ELSA-2024-12069 Important: Oracle Linux 8 kernel security update
ELSA-2024-0133 Moderate: Oracle Linux 8 fence-agents security update
ELBA-2024-12060 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
ELSA-2024-0131 Moderate: Oracle Linux 8 pixman security update
ELBA-2024-0118 Oracle Linux 8 xfsdump bug fix update
ELEA-2024-0127 Oracle Linux 8 nmstate enhancement update
ELSA-2024-0125 Moderate: Oracle Linux 8 tomcat security update
ELBA-2024-12059 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
ELBA-2024-0132 Oracle Linux 8 nmstate enhancement update
ELSA-2024-0105 Moderate: Oracle Linux 8 nss security update
ELSA-2024-0130 Moderate: Oracle Linux 8 frr security update
ELBA-2024-0122 Oracle Linux 8 cmake bug fix update
ELSA-2024-0141 Moderate: Oracle Linux 9 ipa security update
ELSA-2024-0156 Important: Oracle Linux 9 .NET 6.0 security update
ELSA-2024-0108 Moderate: Oracle Linux 9 nss security update
ELBA-2024-12058 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update
ELBA-2024-12058 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update
ELBA-2024-12058 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
ELBA-2024-12062 Oracle Linux 8 Unbreakable Enterprise kernel-container bug fix update
ELBA-2024-12060 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
ELBA-2024-12059 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
ELBA-2024-12070 Oracle Linux 8 Unbreakable Enterprise kernel-container bug fix update
ELBA-2024-12060 Oracle Linux 7 Unbreakable Enterprise kernel bug fix update
ELBA-2024-12071 Oracle Linux 7 Unbreakable Enterprise kernel-container bug fix update
ELBA-2024-12061 Oracle Linux 7 Unbreakable Enterprise kernel-container bug fix update
ELBA-2024-12059 Oracle Linux 7 Unbreakable Enterprise kernel bug fix update
ELSA-2024-0145 Moderate: Oracle Linux 7 ipa security update (aarch64)
ELSA-2024-12069 Important: Oracle Linux 8 kernel security update
Oracle Linux Security Advisory ELSA-2024-12069
http://linux.oracle.com/errata/ELSA-2024-12069.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
bpftool-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-core-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-cross-headers-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-debug-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-debug-core-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-debug-devel-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-debug-modules-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-debug-modules-extra-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-devel-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-doc-4.18.0-513.11.0.1.el8_9.noarch.rpm
kernel-headers-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-modules-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-modules-extra-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-tools-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-tools-libs-4.18.0-513.11.0.1.el8_9.x86_64.rpm
perf-4.18.0-513.11.0.1.el8_9.x86_64.rpm
python3-perf-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-tools-libs-devel-4.18.0-513.11.0.1.el8_9.x86_64.rpm
kernel-abi-stablelists-4.18.0-513.11.0.1.el8_9.noarch.rpm
aarch64:
bpftool-4.18.0-513.11.0.1.el8_9.aarch64.rpm
kernel-cross-headers-4.18.0-513.11.0.1.el8_9.aarch64.rpm
kernel-headers-4.18.0-513.11.0.1.el8_9.aarch64.rpm
kernel-tools-4.18.0-513.11.0.1.el8_9.aarch64.rpm
kernel-tools-libs-4.18.0-513.11.0.1.el8_9.aarch64.rpm
perf-4.18.0-513.11.0.1.el8_9.aarch64.rpm
python3-perf-4.18.0-513.11.0.1.el8_9.aarch64.rpm
kernel-tools-libs-devel-4.18.0-513.11.0.1.el8_9.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//kernel-4.18.0-513.11.0.1.el8_9.src.rpm
Related CVEs:
CVE-2023-2162
CVE-2023-4622
CVE-2023-42753
Description of changes:
[4.18.0-513.11.1.0.1.el8_9.OL8]
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-2162}
- af_unix: Fix null-ptr-deref in unix_stream_sendpage() {CVE-2023-4622}
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet {CVE-2023-42753}
ELSA-2024-0133 Moderate: Oracle Linux 8 fence-agents security update
Oracle Linux Security Advisory ELSA-2024-0133
http://linux.oracle.com/errata/ELSA-2024-0133.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
fence-agents-all-4.2.1-121.el8_9.2.x86_64.rpm
fence-agents-amt-ws-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-apc-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-apc-snmp-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-bladecenter-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-brocade-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-cisco-mds-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-cisco-ucs-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-common-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-compute-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-drac5-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-eaton-snmp-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-emerson-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-eps-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-heuristics-ping-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-hpblade-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ibm-powervs-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ibm-vpc-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ibmblade-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ifmib-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ilo-moonshot-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ilo-mp-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ilo-ssh-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ilo2-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-intelmodular-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ipdu-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ipmilan-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-kdump-4.2.1-121.el8_9.2.x86_64.rpm
fence-agents-kubevirt-4.2.1-121.el8_9.2.x86_64.rpm
fence-agents-lpar-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-mpath-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-redfish-4.2.1-121.el8_9.2.x86_64.rpm
fence-agents-rhevm-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-rsa-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-rsb-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-sbd-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-scsi-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-virsh-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-vmware-rest-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-vmware-soap-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-wti-4.2.1-121.el8_9.2.noarch.rpm
aarch64:
fence-agents-all-4.2.1-121.el8_9.2.aarch64.rpm
fence-agents-amt-ws-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-apc-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-apc-snmp-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-bladecenter-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-brocade-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-cisco-mds-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-cisco-ucs-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-common-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-compute-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-drac5-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-eaton-snmp-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-emerson-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-eps-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-heuristics-ping-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-hpblade-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ibm-powervs-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ibm-vpc-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ibmblade-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ifmib-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ilo-moonshot-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ilo-mp-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ilo-ssh-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ilo2-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-intelmodular-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ipdu-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-ipmilan-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-kdump-4.2.1-121.el8_9.2.aarch64.rpm
fence-agents-kubevirt-4.2.1-121.el8_9.2.aarch64.rpm
fence-agents-mpath-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-redfish-4.2.1-121.el8_9.2.aarch64.rpm
fence-agents-rhevm-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-rsa-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-rsb-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-sbd-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-scsi-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-virsh-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-vmware-rest-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-vmware-soap-4.2.1-121.el8_9.2.noarch.rpm
fence-agents-wti-4.2.1-121.el8_9.2.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//fence-agents-4.2.1-121.el8_9.2.src.rpm
Related CVEs:
CVE-2023-37920
CVE-2023-43804
Description of changes:
[4.2.1-121.2]
- bundled urllib3: fix CVE-2023-43804
Resolves: RHEL-11988
- bundled certifi: fix CVE-2023-37920
Resolves: RHEL-6972
ELBA-2024-12060 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-12060
http://linux.oracle.com/errata/ELBA-2024-12060.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
aarch64:
kernel-uek-5.4.17-2136.327.2.el8uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.327.2.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.327.2.el8uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.327.2.el8uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.327.2.el8uek.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//kernel-uek-5.4.17-2136.327.2.el8uek.src.rpm
Description of changes:
[5.4.17-2136.327.2.el8uek]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson) [Orabug: 36131274]
[5.4.17-2136.327.1.el8uek]
- hugetlb: disable HVO in Xen (Jane Chu) [Orabug: 35904478] [Orabug: 35575618]
- hugetlb: batch TLB flushes when restoring vmemmap (Mike Kravetz) [Orabug: 35575618]
- hugetlb: batch TLB flushes when freeing vmemmap (Joao Martins) [Orabug: 35575618]
- hugetlb: batch PMD split for bulk vmemmap dedup (Joao Martins) [Orabug: 35575618]
- hugetlb: batch freeing of vmemmap pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: perform vmemmap restoration on a list of pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: perform vmemmap optimization on a list of pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: restructure pool allocations (Mike Kravetz) [Orabug: 35575618]
- hugetlb: optimize update_and_free_pages_bulk to avoid lock cycles (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: allow alloc vmemmap pages fallback to other nodes (Yuan Can) [Orabug: 35575618]
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages (Xueshi Hu) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes (Yuan Can) [Orabug: 35575618]
- hugetlb: check for hugetlb folio before vmemmap_restore (Mike Kravetz) [Orabug: 35575618]
- hugetlb: set hugetlb page flag before optimizing vmemmap (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix a race between vmemmap pmd split (Muchun Song) [Orabug: 35575618]
- hugetlb: do not clear hugetlb dtor until allocating vmemmap (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: provide stronger vmemmap allocation guarantees (Pasha Tatashin) [Orabug: 35575618]
- mm: hugetlb_vmemmap: simplify hugetlb_vmemmap_init() a bit (Muchun Song) [Orabug: 35575618]
- sysctl: fix proc_dobool() usability (Ondrej Mosnacek) [Orabug: 35575618]
- mm/hugetlb_vmemmap: remap head page to newly allocated page (Joao Martins) [Orabug: 35575618]
- hugetlb: fix __prep_compound_gigantic_page page flag setting (Mike Kravetz) [Orabug: 35575618]
- hugetlb: freeze allocated pages before creating hugetlb pages (Mike Kravetz) [Orabug: 35575618]
- mm/hugetlb: correct demote page offset logic (Doug Berger) [Orabug: 35575618]
- mm: use nth_page instead of mem_map_offset mem_map_next (Cheng Li) [Orabug: 35575618]
- mm: hugetlb_vmemmap: remove redundant list_del() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: simplify reset_struct_pages() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: add missing smp_wmb() before set_pte_at() (Miaohe Lin) [Orabug: 35575618]
- mm: hugetlb_vmemmap: use PTRS_PER_PTE instead of PMD_SIZE / PAGE_SIZE (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: move code comments to vmemmap_dedup.rst (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: improve hugetlb_vmemmap code readability (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: replace early_param() with core_param() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: move vmemmap code related to HugeTLB to hugetlb_vmemmap.c (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: introduce the name HVO (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: optimize vmemmap_optimize_mode handling (Muchun Song) [Orabug: 35575618]
- sysctl: introduce new proc handler proc_dobool (Jia He) [Orabug: 35575618]
- mm: hugetlb_vmemmap: delete hugetlb_optimize_vmemmap_enabled() (Muchun Song) [Orabug: 35575618]
- mm: memory_hotplug: make hugetlb_optimize_vmemmap compatible with memmap_on_memory (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix CONFIG_HUGETLB_PAGE_FREE_VMEMMAP_DEFAULT_ON (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: add hugetlb_optimize_vmemmap sysctl (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: use kstrtobool for hugetlb_vmemmap param parsing (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: disable hugetlb_optimize_vmemmap when struct page crosses page boundaries (Muchun Song) [Orabug: 35575618]
- mm/hugetlb_vmemmap: move comment block to Documentation/vm (Joao Martins) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup CONFIG_HUGETLB_PAGE_FREE_VMEMMAP* (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup hugetlb_free_vmemmap_enabled* (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup hugetlb_vmemmap related functions (Muchun Song) [Orabug: 35575618]
- mm: sparsemem: move vmemmap related to HugeTLB to CONFIG_HUGETLB_PAGE_FREE_VMEMMAP (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- selftests: vm: add a hugetlb test case (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: sparsemem: fix missing higher order allocation splitting (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: sparsemem: use page table lock to protect kernel pmd operations (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: hugetlb: replace hugetlb_free_vmemmap_enabled with a static_key (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- jump_label: Provide CONFIG-driven build state defaults (Kees Cook) [Orabug: 35575618]
- mm: hugetlb: free the 2nd vmemmap page associated with each HugeTLB page (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- uek: kabi: update a kABI symbol for ACFS (Saeed Mirzamohammadi) [Orabug: 36083492]
- io_uring: break iopolling on signal (Pavel Begunkov) [Orabug: 36029307]
- io_uring: break out of iowq iopoll on teardown (Pavel Begunkov) [Orabug: 36029307]
- io_uring: always lock in io_apoll_task_func (Dylan Yudaken) [Orabug: 36029307]
- io_uring: correct check for O_TMPFILE (Aleksa Sarai) [Orabug: 36029307]
- io_uring: gate iowait schedule on having pending requests (Jens Axboe) [Orabug: 36029307]
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe) [Orabug: 36029307]
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek) [Orabug: 36029307]
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe) [Orabug: 36029307]
- io_uring: Use io_schedule* in cqring wait (Andres Freund) [Orabug: 36029307]
- io_uring: wait interruptibly for request completions on exit (Jens Axboe) [Orabug: 36029307]
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe) [Orabug: 36029307]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski) [Orabug: 36060779]
- octeontx_edac: Fix a potential null pointer dereference (Thomas Tai) [Orabug: 36087361]
ELSA-2024-0131 Moderate: Oracle Linux 8 pixman security update
Oracle Linux Security Advisory ELSA-2024-0131
http://linux.oracle.com/errata/ELSA-2024-0131.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
pixman-0.38.4-3.el8_9.i686.rpm
pixman-0.38.4-3.el8_9.x86_64.rpm
pixman-devel-0.38.4-3.el8_9.i686.rpm
pixman-devel-0.38.4-3.el8_9.x86_64.rpm
aarch64:
pixman-0.38.4-3.el8_9.aarch64.rpm
pixman-devel-0.38.4-3.el8_9.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//pixman-0.38.4-3.el8_9.src.rpm
Related CVEs:
CVE-2022-44638
Description of changes:
[0.38.4-3]
- Security fix for CVE-2022-44638
ELBA-2024-0118 Oracle Linux 8 xfsdump bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-0118
http://linux.oracle.com/errata/ELBA-2024-0118.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
xfsdump-3.1.8-7.el8_9.x86_64.rpm
aarch64:
xfsdump-3.1.8-7.el8_9.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//xfsdump-3.1.8-7.el8_9.src.rpm
Description of changes:
[3.1.8-7]
- xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x
- Related: RHEL-11883
[3.1.8-6]
- xfsdump: restoring inventory prevents non-directory files being restored from tape
- related: bz#2166554
ELEA-2024-0127 Oracle Linux 8 nmstate enhancement update
Oracle Linux Enhancement Advisory ELEA-2024-0127
http://linux.oracle.com/errata/ELEA-2024-0127.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
nmstate-1.4.5-2.el8_9.x86_64.rpm
nmstate-libs-1.4.5-2.el8_9.i686.rpm
nmstate-libs-1.4.5-2.el8_9.x86_64.rpm
nmstate-plugin-ovsdb-1.4.5-2.el8_9.noarch.rpm
python3-libnmstate-1.4.5-2.el8_9.noarch.rpm
nmstate-devel-1.4.5-2.el8_9.i686.rpm
nmstate-devel-1.4.5-2.el8_9.x86_64.rpm
aarch64:
nmstate-1.4.5-2.el8_9.aarch64.rpm
nmstate-libs-1.4.5-2.el8_9.aarch64.rpm
nmstate-plugin-ovsdb-1.4.5-2.el8_9.noarch.rpm
python3-libnmstate-1.4.5-2.el8_9.noarch.rpm
nmstate-devel-1.4.5-2.el8_9.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//nmstate-1.4.5-2.el8_9.src.rpm
Description of changes:
[1.4.5-2]
- Fix use case on purging DNS option. RHEL-13936
[1.4.5-1]
- Support DNS option. RHEL-13936
[1.4.4-5]
- Support treating string as int for address prefix-length. RHEL-3358
[1.4.4-4]
- Fix issue with ovs-bridge and ovs-interface with same name. RHBZ#2231843
ELSA-2024-0125 Moderate: Oracle Linux 8 tomcat security update
Oracle Linux Security Advisory ELSA-2024-0125
http://linux.oracle.com/errata/ELSA-2024-0125.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
tomcat-9.0.62-27.el8_9.2.noarch.rpm
tomcat-admin-webapps-9.0.62-27.el8_9.2.noarch.rpm
tomcat-docs-webapp-9.0.62-27.el8_9.2.noarch.rpm
tomcat-el-3.0-api-9.0.62-27.el8_9.2.noarch.rpm
tomcat-jsp-2.3-api-9.0.62-27.el8_9.2.noarch.rpm
tomcat-lib-9.0.62-27.el8_9.2.noarch.rpm
tomcat-servlet-4.0-api-9.0.62-27.el8_9.2.noarch.rpm
tomcat-webapps-9.0.62-27.el8_9.2.noarch.rpm
aarch64:
tomcat-9.0.62-27.el8_9.2.noarch.rpm
tomcat-admin-webapps-9.0.62-27.el8_9.2.noarch.rpm
tomcat-docs-webapp-9.0.62-27.el8_9.2.noarch.rpm
tomcat-el-3.0-api-9.0.62-27.el8_9.2.noarch.rpm
tomcat-jsp-2.3-api-9.0.62-27.el8_9.2.noarch.rpm
tomcat-lib-9.0.62-27.el8_9.2.noarch.rpm
tomcat-servlet-4.0-api-9.0.62-27.el8_9.2.noarch.rpm
tomcat-webapps-9.0.62-27.el8_9.2.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//tomcat-9.0.62-27.el8_9.2.src.rpm
Related CVEs:
CVE-2023-41080
CVE-2023-42794
CVE-2023-42795
CVE-2023-45648
Description of changes:
[1:9.0.62-27.2]
- Open Redirect vulnerability in FORM authentication (CVE-2023-41080)
- FileUpload: DoS due to accumulation of temporary files on Windows (CVE-2023-42794)
- improper cleaning of recycled objects could lead to information leak (CVE-2023-42795)
- incorrectly parsed http trailer headers can cause request smuggling (CVE-2023-45648)
ELBA-2024-12059 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-12059
http://linux.oracle.com/errata/ELBA-2024-12059.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
aarch64:
kernel-uek-5.4.17-2136.326.6.1.el8uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.326.6.1.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.326.6.1.el8uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.326.6.1.el8uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.326.6.1.el8uek.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//kernel-uek-5.4.17-2136.326.6.1.el8uek.src.rpm
Description of changes:
[5.4.17-2136.326.6.1.el8uek]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson) [Orabug: 36152738]
- octeontx_edac: Fix a potential null pointer dereference (Thomas Tai) [Orabug: 36152733]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski) [Orabug: 36152730]
- io_uring: break iopolling on signal (Pavel Begunkov) [Orabug: 36152721]
- io_uring: break out of iowq iopoll on teardown (Pavel Begunkov) [Orabug: 36152721]
- io_uring: always lock in io_apoll_task_func (Dylan Yudaken) [Orabug: 36152721]
- io_uring: correct check for O_TMPFILE (Aleksa Sarai) [Orabug: 36152721]
- io_uring: gate iowait schedule on having pending requests (Jens Axboe) [Orabug: 36152721]
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe) [Orabug: 36152721]
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek) [Orabug: 36152721]
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe) [Orabug: 36152721]
- io_uring: Use io_schedule* in cqring wait (Andres Freund) [Orabug: 36152721]
- io_uring: wait interruptibly for request completions on exit (Jens Axboe) [Orabug: 36152721]
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe) [Orabug: 36152721]
ELBA-2024-0132 Oracle Linux 8 nmstate enhancement update
Oracle Linux Bug Fix Advisory ELBA-2024-0132
http://linux.oracle.com/errata/ELBA-2024-0132.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
nmstate-1.4.4-5.el8_9.x86_64.rpm
nmstate-libs-1.4.4-5.el8_9.i686.rpm
nmstate-libs-1.4.4-5.el8_9.x86_64.rpm
nmstate-plugin-ovsdb-1.4.4-5.el8_9.noarch.rpm
python3-libnmstate-1.4.4-5.el8_9.noarch.rpm
nmstate-devel-1.4.4-5.el8_9.i686.rpm
nmstate-devel-1.4.4-5.el8_9.x86_64.rpm
aarch64:
nmstate-1.4.4-5.el8_9.aarch64.rpm
nmstate-libs-1.4.4-5.el8_9.aarch64.rpm
nmstate-plugin-ovsdb-1.4.4-5.el8_9.noarch.rpm
python3-libnmstate-1.4.4-5.el8_9.noarch.rpm
nmstate-devel-1.4.4-5.el8_9.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//nmstate-1.4.4-5.el8_9.src.rpm
Description of changes:
[1.4.4-5]
- Support treating string as int for address prefix-length. RHEL-3358
[1.4.4-4]
- Fix issue with ovs-bridge and ovs-interface with same name. RHBZ#2231843
ELSA-2024-0105 Moderate: Oracle Linux 8 nss security update
Oracle Linux Security Advisory ELSA-2024-0105
http://linux.oracle.com/errata/ELSA-2024-0105.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
nss-3.90.0-4.el8_9.i686.rpm
nss-3.90.0-4.el8_9.x86_64.rpm
nss-devel-3.90.0-4.el8_9.i686.rpm
nss-devel-3.90.0-4.el8_9.x86_64.rpm
nss-softokn-3.90.0-4.el8_9.i686.rpm
nss-softokn-3.90.0-4.el8_9.x86_64.rpm
nss-softokn-devel-3.90.0-4.el8_9.i686.rpm
nss-softokn-devel-3.90.0-4.el8_9.x86_64.rpm
nss-softokn-freebl-3.90.0-4.el8_9.i686.rpm
nss-softokn-freebl-3.90.0-4.el8_9.x86_64.rpm
nss-softokn-freebl-devel-3.90.0-4.el8_9.i686.rpm
nss-softokn-freebl-devel-3.90.0-4.el8_9.x86_64.rpm
nss-sysinit-3.90.0-4.el8_9.x86_64.rpm
nss-tools-3.90.0-4.el8_9.x86_64.rpm
nss-util-3.90.0-4.el8_9.i686.rpm
nss-util-3.90.0-4.el8_9.x86_64.rpm
nss-util-devel-3.90.0-4.el8_9.i686.rpm
nss-util-devel-3.90.0-4.el8_9.x86_64.rpm
aarch64:
nss-3.90.0-4.el8_9.aarch64.rpm
nss-devel-3.90.0-4.el8_9.aarch64.rpm
nss-softokn-3.90.0-4.el8_9.aarch64.rpm
nss-softokn-devel-3.90.0-4.el8_9.aarch64.rpm
nss-softokn-freebl-3.90.0-4.el8_9.aarch64.rpm
nss-softokn-freebl-devel-3.90.0-4.el8_9.aarch64.rpm
nss-sysinit-3.90.0-4.el8_9.aarch64.rpm
nss-tools-3.90.0-4.el8_9.aarch64.rpm
nss-util-3.90.0-4.el8_9.aarch64.rpm
nss-util-devel-3.90.0-4.el8_9.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//nss-3.90.0-4.el8_9.src.rpm
Related CVEs:
CVE-2023-5388
Description of changes:
[3.90.0-4]
- Fix expired certs in tests
- Fix CVE-2023-5388
ELSA-2024-0130 Moderate: Oracle Linux 8 frr security update
Oracle Linux Security Advisory ELSA-2024-0130
http://linux.oracle.com/errata/ELSA-2024-0130.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
frr-7.5.1-13.el8_9.3.x86_64.rpm
frr-selinux-7.5.1-13.el8_9.3.noarch.rpm
aarch64:
frr-7.5.1-13.el8_9.3.aarch64.rpm
frr-selinux-7.5.1-13.el8_9.3.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//frr-7.5.1-13.el8_9.3.src.rpm
Related CVEs:
CVE-2023-38406
CVE-2023-38407
CVE-2023-47234
CVE-2023-47235
Description of changes:
[7.5.1-13.3]
- Resolves: RHEL-15916 - Flowspec overflow in bgpd/bgp_flowspec.c
- Resolves: RHEL-15919 - Out of bounds read in bgpd/bgp_label.c
- Resolves: RHEL-15869 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
- Resolves: RHEL-15868 - crash from malformed EOR-containing BGP UPDATE message
ELBA-2024-0122 Oracle Linux 8 cmake bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-0122
http://linux.oracle.com/errata/ELBA-2024-0122.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
cmake-3.26.5-1.el8_9.x86_64.rpm
cmake-data-3.26.5-1.el8_9.noarch.rpm
cmake-doc-3.26.5-1.el8_9.noarch.rpm
cmake-filesystem-3.26.5-1.el8_9.i686.rpm
cmake-filesystem-3.26.5-1.el8_9.x86_64.rpm
cmake-gui-3.26.5-1.el8_9.x86_64.rpm
cmake-rpm-macros-3.26.5-1.el8_9.noarch.rpm
aarch64:
cmake-3.26.5-1.el8_9.aarch64.rpm
cmake-data-3.26.5-1.el8_9.noarch.rpm
cmake-doc-3.26.5-1.el8_9.noarch.rpm
cmake-filesystem-3.26.5-1.el8_9.aarch64.rpm
cmake-gui-3.26.5-1.el8_9.aarch64.rpm
cmake-rpm-macros-3.26.5-1.el8_9.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//cmake-3.26.5-1.el8_9.src.rpm
Description of changes:
[3.26.5-1]
- Update to version 3.26.5-1
ELSA-2024-0141 Moderate: Oracle Linux 9 ipa security update
Oracle Linux Security Advisory ELSA-2024-0141
http://linux.oracle.com/errata/ELSA-2024-0141.html
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
x86_64:
ipa-client-4.10.2-5.0.1.el9_3.x86_64.rpm
ipa-client-common-4.10.2-5.0.1.el9_3.noarch.rpm
ipa-client-epn-4.10.2-5.0.1.el9_3.x86_64.rpm
ipa-client-samba-4.10.2-5.0.1.el9_3.x86_64.rpm
ipa-common-4.10.2-5.0.1.el9_3.noarch.rpm
ipa-selinux-4.10.2-5.0.1.el9_3.noarch.rpm
ipa-server-4.10.2-5.0.1.el9_3.x86_64.rpm
ipa-server-common-4.10.2-5.0.1.el9_3.noarch.rpm
ipa-server-dns-4.10.2-5.0.1.el9_3.noarch.rpm
ipa-server-trust-ad-4.10.2-5.0.1.el9_3.x86_64.rpm
python3-ipaclient-4.10.2-5.0.1.el9_3.noarch.rpm
python3-ipalib-4.10.2-5.0.1.el9_3.noarch.rpm
python3-ipaserver-4.10.2-5.0.1.el9_3.noarch.rpm
python3-ipatests-4.10.2-5.0.1.el9_3.noarch.rpm
aarch64:
ipa-client-4.10.2-5.0.1.el9_3.aarch64.rpm
ipa-client-common-4.10.2-5.0.1.el9_3.noarch.rpm
ipa-client-epn-4.10.2-5.0.1.el9_3.aarch64.rpm
ipa-client-samba-4.10.2-5.0.1.el9_3.aarch64.rpm
ipa-common-4.10.2-5.0.1.el9_3.noarch.rpm
ipa-selinux-4.10.2-5.0.1.el9_3.noarch.rpm
ipa-server-4.10.2-5.0.1.el9_3.aarch64.rpm
ipa-server-common-4.10.2-5.0.1.el9_3.noarch.rpm
ipa-server-dns-4.10.2-5.0.1.el9_3.noarch.rpm
ipa-server-trust-ad-4.10.2-5.0.1.el9_3.aarch64.rpm
python3-ipaclient-4.10.2-5.0.1.el9_3.noarch.rpm
python3-ipalib-4.10.2-5.0.1.el9_3.noarch.rpm
python3-ipaserver-4.10.2-5.0.1.el9_3.noarch.rpm
python3-ipatests-4.10.2-5.0.1.el9_3.noarch.rpm
SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//ipa-4.10.2-5.0.1.el9_3.src.rpm
Related CVEs:
CVE-2023-5455
Description of changes:
[4.10.2-5.0.1]
- Resolves: 2242828 Invalid CSRF protection (CVE-2023-5455)
ELSA-2024-0156 Important: Oracle Linux 9 .NET 6.0 security update
Oracle Linux Security Advisory ELSA-2024-0156
http://linux.oracle.com/errata/ELSA-2024-0156.html
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
x86_64:
aspnetcore-runtime-6.0-6.0.26-1.0.1.el9_3.x86_64.rpm
aspnetcore-targeting-pack-6.0-6.0.26-1.0.1.el9_3.x86_64.rpm
dotnet-apphost-pack-6.0-6.0.26-1.0.1.el9_3.x86_64.rpm
dotnet-hostfxr-6.0-6.0.26-1.0.1.el9_3.x86_64.rpm
dotnet-runtime-6.0-6.0.26-1.0.1.el9_3.x86_64.rpm
dotnet-sdk-6.0-6.0.126-1.0.1.el9_3.x86_64.rpm
dotnet-targeting-pack-6.0-6.0.26-1.0.1.el9_3.x86_64.rpm
dotnet-templates-6.0-6.0.126-1.0.1.el9_3.x86_64.rpm
dotnet-sdk-6.0-source-built-artifacts-6.0.126-1.0.1.el9_3.x86_64.rpm
aarch64:
aspnetcore-runtime-6.0-6.0.26-1.0.1.el9_3.aarch64.rpm
aspnetcore-targeting-pack-6.0-6.0.26-1.0.1.el9_3.aarch64.rpm
dotnet-apphost-pack-6.0-6.0.26-1.0.1.el9_3.aarch64.rpm
dotnet-hostfxr-6.0-6.0.26-1.0.1.el9_3.aarch64.rpm
dotnet-runtime-6.0-6.0.26-1.0.1.el9_3.aarch64.rpm
dotnet-sdk-6.0-6.0.126-1.0.1.el9_3.aarch64.rpm
dotnet-targeting-pack-6.0-6.0.26-1.0.1.el9_3.aarch64.rpm
dotnet-templates-6.0-6.0.126-1.0.1.el9_3.aarch64.rpm
dotnet-sdk-6.0-source-built-artifacts-6.0.126-1.0.1.el9_3.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//dotnet6.0-6.0.126-1.0.1.el9_3.src.rpm
Related CVEs:
CVE-2024-0056
CVE-2024-0057
CVE-2024-21319
Description of changes:
[6.0.126-1.0.1]
- Add support for Oracle Linux
[6.0.126-1]
- Update to .NET SDK 6.0.126 and Runtime 6.0.26
[6.0.125-1]
- Update to .NET SDK 6.0.125 and Runtime 6.0.25
ELSA-2024-0108 Moderate: Oracle Linux 9 nss security update
Oracle Linux Security Advisory ELSA-2024-0108
http://linux.oracle.com/errata/ELSA-2024-0108.html
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
x86_64:
nspr-4.35.0-4.el9_3.i686.rpm
nspr-4.35.0-4.el9_3.x86_64.rpm
nspr-devel-4.35.0-4.el9_3.i686.rpm
nspr-devel-4.35.0-4.el9_3.x86_64.rpm
nss-3.90.0-4.el9_3.i686.rpm
nss-3.90.0-4.el9_3.x86_64.rpm
nss-devel-3.90.0-4.el9_3.i686.rpm
nss-devel-3.90.0-4.el9_3.x86_64.rpm
nss-softokn-3.90.0-4.el9_3.i686.rpm
nss-softokn-3.90.0-4.el9_3.x86_64.rpm
nss-softokn-devel-3.90.0-4.el9_3.i686.rpm
nss-softokn-devel-3.90.0-4.el9_3.x86_64.rpm
nss-softokn-freebl-3.90.0-4.el9_3.i686.rpm
nss-softokn-freebl-3.90.0-4.el9_3.x86_64.rpm
nss-softokn-freebl-devel-3.90.0-4.el9_3.i686.rpm
nss-softokn-freebl-devel-3.90.0-4.el9_3.x86_64.rpm
nss-sysinit-3.90.0-4.el9_3.x86_64.rpm
nss-tools-3.90.0-4.el9_3.x86_64.rpm
nss-util-3.90.0-4.el9_3.i686.rpm
nss-util-3.90.0-4.el9_3.x86_64.rpm
nss-util-devel-3.90.0-4.el9_3.i686.rpm
nss-util-devel-3.90.0-4.el9_3.x86_64.rpm
aarch64:
nspr-4.35.0-4.el9_3.aarch64.rpm
nspr-devel-4.35.0-4.el9_3.aarch64.rpm
nss-3.90.0-4.el9_3.aarch64.rpm
nss-devel-3.90.0-4.el9_3.aarch64.rpm
nss-softokn-3.90.0-4.el9_3.aarch64.rpm
nss-softokn-devel-3.90.0-4.el9_3.aarch64.rpm
nss-softokn-freebl-3.90.0-4.el9_3.aarch64.rpm
nss-softokn-freebl-devel-3.90.0-4.el9_3.aarch64.rpm
nss-sysinit-3.90.0-4.el9_3.aarch64.rpm
nss-tools-3.90.0-4.el9_3.aarch64.rpm
nss-util-3.90.0-4.el9_3.aarch64.rpm
nss-util-devel-3.90.0-4.el9_3.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//nss-3.90.0-4.el9_3.src.rpm
Related CVEs:
CVE-2023-5388
Description of changes:
[3.90.0-4]
- CVE-2023-5388
nss: timing attack against RSA decryption.
Make the final blinding multmod constant time.
ELBA-2024-12058 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-12058
http://linux.oracle.com/errata/ELBA-2024-12058.html
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
aarch64:
bpftool-5.15.0-202.135.2.el9uek.aarch64.rpm
kernel-uek-5.15.0-202.135.2.el9uek.aarch64.rpm
kernel-uek-core-5.15.0-202.135.2.el9uek.aarch64.rpm
kernel-uek-debug-5.15.0-202.135.2.el9uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-202.135.2.el9uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-202.135.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-202.135.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-202.135.2.el9uek.aarch64.rpm
kernel-uek-devel-5.15.0-202.135.2.el9uek.aarch64.rpm
kernel-uek-doc-5.15.0-202.135.2.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-202.135.2.el9uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-202.135.2.el9uek.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//kernel-uek-5.15.0-202.135.2.el9uek.src.rpm
Description of changes:
[5.15.0-202.135.2.el9uek]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson) [Orabug: 36131271]
- hugetlb: missing bootmem gigantic page initialization (Jane Chu) [Orabug: 36126864]
[5.15.0-202.135.1.el9uek]
- uek: kabi: update aarch64 kABI files for new symbols (Saeed Mirzamohammadi) [Orabug: 36008926]
- uek: kabi: update x86_64 kABI files for new symbols (Saeed Mirzamohammadi) [Orabug: 36008926]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski) [Orabug: 36060778]
ELBA-2024-12058 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-12058
http://linux.oracle.com/errata/ELBA-2024-12058.html
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
x86_64:
bpftool-5.15.0-202.135.2.el9uek.x86_64.rpm
kernel-uek-5.15.0-202.135.2.el9uek.x86_64.rpm
kernel-uek-core-5.15.0-202.135.2.el9uek.x86_64.rpm
kernel-uek-debug-5.15.0-202.135.2.el9uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-202.135.2.el9uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-202.135.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-202.135.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-202.135.2.el9uek.x86_64.rpm
kernel-uek-devel-5.15.0-202.135.2.el9uek.x86_64.rpm
kernel-uek-doc-5.15.0-202.135.2.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-202.135.2.el9uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-202.135.2.el9uek.x86_64.rpm
kernel-uek-container-5.15.0-202.135.2.el9uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-202.135.2.el9uek.x86_64.rpm
SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//kernel-uek-5.15.0-202.135.2.el9uek.src.rpm
Description of changes:
[5.15.0-202.135.2.el9uek]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson) [Orabug: 36131271]
- hugetlb: missing bootmem gigantic page initialization (Jane Chu) [Orabug: 36126864]
[5.15.0-202.135.1.el9uek]
- uek: kabi: update aarch64 kABI files for new symbols (Saeed Mirzamohammadi) [Orabug: 36008926]
- uek: kabi: update x86_64 kABI files for new symbols (Saeed Mirzamohammadi) [Orabug: 36008926]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski) [Orabug: 36060778]
ELBA-2024-12058 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-12058
http://linux.oracle.com/errata/ELBA-2024-12058.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
bpftool-5.15.0-202.135.2.el8uek.x86_64.rpm
kernel-uek-5.15.0-202.135.2.el8uek.x86_64.rpm
kernel-uek-core-5.15.0-202.135.2.el8uek.x86_64.rpm
kernel-uek-debug-5.15.0-202.135.2.el8uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-202.135.2.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-202.135.2.el8uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-202.135.2.el8uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-202.135.2.el8uek.x86_64.rpm
kernel-uek-devel-5.15.0-202.135.2.el8uek.x86_64.rpm
kernel-uek-doc-5.15.0-202.135.2.el8uek.noarch.rpm
kernel-uek-modules-5.15.0-202.135.2.el8uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-202.135.2.el8uek.x86_64.rpm
kernel-uek-container-5.15.0-202.135.2.el8uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-202.135.2.el8uek.x86_64.rpm
aarch64:
bpftool-5.15.0-202.135.2.el8uek.aarch64.rpm
kernel-uek-5.15.0-202.135.2.el8uek.aarch64.rpm
kernel-uek-core-5.15.0-202.135.2.el8uek.aarch64.rpm
kernel-uek-debug-5.15.0-202.135.2.el8uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-202.135.2.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-202.135.2.el8uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-202.135.2.el8uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-202.135.2.el8uek.aarch64.rpm
kernel-uek-devel-5.15.0-202.135.2.el8uek.aarch64.rpm
kernel-uek-doc-5.15.0-202.135.2.el8uek.noarch.rpm
kernel-uek-modules-5.15.0-202.135.2.el8uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-202.135.2.el8uek.aarch64.rpm
kernel-uek-container-5.15.0-202.135.2.el8uek.aarch64.rpm
kernel-uek-container-debug-5.15.0-202.135.2.el8uek.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//kernel-uek-5.15.0-202.135.2.el8uek.src.rpm
Description of changes:
[5.15.0-202.135.2.el8uek]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson) [Orabug: 36131271]
- hugetlb: missing bootmem gigantic page initialization (Jane Chu) [Orabug: 36126864]
[5.15.0-202.135.1.el8uek]
- uek: kabi: update aarch64 kABI files for new symbols (Saeed Mirzamohammadi) [Orabug: 36008926]
- uek: kabi: update x86_64 kABI files for new symbols (Saeed Mirzamohammadi) [Orabug: 36008926]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski) [Orabug: 36060778]
ELBA-2024-12062 Oracle Linux 8 Unbreakable Enterprise kernel-container bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-12062
http://linux.oracle.com/errata/ELBA-2024-12062.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-container-5.4.17-2136.326.6.1.el8.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.326.6.1.el8.x86_64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//kernel-uek-container-5.4.17-2136.326.6.1.el8.src.rpm
Description of changes:
[5.4.17-2136.326.6.1.el8]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson) [Orabug: 36152738]
- octeontx_edac: Fix a potential null pointer dereference (Thomas Tai) [Orabug: 36152733]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski) [Orabug: 36152730]
- io_uring: break iopolling on signal (Pavel Begunkov) [Orabug: 36152721]
- io_uring: break out of iowq iopoll on teardown (Pavel Begunkov) [Orabug: 36152721]
- io_uring: always lock in io_apoll_task_func (Dylan Yudaken) [Orabug: 36152721]
- io_uring: correct check for O_TMPFILE (Aleksa Sarai) [Orabug: 36152721]
- io_uring: gate iowait schedule on having pending requests (Jens Axboe) [Orabug: 36152721]
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe) [Orabug: 36152721]
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek) [Orabug: 36152721]
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe) [Orabug: 36152721]
- io_uring: Use io_schedule* in cqring wait (Andres Freund) [Orabug: 36152721]
- io_uring: wait interruptibly for request completions on exit (Jens Axboe) [Orabug: 36152721]
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe) [Orabug: 36152721]
ELBA-2024-12060 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-12060
http://linux.oracle.com/errata/ELBA-2024-12060.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-5.4.17-2136.327.2.el8uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.327.2.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.327.2.el8uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.327.2.el8uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.327.2.el8uek.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//kernel-uek-5.4.17-2136.327.2.el8uek.src.rpm
Description of changes:
[5.4.17-2136.327.2.el8uek]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson) [Orabug: 36131274]
[5.4.17-2136.327.1.el8uek]
- hugetlb: disable HVO in Xen (Jane Chu) [Orabug: 35904478] [Orabug: 35575618]
- hugetlb: batch TLB flushes when restoring vmemmap (Mike Kravetz) [Orabug: 35575618]
- hugetlb: batch TLB flushes when freeing vmemmap (Joao Martins) [Orabug: 35575618]
- hugetlb: batch PMD split for bulk vmemmap dedup (Joao Martins) [Orabug: 35575618]
- hugetlb: batch freeing of vmemmap pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: perform vmemmap restoration on a list of pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: perform vmemmap optimization on a list of pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: restructure pool allocations (Mike Kravetz) [Orabug: 35575618]
- hugetlb: optimize update_and_free_pages_bulk to avoid lock cycles (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: allow alloc vmemmap pages fallback to other nodes (Yuan Can) [Orabug: 35575618]
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages (Xueshi Hu) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes (Yuan Can) [Orabug: 35575618]
- hugetlb: check for hugetlb folio before vmemmap_restore (Mike Kravetz) [Orabug: 35575618]
- hugetlb: set hugetlb page flag before optimizing vmemmap (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix a race between vmemmap pmd split (Muchun Song) [Orabug: 35575618]
- hugetlb: do not clear hugetlb dtor until allocating vmemmap (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: provide stronger vmemmap allocation guarantees (Pasha Tatashin) [Orabug: 35575618]
- mm: hugetlb_vmemmap: simplify hugetlb_vmemmap_init() a bit (Muchun Song) [Orabug: 35575618]
- sysctl: fix proc_dobool() usability (Ondrej Mosnacek) [Orabug: 35575618]
- mm/hugetlb_vmemmap: remap head page to newly allocated page (Joao Martins) [Orabug: 35575618]
- hugetlb: fix __prep_compound_gigantic_page page flag setting (Mike Kravetz) [Orabug: 35575618]
- hugetlb: freeze allocated pages before creating hugetlb pages (Mike Kravetz) [Orabug: 35575618]
- mm/hugetlb: correct demote page offset logic (Doug Berger) [Orabug: 35575618]
- mm: use nth_page instead of mem_map_offset mem_map_next (Cheng Li) [Orabug: 35575618]
- mm: hugetlb_vmemmap: remove redundant list_del() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: simplify reset_struct_pages() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: add missing smp_wmb() before set_pte_at() (Miaohe Lin) [Orabug: 35575618]
- mm: hugetlb_vmemmap: use PTRS_PER_PTE instead of PMD_SIZE / PAGE_SIZE (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: move code comments to vmemmap_dedup.rst (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: improve hugetlb_vmemmap code readability (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: replace early_param() with core_param() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: move vmemmap code related to HugeTLB to hugetlb_vmemmap.c (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: introduce the name HVO (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: optimize vmemmap_optimize_mode handling (Muchun Song) [Orabug: 35575618]
- sysctl: introduce new proc handler proc_dobool (Jia He) [Orabug: 35575618]
- mm: hugetlb_vmemmap: delete hugetlb_optimize_vmemmap_enabled() (Muchun Song) [Orabug: 35575618]
- mm: memory_hotplug: make hugetlb_optimize_vmemmap compatible with memmap_on_memory (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix CONFIG_HUGETLB_PAGE_FREE_VMEMMAP_DEFAULT_ON (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: add hugetlb_optimize_vmemmap sysctl (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: use kstrtobool for hugetlb_vmemmap param parsing (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: disable hugetlb_optimize_vmemmap when struct page crosses page boundaries (Muchun Song) [Orabug: 35575618]
- mm/hugetlb_vmemmap: move comment block to Documentation/vm (Joao Martins) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup CONFIG_HUGETLB_PAGE_FREE_VMEMMAP* (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup hugetlb_free_vmemmap_enabled* (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup hugetlb_vmemmap related functions (Muchun Song) [Orabug: 35575618]
- mm: sparsemem: move vmemmap related to HugeTLB to CONFIG_HUGETLB_PAGE_FREE_VMEMMAP (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- selftests: vm: add a hugetlb test case (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: sparsemem: fix missing higher order allocation splitting (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: sparsemem: use page table lock to protect kernel pmd operations (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: hugetlb: replace hugetlb_free_vmemmap_enabled with a static_key (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- jump_label: Provide CONFIG-driven build state defaults (Kees Cook) [Orabug: 35575618]
- mm: hugetlb: free the 2nd vmemmap page associated with each HugeTLB page (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- uek: kabi: update a kABI symbol for ACFS (Saeed Mirzamohammadi) [Orabug: 36083492]
- io_uring: break iopolling on signal (Pavel Begunkov) [Orabug: 36029307]
- io_uring: break out of iowq iopoll on teardown (Pavel Begunkov) [Orabug: 36029307]
- io_uring: always lock in io_apoll_task_func (Dylan Yudaken) [Orabug: 36029307]
- io_uring: correct check for O_TMPFILE (Aleksa Sarai) [Orabug: 36029307]
- io_uring: gate iowait schedule on having pending requests (Jens Axboe) [Orabug: 36029307]
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe) [Orabug: 36029307]
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek) [Orabug: 36029307]
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe) [Orabug: 36029307]
- io_uring: Use io_schedule* in cqring wait (Andres Freund) [Orabug: 36029307]
- io_uring: wait interruptibly for request completions on exit (Jens Axboe) [Orabug: 36029307]
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe) [Orabug: 36029307]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski) [Orabug: 36060779]
- octeontx_edac: Fix a potential null pointer dereference (Thomas Tai) [Orabug: 36087361]
ELBA-2024-12059 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-12059
http://linux.oracle.com/errata/ELBA-2024-12059.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-5.4.17-2136.326.6.1.el8uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.326.6.1.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.326.6.1.el8uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.326.6.1.el8uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.326.6.1.el8uek.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//kernel-uek-5.4.17-2136.326.6.1.el8uek.src.rpm
Description of changes:
[5.4.17-2136.326.6.1.el8uek]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson) [Orabug: 36152738]
- octeontx_edac: Fix a potential null pointer dereference (Thomas Tai) [Orabug: 36152733]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski) [Orabug: 36152730]
- io_uring: break iopolling on signal (Pavel Begunkov) [Orabug: 36152721]
- io_uring: break out of iowq iopoll on teardown (Pavel Begunkov) [Orabug: 36152721]
- io_uring: always lock in io_apoll_task_func (Dylan Yudaken) [Orabug: 36152721]
- io_uring: correct check for O_TMPFILE (Aleksa Sarai) [Orabug: 36152721]
- io_uring: gate iowait schedule on having pending requests (Jens Axboe) [Orabug: 36152721]
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe) [Orabug: 36152721]
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek) [Orabug: 36152721]
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe) [Orabug: 36152721]
- io_uring: Use io_schedule* in cqring wait (Andres Freund) [Orabug: 36152721]
- io_uring: wait interruptibly for request completions on exit (Jens Axboe) [Orabug: 36152721]
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe) [Orabug: 36152721]
ELBA-2024-12070 Oracle Linux 8 Unbreakable Enterprise kernel-container bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-12070
http://linux.oracle.com/errata/ELBA-2024-12070.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-container-5.4.17-2136.327.2.el8.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.327.2.el8.x86_64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//kernel-uek-container-5.4.17-2136.327.2.el8.src.rpm
Description of changes:
[5.4.17-2136.327.2.el8]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean
Christopherson) [Orabug: 36131274]
[5.4.17-2136.327.1.el8]
- hugetlb: disable HVO in Xen (Jane Chu) [Orabug: 35904478] [Orabug: 35575618]
- hugetlb: batch TLB flushes when restoring vmemmap (Mike Kravetz) [Orabug: 35575618]
- hugetlb: batch TLB flushes when freeing vmemmap (Joao Martins) [Orabug: 35575618]
- hugetlb: batch PMD split for bulk vmemmap dedup (Joao Martins) [Orabug: 35575618]
- hugetlb: batch freeing of vmemmap pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: perform vmemmap restoration on a list of pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: perform vmemmap optimization on a list of pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: restructure pool allocations (Mike Kravetz) [Orabug: 35575618]
- hugetlb: optimize update_and_free_pages_bulk to avoid lock cycles (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: allow alloc vmemmap pages fallback to other nodes (Yuan Can) [Orabug: 35575618]
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages (Xueshi Hu) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes (Yuan Can) [Orabug: 35575618]
- hugetlb: check for hugetlb folio before vmemmap_restore (Mike Kravetz) [Orabug: 35575618]
- hugetlb: set hugetlb page flag before optimizing vmemmap (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix a race between vmemmap pmd split (Muchun Song) [Orabug: 35575618]
- hugetlb: do not clear hugetlb dtor until allocating vmemmap (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: provide stronger vmemmap allocation guarantees (Pasha Tatashin) [Orabug: 35575618]
- mm: hugetlb_vmemmap: simplify hugetlb_vmemmap_init() a bit (Muchun Song) [Orabug: 35575618]
- sysctl: fix proc_dobool() usability (Ondrej Mosnacek) [Orabug: 35575618]
- mm/hugetlb_vmemmap: remap head page to newly allocated page (Joao Martins) [Orabug: 35575618]
- hugetlb: fix __prep_compound_gigantic_page page flag setting (Mike Kravetz) [Orabug: 35575618]
- hugetlb: freeze allocated pages before creating hugetlb pages (Mike Kravetz) [Orabug: 35575618]
- mm/hugetlb: correct demote page offset logic (Doug Berger) [Orabug: 35575618]
- mm: use nth_page instead of mem_map_offset mem_map_next (Cheng Li) [Orabug: 35575618]
- mm: hugetlb_vmemmap: remove redundant list_del() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: simplify reset_struct_pages() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: add missing smp_wmb() before set_pte_at() (Miaohe Lin) [Orabug: 35575618]
- mm: hugetlb_vmemmap: use PTRS_PER_PTE instead of PMD_SIZE / PAGE_SIZE (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: move code comments to vmemmap_dedup.rst (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: improve hugetlb_vmemmap code readability (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: replace early_param() with core_param() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: move vmemmap code related to HugeTLB to hugetlb_vmemmap.c (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: introduce the name HVO (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: optimize vmemmap_optimize_mode handling (Muchun Song) [Orabug: 35575618]
- sysctl: introduce new proc handler proc_dobool (Jia He) [Orabug: 35575618]
- mm: hugetlb_vmemmap: delete hugetlb_optimize_vmemmap_enabled() (Muchun Song) [Orabug: 35575618]
- mm: memory_hotplug: make hugetlb_optimize_vmemmap compatible with memmap_on_memory (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix CONFIG_HUGETLB_PAGE_FREE_VMEMMAP_DEFAULT_ON (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: add hugetlb_optimize_vmemmap sysctl (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: use kstrtobool for hugetlb_vmemmap param parsing (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: disable hugetlb_optimize_vmemmap when struct page crosses page boundaries (Muchun Song) [Orabug: 35575618]
- mm/hugetlb_vmemmap: move comment block to Documentation/vm (Joao Martins) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup CONFIG_HUGETLB_PAGE_FREE_VMEMMAP* (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup hugetlb_free_vmemmap_enabled* (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup hugetlb_vmemmap related functions (Muchun Song) [Orabug: 35575618]
- mm: sparsemem: move vmemmap related to HugeTLB to CONFIG_HUGETLB_PAGE_FREE_VMEMMAP (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- selftests: vm: add a hugetlb test case (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: sparsemem: fix missing higher order allocation splitting (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: sparsemem: use page table lock to protect kernel pmd operations (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: hugetlb: replace hugetlb_free_vmemmap_enabled with a static_key (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- jump_label: Provide CONFIG-driven build state defaults (Kees Cook) [Orabug: 35575618]
- mm: hugetlb: free the 2nd vmemmap page associated with each HugeTLB page (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- uek: kabi: update a kABI symbol for ACFS (Saeed Mirzamohammadi) [Orabug: 36083492]
- io_uring: break iopolling on signal (Pavel Begunkov) [Orabug: 36029307]
- io_uring: break out of iowq iopoll on teardown (Pavel Begunkov) [Orabug: 36029307]
- io_uring: always lock in io_apoll_task_func (Dylan Yudaken) [Orabug: 36029307]
- io_uring: correct check for O_TMPFILE (Aleksa Sarai) [Orabug: 36029307]
- io_uring: gate iowait schedule on having pending requests (Jens Axboe) [Orabug: 36029307]
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe) [Orabug: 36029307]
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek) [Orabug: 36029307]
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe) [Orabug: 36029307]
- io_uring: Use io_schedule* in cqring wait (Andres Freund) [Orabug: 36029307]
- io_uring: wait interruptibly for request completions on exit (Jens Axboe) [Orabug: 36029307]
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe) [Orabug: 36029307]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski) [Orabug: 36060779]
- octeontx_edac: Fix a potential null pointer dereference (Thomas Tai) [Orabug: 36087361]
ELBA-2024-12060 Oracle Linux 7 Unbreakable Enterprise kernel bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-12060
http://linux.oracle.com/errata/ELBA-2024-12060.html
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-5.4.17-2136.327.2.el7uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.327.2.el7uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.327.2.el7uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.327.2.el7uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.327.2.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.327.2.el7uek.x86_64.rpm
aarch64:
kernel-uek-5.4.17-2136.327.2.el7uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.327.2.el7uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.327.2.el7uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.327.2.el7uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.327.2.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.327.2.el7uek.aarch64.rpm
kernel-uek-tools-libs-5.4.17-2136.327.2.el7uek.aarch64.rpm
perf-5.4.17-2136.327.2.el7uek.aarch64.rpm
python-perf-5.4.17-2136.327.2.el7uek.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//kernel-uek-5.4.17-2136.327.2.el7uek.src.rpm
Description of changes:
[5.4.17-2136.327.2.el7uek]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson) [Orabug: 36131274]
[5.4.17-2136.327.1.el7uek]
- hugetlb: disable HVO in Xen (Jane Chu) [Orabug: 35904478] [Orabug: 35575618]
- hugetlb: batch TLB flushes when restoring vmemmap (Mike Kravetz) [Orabug: 35575618]
- hugetlb: batch TLB flushes when freeing vmemmap (Joao Martins) [Orabug: 35575618]
- hugetlb: batch PMD split for bulk vmemmap dedup (Joao Martins) [Orabug: 35575618]
- hugetlb: batch freeing of vmemmap pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: perform vmemmap restoration on a list of pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: perform vmemmap optimization on a list of pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: restructure pool allocations (Mike Kravetz) [Orabug: 35575618]
- hugetlb: optimize update_and_free_pages_bulk to avoid lock cycles (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: allow alloc vmemmap pages fallback to other nodes (Yuan Can) [Orabug: 35575618]
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages (Xueshi Hu) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes (Yuan Can) [Orabug: 35575618]
- hugetlb: check for hugetlb folio before vmemmap_restore (Mike Kravetz) [Orabug: 35575618]
- hugetlb: set hugetlb page flag before optimizing vmemmap (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix a race between vmemmap pmd split (Muchun Song) [Orabug: 35575618]
- hugetlb: do not clear hugetlb dtor until allocating vmemmap (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: provide stronger vmemmap allocation guarantees (Pasha Tatashin) [Orabug: 35575618]
- mm: hugetlb_vmemmap: simplify hugetlb_vmemmap_init() a bit (Muchun Song) [Orabug: 35575618]
- sysctl: fix proc_dobool() usability (Ondrej Mosnacek) [Orabug: 35575618]
- mm/hugetlb_vmemmap: remap head page to newly allocated page (Joao Martins) [Orabug: 35575618]
- hugetlb: fix __prep_compound_gigantic_page page flag setting (Mike Kravetz) [Orabug: 35575618]
- hugetlb: freeze allocated pages before creating hugetlb pages (Mike Kravetz) [Orabug: 35575618]
- mm/hugetlb: correct demote page offset logic (Doug Berger) [Orabug: 35575618]
- mm: use nth_page instead of mem_map_offset mem_map_next (Cheng Li) [Orabug: 35575618]
- mm: hugetlb_vmemmap: remove redundant list_del() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: simplify reset_struct_pages() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: add missing smp_wmb() before set_pte_at() (Miaohe Lin) [Orabug: 35575618]
- mm: hugetlb_vmemmap: use PTRS_PER_PTE instead of PMD_SIZE / PAGE_SIZE (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: move code comments to vmemmap_dedup.rst (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: improve hugetlb_vmemmap code readability (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: replace early_param() with core_param() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: move vmemmap code related to HugeTLB to hugetlb_vmemmap.c (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: introduce the name HVO (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: optimize vmemmap_optimize_mode handling (Muchun Song) [Orabug: 35575618]
- sysctl: introduce new proc handler proc_dobool (Jia He) [Orabug: 35575618]
- mm: hugetlb_vmemmap: delete hugetlb_optimize_vmemmap_enabled() (Muchun Song) [Orabug: 35575618]
- mm: memory_hotplug: make hugetlb_optimize_vmemmap compatible with memmap_on_memory (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix CONFIG_HUGETLB_PAGE_FREE_VMEMMAP_DEFAULT_ON (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: add hugetlb_optimize_vmemmap sysctl (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: use kstrtobool for hugetlb_vmemmap param parsing (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: disable hugetlb_optimize_vmemmap when struct page crosses page boundaries (Muchun Song) [Orabug: 35575618]
- mm/hugetlb_vmemmap: move comment block to Documentation/vm (Joao Martins) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup CONFIG_HUGETLB_PAGE_FREE_VMEMMAP* (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup hugetlb_free_vmemmap_enabled* (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup hugetlb_vmemmap related functions (Muchun Song) [Orabug: 35575618]
- mm: sparsemem: move vmemmap related to HugeTLB to CONFIG_HUGETLB_PAGE_FREE_VMEMMAP (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- selftests: vm: add a hugetlb test case (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: sparsemem: fix missing higher order allocation splitting (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: sparsemem: use page table lock to protect kernel pmd operations (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: hugetlb: replace hugetlb_free_vmemmap_enabled with a static_key (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- jump_label: Provide CONFIG-driven build state defaults (Kees Cook) [Orabug: 35575618]
- mm: hugetlb: free the 2nd vmemmap page associated with each HugeTLB page (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- uek: kabi: update a kABI symbol for ACFS (Saeed Mirzamohammadi) [Orabug: 36083492]
- io_uring: break iopolling on signal (Pavel Begunkov) [Orabug: 36029307]
- io_uring: break out of iowq iopoll on teardown (Pavel Begunkov) [Orabug: 36029307]
- io_uring: always lock in io_apoll_task_func (Dylan Yudaken) [Orabug: 36029307]
- io_uring: correct check for O_TMPFILE (Aleksa Sarai) [Orabug: 36029307]
- io_uring: gate iowait schedule on having pending requests (Jens Axboe) [Orabug: 36029307]
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe) [Orabug: 36029307]
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek) [Orabug: 36029307]
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe) [Orabug: 36029307]
- io_uring: Use io_schedule* in cqring wait (Andres Freund) [Orabug: 36029307]
- io_uring: wait interruptibly for request completions on exit (Jens Axboe) [Orabug: 36029307]
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe) [Orabug: 36029307]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski) [Orabug: 36060779]
- octeontx_edac: Fix a potential null pointer dereference (Thomas Tai) [Orabug: 36087361]
ELBA-2024-12071 Oracle Linux 7 Unbreakable Enterprise kernel-container bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-12071
http://linux.oracle.com/errata/ELBA-2024-12071.html
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-container-5.4.17-2136.327.2.el7.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.327.2.el7.x86_64.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//kernel-uek-container-5.4.17-2136.327.2.el7.src.rpm
Description of changes:
[5.4.17-2136.327.2.el7]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean
Christopherson) [Orabug: 36131274]
[5.4.17-2136.327.1.el7]
- hugetlb: disable HVO in Xen (Jane Chu) [Orabug: 35904478] [Orabug: 35575618]
- hugetlb: batch TLB flushes when restoring vmemmap (Mike Kravetz) [Orabug: 35575618]
- hugetlb: batch TLB flushes when freeing vmemmap (Joao Martins) [Orabug: 35575618]
- hugetlb: batch PMD split for bulk vmemmap dedup (Joao Martins) [Orabug: 35575618]
- hugetlb: batch freeing of vmemmap pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: perform vmemmap restoration on a list of pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: perform vmemmap optimization on a list of pages (Mike Kravetz) [Orabug: 35575618]
- hugetlb: restructure pool allocations (Mike Kravetz) [Orabug: 35575618]
- hugetlb: optimize update_and_free_pages_bulk to avoid lock cycles (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: allow alloc vmemmap pages fallback to other nodes (Yuan Can) [Orabug: 35575618]
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages (Xueshi Hu) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes (Yuan Can) [Orabug: 35575618]
- hugetlb: check for hugetlb folio before vmemmap_restore (Mike Kravetz) [Orabug: 35575618]
- hugetlb: set hugetlb page flag before optimizing vmemmap (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix a race between vmemmap pmd split (Muchun Song) [Orabug: 35575618]
- hugetlb: do not clear hugetlb dtor until allocating vmemmap (Mike Kravetz) [Orabug: 35575618]
- mm: hugetlb_vmemmap: provide stronger vmemmap allocation guarantees (Pasha Tatashin) [Orabug: 35575618]
- mm: hugetlb_vmemmap: simplify hugetlb_vmemmap_init() a bit (Muchun Song) [Orabug: 35575618]
- sysctl: fix proc_dobool() usability (Ondrej Mosnacek) [Orabug: 35575618]
- mm/hugetlb_vmemmap: remap head page to newly allocated page (Joao Martins) [Orabug: 35575618]
- hugetlb: fix __prep_compound_gigantic_page page flag setting (Mike Kravetz) [Orabug: 35575618]
- hugetlb: freeze allocated pages before creating hugetlb pages (Mike Kravetz) [Orabug: 35575618]
- mm/hugetlb: correct demote page offset logic (Doug Berger) [Orabug: 35575618]
- mm: use nth_page instead of mem_map_offset mem_map_next (Cheng Li) [Orabug: 35575618]
- mm: hugetlb_vmemmap: remove redundant list_del() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: simplify reset_struct_pages() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: add missing smp_wmb() before set_pte_at() (Miaohe Lin) [Orabug: 35575618]
- mm: hugetlb_vmemmap: use PTRS_PER_PTE instead of PMD_SIZE / PAGE_SIZE (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: move code comments to vmemmap_dedup.rst (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: improve hugetlb_vmemmap code readability (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: replace early_param() with core_param() (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: move vmemmap code related to HugeTLB to hugetlb_vmemmap.c (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: introduce the name HVO (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: optimize vmemmap_optimize_mode handling (Muchun Song) [Orabug: 35575618]
- sysctl: introduce new proc handler proc_dobool (Jia He) [Orabug: 35575618]
- mm: hugetlb_vmemmap: delete hugetlb_optimize_vmemmap_enabled() (Muchun Song) [Orabug: 35575618]
- mm: memory_hotplug: make hugetlb_optimize_vmemmap compatible with memmap_on_memory (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: fix CONFIG_HUGETLB_PAGE_FREE_VMEMMAP_DEFAULT_ON (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: add hugetlb_optimize_vmemmap sysctl (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: use kstrtobool for hugetlb_vmemmap param parsing (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: disable hugetlb_optimize_vmemmap when struct page crosses page boundaries (Muchun Song) [Orabug: 35575618]
- mm/hugetlb_vmemmap: move comment block to Documentation/vm (Joao Martins) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup CONFIG_HUGETLB_PAGE_FREE_VMEMMAP* (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup hugetlb_free_vmemmap_enabled* (Muchun Song) [Orabug: 35575618]
- mm: hugetlb_vmemmap: cleanup hugetlb_vmemmap related functions (Muchun Song) [Orabug: 35575618]
- mm: sparsemem: move vmemmap related to HugeTLB to CONFIG_HUGETLB_PAGE_FREE_VMEMMAP (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- selftests: vm: add a hugetlb test case (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: sparsemem: fix missing higher order allocation splitting (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: sparsemem: use page table lock to protect kernel pmd operations (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- mm: hugetlb: replace hugetlb_free_vmemmap_enabled with a static_key (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- jump_label: Provide CONFIG-driven build state defaults (Kees Cook) [Orabug: 35575618]
- mm: hugetlb: free the 2nd vmemmap page associated with each HugeTLB page (Muchun Song) [Orabug: 34549952] [Orabug: 35575618]
- uek: kabi: update a kABI symbol for ACFS (Saeed Mirzamohammadi) [Orabug: 36083492]
- io_uring: break iopolling on signal (Pavel Begunkov) [Orabug: 36029307]
- io_uring: break out of iowq iopoll on teardown (Pavel Begunkov) [Orabug: 36029307]
- io_uring: always lock in io_apoll_task_func (Dylan Yudaken) [Orabug: 36029307]
- io_uring: correct check for O_TMPFILE (Aleksa Sarai) [Orabug: 36029307]
- io_uring: gate iowait schedule on having pending requests (Jens Axboe) [Orabug: 36029307]
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe) [Orabug: 36029307]
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek) [Orabug: 36029307]
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe) [Orabug: 36029307]
- io_uring: Use io_schedule* in cqring wait (Andres Freund) [Orabug: 36029307]
- io_uring: wait interruptibly for request completions on exit (Jens Axboe) [Orabug: 36029307]
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe) [Orabug: 36029307]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski) [Orabug: 36060779]
- octeontx_edac: Fix a potential null pointer dereference (Thomas Tai) [Orabug: 36087361]
ELBA-2024-12061 Oracle Linux 7 Unbreakable Enterprise kernel-container bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-12061
http://linux.oracle.com/errata/ELBA-2024-12061.html
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-container-5.4.17-2136.326.6.1.el7.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.326.6.1.el7.x86_64.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//kernel-uek-container-5.4.17-2136.326.6.1.el7.src.rpm
Description of changes:
[5.4.17-2136.326.6.1.el7]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson) [Orabug: 36152738]
- octeontx_edac: Fix a potential null pointer dereference (Thomas Tai) [Orabug: 36152733]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski) [Orabug: 36152730]
- io_uring: break iopolling on signal (Pavel Begunkov) [Orabug: 36152721]
- io_uring: break out of iowq iopoll on teardown (Pavel Begunkov) [Orabug: 36152721]
- io_uring: always lock in io_apoll_task_func (Dylan Yudaken) [Orabug: 36152721]
- io_uring: correct check for O_TMPFILE (Aleksa Sarai) [Orabug: 36152721]
- io_uring: gate iowait schedule on having pending requests (Jens Axboe) [Orabug: 36152721]
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe) [Orabug: 36152721]
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek) [Orabug: 36152721]
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe) [Orabug: 36152721]
- io_uring: Use io_schedule* in cqring wait (Andres Freund) [Orabug: 36152721]
- io_uring: wait interruptibly for request completions on exit (Jens Axboe) [Orabug: 36152721]
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe) [Orabug: 36152721]
ELBA-2024-12059 Oracle Linux 7 Unbreakable Enterprise kernel bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-12059
http://linux.oracle.com/errata/ELBA-2024-12059.html
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-5.4.17-2136.326.6.1.el7uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.326.6.1.el7uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.326.6.1.el7uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.326.6.1.el7uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.326.6.1.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.326.6.1.el7uek.x86_64.rpm
aarch64:
kernel-uek-5.4.17-2136.326.6.1.el7uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.326.6.1.el7uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.326.6.1.el7uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.326.6.1.el7uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.326.6.1.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.326.6.1.el7uek.aarch64.rpm
kernel-uek-tools-libs-5.4.17-2136.326.6.1.el7uek.aarch64.rpm
perf-5.4.17-2136.326.6.1.el7uek.aarch64.rpm
python-perf-5.4.17-2136.326.6.1.el7uek.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//kernel-uek-5.4.17-2136.326.6.1.el7uek.src.rpm
Description of changes:
[5.4.17-2136.326.6.1.el7uek]
- KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson) [Orabug: 36152738]
- octeontx_edac: Fix a potential null pointer dereference (Thomas Tai) [Orabug: 36152733]
- rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski) [Orabug: 36152730]
- io_uring: break iopolling on signal (Pavel Begunkov) [Orabug: 36152721]
- io_uring: break out of iowq iopoll on teardown (Pavel Begunkov) [Orabug: 36152721]
- io_uring: always lock in io_apoll_task_func (Dylan Yudaken) [Orabug: 36152721]
- io_uring: correct check for O_TMPFILE (Aleksa Sarai) [Orabug: 36152721]
- io_uring: gate iowait schedule on having pending requests (Jens Axboe) [Orabug: 36152721]
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe) [Orabug: 36152721]
- io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek) [Orabug: 36152721]
- io_uring: add reschedule point to handle_tw_list() (Jens Axboe) [Orabug: 36152721]
- io_uring: Use io_schedule* in cqring wait (Andres Freund) [Orabug: 36152721]
- io_uring: wait interruptibly for request completions on exit (Jens Axboe) [Orabug: 36152721]
- io_uring: ensure IOPOLL locks around deferred work (Jens Axboe) [Orabug: 36152721]
ELSA-2024-0145 Moderate: Oracle Linux 7 ipa security update (aarch64)
Oracle Linux Security Advisory ELSA-2024-0145
http://linux.oracle.com/errata/ELSA-2024-0145.html
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
aarch64:
ipa-client-4.6.8-5.0.1.el7_9.16.aarch64.rpm
ipa-client-common-4.6.8-5.0.1.el7_9.16.noarch.rpm
ipa-common-4.6.8-5.0.1.el7_9.16.noarch.rpm
ipa-python-compat-4.6.8-5.0.1.el7_9.16.noarch.rpm
ipa-server-4.6.8-5.0.1.el7_9.16.aarch64.rpm
ipa-server-common-4.6.8-5.0.1.el7_9.16.noarch.rpm
ipa-server-dns-4.6.8-5.0.1.el7_9.16.noarch.rpm
ipa-server-trust-ad-4.6.8-5.0.1.el7_9.16.aarch64.rpm
python2-ipaclient-4.6.8-5.0.1.el7_9.16.noarch.rpm
python2-ipalib-4.6.8-5.0.1.el7_9.16.noarch.rpm
python2-ipaserver-4.6.8-5.0.1.el7_9.16.noarch.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//ipa-4.6.8-5.0.1.el7_9.16.src.rpm
Related CVEs:
CVE-2023-5455
Description of changes:
[4.6.8-5.0.1]
- Blank out header-logo.png product-name.png
- Replace login-screen-logo.png [Orabug: 20362818]
[4.6.8-5.el7_9.16]
- Resolves: RHEL-12570 ipa: Invalid CSRF protection
