Oracle Linux Security Advisory ELSA-2023-3349

https://linux.oracle.com/errata/ELSA-2023-3349.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-abi-stablelists-4.18.0-477.13.1.el8_8.noarch.rpm
kernel-core-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-cross-headers-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-debug-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-debug-core-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-debug-devel-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-debug-modules-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-debug-modules-extra-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-devel-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-doc-4.18.0-477.13.1.el8_8.noarch.rpm
kernel-headers-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-modules-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-modules-extra-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-tools-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-tools-libs-4.18.0-477.13.1.el8_8.x86_64.rpm
perf-4.18.0-477.13.1.el8_8.x86_64.rpm
python3-perf-4.18.0-477.13.1.el8_8.x86_64.rpm
kernel-tools-libs-devel-4.18.0-477.13.1.el8_8.x86_64.rpm

aarch64:
bpftool-4.18.0-477.13.1.el8_8.aarch64.rpm
kernel-cross-headers-4.18.0-477.13.1.el8_8.aarch64.rpm
kernel-headers-4.18.0-477.13.1.el8_8.aarch64.rpm
kernel-tools-4.18.0-477.13.1.el8_8.aarch64.rpm
kernel-tools-libs-4.18.0-477.13.1.el8_8.aarch64.rpm
perf-4.18.0-477.13.1.el8_8.aarch64.rpm
python3-perf-4.18.0-477.13.1.el8_8.aarch64.rpm
kernel-tools-libs-devel-4.18.0-477.13.1.el8_8.aarch64.rpm


SRPMS:
https://oss.oracle.com:443/ol8/SRPMS-updates//kernel-4.18.0-477.13.1.el8_8.src.rpm

Related CVEs:

CVE-2023-32233




Description of changes:

[4.18.0-477.13.1.el8_8.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-477.13.1.el8_8]
- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196147 2196146] {CVE-2023-32233}

[4.18.0-477.12.1.el8_8]
- redhat/configs: Fix incorrect configs location and content (Vladis Dronov)
- wifi: iwlwifi: mvm: protect TXQ list manipulation (Jose Ignacio Tornos Martinez) [2183471 2152168]
- wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (Jose Ignacio Tornos Martinez) [2183471 2152168]
- migrate: grab the compound head in migration_entry_wait_on_locked (Nico Pache) [2189629 2188249]
- redhat/configs: Fix DEBUG_BLK_CGROUP and BFQ_CGROUP_DEBUG configs (Vladis Dronov)
- redhat: switch release to zstream (Lucas Zampieri)

[4.18.0-477.11.1.el8_8]
- crypto: drbg - Only fail when jent is unavailable in FIPS mode (Vladis Dronov) [2181730 2175712]
- crypto: jitter - permanent and intermittent health errors (Vladis Dronov) [2181730 2175712]
- crypto: jitter - quit sample collection loop upon RCT failure (Vladis Dronov) [2181730 2175712]
- crypto: jitter - don't limit ->health_failure check to FIPS mode (Vladis Dronov) [2181730 2175712]
- crypto: jitter - drop kernel-doc notation (Vladis Dronov) [2181730 2175712]
- qede: avoid uninitialized entries in coal_entry array (Michal Schmidt) [2176104 2160054]
- qede: fix interrupt coalescing configuration (Jonathan Toppins) [2176104 2160054]
- crypto: qat - add support for 402xx devices (Vladis Dronov) [2176850 2144529]
- crypto: qat - drop log level of msg in get_instance_node() (Vladis Dronov) [2176850 2144529]
- crypto: qat - fix out-of-bounds read (Vladis Dronov) [2176850 2144529]
- Documentation: qat: change kernel version (Vladis Dronov) [2176850 2144529]
- crypto: qat - add qat_zlib_deflate (Vladis Dronov) [2176850 2144529]
- crypto: qat - extend buffer list logic interface (Vladis Dronov) [2176850 2144529]
- crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (Vladis Dronov) [2176850 2144529]
- crypto: qat - add resubmit logic for decompression (Vladis Dronov) [2176850 2144529]
- crypto: acomp - define max size for destination (Vladis Dronov) [2176850 2144529]
- crypto: qat - enable deflate for QAT GEN4 (Vladis Dronov) [2176850 2144529]
- crypto: qat - expose deflate through acomp api for QAT GEN2 (Vladis Dronov) [2176850 2144529]
- crypto: qat - rename and relocate GEN2 config function (Vladis Dronov) [2176850 2144529]
- crypto: qat - relocate qat_algs_alloc_flags() (Vladis Dronov) [2176850 2144529]
- crypto: qat - relocate backlog related structures (Vladis Dronov) [2176850 2144529]
- crypto: qat - extend buffer list interface (Vladis Dronov) [2176850 2144529]
- crypto: qat - generalize crypto request buffers (Vladis Dronov) [2176850 2144529]
- crypto: qat - change bufferlist logic interface (Vladis Dronov) [2176850 2144529]
- crypto: qat - rename bufferlist functions (Vladis Dronov) [2176850 2144529]
- crypto: qat - relocate bufferlist logic (Vladis Dronov) [2176850 2144529]
- crypto: qat - Use helper to set reqsize (Vladis Dronov) [2176850 2144529]
- crypto: kpp - Add helper to set reqsize (Vladis Dronov) [2176850 2144529]
- crypto: qat - fix error return code in adf_probe (Vladis Dronov) [2176850 2144529]
- crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (Vladis Dronov) [2176850 2144529]
- sched/core: Fix arch_scale_freq_tick() on tickless systems (Phil Auld) [2188067 2184083]


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata

Oracle8: ELSA-2023-3349: kernel Important Security Update

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

[4.18.0-477.13.1.el8_8.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3 - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652] [4.18.0-477.13.1.el8_8] - netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196147 2196146] {CVE-2023-32233} [4.18.0-477.12.1.el8_8] - redhat/configs: Fix incorrect configs location and content (Vladis Dronov) - wifi: iwlwifi: mvm: protect TXQ list manipulation (Jose Ignacio Tornos Martinez) [2183471 2152168] - wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (Jose Ignacio Tornos Martinez) [2183471 2152168] - migrate: grab the compound head in migration_entry_wait_on_locked (Nico Pache) [2189629 2188249] - redhat/configs: Fix DEBUG_BLK_CGROUP and BFQ_CGROUP_DEBUG configs (Vladis Dronov) - redhat: switch release to zstream (Lucas Zampieri) [4.18.0-477.11.1.el8_8] - crypto: drbg - Only fail when jent is unavailable in FIPS mode (Vladis Dronov) [2181730 2175712] - crypto: jitter - permanent and intermittent health errors (Vladis Dronov) [2181730 2175712] - crypto: jitter - quit sample collection loop upon RCT failure (Vladis Dronov) [2181730 2175712] - crypto: jitter - don't limit ->health_failure check to FIPS mode (Vladis Dronov) [2181730 2175712] - crypto: jitter - drop kernel-doc notation (Vladis Dronov) [2181730 2175712] - qede: avoid uninitialized entries in coal_entry array (Michal Schmidt) [2176104 2160054] - qede: fix interrupt coalescing configuration (Jonathan Toppins) [2176104 2160054] - crypto: qat - add support for 402xx devices (Vladis Dronov) [2176850 2144529] - crypto: qat - drop log level of msg in get_instance_node() (Vladis Dronov) [2176850 2144529] - crypto: qat - fix out-of-bounds read (Vladis Dronov) [2176850 2144529] - Documentation: qat: change kernel version (Vladis Dronov) [2176850 2144529] - crypto: qat - add qat_zlib_deflate (Vladis Dronov) [2176850 2144529] - crypto: qat - extend buffer list logic interface (Vladis Dronov) [2176850 2144529] - crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (Vladis Dronov) [2176850 2144529] - crypto: qat - add resubmit logic for decompression (Vladis Dronov) [2176850 2144529] - crypto: acomp - define max size for destination (Vladis Dronov) [2176850 2144529] - crypto: qat - enable deflate for QAT GEN4 (Vladis Dronov) [2176850 2144529] - crypto: qat - expose deflate through acomp api for QAT GEN2 (Vladis Dronov) [2176850 2144529] - crypto: qat - rename and relocate GEN2 config function (Vladis Dronov) [2176850 2144529] - crypto: qat - relocate qat_algs_alloc_flags() (Vladis Dronov) [2176850 2144529] - crypto: qat - relocate backlog related structures (Vladis Dronov) [2176850 2144529] - crypto: qat - extend buffer list interface (Vladis Dronov) [2176850 2144529] - crypto: qat - generalize crypto request buffers (Vladis Dronov) [2176850 2144529] - crypto: qat - change bufferlist logic interface (Vladis Dronov) [2176850 2144529] - crypto: qat - rename bufferlist functions (Vladis Dronov) [2176850 2144529] - crypto: qat - relocate bufferlist logic (Vladis Dronov) [2176850 2144529] - crypto: qat - Use helper to set reqsize (Vladis Dronov) [2176850 2144529] - crypto: kpp - Add helper to set reqsize (Vladis Dronov) [2176850 2144529] - crypto: qat - fix error return code in adf_probe (Vladis Dronov) [2176850 2144529] - crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (Vladis Dronov) [2176850 2144529] - sched/core: Fix arch_scale_freq_tick() on tickless systems (Phil Auld) [2188067 2184083]

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates//kernel-4.18.0-477.13.1.el8_8.src.rpm

x86_64

bpftool-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-abi-stablelists-4.18.0-477.13.1.el8_8.noarch.rpm kernel-core-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-cross-headers-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-debug-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-debug-core-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-debug-devel-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-debug-modules-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-debug-modules-extra-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-devel-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-doc-4.18.0-477.13.1.el8_8.noarch.rpm kernel-headers-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-modules-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-modules-extra-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-tools-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-tools-libs-4.18.0-477.13.1.el8_8.x86_64.rpm perf-4.18.0-477.13.1.el8_8.x86_64.rpm python3-perf-4.18.0-477.13.1.el8_8.x86_64.rpm kernel-tools-libs-devel-4.18.0-477.13.1.el8_8.x86_64.rpm

aarch64

bpftool-4.18.0-477.13.1.el8_8.aarch64.rpm kernel-cross-headers-4.18.0-477.13.1.el8_8.aarch64.rpm kernel-headers-4.18.0-477.13.1.el8_8.aarch64.rpm kernel-tools-4.18.0-477.13.1.el8_8.aarch64.rpm kernel-tools-libs-4.18.0-477.13.1.el8_8.aarch64.rpm perf-4.18.0-477.13.1.el8_8.aarch64.rpm python3-perf-4.18.0-477.13.1.el8_8.aarch64.rpm kernel-tools-libs-devel-4.18.0-477.13.1.el8_8.aarch64.rpm

i386

Severity
Related CVEs: CVE-2023-32233

Related News

23.Tablet Connections Esm H320
2 - 3 min read
The release of Ubuntu 24.04 LTS , also known as Noble Numbat, brings various security enhancements and exciting new features . These improvements
4.Lock AbstractDigital Esm H320
2 - 3 min read
Tails 6.2 is a new Linux distribution release that expands its multilingual support and improves security features. The distribution is a
19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved