ELSA-2024-12265

ELSA-2024-12265 - kernel security update

Type:SECURITY
Severity:IMPORTANT
Release Date:2024-04-03

Description


- [5.14.0-362.24.1.0.1_3.OL9]
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters [Orabug: 36461940 ] {CVE-2024-1086}

- [5.14.0-362.24.1_3.OL9]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Disable unified kernel image package build
- Add Oracle Linux IMA certificates


Related CVEs


CVE-2024-1086

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-362.24.1.0.1.el9_3.src.rpm18f3d8a52ebb992252e6c8b777e21331-ol9_aarch64_appstream
kernel-5.14.0-362.24.1.0.1.el9_3.src.rpm18f3d8a52ebb992252e6c8b777e21331-ol9_aarch64_baseos_latest
kernel-5.14.0-362.24.1.0.1.el9_3.src.rpm18f3d8a52ebb992252e6c8b777e21331-ol9_aarch64_codeready_builder
bpftool-7.2.0-362.24.1.0.1.el9_3.aarch64.rpma2aa6f97eb911c00ef5d0b6d3bca0f8a-ol9_aarch64_baseos_latest
kernel-cross-headers-5.14.0-362.24.1.0.1.el9_3.aarch64.rpm8c643965232d5c86aefae3180b66d6cd-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-362.24.1.0.1.el9_3.aarch64.rpmedff91cb361160b142e41cc09eade180-ol9_aarch64_appstream
kernel-tools-5.14.0-362.24.1.0.1.el9_3.aarch64.rpmdef128642b7e4ccf0992a835c670ee4d-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-362.24.1.0.1.el9_3.aarch64.rpm7b2c3fdae3c7aec2c6dff93955050ba2-ol9_aarch64_baseos_latest
kernel-tools-libs-devel-5.14.0-362.24.1.0.1.el9_3.aarch64.rpm068a68695de72a940b5c7c942ae62fda-ol9_aarch64_codeready_builder
perf-5.14.0-362.24.1.0.1.el9_3.aarch64.rpm897c5e38b5c96c3d55fd7f26cb0d5ee8-ol9_aarch64_appstream
python3-perf-5.14.0-362.24.1.0.1.el9_3.aarch64.rpm91114b170cebec6fca80ae255f95af2d-ol9_aarch64_baseos_latest
Oracle Linux 9 (x86_64) kernel-5.14.0-362.24.1.0.1.el9_3.src.rpm18f3d8a52ebb992252e6c8b777e21331-ol9_x86_64_appstream
kernel-5.14.0-362.24.1.0.1.el9_3.src.rpm18f3d8a52ebb992252e6c8b777e21331-ol9_x86_64_baseos_latest
kernel-5.14.0-362.24.1.0.1.el9_3.src.rpm18f3d8a52ebb992252e6c8b777e21331-ol9_x86_64_codeready_builder
bpftool-7.2.0-362.24.1.0.1.el9_3.x86_64.rpm932761a8836149f92acff9917b7d9d7a-ol9_x86_64_baseos_latest
kernel-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm50c19e1bf059d3cbc287bd8e786c39b0-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-362.24.1.0.1.el9_3.noarch.rpm6e44d35c499ba617d3f7310ee1c51f9f-ol9_x86_64_baseos_latest
kernel-core-5.14.0-362.24.1.0.1.el9_3.x86_64.rpmc45845e6aa86e863c4934fc5a1ad65f2-ol9_x86_64_baseos_latest
kernel-cross-headers-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm269df3ff4c6762b3f80a6d8d7714e900-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm8d7bb0ade14ba643417e3ae1d8244610-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-362.24.1.0.1.el9_3.x86_64.rpmb7da9516a7afabe1c2d822faec048930-ol9_x86_64_baseos_latest
kernel-debug-devel-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm849a0231fe3958d207aa9218704ca746-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm6c379dce06e2396ed5030f903bbe6b1e-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm7afa13b2a17a2026128961ad0a3ece07-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm175c8db959902a1acf6b507b6840f1d7-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-362.24.1.0.1.el9_3.x86_64.rpmfeb6f58a13c741a9f7c9a14be797d24a-ol9_x86_64_baseos_latest
kernel-devel-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm40e95d2b9a2dd2620128417d8333a674-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-362.24.1.0.1.el9_3.x86_64.rpmeef814f4f0f75aac4118c8e73640f856-ol9_x86_64_appstream
kernel-doc-5.14.0-362.24.1.0.1.el9_3.noarch.rpm7b0030b61d184490c184aaf884ad8433-ol9_x86_64_appstream
kernel-headers-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm4caeccfd50cabd79fd0312f59ab4dca7-ol9_x86_64_appstream
kernel-modules-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm89d7ebc83220ddbdabdd3b0a4944f0a6-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-362.24.1.0.1.el9_3.x86_64.rpmb171c9e24b144d2f7dadcd7b81e1d074-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm55152f65a47a329c11a50f6a73fdb1be-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-362.24.1.0.1.el9_3.x86_64.rpmcb1a80cf97b96c995632b84016ea8def-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm8b85bab14606d09d9abd7abd7a830a15-ol9_x86_64_baseos_latest
kernel-tools-libs-devel-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm6d624fd7ebaea27f402cd4cf9d595633-ol9_x86_64_codeready_builder
libperf-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm556fd0b0851c1e819605fd297123d11e-ol9_x86_64_codeready_builder
perf-5.14.0-362.24.1.0.1.el9_3.x86_64.rpmc10d1c703765e5c7a973889d5022a875-ol9_x86_64_appstream
python3-perf-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm21d53585072abeb28cdce71c77fd9015-ol9_x86_64_baseos_latest
rtla-5.14.0-362.24.1.0.1.el9_3.x86_64.rpmbdc7bd2e780d47d2a81345df69d16636-ol9_x86_64_appstream
rv-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm8d1cb6c8dd09c4db7747e0aae1e3b6e1-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete