Oracle Linux 6233 Published by

The following updates have been released for Oracle Linux:

ELBA-2024-4764 Oracle Linux 9 cloud-init bug fix and enhancement update
ELBA-2024-4753 Oracle Linux 9 nginx:1.22 module bug fix and enhancement update
ELEA-2024-4763 Oracle Linux 9 nodejs:20 module bug fix and enhancement update
ELSA-2024-4861 Moderate: Oracle Linux 9 squid security update
ELBA-2024-4772 Oracle Linux 9 systemd bug fix update
ELBA-2024-4750 Oracle Linux 9 nmstate bug fix update




ELBA-2024-4764 Oracle Linux 9 cloud-init bug fix and enhancement update


Oracle Linux Bug Fix Advisory ELBA-2024-4764

http://linux.oracle.com/errata/ELBA-2024-4764.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
cloud-init-23.4-7.0.1.el9_4.5.noarch.rpm

aarch64:
cloud-init-23.4-7.0.1.el9_4.5.noarch.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//cloud-init-23.4-7.0.1.el9_4.5.src.rpm

Description of changes:

[23.4-7.0.1.el9_4.5]
- NetworkManagerActivator brings up interface failed when using sysconfig renderer [RHEL-18981]
- Fix Oracle Datasource network and getdata methods for OCI OL [Orabug: 35950168]
- Increase retry value and add timeout for OCI [Orabug: 35329883]
- Fix log file permission [Orabug: 35302969]
- Update detection logic for OL distros in config template [Orabug: 34845400]
- Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938]
- Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938]
- Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672]
- limit permissions [Orabug: 31352433]
- Changes to ignore all enslaved interfaces [Orabug: 30092148]
- Make Oracle datasource detect dracut based config files [Orabug: 29956753]
- add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch:
1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
Resolves: Oracle-Bug:41660 (Bugzilla)
- added OL to list of known distros

[23.4.0.2]
- Apply OpenELA fixes

[23.4-7.el9_4.5]
- ci-feat-sysconfig-Add-DNS-from-interface-config-to-reso.patch [RHEL-46012]
- Resolves: RHEL-46012
([RHEL-9] cloud-init fails to configure DNS search domains [rhel-9.4.z])

[23.4-7.el9_4.4]
- ci-fix-cloudstack-Use-parsed-lease-file-for-virtual-rou.patch [RHEL-40419]
- Resolves: RHEL-40419
([Cloud-init] CloudstackDataSource cannot work with NetworkManager [rhel-9.4.z])



ELBA-2024-4753 Oracle Linux 9 nginx:1.22 module bug fix and enhancement update


Oracle Linux Bug Fix Advisory ELBA-2024-4753

http://linux.oracle.com/errata/ELBA-2024-4753.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
nginx-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.x86_64.rpm
nginx-all-modules-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.noarch.rpm
nginx-core-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.x86_64.rpm
nginx-filesystem-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.noarch.rpm
nginx-mod-devel-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.x86_64.rpm
nginx-mod-http-image-filter-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.x86_64.rpm
nginx-mod-http-perl-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.x86_64.rpm
nginx-mod-http-xslt-filter-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.x86_64.rpm
nginx-mod-mail-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.x86_64.rpm
nginx-mod-stream-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.x86_64.rpm

aarch64:
nginx-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.aarch64.rpm
nginx-all-modules-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.noarch.rpm
nginx-core-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.aarch64.rpm
nginx-filesystem-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.noarch.rpm
nginx-mod-devel-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.aarch64.rpm
nginx-mod-http-image-filter-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.aarch64.rpm
nginx-mod-http-perl-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.aarch64.rpm
nginx-mod-http-xslt-filter-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.aarch64.rpm
nginx-mod-mail-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.aarch64.rpm
nginx-mod-stream-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//nginx-1.22.1-5.0.1.module+el9.4.0+90372+ca93bba3.1.src.rpm

Description of changes:

[1.22.1-5.0.1.1]
- Reference oracle-indexhtml within Requires [Orabug: 33802044]
- Remove Red Hat references [Orabug: 29498217]

[1:1.22.1-5.1]
- Resolves: ELBA-2024-4753 - Nginx seg faults when proxy_ssl_certificate is set



ELEA-2024-4763 Oracle Linux 9 nodejs:20 module bug fix and enhancement update


Oracle Linux Enhancement Advisory ELEA-2024-4763

http://linux.oracle.com/errata/ELEA-2024-4763.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs-20.14.0-1.module+el9.4.0+90370+db42a689.x86_64.rpm
nodejs-devel-20.14.0-1.module+el9.4.0+90370+db42a689.x86_64.rpm
nodejs-docs-20.14.0-1.module+el9.4.0+90370+db42a689.noarch.rpm
nodejs-full-i18n-20.14.0-1.module+el9.4.0+90370+db42a689.x86_64.rpm
nodejs-nodemon-3.0.1-1.module+el9.3.0+90066+12d4a8d7.noarch.rpm
nodejs-packaging-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm
nodejs-packaging-bundler-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm
npm-10.7.0-1.20.14.0.1.module+el9.4.0+90370+db42a689.x86_64.rpm

aarch64:
nodejs-20.14.0-1.module+el9.4.0+90370+db42a689.aarch64.rpm
nodejs-devel-20.14.0-1.module+el9.4.0+90370+db42a689.aarch64.rpm
nodejs-docs-20.14.0-1.module+el9.4.0+90370+db42a689.noarch.rpm
nodejs-full-i18n-20.14.0-1.module+el9.4.0+90370+db42a689.aarch64.rpm
nodejs-nodemon-3.0.1-1.module+el9.3.0+90066+12d4a8d7.noarch.rpm
nodejs-packaging-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm
nodejs-packaging-bundler-2021.06-4.module+el9.3.0+90066+12d4a8d7.noarch.rpm
npm-10.7.0-1.20.14.0.1.module+el9.4.0+90370+db42a689.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//nodejs-20.14.0-1.module+el9.4.0+90370+db42a689.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates//nodejs-nodemon-3.0.1-1.module+el9.3.0+90066+12d4a8d7.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates//nodejs-packaging-2021.06-4.module+el9.3.0+90066+12d4a8d7.src.rpm

Description of changes:

nodejs
[1:20.14.0-1]
- Update to version 20.14.0

nodejs-nodemon
nodejs-packaging



ELSA-2024-4861 Moderate: Oracle Linux 9 squid security update


Oracle Linux Security Advisory ELSA-2024-4861

http://linux.oracle.com/errata/ELSA-2024-4861.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
squid-5.5-13.el9_4.x86_64.rpm

aarch64:
squid-5.5-13.el9_4.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//squid-5.5-13.el9_4.src.rpm

Related CVEs:

CVE-2024-23638
CVE-2024-37894

Description of changes:

[7:5.5-13]
- Resolves: RHEL-45056 - squid: Out-of-bounds write error may lead to Denial of
Service (CVE-2024-37894)
- Resolves: RHEL-45643 - squid: vulnerable to a Denial of Service attack against
Cache Manager error responses (CVE-2024-23638)



ELBA-2024-4772 Oracle Linux 9 systemd bug fix update


Oracle Linux Bug Fix Advisory ELBA-2024-4772

http://linux.oracle.com/errata/ELBA-2024-4772.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
rhel-net-naming-sysattrs-252-32.0.2.el9_4.6.noarch.rpm
systemd-252-32.0.2.el9_4.6.i686.rpm
systemd-252-32.0.2.el9_4.6.x86_64.rpm
systemd-container-252-32.0.2.el9_4.6.i686.rpm
systemd-container-252-32.0.2.el9_4.6.x86_64.rpm
systemd-devel-252-32.0.2.el9_4.6.i686.rpm
systemd-devel-252-32.0.2.el9_4.6.x86_64.rpm
systemd-journal-remote-252-32.0.2.el9_4.6.x86_64.rpm
systemd-libs-252-32.0.2.el9_4.6.i686.rpm
systemd-libs-252-32.0.2.el9_4.6.x86_64.rpm
systemd-oomd-252-32.0.2.el9_4.6.x86_64.rpm
systemd-pam-252-32.0.2.el9_4.6.x86_64.rpm
systemd-resolved-252-32.0.2.el9_4.6.x86_64.rpm
systemd-rpm-macros-252-32.0.2.el9_4.6.noarch.rpm
systemd-udev-252-32.0.2.el9_4.6.x86_64.rpm
systemd-boot-unsigned-252-32.0.2.el9_4.6.x86_64.rpm

aarch64:
rhel-net-naming-sysattrs-252-32.0.2.el9_4.6.noarch.rpm
systemd-252-32.0.2.el9_4.6.aarch64.rpm
systemd-container-252-32.0.2.el9_4.6.aarch64.rpm
systemd-devel-252-32.0.2.el9_4.6.aarch64.rpm
systemd-journal-remote-252-32.0.2.el9_4.6.aarch64.rpm
systemd-libs-252-32.0.2.el9_4.6.aarch64.rpm
systemd-oomd-252-32.0.2.el9_4.6.aarch64.rpm
systemd-pam-252-32.0.2.el9_4.6.aarch64.rpm
systemd-resolved-252-32.0.2.el9_4.6.aarch64.rpm
systemd-rpm-macros-252-32.0.2.el9_4.6.noarch.rpm
systemd-udev-252-32.0.2.el9_4.6.aarch64.rpm
systemd-boot-unsigned-252-32.0.2.el9_4.6.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//systemd-252-32.0.2.el9_4.6.src.rpm

Description of changes:

[252-32.0.2.6]
- 1A) Fix local-fs and remote-fs targets during system boot (replaces old Orabug: 25897792) [Orabug: 36269319]
- 1B) Add "systemd-fstab-generator-reload-targets.service" file [Orabug: 36269319]
- 1C) Add required rpms for correct kickstart/systemd functionality within systemd.spec [Orabug: 36269319]
- 1D) Important: Review 1001-systemd-fstab-generator-reload-targets.patch for important build details/steps [Orabug: 36269319]
- Due to a new [Orabug: 36564551] filed on April 29 2024, reverting from back to
- previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved.
- Re-Added 1001-Fix-missing-netdev-for-iscsi-entry-in-fstab.patch [Orabug: 25897792]
- Removed the following, associated with [Orabug: 36269319]:
- 1A) Remove 1001-systemd-fstab-generator-reload-targets.patch
- 1B) Remove Fix local-fs and remote-fs targets during system boot [Orabug: 36269319]
- 1C) Remove "systemd-fstab-generator-reload-targets.service" file [Orabug: 36269319]
- 1D) Remove required rpms for correct kickstart/systemd functionality within systemd.spec [Orabug: 36269319]
- 1E) Remove Important: Review 1001-systemd-fstab-generator-reload-targets.patch for important build details/steps [Orabug: 36269319]
- Backport upstream pstore dmesg fix [Orabug: 34868110]
- Remove upstream references [Orabug: 33995357]
- Disable unprivileged BPF by default [Orabug: 32870980]
- udev rules: fix memory hot add and remove [Orabug: 31310273]
- set "RemoveIPC=no" in logind.conf as default for OL7.2 [Orabug: 22224874]
- allow dm remove ioctl to co-operate with UEK3 [Orabug: 18467469]
- shutdown: get only active md arrays. [Orabug: 34467234]
- Wait for an extra configurable time before udevd kills a worker [Orabug: 36017407]
- Removed unneeded patches from the systemd.spec
- 1001-Fix-missing-netdev-for-iscsi-entry-in-fstab.patch [Orabug: 25897792]
- 1004-orabug34272490-0001-core-device-ignore-DEVICE_FOUND_UDEV-bit-on-switchin.patch [Orabug: 34272490]
- 1005-orabug34272490-0002-core-device-drop-unnecessary-condition.patch [Orabug: 34272490]
- 1007-orabug34868110-pstore-fixes-for-dmesg.txt-reconstruction.patch [Orabug: 34868110]



ELBA-2024-4750 Oracle Linux 9 nmstate bug fix update


Oracle Linux Bug Fix Advisory ELBA-2024-4750

http://linux.oracle.com/errata/ELBA-2024-4750.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
nmstate-2.2.33-1.el9_4.x86_64.rpm
nmstate-libs-2.2.33-1.el9_4.i686.rpm
nmstate-libs-2.2.33-1.el9_4.x86_64.rpm
python3-libnmstate-2.2.33-1.el9_4.x86_64.rpm
nmstate-devel-2.2.33-1.el9_4.i686.rpm
nmstate-devel-2.2.33-1.el9_4.x86_64.rpm
nmstate-static-2.2.33-1.el9_4.i686.rpm
nmstate-static-2.2.33-1.el9_4.x86_64.rpm

aarch64:
nmstate-2.2.33-1.el9_4.aarch64.rpm
nmstate-libs-2.2.33-1.el9_4.aarch64.rpm
python3-libnmstate-2.2.33-1.el9_4.aarch64.rpm
nmstate-devel-2.2.33-1.el9_4.aarch64.rpm
nmstate-static-2.2.33-1.el9_4.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//nmstate-2.2.33-1.el9_4.src.rpm

Description of changes:

[2.2.33-1]
- Upgrade to 2.2.33

[2.2.32-1]
- Upgrade to 2.2.32
- Set VLAN reorder-headers to true by default. RHEL-35691

[2.2.31-1]
- Upgrade to 2.2.31

[2.2.29-2]
- Uploaded the right sources

[2.2.29-1]
- Upgrade to 2.2.29