[ELSA-2023-3349] kernel security and bug fix update
[4.18.0-477.13.1_8.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
[4.18.0-477.13.1_8]
- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196147 2196146] {CVE-2023-32233}
[4.18.0-477.12.1_8]
- redhat/configs: Fix incorrect configs location and content (Vladis Dronov)
- wifi: iwlwifi: mvm: protect TXQ list manipulation (Jose Ignacio Tornos Martinez) [2183471 2152168]
- wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (Jose Ignacio Tornos Martinez) [2183471 2152168]
- migrate: grab the compound head in migration_entry_wait_on_locked (Nico Pache) [2189629 2188249]
- redhat/configs: Fix DEBUG_BLK_CGROUP and BFQ_CGROUP_DEBUG configs (Vladis Dronov)
- redhat: switch release to zstream (Lucas Zampieri)
[4.18.0-477.11.1_8]
- crypto: drbg - Only fail when jent is unavailable in FIPS mode (Vladis Dronov) [2181730 2175712]
- crypto: jitter - permanent and intermittent health errors (Vladis Dronov) [2181730 2175712]
- crypto: jitter - quit sample collection loop upon RCT failure (Vladis Dronov) [2181730 2175712]
- crypto: jitter - don't limit ->health_failure check to FIPS mode (Vladis Dronov) [2181730 2175712]
- crypto: jitter - drop kernel-doc notation (Vladis Dronov) [2181730 2175712]
- qede: avoid uninitialized entries in coal_entry array (Michal Schmidt) [2176104 2160054]
- qede: fix interrupt coalescing configuration (Jonathan Toppins) [2176104 2160054]
- crypto: qat - add support for 402xx devices (Vladis Dronov) [2176850 2144529]
- crypto: qat - drop log level of msg in get_instance_node() (Vladis Dronov) [2176850 2144529]
- crypto: qat - fix out-of-bounds read (Vladis Dronov) [2176850 2144529]
- Documentation: qat: change kernel version (Vladis Dronov) [2176850 2144529]
- crypto: qat - add qat_zlib_deflate (Vladis Dronov) [2176850 2144529]
- crypto: qat - extend buffer list logic interface (Vladis Dronov) [2176850 2144529]
- crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (Vladis Dronov) [2176850 2144529]
- crypto: qat - add resubmit logic for decompression (Vladis Dronov) [2176850 2144529]
- crypto: acomp - define max size for destination (Vladis Dronov) [2176850 2144529]
- crypto: qat - enable deflate for QAT GEN4 (Vladis Dronov) [2176850 2144529]
- crypto: qat - expose deflate through acomp api for QAT GEN2 (Vladis Dronov) [2176850 2144529]
- crypto: qat - rename and relocate GEN2 config function (Vladis Dronov) [2176850 2144529]
- crypto: qat - relocate qat_algs_alloc_flags() (Vladis Dronov) [2176850 2144529]
- crypto: qat - relocate backlog related structures (Vladis Dronov) [2176850 2144529]
- crypto: qat - extend buffer list interface (Vladis Dronov) [2176850 2144529]
- crypto: qat - generalize crypto request buffers (Vladis Dronov) [2176850 2144529]
- crypto: qat - change bufferlist logic interface (Vladis Dronov) [2176850 2144529]
- crypto: qat - rename bufferlist functions (Vladis Dronov) [2176850 2144529]
- crypto: qat - relocate bufferlist logic (Vladis Dronov) [2176850 2144529]
- crypto: qat - Use helper to set reqsize (Vladis Dronov) [2176850 2144529]
- crypto: kpp - Add helper to set reqsize (Vladis Dronov) [2176850 2144529]
- crypto: qat - fix error return code in adf_probe (Vladis Dronov) [2176850 2144529]
- crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (Vladis Dronov) [2176850 2144529]
- sched/core: Fix arch_scale_freq_tick() on tickless systems (Phil Auld) [2188067 2184083]
- ID
- ELSA-2023-3349
- Severity
- important
- URL
- https://linux.oracle.com/errata/ELSA-2023-3349.html
- Published
-
2023-06-01T00:00:00
(15 months ago) - Modified
-
2023-06-01T00:00:00
(15 months ago) - Rights
- Copyright 2023 Oracle, Inc.
- Other Advisories
-
- ALAS-2023-1750
- ALAS2-2023-2050
- ALPINE:CVE-2023-32233
- ALSA-2023:3349
- ALSA-2023:3723
- DSA-5402-1
- ELSA-2023-12393
- ELSA-2023-12394
- ELSA-2023-12412
- ELSA-2023-12413
- ELSA-2023-3723
- ELSA-2023-5622
- RHSA-2023:3349
- RHSA-2023:3350
- RHSA-2023:3351
- RHSA-2023:3705
- RHSA-2023:3708
- RHSA-2023:3723
- RHSA-2023:5574
- RHSA-2023:5621
- RHSA-2023:5622
- SSA:2023-172-02
- SUSE-SU-2023:2500-1
- SUSE-SU-2023:2502-1
- SUSE-SU-2023:2611-1
- SUSE-SU-2023:2646-1
- SUSE-SU-2023:2651-1
- SUSE-SU-2023:2653-1
- SUSE-SU-2023:2782-1
- SUSE-SU-2023:2809-1
- SUSE-SU-2023:2871-1
- SUSE-SU-2023:3594-1
- SUSE-SU-2023:3595-1
- SUSE-SU-2023:3607-1
- SUSE-SU-2023:3612-1
- SUSE-SU-2023:3620-1
- SUSE-SU-2023:3623-1
- SUSE-SU-2023:3627-1
- SUSE-SU-2023:3628-1
- SUSE-SU-2023:3630-1
- SUSE-SU-2023:3644-1
- SUSE-SU-2023:3647-1
- SUSE-SU-2023:3648-1
- SUSE-SU-2023:3668-1
- SUSE-SU-2023:3671-1
- SUSE-SU-2023:3675-1
- USN-6122-1
- USN-6123-1
- USN-6124-1
- USN-6127-1
- USN-6130-1
- USN-6131-1
- USN-6132-1
- USN-6135-1
- USN-6149-1
- USN-6150-1
- USN-6162-1
- USN-6175-1
- USN-6186-1
- USN-6222-1
- USN-6256-1
Source | # ID | Name | URL |
---|---|---|---|
elsa | ELSA-2023-3349 | https://linux.oracle.com/errata/ELSA-2023-3349.html | |
CVE | CVE-2023-32233 | https://linux.oracle.com/cve/CVE-2023-32233.html |
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:rpm/oraclelinux/python3-perf?distro=oraclelinux-8.8 | oraclelinux | python3-perf | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/perf?distro=oraclelinux-8.8 | oraclelinux | perf | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel?distro=oraclelinux-8.8 | oraclelinux | kernel | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-tools?distro=oraclelinux-8.8 | oraclelinux | kernel-tools | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-tools-libs?distro=oraclelinux-8.8 | oraclelinux | kernel-tools-libs | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-tools-libs-devel?distro=oraclelinux-8.8 | oraclelinux | kernel-tools-libs-devel | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-modules?distro=oraclelinux-8.8 | oraclelinux | kernel-modules | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-modules-extra?distro=oraclelinux-8.8 | oraclelinux | kernel-modules-extra | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-headers?distro=oraclelinux-8.8 | oraclelinux | kernel-headers | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-doc?distro=oraclelinux-8.8 | oraclelinux | kernel-doc | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-devel?distro=oraclelinux-8.8 | oraclelinux | kernel-devel | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-debug?distro=oraclelinux-8.8 | oraclelinux | kernel-debug | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-debug-modules?distro=oraclelinux-8.8 | oraclelinux | kernel-debug-modules | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-debug-modules-extra?distro=oraclelinux-8.8 | oraclelinux | kernel-debug-modules-extra | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-debug-devel?distro=oraclelinux-8.8 | oraclelinux | kernel-debug-devel | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-debug-core?distro=oraclelinux-8.8 | oraclelinux | kernel-debug-core | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-cross-headers?distro=oraclelinux-8.8 | oraclelinux | kernel-cross-headers | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-core?distro=oraclelinux-8.8 | oraclelinux | kernel-core | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/kernel-abi-stablelists?distro=oraclelinux-8.8 | oraclelinux | kernel-abi-stablelists | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 | ||
Affected | pkg:rpm/oraclelinux/bpftool?distro=oraclelinux-8.8 | oraclelinux | bpftool | < 4.18.0-477.13.1.el8_8 | oraclelinux-8.8 |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |