Stay Connected:

ELSA-2023-3349

ELSA-2023-3349 - kernel security and bug fix update

Type:SECURITY
Impact:IMPORTANT
Release Date:2023-06-01

Description


[4.18.0-477.13.1_8.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-477.13.1_8]
- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196147 2196146] {CVE-2023-32233}

[4.18.0-477.12.1_8]
- redhat/configs: Fix incorrect configs location and content (Vladis Dronov)
- wifi: iwlwifi: mvm: protect TXQ list manipulation (Jose Ignacio Tornos Martinez) [2183471 2152168]
- wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (Jose Ignacio Tornos Martinez) [2183471 2152168]
- migrate: grab the compound head in migration_entry_wait_on_locked (Nico Pache) [2189629 2188249]
- redhat/configs: Fix DEBUG_BLK_CGROUP and BFQ_CGROUP_DEBUG configs (Vladis Dronov)
- redhat: switch release to zstream (Lucas Zampieri)

[4.18.0-477.11.1_8]
- crypto: drbg - Only fail when jent is unavailable in FIPS mode (Vladis Dronov) [2181730 2175712]
- crypto: jitter - permanent and intermittent health errors (Vladis Dronov) [2181730 2175712]
- crypto: jitter - quit sample collection loop upon RCT failure (Vladis Dronov) [2181730 2175712]
- crypto: jitter - don't limit ->health_failure check to FIPS mode (Vladis Dronov) [2181730 2175712]
- crypto: jitter - drop kernel-doc notation (Vladis Dronov) [2181730 2175712]
- qede: avoid uninitialized entries in coal_entry array (Michal Schmidt) [2176104 2160054]
- qede: fix interrupt coalescing configuration (Jonathan Toppins) [2176104 2160054]
- crypto: qat - add support for 402xx devices (Vladis Dronov) [2176850 2144529]
- crypto: qat - drop log level of msg in get_instance_node() (Vladis Dronov) [2176850 2144529]
- crypto: qat - fix out-of-bounds read (Vladis Dronov) [2176850 2144529]
- Documentation: qat: change kernel version (Vladis Dronov) [2176850 2144529]
- crypto: qat - add qat_zlib_deflate (Vladis Dronov) [2176850 2144529]
- crypto: qat - extend buffer list logic interface (Vladis Dronov) [2176850 2144529]
- crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (Vladis Dronov) [2176850 2144529]
- crypto: qat - add resubmit logic for decompression (Vladis Dronov) [2176850 2144529]
- crypto: acomp - define max size for destination (Vladis Dronov) [2176850 2144529]
- crypto: qat - enable deflate for QAT GEN4 (Vladis Dronov) [2176850 2144529]
- crypto: qat - expose deflate through acomp api for QAT GEN2 (Vladis Dronov) [2176850 2144529]
- crypto: qat - rename and relocate GEN2 config function (Vladis Dronov) [2176850 2144529]
- crypto: qat - relocate qat_algs_alloc_flags() (Vladis Dronov) [2176850 2144529]
- crypto: qat - relocate backlog related structures (Vladis Dronov) [2176850 2144529]
- crypto: qat - extend buffer list interface (Vladis Dronov) [2176850 2144529]
- crypto: qat - generalize crypto request buffers (Vladis Dronov) [2176850 2144529]
- crypto: qat - change bufferlist logic interface (Vladis Dronov) [2176850 2144529]
- crypto: qat - rename bufferlist functions (Vladis Dronov) [2176850 2144529]
- crypto: qat - relocate bufferlist logic (Vladis Dronov) [2176850 2144529]
- crypto: qat - Use helper to set reqsize (Vladis Dronov) [2176850 2144529]
- crypto: kpp - Add helper to set reqsize (Vladis Dronov) [2176850 2144529]
- crypto: qat - fix error return code in adf_probe (Vladis Dronov) [2176850 2144529]
- crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (Vladis Dronov) [2176850 2144529]
- sched/core: Fix arch_scale_freq_tick() on tickless systems (Phil Auld) [2188067 2184083]


Related CVEs


CVE-2023-32233

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-477.13.1.el8_8.src.rpmf199ea3c35a39ba1a6f27c66b22cfc2e17eb5edc5ee14835d53275905702c248-ol8_aarch64_baseos_latest
kernel-4.18.0-477.13.1.el8_8.src.rpmf199ea3c35a39ba1a6f27c66b22cfc2e17eb5edc5ee14835d53275905702c248-ol8_aarch64_codeready_builder
kernel-4.18.0-477.13.1.el8_8.src.rpmf199ea3c35a39ba1a6f27c66b22cfc2e17eb5edc5ee14835d53275905702c248-ol8_aarch64_u8_baseos_patch
bpftool-4.18.0-477.13.1.el8_8.aarch64.rpm997248f6f6ffa732c5c2b0c8c997f6eab3d7c2f6fa9d2339b22b5c6cc79773e3-ol8_aarch64_baseos_latest
bpftool-4.18.0-477.13.1.el8_8.aarch64.rpm997248f6f6ffa732c5c2b0c8c997f6eab3d7c2f6fa9d2339b22b5c6cc79773e3-ol8_aarch64_u8_baseos_patch
kernel-cross-headers-4.18.0-477.13.1.el8_8.aarch64.rpm15defa1127e113291e6a2d0081a982584d605073c113f7afa7951f83b712b9ac-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-477.13.1.el8_8.aarch64.rpm15defa1127e113291e6a2d0081a982584d605073c113f7afa7951f83b712b9ac-ol8_aarch64_u8_baseos_patch
kernel-headers-4.18.0-477.13.1.el8_8.aarch64.rpmcae33c910b9bdd497aee18cca8e12eae2fa55be24ac3a3e40fa7129fbe9101f2-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-477.13.1.el8_8.aarch64.rpmcae33c910b9bdd497aee18cca8e12eae2fa55be24ac3a3e40fa7129fbe9101f2-ol8_aarch64_u8_baseos_patch
kernel-tools-4.18.0-477.13.1.el8_8.aarch64.rpm014dcb900eb7620e775b09e1479e30d1f60ff03b3188fd147f7ff0e41c785d8d-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-477.13.1.el8_8.aarch64.rpm014dcb900eb7620e775b09e1479e30d1f60ff03b3188fd147f7ff0e41c785d8d-ol8_aarch64_u8_baseos_patch
kernel-tools-libs-4.18.0-477.13.1.el8_8.aarch64.rpm9080ae373a71c870cd30d8b1f95f9437cf8fbf9d032d7f4871182f3dd9633fe5-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-477.13.1.el8_8.aarch64.rpm9080ae373a71c870cd30d8b1f95f9437cf8fbf9d032d7f4871182f3dd9633fe5-ol8_aarch64_u8_baseos_patch
kernel-tools-libs-devel-4.18.0-477.13.1.el8_8.aarch64.rpmf7d913f4d537a6a98a9e3b442807de6332cfed4f6171449fcaeee5acb55a6f0b-ol8_aarch64_codeready_builder
perf-4.18.0-477.13.1.el8_8.aarch64.rpmb88e0e5583afeb78b690e7944696eeb12d2821816801f7ea2cd9c65ddd899517-ol8_aarch64_baseos_latest
perf-4.18.0-477.13.1.el8_8.aarch64.rpmb88e0e5583afeb78b690e7944696eeb12d2821816801f7ea2cd9c65ddd899517-ol8_aarch64_u8_baseos_patch
python3-perf-4.18.0-477.13.1.el8_8.aarch64.rpmddeb579c4636ca263481878d590b04f82517c4ceb37f8bdef4bcef6aaba25fda-ol8_aarch64_baseos_latest
python3-perf-4.18.0-477.13.1.el8_8.aarch64.rpmddeb579c4636ca263481878d590b04f82517c4ceb37f8bdef4bcef6aaba25fda-ol8_aarch64_u8_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-477.13.1.el8_8.src.rpmf199ea3c35a39ba1a6f27c66b22cfc2e17eb5edc5ee14835d53275905702c248-ol8_x86_64_baseos_latest
kernel-4.18.0-477.13.1.el8_8.src.rpmf199ea3c35a39ba1a6f27c66b22cfc2e17eb5edc5ee14835d53275905702c248-ol8_x86_64_codeready_builder
kernel-4.18.0-477.13.1.el8_8.src.rpmf199ea3c35a39ba1a6f27c66b22cfc2e17eb5edc5ee14835d53275905702c248-ol8_x86_64_u8_baseos_patch
bpftool-4.18.0-477.13.1.el8_8.x86_64.rpm0b12484a0d8b3952f71c7afef441aebe6e479319bc0fe1c27b83374728c5bce5-ol8_x86_64_baseos_latest
bpftool-4.18.0-477.13.1.el8_8.x86_64.rpm0b12484a0d8b3952f71c7afef441aebe6e479319bc0fe1c27b83374728c5bce5-ol8_x86_64_u8_baseos_patch
kernel-4.18.0-477.13.1.el8_8.x86_64.rpm241952b096225864950bddfb819360f71ec4c2996b9d43cd8c8c1780643b1f93-ol8_x86_64_baseos_latest
kernel-4.18.0-477.13.1.el8_8.x86_64.rpm241952b096225864950bddfb819360f71ec4c2996b9d43cd8c8c1780643b1f93-ol8_x86_64_u8_baseos_patch
kernel-abi-stablelists-4.18.0-477.13.1.el8_8.noarch.rpm5ca01d6440f8c9d0b76ea36f5498db40b6251668992183806750e8d56ada05d9-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-477.13.1.el8_8.noarch.rpm5ca01d6440f8c9d0b76ea36f5498db40b6251668992183806750e8d56ada05d9-ol8_x86_64_u8_baseos_patch
kernel-core-4.18.0-477.13.1.el8_8.x86_64.rpm1eb99682b48f040cd0c6722b3ec57e5007ac0d42bf390544150533a0a6cda8a4-ol8_x86_64_baseos_latest
kernel-core-4.18.0-477.13.1.el8_8.x86_64.rpm1eb99682b48f040cd0c6722b3ec57e5007ac0d42bf390544150533a0a6cda8a4-ol8_x86_64_u8_baseos_patch
kernel-cross-headers-4.18.0-477.13.1.el8_8.x86_64.rpm62a2c0e5c3c72e0d48f01908b05f1f07cdf5240a1ee03090cd2271a0bc5edf5b-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-477.13.1.el8_8.x86_64.rpm62a2c0e5c3c72e0d48f01908b05f1f07cdf5240a1ee03090cd2271a0bc5edf5b-ol8_x86_64_u8_baseos_patch
kernel-debug-4.18.0-477.13.1.el8_8.x86_64.rpmf40538c4ab5ec3b4079164ac9251c5b10a6d421acddf8d0af46a02dbd0e22e7f-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-477.13.1.el8_8.x86_64.rpmf40538c4ab5ec3b4079164ac9251c5b10a6d421acddf8d0af46a02dbd0e22e7f-ol8_x86_64_u8_baseos_patch
kernel-debug-core-4.18.0-477.13.1.el8_8.x86_64.rpm6f729d6cd8432104bcde22446d0ba41dd4238e3bf8da0893934b14a9d5d47c55-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-477.13.1.el8_8.x86_64.rpm6f729d6cd8432104bcde22446d0ba41dd4238e3bf8da0893934b14a9d5d47c55-ol8_x86_64_u8_baseos_patch
kernel-debug-devel-4.18.0-477.13.1.el8_8.x86_64.rpm7be41f0508eafee9fc8d185fbd0cce7c6c7bfe990b7f7f6cfd7e498ce07cf1b7-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-477.13.1.el8_8.x86_64.rpm7be41f0508eafee9fc8d185fbd0cce7c6c7bfe990b7f7f6cfd7e498ce07cf1b7-ol8_x86_64_u8_baseos_patch
kernel-debug-modules-4.18.0-477.13.1.el8_8.x86_64.rpmf2965aa75e893321a6f4813ad4df2e384e64419da2396aa5a241ed7185aed97e-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-477.13.1.el8_8.x86_64.rpmf2965aa75e893321a6f4813ad4df2e384e64419da2396aa5a241ed7185aed97e-ol8_x86_64_u8_baseos_patch
kernel-debug-modules-extra-4.18.0-477.13.1.el8_8.x86_64.rpmb9b60f8afde1998f33db8e7d6dd5340216e721e676b5a3c80984d63cd9d84563-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-477.13.1.el8_8.x86_64.rpmb9b60f8afde1998f33db8e7d6dd5340216e721e676b5a3c80984d63cd9d84563-ol8_x86_64_u8_baseos_patch
kernel-devel-4.18.0-477.13.1.el8_8.x86_64.rpmf1f15338cf51b25aded3d96a73d6fa62dc7c0d523af8f60467d352c01fe6fd1d-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-477.13.1.el8_8.x86_64.rpmf1f15338cf51b25aded3d96a73d6fa62dc7c0d523af8f60467d352c01fe6fd1d-ol8_x86_64_u8_baseos_patch
kernel-doc-4.18.0-477.13.1.el8_8.noarch.rpm48a86e482b021c949c3b50f0b9866a85861086c32583ded421d0d79bed99f40d-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-477.13.1.el8_8.noarch.rpm48a86e482b021c949c3b50f0b9866a85861086c32583ded421d0d79bed99f40d-ol8_x86_64_u8_baseos_patch
kernel-headers-4.18.0-477.13.1.el8_8.x86_64.rpm4d11c877ccd4140b3878786fd5869a5ffd7f8827e58069f31cc9006f4c683172-exadata_dbserver_23.1.4.0.0_x86_64_base
kernel-headers-4.18.0-477.13.1.el8_8.x86_64.rpm4d11c877ccd4140b3878786fd5869a5ffd7f8827e58069f31cc9006f4c683172-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-477.13.1.el8_8.x86_64.rpm4d11c877ccd4140b3878786fd5869a5ffd7f8827e58069f31cc9006f4c683172-ol8_x86_64_u8_baseos_patch
kernel-modules-4.18.0-477.13.1.el8_8.x86_64.rpmf497ca56e14e90d14fd8dbbd5b6ebf33272ef286d4e89b9a17000e0ac99afe49-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-477.13.1.el8_8.x86_64.rpmf497ca56e14e90d14fd8dbbd5b6ebf33272ef286d4e89b9a17000e0ac99afe49-ol8_x86_64_u8_baseos_patch
kernel-modules-extra-4.18.0-477.13.1.el8_8.x86_64.rpm22dfa58ba1f0a8b85fcb735bb1c9a27e8fb9f0f0139c9498caa4c70959e058f4-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-477.13.1.el8_8.x86_64.rpm22dfa58ba1f0a8b85fcb735bb1c9a27e8fb9f0f0139c9498caa4c70959e058f4-ol8_x86_64_u8_baseos_patch
kernel-tools-4.18.0-477.13.1.el8_8.x86_64.rpm894fc6c734be5ed2b9d7d37db6092cfdc2f003cced1481d73e83bcd69a6d1971-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-477.13.1.el8_8.x86_64.rpm894fc6c734be5ed2b9d7d37db6092cfdc2f003cced1481d73e83bcd69a6d1971-ol8_x86_64_u8_baseos_patch
kernel-tools-libs-4.18.0-477.13.1.el8_8.x86_64.rpma7712064680b0b9505c73e72e5279543a7d062e3b599051444937a0fb40f6411-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-477.13.1.el8_8.x86_64.rpma7712064680b0b9505c73e72e5279543a7d062e3b599051444937a0fb40f6411-ol8_x86_64_u8_baseos_patch
kernel-tools-libs-devel-4.18.0-477.13.1.el8_8.x86_64.rpm2667b57806cf137943999e75863d4a88dc09cbcf1aa667645ae38ec057357b54-ol8_x86_64_codeready_builder
perf-4.18.0-477.13.1.el8_8.x86_64.rpmf79f2d36535be60bb85dc477fead8aa622945db6b450c08f23df4ed093136f04-ol8_x86_64_baseos_latest
perf-4.18.0-477.13.1.el8_8.x86_64.rpmf79f2d36535be60bb85dc477fead8aa622945db6b450c08f23df4ed093136f04-ol8_x86_64_u8_baseos_patch
python3-perf-4.18.0-477.13.1.el8_8.x86_64.rpm77f1a37e2ac37537a28cdb7ce5c97641a8a5b92cf36df4b41cac96721bdd7a70-ol8_x86_64_baseos_latest
python3-perf-4.18.0-477.13.1.el8_8.x86_64.rpm77f1a37e2ac37537a28cdb7ce5c97641a8a5b92cf36df4b41cac96721bdd7a70-ol8_x86_64_u8_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights