ELSA-2023-3349

ELSA-2023-3349 - kernel security and bug fix update

Type:SECURITY
Severity:IMPORTANT
Release Date:2023-06-01

Description


[4.18.0-477.13.1_8.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-477.13.1_8]
- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196147 2196146] {CVE-2023-32233}

[4.18.0-477.12.1_8]
- redhat/configs: Fix incorrect configs location and content (Vladis Dronov)
- wifi: iwlwifi: mvm: protect TXQ list manipulation (Jose Ignacio Tornos Martinez) [2183471 2152168]
- wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (Jose Ignacio Tornos Martinez) [2183471 2152168]
- migrate: grab the compound head in migration_entry_wait_on_locked (Nico Pache) [2189629 2188249]
- redhat/configs: Fix DEBUG_BLK_CGROUP and BFQ_CGROUP_DEBUG configs (Vladis Dronov)
- redhat: switch release to zstream (Lucas Zampieri)

[4.18.0-477.11.1_8]
- crypto: drbg - Only fail when jent is unavailable in FIPS mode (Vladis Dronov) [2181730 2175712]
- crypto: jitter - permanent and intermittent health errors (Vladis Dronov) [2181730 2175712]
- crypto: jitter - quit sample collection loop upon RCT failure (Vladis Dronov) [2181730 2175712]
- crypto: jitter - don't limit ->health_failure check to FIPS mode (Vladis Dronov) [2181730 2175712]
- crypto: jitter - drop kernel-doc notation (Vladis Dronov) [2181730 2175712]
- qede: avoid uninitialized entries in coal_entry array (Michal Schmidt) [2176104 2160054]
- qede: fix interrupt coalescing configuration (Jonathan Toppins) [2176104 2160054]
- crypto: qat - add support for 402xx devices (Vladis Dronov) [2176850 2144529]
- crypto: qat - drop log level of msg in get_instance_node() (Vladis Dronov) [2176850 2144529]
- crypto: qat - fix out-of-bounds read (Vladis Dronov) [2176850 2144529]
- Documentation: qat: change kernel version (Vladis Dronov) [2176850 2144529]
- crypto: qat - add qat_zlib_deflate (Vladis Dronov) [2176850 2144529]
- crypto: qat - extend buffer list logic interface (Vladis Dronov) [2176850 2144529]
- crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (Vladis Dronov) [2176850 2144529]
- crypto: qat - add resubmit logic for decompression (Vladis Dronov) [2176850 2144529]
- crypto: acomp - define max size for destination (Vladis Dronov) [2176850 2144529]
- crypto: qat - enable deflate for QAT GEN4 (Vladis Dronov) [2176850 2144529]
- crypto: qat - expose deflate through acomp api for QAT GEN2 (Vladis Dronov) [2176850 2144529]
- crypto: qat - rename and relocate GEN2 config function (Vladis Dronov) [2176850 2144529]
- crypto: qat - relocate qat_algs_alloc_flags() (Vladis Dronov) [2176850 2144529]
- crypto: qat - relocate backlog related structures (Vladis Dronov) [2176850 2144529]
- crypto: qat - extend buffer list interface (Vladis Dronov) [2176850 2144529]
- crypto: qat - generalize crypto request buffers (Vladis Dronov) [2176850 2144529]
- crypto: qat - change bufferlist logic interface (Vladis Dronov) [2176850 2144529]
- crypto: qat - rename bufferlist functions (Vladis Dronov) [2176850 2144529]
- crypto: qat - relocate bufferlist logic (Vladis Dronov) [2176850 2144529]
- crypto: qat - Use helper to set reqsize (Vladis Dronov) [2176850 2144529]
- crypto: kpp - Add helper to set reqsize (Vladis Dronov) [2176850 2144529]
- crypto: qat - fix error return code in adf_probe (Vladis Dronov) [2176850 2144529]
- crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (Vladis Dronov) [2176850 2144529]
- sched/core: Fix arch_scale_freq_tick() on tickless systems (Phil Auld) [2188067 2184083]


Related CVEs


CVE-2023-32233

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 8 (aarch64) kernel-4.18.0-477.13.1.el8_8.src.rpm2aeb0d4a69f237f212ec0a3523cacff4-
bpftool-4.18.0-477.13.1.el8_8.aarch64.rpmb4cbf8a4c958dc05043adfd1c258e5c7-
kernel-cross-headers-4.18.0-477.13.1.el8_8.aarch64.rpm0e77ec085b878424e5cbe2c1959bf717-
kernel-headers-4.18.0-477.13.1.el8_8.aarch64.rpme5ca0142be1c983792d29f59e30f5b6e-
kernel-tools-4.18.0-477.13.1.el8_8.aarch64.rpmc21ac3aa1c9762f38ff328ab6153af8c-
kernel-tools-libs-4.18.0-477.13.1.el8_8.aarch64.rpm70cae1d312c0919e3fe89c9e6312298b-
kernel-tools-libs-devel-4.18.0-477.13.1.el8_8.aarch64.rpmac05eb57bf89a6b136f7b5dc9f6d16fe-
perf-4.18.0-477.13.1.el8_8.aarch64.rpmd5002decdc6f89aea4059ea9ae895fe0-
python3-perf-4.18.0-477.13.1.el8_8.aarch64.rpm92f9b13becb7fb49920109a5092a0fbd-
Oracle Linux 8 (x86_64) kernel-4.18.0-477.13.1.el8_8.src.rpm2aeb0d4a69f237f212ec0a3523cacff4-
bpftool-4.18.0-477.13.1.el8_8.x86_64.rpmbad1ede16d9e3face81a519d4c851c27-
kernel-4.18.0-477.13.1.el8_8.x86_64.rpm762d9a720a885f90a2b0f98cc469b320-
kernel-abi-stablelists-4.18.0-477.13.1.el8_8.noarch.rpm04a3d81a29d4c77ffd083e1256274a5f-
kernel-core-4.18.0-477.13.1.el8_8.x86_64.rpmb739798705692e2863a4f24d988c0c8d-
kernel-cross-headers-4.18.0-477.13.1.el8_8.x86_64.rpm1d4eb6b7a128698dc1c4eca854e20895-
kernel-debug-4.18.0-477.13.1.el8_8.x86_64.rpm74008436a49025f0fb0e4e1be8460fa8-
kernel-debug-core-4.18.0-477.13.1.el8_8.x86_64.rpmcce6a377fbaf14c636d942203e07163d-
kernel-debug-devel-4.18.0-477.13.1.el8_8.x86_64.rpm782bc01249ec35d016e4ae9f8cf6ded5-
kernel-debug-modules-4.18.0-477.13.1.el8_8.x86_64.rpm901b4eb65dc32bf603ed048478469196-
kernel-debug-modules-extra-4.18.0-477.13.1.el8_8.x86_64.rpm84c38efbe4cbe03d2621be7aba82080b-
kernel-devel-4.18.0-477.13.1.el8_8.x86_64.rpmbbb70e70a43caaaf1a79fb40f0011573-
kernel-doc-4.18.0-477.13.1.el8_8.noarch.rpm370253f01ad9d0349942d72705473162-
kernel-headers-4.18.0-477.13.1.el8_8.x86_64.rpm3b48aaf169bb5f44e793175f7f76f274-
kernel-modules-4.18.0-477.13.1.el8_8.x86_64.rpm6e9036620a45be5789eceb0837b36c88-
kernel-modules-extra-4.18.0-477.13.1.el8_8.x86_64.rpm55b277d65ad15a692cc9d14df6a37bc8-
kernel-tools-4.18.0-477.13.1.el8_8.x86_64.rpmdb75b081e880c7bfee9d06ba7bee0088-
kernel-tools-libs-4.18.0-477.13.1.el8_8.x86_64.rpmcadd97b0688adb3129b85e911d7fc190-
kernel-tools-libs-devel-4.18.0-477.13.1.el8_8.x86_64.rpm8934789eca715dd49133fb0c457f8304-
perf-4.18.0-477.13.1.el8_8.x86_64.rpm661ee7c2cf20a0cd4d0b4e36d5be4f03-
python3-perf-4.18.0-477.13.1.el8_8.x86_64.rpm3cbfbfa40b4e572c09e5454756015cfb-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete