Operational System
Oracle Linux 8 Security Updates
Category: Operational System Author: César Carvalho Date: 3 years ago Comments: 0

Oracle Linux 8 Security Updates

Today’s topic is very important, we will know the various types of security updates available in Oracle Linux 8, before working on the practical part, we will know some basic definitions of what is CVE and ELSA.
CVE, short for Common Vulnerabilities and Exposures, is a list of publicly disclosed computer security flaws. When someone refers to a CVE, they mean a security flaw that’s been assigned a CVE ID number.
Security advisories issued by vendors and researchers almost always mention at least one CVE ID. CVEs help IT professionals coordinate their efforts to prioritize and address these vulnerabilities to make computer systems more secure.
CVE Details: https://linux.oracle.com/ords/f?p=130:21
                      https://www.cvedetails.com/vulnerability-list/vendor_id-93/year-2021/Oracle.html
                      https://linux.oracle.com/security/
 
ELSA, Enterprise Linux Security Advisory, is nothing more than a way to consult and get details of security holes or bugs and which packages must be updated or have been affected.
ELSA Details: https://linux.oracle.com/ords/f?p=105:21
For this example I used the outdated Oracle Linux 8.0.
 
1 - Checking for security updates available for download and installation.
    Verificando atualizações de segurança disponiveis para download e instalação.
    
[root@ol8 ~]# dnf updateinfo sec
Last metadata expiration check: 0:04:37 ago on Tue 07 Sep 2021 12:15:28 PM -03.
Updates Information Summary: available
    173 Security notice(s) <===================== We see that we have 173 security updates out of which 64 are important.
         64 Important Security notice(s) <========= Vemos que temos 173 atualizações de segurança sendo que as 64 são importantes.
         92 Moderate Security notice(s)  <========= 92 de nivel moderado.
         17 Low Security notice(s)		 17 de nivel baixo de segurança.
		
2 - Checking in detail which packages/applications have updates and should be updated. As the list of packages is very large, I am summarizing the packages listed.
    Verificando de forma detalhada quais pacotes/aplicativos possuem atualizações e devem sofrer atualizações. Como a lista é muito grande de pacotes, estou resumindo os pacotes listados.
    
[root@ol8 ~]# dnf updateinfo list sec | awk '{print $3}'

expiration
NetworkManager-1:1.22.8-5.el8_2.x86_64
NetworkManager-1:1.30.0-7.0.1.el8.x86_64
NetworkManager-libnm-1:1.22.8-5.el8_2.x86_64
NetworkManager-libnm-1:1.30.0-7.0.1.el8.x86_64
NetworkManager-team-1:1.22.8-5.el8_2.x86_64
NetworkManager-team-1:1.30.0-7.0.1.el8.x86_64
NetworkManager-tui-1:1.22.8-5.el8_2.x86_64
NetworkManager-tui-1:1.30.0-7.0.1.el8.x86_64
bash-4.4.19-14.el8.x86_64
bind-export-libs-32:9.11.13-3.el8.x86_64
bind-export-libs-32:9.11.13-5.el8_2.x86_64
bind-export-libs-32:9.11.20-5.el8.x86_64
bind-export-libs-32:9.11.20-5.el8_3.1.x86_64
bind-export-libs-32:9.11.26-4.el8_4.x86_64
bind-export-libs-32:9.11.4-17.P2.el8_0.1.x86_64
bind-export-libs-32:9.11.4-17.P2.el8_0.x86_64
bind-export-libs-32:9.11.4-26.P2.el8.x86_64
brotli-1.0.6-3.el8.x86_64
cpio-2.12-10.el8.x86_64
cryptsetup-libs-2.3.3-2.el8.x86_64
cups-libs-1:2.2.6-33.el8.x86_64
cups-libs-1:2.2.6-38.el8.x86_64
curl-7.61.1-11.el8.x86_64
curl-7.61.1-12.el8.x86_64
curl-7.61.1-14.el8.x86_64
curl-7.61.1-18.el8.x86_64
cyrus-sasl-lib-2.1.27-5.el8.x86_64
dbus-1:1.12.8-10.0.1.el8_2.x86_64
dbus-1:1.12.8-9.0.1.el8.x86_64
dbus-common-1:1.12.8-10.0.1.el8_2.noarch
dbus-common-1:1.12.8-9.0.1.el8.noarch
dbus-daemon-1:1.12.8-10.0.1.el8_2.x86_64
dbus-daemon-1:1.12.8-9.0.1.el8.x86_64
dbus-libs-1:1.12.8-10.0.1.el8_2.x86_64
dbus-libs-1:1.12.8-9.0.1.el8.x86_64
dbus-tools-1:1.12.8-10.0.1.el8_2.x86_64
dbus-tools-1:1.12.8-9.0.1.el8.x86_64
dhcp-client-12:4.3.6-34.el8.x86_64
dhcp-client-12:4.3.6-44.el8_4.1.x86_64
dhcp-common-12:4.3.6-34.el8.noarch
dhcp-common-12:4.3.6-44.el8_4.1.noarch
dhcp-libs-12:4.3.6-34.el8.x86_64
dhcp-libs-12:4.3.6-44.el8_4.1.x86_64
dnf-4.2.7-6.el8.noarch
dnf-data-4.2.7-6.el8.noarch
dnf-plugins-core-4.0.8-3.el8.noarch
e2fsprogs-1.45.4-3.el8.x86_64
e2fsprogs-libs-1.45.4-3.el8.x86_64
elfutils-default-yama-scope-0.176-5.el8.noarch
elfutils-libelf-0.176-5.el8.x86_64
elfutils-libs-0.176-5.el8.x86_64
expat-2.2.5-4.el8.x86_64
freetype-2.9.1-4.el8_3.1.x86_64
gettext-0.19.8.1-17.el8.x86_64
gettext-libs-0.19.8.1-17.el8.x86_64
glib2-2.56.4-10.el8_4.1.x86_64
glib2-2.56.4-10.el8_4.x86_64
glib2-2.56.4-7.el8.x86_64
glib2-2.56.4-8.el8.x86_64
glib2-2.56.4-9.el8.x86_64
glibc-2.28-101.0.1.el8.x86_64
glibc-2.28-127.0.1.el8.x86_64
glibc-2.28-151.0.1.el8.x86_64
glibc-2.28-72.0.1.el8.x86_64
glibc-common-2.28-101.0.1.el8.x86_64
glibc-common-2.28-127.0.1.el8.x86_64
glibc-common-2.28-151.0.1.el8.x86_64
glibc-common-2.28-72.0.1.el8.x86_64
glibc-langpack-en-2.28-101.0.1.el8.x86_64
glibc-langpack-en-2.28-127.0.1.el8.x86_64
glibc-langpack-en-2.28-151.0.1.el8.x86_64
glibc-langpack-en-2.28-72.0.1.el8.x86_64
gnupg2-2.2.20-2.el8.x86_64
gnupg2-smime-2.2.20-2.el8.x86_64
gnutls-3.6.14-7.el8_3.x86_64
gnutls-3.6.14-8.el8_3.x86_64
gnutls-3.6.8-10.el8_2.x86_64
gnutls-3.6.8-11.el8_2.x86_64
gnutls-3.6.8-8.el8.x86_64
grub2-common-1:2.02-78.0.2.el8.noarch
grub2-common-1:2.02-78.0.3.el8_1.1.noarch
grub2-common-1:2.02-82.0.2.el8_2.1.noarch
grub2-common-1:2.02-90.0.2.el8.noarch
grub2-common-1:2.02-90.0.2.el8_3.1.noarch
grub2-pc-1:2.02-78.0.2.el8.x86_64
grub2-pc-1:2.02-78.0.3.el8_1.1.x86_64
grub2-pc-1:2.02-82.0.2.el8_2.1.x86_64

3 - Details of the packages to be updated. As the list of packages is very large, I am summarizing the packages listed.
    Detalhes dos pacotes a serem atualizados. Como a lista é muito grande de pacotes, estou resumindo os pacotes listados.
    
    [root@ol8 ~]# dnf updateinfo list
Last metadata expiration check: 0:10:17 ago on Tue 07 Sep 2021 12:15:28 PM -03.
ELBA-2019-4856 bugfix         NetworkManager-1:1.20.0-3.0.1.el8.x86_64
ELBA-2019-4279 bugfix         NetworkManager-1:1.20.0-5.0.1.el8_1.x86_64
ELBA-2020-1847 bugfix         NetworkManager-1:1.22.8-4.el8.x86_64
ELSA-2020-3011 Moderate/Sec.  NetworkManager-1:1.22.8-5.el8_2.x86_64
ELBA-2020-5474 bugfix         NetworkManager-1:1.26.0-12.0.1.el8_3.x86_64
ELBA-2021-0563 bugfix         NetworkManager-1:1.26.0-13.0.1.el8_3.x86_64
ELBA-2021-1099 bugfix         NetworkManager-1:1.26.0-14.0.1.el8_3.x86_64
ELBA-2020-4499 bugfix         NetworkManager-1:1.26.0-8.0.1.el8.x86_64
ELBA-2020-4850 bugfix         NetworkManager-1:1.26.0-9.0.1.el8_3.x86_64
ELBA-2020-5940 bugfix         NetworkManager-1:1.26.0-9.0.2.el8_3.x86_64
ELBA-2021-3055 bugfix         NetworkManager-1:1.30.0-10.0.1.el8_4.x86_64
ELSA-2021-1574 Moderate/Sec.  NetworkManager-1:1.30.0-7.0.1.el8.x86_64
ELBA-2021-2576 bugfix         NetworkManager-1:1.30.0-9.0.1.el8_4.x86_64
ELBA-2019-4856 bugfix         NetworkManager-libnm-1:1.20.0-3.0.1.el8.x86_64
ELBA-2019-4279 bugfix         NetworkManager-libnm-1:1.20.0-5.0.1.el8_1.x86_64
ELBA-2020-1847 bugfix         NetworkManager-libnm-1:1.22.8-4.el8.x86_64
ELSA-2020-3011 Moderate/Sec.  NetworkManager-libnm-1:1.22.8-5.el8_2.x86_64
ELBA-2020-5474 bugfix         NetworkManager-libnm-1:1.26.0-12.0.1.el8_3.x86_64
ELBA-2021-0563 bugfix         NetworkManager-libnm-1:1.26.0-13.0.1.el8_3.x86_64
ELBA-2021-1099 bugfix         NetworkManager-libnm-1:1.26.0-14.0.1.el8_3.x86_64
ELBA-2020-4499 bugfix         NetworkManager-libnm-1:1.26.0-8.0.1.el8.x86_64
ELBA-2020-4850 bugfix         NetworkManager-libnm-1:1.26.0-9.0.1.el8_3.x86_64
ELBA-2020-5940 bugfix         NetworkManager-libnm-1:1.26.0-9.0.2.el8_3.x86_64
ELBA-2021-3055 bugfix         NetworkManager-libnm-1:1.30.0-10.0.1.el8_4.x86_64
ELSA-2021-1574 Moderate/Sec.  NetworkManager-libnm-1:1.30.0-7.0.1.el8.x86_64
ELBA-2021-2576 bugfix         NetworkManager-libnm-1:1.30.0-9.0.1.el8_4.x86_64
ELBA-2019-4856 bugfix         NetworkManager-team-1:1.20.0-3.0.1.el8.x86_64
ELBA-2019-4279 bugfix         NetworkManager-team-1:1.20.0-5.0.1.el8_1.x86_64
ELBA-2020-1847 bugfix         NetworkManager-team-1:1.22.8-4.el8.x86_64
ELSA-2020-3011 Moderate/Sec.  NetworkManager-team-1:1.22.8-5.el8_2.x86_64
ELBA-2020-5474 bugfix         NetworkManager-team-1:1.26.0-12.0.1.el8_3.x86_64
ELBA-2021-0563 bugfix         NetworkManager-team-1:1.26.0-13.0.1.el8_3.x86_64
ELBA-2021-1099 bugfix         NetworkManager-team-1:1.26.0-14.0.1.el8_3.x86_64
ELBA-2020-4499 bugfix         NetworkManager-team-1:1.26.0-8.0.1.el8.x86_64
ELBA-2020-4850 bugfix         NetworkManager-team-1:1.26.0-9.0.1.el8_3.x86_64
ELBA-2020-5940 bugfix         NetworkManager-team-1:1.26.0-9.0.2.el8_3.x86_64
ELBA-2021-3055 bugfix         NetworkManager-team-1:1.30.0-10.0.1.el8_4.x86_64
ELSA-2021-1574 Moderate/Sec.  NetworkManager-team-1:1.30.0-7.0.1.el8.x86_64
ELBA-2021-2576 bugfix         NetworkManager-team-1:1.30.0-9.0.1.el8_4.x86_64
ELBA-2019-4856 bugfix         NetworkManager-tui-1:1.20.0-3.0.1.el8.x86_64
ELBA-2019-4279 bugfix         NetworkManager-tui-1:1.20.0-5.0.1.el8_1.x86_64
ELBA-2020-1847 bugfix         NetworkManager-tui-1:1.22.8-4.el8.x86_64
ELSA-2020-3011 Moderate/Sec.  NetworkManager-tui-1:1.22.8-5.el8_2.x86_64
ELBA-2020-5474 bugfix         NetworkManager-tui-1:1.26.0-12.0.1.el8_3.x86_64
ELBA-2021-0563 bugfix         NetworkManager-tui-1:1.26.0-13.0.1.el8_3.x86_64
ELBA-2021-1099 bugfix         NetworkManager-tui-1:1.26.0-14.0.1.el8_3.x86_64
ELBA-2020-4499 bugfix         NetworkManager-tui-1:1.26.0-8.0.1.el8.x86_64
ELBA-2020-4850 bugfix         NetworkManager-tui-1:1.26.0-9.0.1.el8_3.x86_64
ELBA-2020-5940 bugfix         NetworkManager-tui-1:1.26.0-9.0.2.el8_3.x86_64
ELBA-2021-3055 bugfix         NetworkManager-tui-1:1.30.0-10.0.1.el8_4.x86_64
ELSA-2019-1959 Important/Sec. kernel-tools-4.18.0-80.7.1.el8_0.x86_64
ELSA-2019-2411 Important/Sec. kernel-tools-4.18.0-80.7.2.el8_0.x86_64
ELSA-2019-3832 Important/Sec. kernel-tools-libs-4.18.0-147.0.2.el8_1.x86_64
ELSA-2019-3871 Important/Sec. kernel-tools-libs-4.18.0-147.0.3.el8_1.x86_64
ELEA-2020-5481 enhancement    microcode_ctl-4:20200609-2.20201112.1.0.1.el8_3.x86_64
ELBA-2021-0621 bugfix         microcode_ctl-4:20200609-2.20210216.1.0.1.el8_3.x86_64
ELBA-2021-1613 bugfix         microcode_ctl-4:20210216-1

4 - Listing the classification of packages by criticality levels (Moderate,Low,Important).
    Listando a classificação dos pacotes por niveis de criticidade (Moderado,Baixo,Importante).
    
[root@ol8 ~]# dnf updateinfo list --sec-severity=Moderate
Last metadata expiration check: 0:12:53 ago on Tue 07 Sep 2021 12:15:28 PM -03.
ELSA-2020-3011 Moderate/Sec. NetworkManager-1:1.22.8-5.el8_2.x86_64
ELSA-2021-1574 Moderate/Sec. NetworkManager-1:1.30.0-7.0.1.el8.x86_64
ELSA-2020-3011 Moderate/Sec. NetworkManager-libnm-1:1.22.8-5.el8_2.x86_64
ELSA-2021-1574 Moderate/Sec. NetworkManager-libnm-1:1.30.0-7.0.1.el8.x86_64
ELSA-2020-3011 Moderate/Sec. NetworkManager-team-1:1.22.8-5.el8_2.x86_64
ELSA-2021-1574 Moderate/Sec. NetworkManager-team-1:1.30.0-7.0.1.el8.x86_64
ELSA-2020-3011 Moderate/Sec. NetworkManager-tui-1:1.22.8-5.el8_2.x86_64
ELSA-2021-1574 Moderate/Sec. NetworkManager-tui-1:1.30.0-7.0.1.el8.x86_64
ELSA-2020-1845 Moderate/Sec. bind-export-libs-32:9.11.13-3.el8.x86_64
ELSA-2020-4500 Moderate/Sec. bind-export-libs-32:9.11.20-5.el8.x86_64
ELSA-2019-3583 Moderate/Sec. yum-4.2.7-6.el8.noarch

[root@ol8 ~]# dnf updateinfo list --sec-severity=Low
Last metadata expiration check: 0:13:01 ago on Tue 07 Sep 2021 12:15:28 PM -03.
ELSA-2021-1679 Low/Sec. bash-4.4.19-14.el8.x86_64
ELSA-2019-3552 Low/Sec. bind-export-libs-32:9.11.4-26.P2.el8.x86_64
ELSA-2020-1765 Low/Sec. cups-libs-1:2.2.6-33.el8.x86_64
ELSA-2020-4469 Low/Sec. cups-libs-1:2.2.6-38.el8.x86_64
ELSA-2019-3575 Low/Sec. elfutils-default-yama-scope-0.176-5.el8.noarch
ELSA-2019-3575 Low/Sec. elfutils-libelf-0.176-5.el8.x86_64

[root@ol8 ~]# dnf updateinfo list --sec-severity=Important
Last metadata expiration check: 0:13:09 ago on Tue 07 Sep 2021 12:15:28 PM -03.
ELSA-2020-2338 Important/Sec. bind-export-libs-32:9.11.13-5.el8_2.x86_64
ELSA-2021-0670 Important/Sec. bind-export-libs-32:9.11.20-5.el8_3.1.x86_64
ELSA-2021-1989 Important/Sec. bind-export-libs-32:9.11.26-4.el8_4.x86_64
ELSA-2019-1714 Important/Sec. bind-export-libs-32:9.11.4-17.P2.el8_0.1.x86_64
ELSA-2019-1145 Important/Sec. bind-export-libs-32:9.11.4-17.P2.el8_0.x86_64
ELSA-2020-3014 Important/Sec. dbus-1:1.12.8-10.0.1.el8_2.x86_64
ELSA-2020-3014 Important/Sec. dbus-common-1:1.12.8-10.0.1.el8_2.noarch
ELSA-2020-3014 Important/Sec. dbus-daemon-1:1.12.8-10.0.1.el8_2.x86_64
ELSA-2020-3014 Important/Sec. dbus-libs-1:1.12.8-10.0.1.el8_2.x86_64
ELSA-2020-3014 Important/Sec. dbus-tools-1:1.12.8-10.0.1.el8_2.x86_64
ELSA-2021-2359 Important/Sec. dhcp-client-12:4.3.6-44.el8_4.1.x86_64
ELSA-2021-2359 Important/Sec. dhcp-common-12:4.3.6-44.el8_4.1.noarch
ELSA-2021-2359 Important/Sec. dhcp-libs-12:4.3.6-44.el8_4.1.x86_64
ELSA-2020-4952 Important/Sec. freetype-2.9.1-4.el8_3.1.x86_64
ELSA-2021-2170 Important/Sec. glib2-2.56.4-10.el8_4.x86_64
ELSA-2021-1206 Important/Sec. gnutls-3.6.14-8.el8_3.x86_64
ELSA-2020-2637 Important/Sec. gnutls-3.6.8-11.el8_2.x86_64
ELSA-2019-4869 Important/Sec. grub2-common-1:2.02-78.0.2.el8.noarch
ELSA-2020-5786 Important/Sec. grub2-common-1:2.02-82.0.2.el8_2.1.noarch
ELSA-2021-9077 Important/Sec. grub2-common-1:2.02-90.0.2.el8.noarch
ELSA-2019-4869 Important/Sec. grub2-pc-1:2.02-78.0.2.el8.x86_64
ELSA-2020-5786 Important/Sec. grub2-pc-1:2.02-82.0.2.el8_2.1.x86_64
ELSA-2021-9077 Important/Sec. grub2-pc-1:2.02-90.0.2.el8.x86_64

6 - To list Common Security Vulnerabilities and Exposures (CVE).
    Para listar Vulnerabilidades e Exposições Comuns (CVE) de segurança.
    
[root@ol8 ~]# dnf updateinfo list cves
# Checking information from a specific CVE.
# Verificando informações de uma CVE especifica.
[root@ol8 ~]# dnf updateinfo list --cve CVE-2020-4000

# Updating a specific CVE.
# Atualizando uma CVE especifica.
[root@ol8 ~]# dnf update --cve CVE-2020-4000

# Fixing or applying ELSA security updates.
# Corrigindo ou aplicando atualizações de segurança ELSA.
[root@ol8 ~]# dnf update --advisory ELSA-2020-4010

7 - To apply all security updates.
    Para aplicar todas as atualizações de segurança.

[root@ol8 ~]# dnf --security update -y
Last metadata expiration check: 0:06:24 ago on Tue 07 Sep 2021 12:29:24 PM -03.
Dependencies resolved.
====================================================================================================================================================================
 Package                                      Arch                    Version                                              Repository                          Size
====================================================================================================================================================================
Installing:
 kernel                                       x86_64                  4.18.0-305.12.1.el8_4                                ol8_baseos_latest                  5.9 M
 kernel-core                                  x86_64                  4.18.0-305.12.1.el8_4                                ol8_baseos_latest                   36 M
 kernel-modules                               x86_64                  4.18.0-305.12.1.el8_4                                ol8_baseos_latest                   28 M
Upgrading:
 libX11                                       x86_64                  1.6.8-4.el8                                          ol8_appstream                      611 k
 libX11-common                                noarch                  1.6.8-4.el8                                          ol8_appstream                      158 k
 libX11-xcb                                   x86_64                  1.6.8-4.el8                                          ol8_appstream                       14 k
 libdrm                                       x86_64                  2.4.103-1.el8                                        ol8_appstream                      165 k
 libglvnd                                     x86_64                  1:1.3.2-1.el8                                        ol8_appstream                      127 k
 libglvnd-glx                                 x86_64                  1:1.3.2-1.el8                                        ol8_appstream                      137 k
 libjpeg-turbo                                x86_64                  1.5.3-10.el8                                         ol8_appstream                      155 k
 libmspack                                    x86_64                  0.7-0.3.alpha.el8.4                                  ol8_appstream                       71 k
 libreswan                                    x86_64                  4.3-3.0.1.el8                                        ol8_appstream                      1.3 M
 mesa-libGL                                   x86_64                  20.3.3-2.el8                                         ol8_appstream                      188 k
 mesa-libglapi                                x86_64                  20.3.3-2.el8                                         ol8_appstream                       65 k
 nspr                                         x86_64                  4.25.0-2.el8_2                                       ol8_appstream                      142 k
 nss                                          x86_64                  3.53.1-17.el8_3                                      ol8_appstream                      723 k
 nss-softokn                                  x86_64                  3.53.1-17.el8_3                                      ol8_appstream                      484 k
 nss-softokn-freebl                           x86_64                  3.53.1-17.el8_3                                      ol8_appstream                      376 k
 nss-sysinit                                  x86_64                  3.53.1-17.el8_3                                      ol8_appstream                       72 k

Complete!

 
8 - Applying security updates by category.
    Aplicando atualizações de segurança por categoria.
 
 # Updates each package to the latest available version that provides a bug fix, enhancement, or fix for a security (security) issue.
 # Atualiza cada pacote para a versão mais recente disponível que fornece uma correção de bug, aprimoramento ou uma correção para um problema de segurança (segurança).
 
 [root@ol8 ~]# dnf --security upgrade-minimal
 ====================================================================================================================================================================
 Package                                      Arch                    Version                                              Repository                          Size
====================================================================================================================================================================
Upgrading:
 libX11                                       x86_64                  1.6.8-4.el8                                          ol8_appstream                      611 k
 libX11-common                                noarch                  1.6.8-4.el8                                          ol8_appstream                      158 k
 libX11-xcb                                   x86_64                  1.6.8-4.el8                                          ol8_appstream                       14 k
 libdrm                                       x86_64                  2.4.103-1.el8                                        ol8_appstream                      165 k
 libglvnd                                     x86_64                  1:1.3.2-1.el8                                        ol8_appstream                      127 k
 libglvnd-glx                                 x86_64                  1:1.3.2-1.el8                                        ol8_appstream                      137 k
 libjpeg-turbo                                x86_64                  1.5.3-10.el8                                         ol8_appstream                      155 k
 libmspack                                    x86_64                  0.7-0.3.alpha.el8.4                                  ol8_appstream                       71 k
 libreswan                                    x86_64                  3.29-7.0.1.el8_2                                     ol8_appstream                      1.3 M
 mesa-libGL                                   x86_64                  20.3.3-2.el8                                         ol8_appstream                      188 k
 mesa-libglapi                                x86_64                  20.3.3-2.el8                                         ol8_appstream                       65 k
 nspr                                         x86_64                  4.25.0-2.el8_2                                       ol8_appstream                      142 k
 nss                                          x86_64                  3.53.1-17.el8_3                                      ol8_appstream                      723 k
 nss-softokn                                  x86_64                  3.53.1-11.el8_2                                      ol8_appstream                      484 k
 nss-softokn-freebl                           x86_64                  3.53.1-11.el8_2                                      ol8_appstream                      289 k
 nss-sysinit                                  x86_64                  3.53.1-17.el8_3                                      ol8_appstream                       72 k
 nss-tools                                    x86_64                  3.53.1-17.el8_3                                      ol8_appstream                      560 k
 nss-util                                     x86_64                  3.53.1-17.el8_3                                      ol8_appstream                      136 k
 plymouth                                     x86_64                  0.9.3-15.0.1.el8                                     ol8_appstream                      114 k
 plymouth-core-libs                           x86_64                  0.9.3-15.0.1.el8                                     ol8_appstream                      114 k
 plymouth-scripts                             x86_64                  0.9.3-15.0.1.el8                                     ol8_appstream                       42 k
 python3-unbound                              x86_64                  1.7.3-15.el8                                         ol8_appstream                      119 k
 rsyslog                                      x86_64                  8.1911.0-3.el8                                       ol8_appstream                      730 k
Transaction Summary
====================================================================================================================================================================
Install   26 Packages
Upgrade  167 Packages
Skip      69 Packages

Total download size: 442 M
Is this ok [y/N]: y <========================= YES
Downloading Packages:
(1/193): kernel-4.18.0-240.22.1.el8_3.x86_64.rpm                                                                                    4.8 MB/s | 4.4 MB     00:00
(2/193): kernel-core-4.18.0-240.22.1.el8_3.x86_64.rpm                                                                               7.9 MB/s |  30 MB     00:03
(3/193): grub2-tools-efi-2.02-90.0.2.el8_3.1.x86_64.rpm                                                                              98 kB/s | 472 kB     00:04
(4/193): kernel-core-4.18.0-305.12.1.el8_4.x86_64.rpm                                                                               7.7 MB/s |  36 MB     00:04
(5/193): libssh-config-0.9.4-2.el8.noarch.rpm                                                                                       103 kB/s |  18 kB     00:00
(6/193): libzstd-1.4.4-1.0.1.el8.x86_64.rpm                                                                                         3.3 MB/s | 266 kB     00:00
(7/193): mozjs60-60.9.0-4.0.1.el8.x86_64.rpm                                                                                        7.1 MB/s | 6.6 MB     00:00
(8/193): perl-Encode-2.97-3.el8.x86_64.rpm                                                                                          7.2 MB/s | 1.5 MB     00:00
(9/193): perl-File-Temp-0.230.600-1.el8.noarch.rpm                                                                                  1.4 MB/s |  63 kB     00:00
(10/193): perl-Getopt-Long-2.50-4.el8.noarch.rpm                                                                                    1.4 MB/s |  63 kB     00:00
(11/193): perl-HTTP-Tiny-0.074-1.el8.noarch.rpm                                                                                     741 kB/s |  58 kB     00:00

Complete!
 
 #====================================================================================================================================================================
 
 # Security updates and bug fixes only pertaining to the kernel.
 #Atualizações de segurança e correções bugs apenas referente ao kernel.
 
[root@ol8 ~]# dnf --security upgrade-minimal kernel*
Last metadata expiration check: 0:49:03 ago on Tue 07 Sep 2021 12:15:28 PM -03.
Dependencies resolved.
====================================================================================================================================================================
 Package                                 Arch                      Version                                               Repository                            Size
====================================================================================================================================================================
Installing:
 kernel                                  x86_64                    4.18.0-240.22.1.el8_3                                 ol8_baseos_latest                    4.4 M
 kernel-core                             x86_64                    4.18.0-305.12.1.el8_4                                 ol8_baseos_latest                     36 M
 kernel-modules                          x86_64                    4.18.0-305.12.1.el8_4                                 ol8_baseos_latest                     28 M
Upgrading:
 dracut                                  x86_64                    049-135.git20210121.0.2.el8                           ol8_baseos_latest                    374 k
 dracut-config-rescue                    x86_64                    049-135.git20210121.0.2.el8                           ol8_baseos_latest                     60 k
 dracut-network                          x86_64                    049-135.git20210121.0.2.el8                           ol8_baseos_latest                    108 k
 dracut-squash                           x86_64                    049-135.git20210121.0.2.el8                           ol8_baseos_latest                     60 k
 iptables                                x86_64                    1.8.4-17.0.1.el8                                      ol8_baseos_latest                    584 k
 iptables-ebtables                       x86_64                    1.8.4-17.0.1.el8                                      ol8_baseos_latest                     72 k
 iptables-libs                           x86_64                    1.8.4-17.0.1.el8                                      ol8_baseos_latest                    107 k
 kernel-tools                            x86_64                    4.18.0-305.12.1.el8_4                                 ol8_baseos_latest                    6.1 M
 kernel-tools-libs                       x86_64                    4.18.0-305.12.1.el8_4                                 ol8_baseos_latest                    5.9 M
 kexec-tools                             x86_64                    2.0.20-46.0.1.el8_4.2                                 ol8_baseos_latest                    510 k
 libnftnl                                x86_64                    1.1.5-4.el8                                           ol8_baseos_latest                     83 k
 linux-firmware                          noarch                    999:20210617-999.8.git0f66b74b.el8                    ol8_baseos_latest                    178 M
 systemd                                 x86_64                    239-45.0.2.el8_4.3                                    ol8_baseos_latest                    3.6 M
 systemd-libs                            x86_64                    239-45.0.2.el8_4.3                                    ol8_baseos_latest                    1.1 M
 systemd-pam                             x86_64                    239-45.0.2.el8_4.3                                    ol8_baseos_latest                    470 k
 systemd-udev                            x86_64                    239-45.0.2.el8_4.3                                    ol8_baseos_latest                    1.4 M
Installing dependencies:
 kernel-core                             x86_64                    4.18.0-240.22.1.el8_3                                 ol8_baseos_latest                     30 M
 kernel-modules                          x86_64                    4.18.0-240.22.1.el8_3                                 ol8_baseos_latest                     26 M

Transaction Summary
====================================================================================================================================================================
Install   5 Packages
Upgrade  16 Packages

Total download size: 322 M
Is this ok [y/N]: y <========================= YES
Downloading Packages:
(1/21): kernel-core-4.18.0-305.12.1.el8_4.x86_64.rpm                                                                                9.5 MB/s |  36 MB     00:03
(2/21): kernel-4.18.0-240.22.1.el8_3.x86_64.rpm                                                                                     610 kB/s | 4.4 MB     00:07
(3/21): kernel-modules-4.18.0-305.12.1.el8_4.x86_64.rpm                                                                             9.0 MB/s |  28 MB     00:03
(4/21): dracut-049-135.git20210121.0.2.el8.x86_64.rpm                                                                               5.0 MB/s | 374 kB     00:00
(5/21): dracut-config-rescue-049-135.git20210121.0.2.el8.x86_64.rpm                                                                 1.6 MB/s |  60 kB     00:00
(6/21): dracut-network-049-135.git20210121.0.2.el8.x86_64.rpm                                                                       1.1 MB/s | 108 kB     00:00
(7/21): dracut-squash-049-135.git20210121.0.2.el8.x86_64.rpm                                                                        1.3 MB/s |  60 kB     00:00
(8/21): iptables-1.8.4-17.0.1.el8.x86_64.rpm                                                                                        6.9 MB/s | 584 kB     00:00
(9/21): iptables-ebtables-1.8.4-17.0.1.el8.x86_64.rpm                                                                               3.8 MB/s |  72 kB     00:00
(10/21): iptables-libs-1.8.4-17.0.1.el8.x86_64.rpm                                                                                  3.3 MB/s | 107 kB     00:00
(11/21): kernel-tools-4.18.0-305.12.1.el8_4.x86_64.rpm                                                                              4.8 MB/s | 6.1 MB     00:01
(12/21): kernel-tools-libs-4.18.0-305.12.1.el8_4.x86_64.rpm                                                                         5.6 MB/s | 5.9 MB     00:01
(13/21): kernel-core-4.18.0-240.22.1.el8_3.x86_64.rpm                                                                               2.3 MB/s |  30 MB     00:13
(14/21): kexec-tools-2.0.20-46.0.1.el8_4.2.x86_64.rpm                                                                               5.2 MB/s | 510 kB     00:00
(15/21): kernel-modules-4.18.0-240.22.1.el8_3.x86_64.rpm                                                                            2.2 MB/s |  26 MB     00:11
(16/21): systemd-239-45.0.2.el8_4.3.x86_64.rpm                                                                                      6.7 MB/s | 3.6 MB     00:00
(17/21): systemd-libs-239-45.0.2.el8_4.3.x86_64.rpm                                                                                 8.6 MB/s | 1.1 MB     00:00
(18/21): systemd-pam-239-45.0.2.el8_4.3.x86_64.rpm                                                                                  5.3 MB/s | 470 kB     00:00
(19/21): systemd-udev-239-45.0.2.el8_4.3.x86_64.rpm                                                                                 8.1 MB/s | 1.4 MB     00:00
(20/21): libnftnl-1.1.5-4.el8.x86_64.rpm                                                                                             27 kB/s |  83 kB     00:03
(21/21): linux-firmware-20210617-999.8.git0f66b74b.el8.noarch.rpm                                                                    14 MB/s | 178 MB     00:12
--------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                12 MB/s | 322 MB     00:26
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                                            1/1
  Running scriptlet: linux-firmware-999:20210617-999.8.git0f66b74b.el8.noarch                                                                                   1/1
  Upgrading        : linux-firmware-999:20210617-999.8.git0f66b74b.el8.noarch                                                                                  1/37
  Upgrading        : iptables-libs-1.8.4-17.0.1.el8.x86_64                                                                                                     2/37
  Upgrading        : systemd-libs-239-45.0.2.el8_4.3.x86_64                                                                                                    3/37
  Running scriptlet: systemd-libs-239-45.0.2.el8_4.3.x86_64                                                                                                    3/37
  Upgrading        : systemd-pam-239-45.0.2.el8_4.3.x86_64                                                                                                     4/37
  Running scriptlet: systemd-239-45.0.2.el8_4.3.x86_64                                                                                                         5/37
  Upgrading        : systemd-239-45.0.2.el8_4.3.x86_64                                                                                                         5/37
  Running scriptlet: systemd-239-45.0.2.el8_4.3.x86_64                                                                                                         5/37
  Upgrading        : systemd-udev-239-45.0.2.el8_4.3.x86_64                                                                                                    6/37
  Running scriptlet: systemd-udev-239-45.0.2.el8_4.3.x86_64                                                                                                    6/37
  Upgrading        : dracut-049-135.git20210121.0.2.el8.x86_64                                                                                                 7/37
  Installing       : kernel-core-4.18.0-240.22.1.el8_3.x86_64                                                                                                  8/37
  Running scriptlet: kernel-core-4.18.0-240.22.1.el8_3.x86_64                                                                                                  8/37
  Installing       : kernel-modules-4.18.0-240.22.1.el8_3.x86_64                                                                                               9/37
  Running scriptlet: kernel-modules-4.18.0-240.22.1.el8_3.x86_64                                                                                               9/37
  Installing       : kernel-core-4.18.0-305.12.1.el8_4.x86_64                                                                                                 10/37
  Running scriptlet: kernel-core-4.18.0-305.12.1.el8_4.x86_64                                                                                                 10/37
  Upgrading        : dracut-network-049-135.git20210121.0.2.el8.x86_64                                                                                        11/37
  Running scriptlet: dracut-network-049-135.git20210121.0.2.el8.x86_64                                                                                        11/37
  Upgrading        : dracut-squash-049-135.git20210121.0.2.el8.x86_64                                                                                         12/37
  Upgrading        : libnftnl-1.1.5-4.el8.x86_64                                                                                                              13/37
  Running scriptlet: libnftnl-1.1.5-4.el8.x86_64                                                                                                              13/37
  Running scriptlet: iptables-1.8.4-17.0.1.el8.x86_64                                                                                                         14/37
  Upgrading        : iptables-1.8.4-17.0.1.el8.x86_64                                                                                                         14/37
  Running scriptlet: iptables-1.8.4-17.0.1.el8.x86_64                                                                                                         14/37
  Upgrading        : kernel-tools-libs-4.18.0-305.12.1.el8_4.x86_64                                                                                           15/37
  Running scriptlet: kernel-tools-libs-4.18.0-305.12.1.el8_4.x86_64                                                                                           15/37

Upgraded:
  dracut-049-135.git20210121.0.2.el8.x86_64        dracut-config-rescue-049-135.git20210121.0.2.el8.x86_64 dracut-network-049-135.git20210121.0.2.el8.x86_64
  dracut-squash-049-135.git20210121.0.2.el8.x86_64 iptables-1.8.4-17.0.1.el8.x86_64                        iptables-ebtables-1.8.4-17.0.1.el8.x86_64
  iptables-libs-1.8.4-17.0.1.el8.x86_64            kernel-tools-4.18.0-305.12.1.el8_4.x86_64               kernel-tools-libs-4.18.0-305.12.1.el8_4.x86_64
  kexec-tools-2.0.20-46.0.1.el8_4.2.x86_64         libnftnl-1.1.5-4.el8.x86_64                             linux-firmware-999:20210617-999.8.git0f66b74b.el8.noarch
  systemd-239-45.0.2.el8_4.3.x86_64                systemd-libs-239-45.0.2.el8_4.3.x86_64                  systemd-pam-239-45.0.2.el8_4.3.x86_64
  systemd-udev-239-45.0.2.el8_4.3.x86_64

Installed:
  kernel-4.18.0-240.22.1.el8_3.x86_64                 kernel-core-4.18.0-305.12.1.el8_4.x86_64               kernel-modules-4.18.0-305.12.1.el8_4.x86_64
  kernel-core-4.18.0-240.22.1.el8_3.x86_64            kernel-modules-4.18.0-240.22.1.el8_3.x86_64

Complete!

# Checking if they still have kernel updates or bugs to apply.
# Verificando se ainda possuem atualizações de kernel ou bugs para serem aplicados.

[root@ol8 ~]# dnf --security upgrade-minimal kernel*
Last metadata expiration check: 0:52:36 ago on Tue 07 Sep 2021 12:15:28 PM -03.
No security updates needed for "kernel*", but 1 update available
Dependencies resolved.
Nothing to do.
Complete!

9 - Checking if we have security updates pending to be applied.
    Verificando se temos atualizações de segurança pendentes para serem aplicadas.
    
[root@ol8 ~]# dnf updateinfo sec
Last metadata expiration check: 0:12:03 ago on Tue 07 Sep 2021 01:25:53 PM -03.
[root@ol8 ~]#

 
 
   
Search for CVE details: https://linux.oracle.com/ords/f?p=130:21
Search for ELSA details: https://linux.oracle.com/ords/f?p=105:21