Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2023-1987

Опубликовано: 26 апр. 2023
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2023-1987: kernel security and bug fix update (MODERATE)

[3.10.0-1160.90.1.0.1.OL7]

  • debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499}

[3.10.0-1160.90.1.OL7]

  • Update Oracle Linux certificates (Ilya Okomin)
  • Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
  • Update x509.genkey [Orabug: 24817676]
  • Conflict with shim-ia32 and shim-x64 <= 15-2.0.9
  • Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)

[3.10.0-1160.90.1]

  • NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
  • NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]

[3.10.0-1160.89.1]

  • usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}

Обновленные пакеты

Oracle Linux 7

Oracle Linux x86_64

bpftool

3.10.0-1160.90.1.0.1.el7

kernel

3.10.0-1160.90.1.0.1.el7

kernel-abi-whitelists

3.10.0-1160.90.1.0.1.el7

kernel-debug

3.10.0-1160.90.1.0.1.el7

kernel-debug-devel

3.10.0-1160.90.1.0.1.el7

kernel-devel

3.10.0-1160.90.1.0.1.el7

kernel-doc

3.10.0-1160.90.1.0.1.el7

kernel-headers

3.10.0-1160.90.1.0.1.el7

kernel-tools

3.10.0-1160.90.1.0.1.el7

kernel-tools-libs

3.10.0-1160.90.1.0.1.el7

kernel-tools-libs-devel

3.10.0-1160.90.1.0.1.el7

perf

3.10.0-1160.90.1.0.1.el7

python-perf

3.10.0-1160.90.1.0.1.el7

Связанные CVE

Связанные уязвимости

CVSS3: 6.7
ubuntu
почти 3 года назад

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.

CVSS3: 6.7
redhat
почти 3 года назад

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.

CVSS3: 6.7
nvd
почти 3 года назад

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.

CVSS3: 6.7
msrc
почти 3 года назад

Описание отсутствует

CVSS3: 6.7
debian
почти 3 года назад

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 ...