d1cad14c703a5f2f261a6b1427b5afac5c327d84ad7ead47a079ac38-ol9_aarch64_u1_baseos_patch
kernel-tools-libs-devel-5.14.0-162.23.1.el9_1.aarch64.rpm5285114882e23c6dbd52e54ec4125026c03030cce59832f80b5f1b966e781c37-ol9_aarch64_codeready_builder
perf-5.14.0-162.23.1.el9_1.aarch64.rpm4820fb776b8a8a8f5c8ec3a647c3777328aa8eb42967f8c57e936546d117867c-ol9_aarch64_appstream
python3-perf-5.14.0-162.23.1.el9_1.aarch64.rpmd0eea3135807594ef58d9c6fd54ae12905a0b46c6f57c98ac13cdadf653c1237-ol9_aarch64_baseos_latest
python3-perf-5.14.0-162.23.1.el9_1.aarch64.rpmd0eea3135807594ef58d9c6fd54ae12905a0b46c6f57c98ac13cdadf653c1237-ol9_aarch64_u1_baseos_patch
Oracle Linux 9 (x86_64) kernel-5.14.0-162.23.1.el9_1.src.rpm598a8f8796eb210c82fb2a91ea609d763738a7497544b68dd51ac9a161c80b11-ol9_x86_64_appstream
kernel-5.14.0-162.23.1.el9_1.src.rpm598a8f8796eb210c82fb2a91ea609d763738a7497544b68dd51ac9a161c80b11-ol9_x86_64_baseos_latest
kernel-5.14.0-162.23.1.el9_1.src.rpm598a8f8796eb210c82fb2a91ea609d763738a7497544b68dd51ac9a161c80b11-ol9_x86_64_codeready_builder
kernel-5.14.0-162.23.1.el9_1.src.rpm598a8f8796eb210c82fb2a91ea609d763738a7497544b68dd51ac9a161c80b11-ol9_x86_64_u1_baseos_patch
bpftool-5.14.0-162.23.1.el9_1.x86_64.rpm530ed3bee12dc555fe015d4f2d9e6344bd8e84975424b96666ee5f8cc7a54375-ol9_x86_64_baseos_latest
bpftool-5.14.0-162.23.1.el9_1.x86_64.rpm530ed3bee12dc555fe015d4f2d9e6344bd8e84975424b96666ee5f8cc7a54375-ol9_x86_64_u1_baseos_patch
kernel-5.14.0-162.23.1.el9_1.x86_64.rpm804e3e27c092625c0a375132626ae82aff634dd2c6865fe2ea0932d967e2926b-ol9_x86_64_baseos_latest
kernel-5.14.0-162.23.1.el9_1.x86_64.rpm804e3e27c092625c0a375132626ae82aff634dd2c6865fe2ea0932d967e2926b-ol9_x86_64_u1_baseos_patch
kernel-abi-stablelists-5.14.0-162.23.1.el9_1.noarch.rpmdfe077638cb83f942908db7e3700d6548b25a5215e3890d04fc473c18fce00d3-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-162.23.1.el9_1.noarch.rpmdfe077638cb83f942908db7e3700d6548b25a5215e3890d04fc473c18fce00d3-ol9_x86_64_u1_baseos_patch
kernel-core-5.14.0-162.23.1.el9_1.x86_64.rpm7dbea962271012442a82b40709fb7af94e20ab205af3d4c306ceba2146c5678a-ol9_x86_64_baseos_latest
kernel-core-5.14.0-162.23.1.el9_1.x86_64.rpm7dbea962271012442a82b40709fb7af94e20ab205af3d4c306ceba2146c5678a-ol9_x86_64_u1_baseos_patch
kernel-cross-headers-5.14.0-162.23.1.el9_1.x86_64.rpm38f6d9a4fcc02747ae41305dc457dd976e0d75b22142918f0388a678f335f47a-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-162.23.1.el9_1.x86_64.rpm9ca51564135e4ebec59b6f122135df904dd8b134f45fa1e46dd7124568b989d6-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-162.23.1.el9_1.x86_64.rpm9ca51564135e4ebec59b6f122135df904dd8b134f45fa1e46dd7124568b989d6-ol9_x86_64_u1_baseos_patch
kernel-debug-core-5.14.0-162.23.1.el9_1.x86_64.rpmb76fcadde19e119d0e979be36125dcbbe90923b0786592076a76801b46ecbc8c-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-162.23.1.el9_1.x86_64.rpmb76fcadde19e119d0e979be36125dcbbe90923b0786592076a76801b46ecbc8c-ol9_x86_64_u1_baseos_patch
kernel-debug-devel-5.14.0-162.23.1.el9_1.x86_64.rpm315fc3e32599108f6f1e7d477456ad1599b30b187aab8930a97ee9b7d7464da0-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-162.23.1.el9_1.x86_64.rpm0a8aa38eccb9ca65ee11ca18e2f80df363c9f88c3f6e40bce276e5f6265858c7-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-162.23.1.el9_1.x86_64.rpm64db2723116a3ef66465f0a5c2aba0dbc64c0ac2356d907f6b7415f3c12a43db-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-162.23.1.el9_1.x86_64.rpm64db2723116a3ef66465f0a5c2aba0dbc64c0ac2356d907f6b7415f3c12a43db-ol9_x86_64_u1_baseos_patch
kernel-debug-modules-extra-5.14.0-162.23.1.el9_1.x86_64.rpmeef6e38bf72b46cd4a47588353e707ddbfbda260412625933a3dfdab9cfdd2e0-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-162.23.1.el9_1.x86_64.rpmeef6e38bf72b46cd4a47588353e707ddbfbda260412625933a3dfdab9cfdd2e0-ol9_x86_64_u1_baseos_patch
kernel-devel-5.14.0-162.23.1.el9_1.x86_64.rpmc8a8d37cd042b67ba697dd2570ab7182296ba4c532972e5230276f37357de328-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-162.23.1.el9_1.x86_64.rpm866e53e514b31b29fda7cf3e25e9fb30414677bb877fc677f386f62268f9aa6f-ol9_x86_64_appstream
kernel-doc-5.14.0-162.23.1.el9_1.noarch.rpmeeff0fb92728edabf5107ed16e143bb28ea2e51ef108bda43e49651f005c9cea-ol9_x86_64_appstream
kernel-headers-5.14.0-162.23.1.el9_1.x86_64.rpm6a0dc9d8b804fb03600955edb09226389457dbd10f530c1c7a033712559daf11-ol9_x86_64_appstream
kernel-modules-5.14.0-162.23.1.el9_1.x86_64.rpmcb24c61b1114bd3eeec714062b03dde7c38bdbc5d5150c204b99aea2603f6d60-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-162.23.1.el9_1.x86_64.rpmcb24c61b1114bd3eeec714062b03dde7c38bdbc5d5150c204b99aea2603f6d60-ol9_x86_64_u1_baseos_patch
kernel-modules-extra-5.14.0-162.23.1.el9_1.x86_64.rpme17aceeffdc15b78a3d67cec38b498884e9c9cab0f3f7f7607edc3b7c448ad71-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-162.23.1.el9_1.x86_64.rpme17aceeffdc15b78a3d67cec38b498884e9c9cab0f3f7f7607edc3b7c448ad71-ol9_x86_64_u1_baseos_patch
kernel-tools-5.14.0-162.23.1.el9_1.x86_64.rpm250a44de307f53cc4fb3a73722c3d22c074519c13d7937d46ced3e8eea3a12a2-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-162.23.1.el9_1.x86_64.rpm250a44de307f53cc4fb3a73722c3d22c074519c13d7937d46ced3e8eea3a12a2-ol9_x86_64_u1_baseos_patch
kernel-tools-libs-5.14.0-162.23.1.el9_1.x86_64.rpm95252de1d9c3c595b981cb33891e0cf0ec947516a7fe898e81a835d7a4a875f2-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-162.23.1.el9_1.x86_64.rpm95252de1d9c3c595b981cb33891e0cf0ec947516a7fe898e81a835d7a4a875f2-ol9_x86_64_u1_baseos_patch
kernel-tools-libs-devel-5.14.0-162.23.1.el9_1.x86_64.rpm4356200f11abc0f89e911964b1d58201a83c297c2724ab34c5ccd16ec3f9878d-ol9_x86_64_codeready_builder
perf-5.14.0-162.23.1.el9_1.x86_64.rpm7c04e87e88b0d0f8e78018a69ae0b6a196a23dd919169477052dc2bf65e8fd7d-ol9_x86_64_appstream
python3-perf-5.14.0-162.23.1.el9_1.x86_64.rpm1c4576cd958d163e13b04efee898b6fabb19f13f91060a17da3d71d67b47e0a2-ol9_x86_64_baseos_latest
python3-perf-5.14.0-162.23.1.el9_1.x86_64.rpm1c4576cd958d163e13b04efee898b6fabb19f13f91060a17da3d71d67b47e0a2-ol9_x86_64_u1_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights