Oracle Linux 6237 Published by

Fence-agents, oracle-database-preinstall-23ai, nss, nss, and greenboot defect fixes and enhancements are among the numerous security updates that Oracle Linux has received:

ELSA-2024-6726 Important: Oracle Linux 9 fence-agents security update
ELBA-2024-12668 Oracle Linux 8 oracle-database-preinstall-23ai bug fix update
ELBA-2024-6680 Oracle Linux 8 nss bug fix and enhancement update
ELBA-2024-6679 Oracle Linux 9 nss bug fix and enhancement update
ELBA-2024-6728 Oracle Linux 9 greenboot bug fix and enhancement update




ELSA-2024-6726 Important: Oracle Linux 9 fence-agents security update


Oracle Linux Security Advisory ELSA-2024-6726

http://linux.oracle.com/errata/ELSA-2024-6726.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
fence-agents-common-4.10.0-62.el9_4.5.noarch.rpm
fence-agents-compute-4.10.0-62.el9_4.5.x86_64.rpm
fence-agents-ibm-powervs-4.10.0-62.el9_4.5.noarch.rpm
fence-agents-ibm-vpc-4.10.0-62.el9_4.5.noarch.rpm
fence-agents-kubevirt-4.10.0-62.el9_4.5.x86_64.rpm
fence-agents-virsh-4.10.0-62.el9_4.5.noarch.rpm
fence-virt-4.10.0-62.el9_4.5.x86_64.rpm
fence-virtd-4.10.0-62.el9_4.5.x86_64.rpm
fence-virtd-cpg-4.10.0-62.el9_4.5.x86_64.rpm
fence-virtd-libvirt-4.10.0-62.el9_4.5.x86_64.rpm
fence-virtd-multicast-4.10.0-62.el9_4.5.x86_64.rpm
fence-virtd-serial-4.10.0-62.el9_4.5.x86_64.rpm
fence-virtd-tcp-4.10.0-62.el9_4.5.x86_64.rpm

aarch64:
fence-agents-common-4.10.0-62.el9_4.5.noarch.rpm
fence-agents-ibm-powervs-4.10.0-62.el9_4.5.noarch.rpm
fence-agents-ibm-vpc-4.10.0-62.el9_4.5.noarch.rpm
fence-agents-kubevirt-4.10.0-62.el9_4.5.aarch64.rpm
fence-agents-virsh-4.10.0-62.el9_4.5.noarch.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//fence-agents-4.10.0-62.el9_4.5.src.rpm

Related CVEs:

CVE-2024-6345

Description of changes:

[4.10.0-62.5]
- bundled setuptools: fix CVE-2024-6345

Resolves: RHEL-49657



ELBA-2024-12668 Oracle Linux 8 oracle-database-preinstall-23ai bug fix update


Oracle Linux Bug Fix Advisory ELBA-2024-12668

http://linux.oracle.com/errata/ELBA-2024-12668.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

aarch64:
oracle-database-preinstall-23ai-1.0-3.el8.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//oracle-database-preinstall-23ai-1.0-3.el8.src.rpm

Description of changes:

[[1.0-3.el8]]
- Add gcc, libgfortran and libnsl2 to the dependencies [Orabug: 37068703]



ELBA-2024-6680 Oracle Linux 8 nss bug fix and enhancement update


Oracle Linux Bug Fix Advisory ELBA-2024-6680

http://linux.oracle.com/errata/ELBA-2024-6680.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
nss-3.101.0-7.el8_8.i686.rpm
nss-3.101.0-7.el8_8.x86_64.rpm
nss-devel-3.101.0-7.el8_8.i686.rpm
nss-devel-3.101.0-7.el8_8.x86_64.rpm
nss-softokn-3.101.0-7.el8_8.i686.rpm
nss-softokn-3.101.0-7.el8_8.x86_64.rpm
nss-softokn-devel-3.101.0-7.el8_8.i686.rpm
nss-softokn-devel-3.101.0-7.el8_8.x86_64.rpm
nss-softokn-freebl-3.101.0-7.el8_8.i686.rpm
nss-softokn-freebl-3.101.0-7.el8_8.x86_64.rpm
nss-softokn-freebl-devel-3.101.0-7.el8_8.i686.rpm
nss-softokn-freebl-devel-3.101.0-7.el8_8.x86_64.rpm
nss-sysinit-3.101.0-7.el8_8.x86_64.rpm
nss-tools-3.101.0-7.el8_8.x86_64.rpm
nss-util-3.101.0-7.el8_8.i686.rpm
nss-util-3.101.0-7.el8_8.x86_64.rpm
nss-util-devel-3.101.0-7.el8_8.i686.rpm
nss-util-devel-3.101.0-7.el8_8.x86_64.rpm

aarch64:
nss-3.101.0-7.el8_8.aarch64.rpm
nss-devel-3.101.0-7.el8_8.aarch64.rpm
nss-softokn-3.101.0-7.el8_8.aarch64.rpm
nss-softokn-devel-3.101.0-7.el8_8.aarch64.rpm
nss-softokn-freebl-3.101.0-7.el8_8.aarch64.rpm
nss-softokn-freebl-devel-3.101.0-7.el8_8.aarch64.rpm
nss-sysinit-3.101.0-7.el8_8.aarch64.rpm
nss-tools-3.101.0-7.el8_8.aarch64.rpm
nss-util-3.101.0-7.el8_8.aarch64.rpm
nss-util-devel-3.101.0-7.el8_8.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//nss-3.101.0-7.el8_8.src.rpm

Description of changes:

[3.101.0-7]
- fix cms abi breakage
- fix long password issue on pbmac encodings

[3.101.0-6]
- fix param encoding in pkcs12 pbamac encoding
- add support for certificate compression in selfserv and tstclient

[3.101.0-3]
- Fix missing and inaccurate key length checks
- Fix chacha timing issue

[3.101.0-2]
- Fix MD-5 decode issue in pkcs #12
- turn off policy processing for pkcs12 and smime
- update the restore defaults for pkcs12

[3.101.0-1]
- Rebase to NSS 3.101



ELBA-2024-6679 Oracle Linux 9 nss bug fix and enhancement update


Oracle Linux Bug Fix Advisory ELBA-2024-6679

http://linux.oracle.com/errata/ELBA-2024-6679.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
nspr-4.35.0-14.el9_2.i686.rpm
nspr-4.35.0-14.el9_2.x86_64.rpm
nspr-devel-4.35.0-14.el9_2.i686.rpm
nspr-devel-4.35.0-14.el9_2.x86_64.rpm
nss-3.101.0-7.el9_2.i686.rpm
nss-3.101.0-7.el9_2.x86_64.rpm
nss-devel-3.101.0-7.el9_2.i686.rpm
nss-devel-3.101.0-7.el9_2.x86_64.rpm
nss-softokn-3.101.0-7.el9_2.i686.rpm
nss-softokn-3.101.0-7.el9_2.x86_64.rpm
nss-softokn-devel-3.101.0-7.el9_2.i686.rpm
nss-softokn-devel-3.101.0-7.el9_2.x86_64.rpm
nss-softokn-freebl-3.101.0-7.el9_2.i686.rpm
nss-softokn-freebl-3.101.0-7.el9_2.x86_64.rpm
nss-softokn-freebl-devel-3.101.0-7.el9_2.i686.rpm
nss-softokn-freebl-devel-3.101.0-7.el9_2.x86_64.rpm
nss-sysinit-3.101.0-7.el9_2.x86_64.rpm
nss-tools-3.101.0-7.el9_2.x86_64.rpm
nss-util-3.101.0-7.el9_2.i686.rpm
nss-util-3.101.0-7.el9_2.x86_64.rpm
nss-util-devel-3.101.0-7.el9_2.i686.rpm
nss-util-devel-3.101.0-7.el9_2.x86_64.rpm

aarch64:
nspr-4.35.0-14.el9_2.aarch64.rpm
nspr-devel-4.35.0-14.el9_2.aarch64.rpm
nss-3.101.0-7.el9_2.aarch64.rpm
nss-devel-3.101.0-7.el9_2.aarch64.rpm
nss-softokn-3.101.0-7.el9_2.aarch64.rpm
nss-softokn-devel-3.101.0-7.el9_2.aarch64.rpm
nss-softokn-freebl-3.101.0-7.el9_2.aarch64.rpm
nss-softokn-freebl-devel-3.101.0-7.el9_2.aarch64.rpm
nss-sysinit-3.101.0-7.el9_2.aarch64.rpm
nss-tools-3.101.0-7.el9_2.aarch64.rpm
nss-util-3.101.0-7.el9_2.aarch64.rpm
nss-util-devel-3.101.0-7.el9_2.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//nss-3.101.0-7.el9_2.src.rpm

Description of changes:

[3.101.0-7]
- fix cms abi breakage
- fix long password issue on pbmac encodings

[3.101.0-6]
- fix param encoding in pkcs12 pbamac encoding
- add support for certificate compression in selfserv and tstclient

[3.101.0-3]
- Fix missing and inaccurate key length checks
- Fix chacha timing issue

[3.101.0-2]
- Fix MD-5 decode issue in pkcs #12
- turn off policy processing for pkcs12 and smime
- restore the rhel9 pkcs12 defaults for pk12util

[3.101.0-1]
- Rebase to NSS 3.101
- restore ppc init support



ELBA-2024-6728 Oracle Linux 9 greenboot bug fix and enhancement update


Oracle Linux Bug Fix Advisory ELBA-2024-6728

http://linux.oracle.com/errata/ELBA-2024-6728.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
greenboot-0.15.6-1.el9_4.x86_64.rpm
greenboot-default-health-checks-0.15.6-1.el9_4.x86_64.rpm

aarch64:
greenboot-0.15.6-1.el9_4.aarch64.rpm
greenboot-default-health-checks-0.15.6-1.el9_4.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//greenboot-0.15.6-1.el9_4.src.rpm

Description of changes:

[0.15.6-1]
- Update to 0.15.6

[0.15.5-3]
- Moved greenboot config to /etc/grub.d.
- %post symlink greenboot.cfg to bootupd if present
- %postun remove symlink from bootupd if present