Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2021-4404

Опубликовано: 16 нояб. 2021
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2021-4404: kexec-tools security, bug fix, and enhancement update (LOW)

[2.0.20-57.0.3]

  • Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]

[2.0.20-57.0.2]

  • Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]

[2.0.20-57.0.1]

  • makedumpfile: Add support for newer kernels up to v5.12 [Orabug: 33250117]

[2.0.20-57]

  • kdumpctl: enable secure boot on ppc64le LPARs

[2.0.20-56]

  • kdumpctl: fix a typo

[2.0.20-55]

  • kdump/ppc64: migration action registration clean up

[2.0.20-54]

  • kdump/ppc64: rebuild initramfs image after migration
  • Check the existence of /sys/bus/ccwgroup/devices/*/online beforehand
  • kdump.sysconfig.s390: Remove 'prot_virt' from kdump kernel cmdline

[2.0.20-53]

  • check for invalid physical address of /proc/kcore when making ELF dumpfile
  • check for invalid physical address of /proc/kcore when finding max_paddr
  • fix format issue in find_online_znet_device
  • check the existence of /sys/bus/ccwgroup/devices before trying to find online network device
  • kdump-lib.sh: fix a warning in prepare_kdump_bootinfo()

[2.0.20-52]

  • Write to /var/lib/kdump if not writable
  • Iterate /sys/bus/ccwgroup/devices to tell if we should set up rd.znet
  • mkdumprd: display the absolute path of dump location in the check_user_configured_target()

[2.0.20-51]

  • Stop reloading kdump service on CPU hotplug event for FADump
  • fadump: improve fadump-howto.txt about remote dump target setup

[2.0.20-50]

  • rd.route should use the name from kdump_setup_ifname
  • get kdump ifname once in kdump_install_netdev

[2.0.20-49]

  • kdump-lib.sh: fix the case if no enough total RAM for kdump in get_recommend_size()

[2.0.20-48]

  • kdumpctl: Add kdumpctl estimate
  • mkdumprd: make use of the new get_luks_crypt_dev helper
  • kdump-lib.sh: introduce a helper to get all crypt dev used by kdump
  • kdump-lib.sh: introduce a helper to get underlying crypt device
  • RHEL-only: keep total memory size coherent to RHEL-only kernel patch
  • Show write byte size in report messages
  • Add shorthand --show-stats option to show report stats
  • Add --dry-run option to prevent writing the dumpfile
  • kdump-lib.sh: introduce functions to return recommened mem size

[2.0.20-47]

  • Implement IP netmask calculation to replace 'ipcalc -m'
  • kdumpctl: fix check_config error when kdump.conf is empty
  • Fix incorrect vmcore permissions when dumped through ssh
  • Fix incorrect permissions on kdump dmesg file

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

kexec-tools

2.0.20-57.0.3.el8

Oracle Linux x86_64

kexec-tools

2.0.20-57.0.3.el8

Связанные CVE

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 4 года назад

A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.

CVSS3: 4.7
redhat
почти 5 лет назад

A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.

CVSS3: 5.5
nvd
почти 4 года назад

A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.

CVSS3: 5.5
debian
почти 4 года назад

A flaw was found in the permissions of a log file created by kexec-too ...

rocky
около 4 лет назад

Low: kexec-tools security, bug fix, and enhancement update