ELSA-2023-13019 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
ELSA-2023-13019 Important: Oracle Linux 6 Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel security update
ELBA-2023-6740 Oracle Linux 9 .NET 7.0 bugfix update
ELBA-2023-7209 Oracle Linux 8 .NET 6.0 bugfix update
ELSA-2023-13019 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
Oracle Linux Security Advisory ELSA-2023-13019
http://linux.oracle.com/errata/ELSA-2023-13019.html
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-doc-4.1.12-124.81.2.el7uek.noarch.rpm
kernel-uek-firmware-4.1.12-124.81.2.el7uek.noarch.rpm
kernel-uek-4.1.12-124.81.2.el7uek.x86_64.rpm
kernel-uek-devel-4.1.12-124.81.2.el7uek.x86_64.rpm
kernel-uek-debug-4.1.12-124.81.2.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-124.81.2.el7uek.x86_64.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//kernel-uek-4.1.12-124.81.2.el7uek.src.rpm
Related CVEs:
CVE-2023-39192
CVE-2023-39193
CVE-2023-4207
CVE-2023-45862
Description of changes:
[4.1.12-124.81.2.el7uek]
- rebuild bumping release
[4.1.12-124.81.1.el7uek]
- netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35923500] {CVE-2023-39193}
- USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) [Orabug: 35924058] {CVE-2023-45862}
- netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35923470] {CVE-2023-39192}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) [Orabug: 35707466] {CVE-2023-4207}
ELSA-2023-13019 Important: Oracle Linux 6 Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel security update
Oracle Linux Security Advisory ELSA-2023-13019
http://linux.oracle.com/errata/ELSA-2023-13019.html
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-doc-4.1.12-124.81.2.el6uek.noarch.rpm
kernel-uek-firmware-4.1.12-124.81.2.el6uek.noarch.rpm
kernel-uek-4.1.12-124.81.2.el6uek.x86_64.rpm
kernel-uek-devel-4.1.12-124.81.2.el6uek.x86_64.rpm
kernel-uek-debug-4.1.12-124.81.2.el6uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-124.81.2.el6uek.x86_64.rpm
Related CVEs:
CVE-2023-39192
CVE-2023-39193
CVE-2023-4207
CVE-2023-45862
Description of changes:
[4.1.12-124.81.2.el6uek]
- rebuild bumping release
[4.1.12-124.81.1.el6uek]
- netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35923500] {CVE-2023-39193}
- USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) [Orabug: 35924058] {CVE-2023-45862}
- netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35923470] {CVE-2023-39192}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) [Orabug: 35707466] {CVE-2023-4207}
ELBA-2023-6740 Oracle Linux 9 .NET 7.0 bugfix update
Oracle Linux Bug Fix Advisory ELBA-2023-6740
http://linux.oracle.com/errata/ELBA-2023-6740.html
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
x86_64:
aspnetcore-runtime-7.0-7.0.13-2.0.1.el9_3.x86_64.rpm
aspnetcore-targeting-pack-7.0-7.0.13-2.0.1.el9_3.x86_64.rpm
dotnet-apphost-pack-7.0-7.0.13-2.0.1.el9_3.x86_64.rpm
dotnet-hostfxr-7.0-7.0.13-2.0.1.el9_3.x86_64.rpm
dotnet-runtime-7.0-7.0.13-2.0.1.el9_3.x86_64.rpm
dotnet-sdk-7.0-7.0.113-2.0.1.el9_3.x86_64.rpm
dotnet-targeting-pack-7.0-7.0.13-2.0.1.el9_3.x86_64.rpm
dotnet-templates-7.0-7.0.113-2.0.1.el9_3.x86_64.rpm
dotnet-sdk-7.0-source-built-artifacts-7.0.113-2.0.1.el9_3.x86_64.rpm
aarch64:
aspnetcore-runtime-7.0-7.0.13-2.0.1.el9_3.aarch64.rpm
aspnetcore-targeting-pack-7.0-7.0.13-2.0.1.el9_3.aarch64.rpm
dotnet-apphost-pack-7.0-7.0.13-2.0.1.el9_3.aarch64.rpm
dotnet-hostfxr-7.0-7.0.13-2.0.1.el9_3.aarch64.rpm
dotnet-runtime-7.0-7.0.13-2.0.1.el9_3.aarch64.rpm
dotnet-sdk-7.0-7.0.113-2.0.1.el9_3.aarch64.rpm
dotnet-targeting-pack-7.0-7.0.13-2.0.1.el9_3.aarch64.rpm
dotnet-templates-7.0-7.0.113-2.0.1.el9_3.aarch64.rpm
dotnet-sdk-7.0-source-built-artifacts-7.0.113-2.0.1.el9_3.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//dotnet7.0-7.0.113-2.0.1.el9_3.src.rpm
Description of changes:
[7.0.113-2.0.1]
- Add support for Oracle Linux
[7.0.113-2]
- Update to .NET SDK 7.0.113 and Runtime 7.0.13
- Resolves: RHEL-14467
ELBA-2023-7209 Oracle Linux 8 .NET 6.0 bugfix update
Oracle Linux Bug Fix Advisory ELBA-2023-7209
http://linux.oracle.com/errata/ELBA-2023-7209.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
aspnetcore-runtime-6.0-6.0.24-2.0.1.el8_9.x86_64.rpm
aspnetcore-targeting-pack-6.0-6.0.24-2.0.1.el8_9.x86_64.rpm
dotnet-apphost-pack-6.0-6.0.24-2.0.1.el8_9.x86_64.rpm
dotnet-hostfxr-6.0-6.0.24-2.0.1.el8_9.x86_64.rpm
dotnet-runtime-6.0-6.0.24-2.0.1.el8_9.x86_64.rpm
dotnet-sdk-6.0-6.0.124-2.0.1.el8_9.x86_64.rpm
dotnet-targeting-pack-6.0-6.0.24-2.0.1.el8_9.x86_64.rpm
dotnet-templates-6.0-6.0.124-2.0.1.el8_9.x86_64.rpm
dotnet-sdk-6.0-source-built-artifacts-6.0.124-2.0.1.el8_9.x86_64.rpm
aarch64:
aspnetcore-runtime-6.0-6.0.24-2.0.1.el8_9.aarch64.rpm
aspnetcore-targeting-pack-6.0-6.0.24-2.0.1.el8_9.aarch64.rpm
dotnet-apphost-pack-6.0-6.0.24-2.0.1.el8_9.aarch64.rpm
dotnet-hostfxr-6.0-6.0.24-2.0.1.el8_9.aarch64.rpm
dotnet-runtime-6.0-6.0.24-2.0.1.el8_9.aarch64.rpm
dotnet-sdk-6.0-6.0.124-2.0.1.el8_9.aarch64.rpm
dotnet-targeting-pack-6.0-6.0.24-2.0.1.el8_9.aarch64.rpm
dotnet-templates-6.0-6.0.124-2.0.1.el8_9.aarch64.rpm
dotnet-sdk-6.0-source-built-artifacts-6.0.124-2.0.1.el8_9.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//dotnet6.0-6.0.124-2.0.1.el8_9.src.rpm
Description of changes:
[6.0.124-2.0.1]
- Add support for Oracle Linux
[6.0.124-2]
- Update to .NET SDK 6.0.124 and Runtime 6.0.24
- Resolves: RHEL-14466
