[3.10.0-1160.41.1.el7.OL7] - Update Oracle Linux certificates - Oracle Linux RHCK Module Signing Key was compiled into kernel - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 15-2.0.9.el7 - Update oracle value to match new certificate [3.10.0-1160.41.1.el7] - ixgbe: fix warning: sysfs: cannot create duplicate filename [1915449] [3.10.0-1160.40.1.el7] - redhat: ppc64: CONFIG_RTAS_FILTER [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer [1962499] [3.10.0-1160.39.1.el7] - netfilter: x_tables: fix compat match/target pad out-of-bound write [1980489] {CVE-2021-22555} - Revert be2net: disable bh with spin_lock in be_process_mcc [1971744] - futex: futex_requeue can potentially free the pi_state structure twice [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts [1921551] - scsi: lpfc: Fix crash caused by switch reboot [1897576] [3.10.0-1160.38.1.el7] - seq_file: Disallow extremely large seq buffer allocations [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params [1951810] - netfilter: x_tables: Use correct memory barriers. [1949087] {CVE-2021-29650} - netfilter: nf_nat: don"t bug when mapping already exists [1972970] - netfilter: don"t setup nat info for confirmed ct [1972970] [3.10.0-1160.37.1.el7] - bluetooth: eliminate the potential race condition when removing the HCI controller [1971457] - net: Update window_clamp if SOCK_RCVBUF is set [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched in __vunmap [1896794] - mm/vmalloc: __vmalloc_area_node: avoid 32-bit overflow [1896794]