Summary
[4.18.0-240.1.1_3.OL8]
- Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.3.el7
[4.18.0-240.1.1_3]
- [net] Bluetooth: fix kernel oops in store_pending_adv_report (Gopal Tiwari) [1888454 1888455] {CVE-2020-24490}
- [net] Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888257 1888258] {CVE-2020-12351}
- [net] Bluetooth: A2MP: Fix not initializing all members (Gopal Tiwari) [1888806 1888807] {CVE-2020-12352}
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-abi-whitelists | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-core | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-cross-headers | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-debug | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-debug-core | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-debug-devel | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-debug-modules | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-debug-modules-extra | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-devel | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-doc | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-headers | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-modules | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-modules-extra | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-tools | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-tools-libs | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | kernel-tools-libs-devel | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | perf | 0:4.18.0-240.1.1.el8_3 |
| Oracle Linux · 8 | python3-perf | 0:4.18.0-240.1.1.el8_3 |
Vulnerabilities 3
-
High 7.5
A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled…
-
Medium 5.3
A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation h…
-
Unscored —CVE-2020-24490 Public exploit
Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adj…