ELSA-2023-4151

ELSA-2023-4151 - kernel security and bug fix update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2023-08-09

Description

[3.10.0-1160.95.1.0.1.OL7]
- debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499}

[3.10.0-1160.95.1.OL7]
- Update Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.9
- Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)

[3.10.0-1160.95.1]
- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert '[tools] s390/perf: add perf register support for floating-point registers' (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]

[3.10.0-1160.94.1]
- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}

[3.10.0-1160.93.1]
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]

Related CVEs

CVE-2022-3564

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	kernel-3.10.0-1160.95.1.0.1.el7.src.rpm	8807315b0d872295826601a47b337660	-
	bpftool-3.10.0-1160.95.1.0.1.el7.x86_64.rpm	e6e887846de6097df44d1ae515067744	-
	kernel-3.10.0-1160.95.1.0.1.el7.x86_64.rpm	b43ef380b07a63de6a3bde8e75e69d0f	-
	kernel-abi-whitelists-3.10.0-1160.95.1.0.1.el7.noarch.rpm	efa6695d1b426e550c3bfd4626c1924b	-
	kernel-debug-3.10.0-1160.95.1.0.1.el7.x86_64.rpm	0e21facc531a8db89411252b8c102c4c	-
	kernel-debug-devel-3.10.0-1160.95.1.0.1.el7.x86_64.rpm	47d93ba0d7b0e7d8f75717c30f4d6d74	-
	kernel-devel-3.10.0-1160.95.1.0.1.el7.x86_64.rpm	3194f5c95a3bad08b99944f7bd4ce86c	-
	kernel-doc-3.10.0-1160.95.1.0.1.el7.noarch.rpm	9dbcfeea2a98908f23017d26b08adb04	-
	kernel-headers-3.10.0-1160.95.1.0.1.el7.x86_64.rpm	ef9e7078f7dd2afefce0621c5d78bd38	-
	kernel-tools-3.10.0-1160.95.1.0.1.el7.x86_64.rpm	ae30805fa00cd686d5a44939304277f6	-
	kernel-tools-libs-3.10.0-1160.95.1.0.1.el7.x86_64.rpm	9ca396942f8d8b26318450ab60f6710e	-
	kernel-tools-libs-devel-3.10.0-1160.95.1.0.1.el7.x86_64.rpm	b82a85b663c4653781ebce9d07365628	-
	perf-3.10.0-1160.95.1.0.1.el7.x86_64.rpm	d67625599b73c11986f5fca9f596c4cd	-
	python-perf-3.10.0-1160.95.1.0.1.el7.x86_64.rpm	6904c06e05d63abca0339e53920a74cf	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team