Oracle Linux 6277 Published by

Oracle Linux has received various security upgrades, including libsoup, llvm-toolset:ol8, chrony, tigervnc, dracut, osbuild-composer, and grubby bug fixes, which improve security and repair bugs:

ELSA-2024-9573 Important: Oracle Linux 8 libsoup security update
ELBA-2024-8828 Oracle Linux 8 llvm-toolset:ol8 bug fix and enhancement update
ELBA-2024-12820 Oracle Linux 8 chrony bug fix update
ELSA-2024-9540 Important: Oracle Linux 8 tigervnc security update
ELBA-2024-12819 Oracle Linux 8 dracut bug fix update
ELBA-2024-12818 Oracle Linux 8 osbuild-composer bug fix update
ELBA-2024-12821 Oracle Linux 7 grubby bug fix update




ELSA-2024-9573 Important: Oracle Linux 8 libsoup security update


Oracle Linux Security Advisory ELSA-2024-9573

http://linux.oracle.com/errata/ELSA-2024-9573.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
libsoup-2.62.3-6.el8_10.i686.rpm
libsoup-2.62.3-6.el8_10.x86_64.rpm
libsoup-devel-2.62.3-6.el8_10.i686.rpm
libsoup-devel-2.62.3-6.el8_10.x86_64.rpm

aarch64:
libsoup-2.62.3-6.el8_10.aarch64.rpm
libsoup-devel-2.62.3-6.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//libsoup-2.62.3-6.el8_10.src.rpm

Related CVEs:

CVE-2024-52530
CVE-2024-52532

Description of changes:

[2.62.3-6]
- Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names
- Backport upstream patch for CVE-2024-52530 - infinite loop while reading websocket data
- Resolves: RHEL-67076
- Resolves: RHEL-67067



ELBA-2024-8828 Oracle Linux 8 llvm-toolset:ol8 bug fix and enhancement update


Oracle Linux Bug Fix Advisory ELBA-2024-8828

http://linux.oracle.com/errata/ELBA-2024-8828.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
clang-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
clang-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
clang-analyzer-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.noarch.rpm
clang-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
clang-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
clang-libs-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
clang-libs-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
clang-resource-filesystem-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.noarch.rpm
clang-tools-extra-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
clang-tools-extra-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
clang-tools-extra-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
clang-tools-extra-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
compiler-rt-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
compiler-rt-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
git-clang-format-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
git-clang-format-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
libomp-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
libomp-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
libomp-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
libomp-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
lld-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
lld-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
lldb-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
lldb-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
lldb-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
lldb-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
lld-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
lld-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
lld-libs-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
lld-libs-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
llvm-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
llvm-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
llvm-cmake-utils-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
llvm-cmake-utils-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
llvm-compat-17.0.6-3.0.1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
llvm-compat-17.0.6-3.0.1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
llvm-compat-devel-17.0.6-3.0.1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
llvm-compat-devel-17.0.6-3.0.1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
llvm-compat-libs-17.0.6-3.0.1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
llvm-compat-libs-17.0.6-3.0.1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
llvm-devel-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
llvm-devel-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
llvm-doc-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.noarch.rpm
llvm-googletest-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
llvm-googletest-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
llvm-libs-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
llvm-libs-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
llvm-static-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
llvm-static-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
llvm-test-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
llvm-test-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
llvm-toolset-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
llvm-toolset-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
python3-clang-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
python3-clang-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm
python3-lit-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.noarch.rpm
python3-lldb-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.i686.rpm
python3-lldb-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.x86_64.rpm

aarch64:
clang-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
clang-analyzer-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.noarch.rpm
clang-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
clang-libs-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
clang-resource-filesystem-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.noarch.rpm
clang-tools-extra-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
clang-tools-extra-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
compiler-rt-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
git-clang-format-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
libomp-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
libomp-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
lld-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
lldb-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
lldb-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
lld-devel-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
lld-libs-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
llvm-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
llvm-cmake-utils-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
llvm-compat-17.0.6-3.0.1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
llvm-compat-devel-17.0.6-3.0.1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
llvm-compat-libs-17.0.6-3.0.1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
llvm-devel-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
llvm-doc-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.noarch.rpm
llvm-googletest-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
llvm-libs-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
llvm-static-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
llvm-test-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
llvm-toolset-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
python3-clang-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm
python3-lit-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.noarch.rpm
python3-lldb-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//clang-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//compiler-rt-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//libomp-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//lld-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//lldb-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//llvm-18.1.8-3.0.1.module+el8.10.0+90440+aa5a3b2d.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//llvm-compat-17.0.6-3.0.1.module+el8.10.0+90440+aa5a3b2d.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//python-lit-18.1.8-1.module+el8.10.0+90440+aa5a3b2d.src.rpm

Description of changes:

clang
[18.1.8-1]
- 18.1.8 Release

[18.1.2-7]
- Strip .gnu.build-attrib* sections from some binaries too

[18.1.2-6]
- Strip .gnu.build-attrib* sections out of libraries

[18.1.2-5]
- Set SOURCE_DATE_EPOCH when testing

[18.1.2-4]
- Limit number of compile jobs to avoid running out of memory

[18.1.2-1]
- 18.1.2 Release

compiler-rt
[18.1.8-1]
- 18.1.8 Release

[18.1.2-1]
- 18.1.2 Release

[18.1.1-1]
- 18.1.1 Release

[18.1.0~rc4-1]
- 18.1.0-rc4 Release

[17.0.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[17.0.6-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[17.0.6-3]
- Add compiler-rt(major) provides

[17.0.6-2]
- Fix install path on i686

libomp
[18.1.8-1]
- 18.1.8 Release

[18.1.2-1]
- 18.1.2 Release

[18.1.1-1]
- 18.1.1 Release

[18.1.0~rc4-1]
- 18.1.0-rc4 Release

[17.0.6-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[17.0.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

lld
[18.1.8-1]
- 18.1.8 Release

[18.1.2-1]
- 18.1.2 Release

[18.1.1-1]
- 18.1.1 Release

[18.1.0~rc4-2]
- Enable s390x arch

[18.1.0~rc4-1]
- 18.1.0-rc4 Release

[17.0.6-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[17.0.6-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[17.0.6-2]
- Add lld-devel(major) provides

lldb
[18.1.8-1]
- 18.1.8 Release

[18.1.2-2]
- Move liblldb symlink to the main package. Fix rhbz#2260611.

[18.1.2-1]
- 18.1.2 Release

[18.1.1-1]
- 18.1.1 Release

[18.1.0~rc4-1]
- 18.1.0-rc4 Release

[17.0.6-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[17.0.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

llvm
[18.1.8-3.0.1]
- Utilize all available cores during build

[18.1.8-3]
- Remove stray fi from postun scriptlet

[18.1.8-2]
- Workaround for GFX11.5 export priority

[18.1.8-1]
- 18.1.8 Release

[18.1.2-1]
- 18.1.2 Release

llvm-compat
[17.0.6-3.0.1]
- Recognize Oracle Linux distros [OraBug: 29422714]

[17.0.6-3]
- Re-enable debuginfo on ppc64le

[17.0.6-2]
- Add devel package

[17.0.6-1]
- 17.0.6 Release

[16.0.6-4]
- Use install targets for clang as well

[16.0.6-3]
- Only skip install rpath

[16.0.6-2]
- Disable rpath

[16.0.6-1]
- 16.0.6 Release

[15.0.7-1]
- 15.0.7 Release

[14.0.6-1]
- 14.0.6 Release

[13.0.1-1]
- Update to 13.0.1

[12.0.1-4]
- Add libclang-cpp.so to package

[12.0.1-3]
- Enable WebAssembly target

[12.0.1-2]
- 12.0.1 Release

* Tue Jun 01 2021 sguelton@redhat.com - 11.0.1-1
- 11.0.1 Release

* Fri Sep 25 2020 sguelton@redhat.com - 10.0.1-1
- 10.0.1 Release

python-lit
[18.1.8-1]
- 18.1.8 Release

[18.1.2-1]
- 18.1.2 Release



ELBA-2024-12820 Oracle Linux 8 chrony bug fix update


Oracle Linux Bug Fix Advisory ELBA-2024-12820

http://linux.oracle.com/errata/ELBA-2024-12820.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
chrony-4.5-2.0.2.el8_10.x86_64.rpm

aarch64:
chrony-4.5-2.0.2.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//chrony-4.5-2.0.2.el8_10.src.rpm

Description of changes:

[4.5-2.0.2]
- Revert back to chronyc default setting [Orabug: 37236739]

[4.5-2.0.1]
- Fixed chrony starting before network-online service [Orabug: 36299189]
- Change chrony.conf to use pool.ntp.org [Orabug: 28627760]



ELSA-2024-9540 Important: Oracle Linux 8 tigervnc security update


Oracle Linux Security Advisory ELSA-2024-9540

http://linux.oracle.com/errata/ELSA-2024-9540.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
tigervnc-1.13.1-14.el8_10.x86_64.rpm
tigervnc-icons-1.13.1-14.el8_10.noarch.rpm
tigervnc-license-1.13.1-14.el8_10.noarch.rpm
tigervnc-selinux-1.13.1-14.el8_10.noarch.rpm
tigervnc-server-1.13.1-14.el8_10.x86_64.rpm
tigervnc-server-minimal-1.13.1-14.el8_10.x86_64.rpm
tigervnc-server-module-1.13.1-14.el8_10.x86_64.rpm

aarch64:
tigervnc-1.13.1-14.el8_10.aarch64.rpm
tigervnc-icons-1.13.1-14.el8_10.noarch.rpm
tigervnc-license-1.13.1-14.el8_10.noarch.rpm
tigervnc-selinux-1.13.1-14.el8_10.noarch.rpm
tigervnc-server-1.13.1-14.el8_10.aarch64.rpm
tigervnc-server-minimal-1.13.1-14.el8_10.aarch64.rpm
tigervnc-server-module-1.13.1-14.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//tigervnc-1.13.1-14.el8_10.src.rpm

Related CVEs:

CVE-2024-9632

Description of changes:

[1.13.1-14]
- Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
Resolves: RHEL-61999



ELBA-2024-12819 Oracle Linux 8 dracut bug fix update


Oracle Linux Bug Fix Advisory ELBA-2024-12819

http://linux.oracle.com/errata/ELBA-2024-12819.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
dracut-049-233.git20240115.0.2.el8.x86_64.rpm
dracut-caps-049-233.git20240115.0.2.el8.x86_64.rpm
dracut-config-generic-049-233.git20240115.0.2.el8.x86_64.rpm
dracut-config-rescue-049-233.git20240115.0.2.el8.x86_64.rpm
dracut-live-049-233.git20240115.0.2.el8.x86_64.rpm
dracut-network-049-233.git20240115.0.2.el8.x86_64.rpm
dracut-squash-049-233.git20240115.0.2.el8.x86_64.rpm
dracut-tools-049-233.git20240115.0.2.el8.x86_64.rpm

aarch64:
dracut-049-233.git20240115.0.2.el8.aarch64.rpm
dracut-caps-049-233.git20240115.0.2.el8.aarch64.rpm
dracut-config-generic-049-233.git20240115.0.2.el8.aarch64.rpm
dracut-config-rescue-049-233.git20240115.0.2.el8.aarch64.rpm
dracut-live-049-233.git20240115.0.2.el8.aarch64.rpm
dracut-network-049-233.git20240115.0.2.el8.aarch64.rpm
dracut-squash-049-233.git20240115.0.2.el8.aarch64.rpm
dracut-tools-049-233.git20240115.0.2.el8.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//dracut-049-233.git20240115.0.2.el8.src.rpm

Description of changes:

[049-233.git20240115.0.2]
- Refactor get_ucode_file [Orabug: 36989953]



ELBA-2024-12818 Oracle Linux 8 osbuild-composer bug fix update


Oracle Linux Bug Fix Advisory ELBA-2024-12818

http://linux.oracle.com/errata/ELBA-2024-12818.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
osbuild-composer-101-2.0.4.el8_10.x86_64.rpm
osbuild-composer-worker-101-2.0.4.el8_10.x86_64.rpm
osbuild-composer-core-101-2.0.4.el8_10.x86_64.rpm

aarch64:
osbuild-composer-101-2.0.4.el8_10.aarch64.rpm
osbuild-composer-worker-101-2.0.4.el8_10.aarch64.rpm
osbuild-composer-core-101-2.0.4.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//osbuild-composer-101-2.0.4.el8_10.src.rpm

Description of changes:

[101-2.0.4]
- Simplify repository names [JIRA: OLDIS-35893]



ELBA-2024-12821 Oracle Linux 7 grubby bug fix update


Oracle Linux Bug Fix Advisory ELBA-2024-12821

http://linux.oracle.com/errata/ELBA-2024-12821.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
grubby-8.28-26.0.9.el7.x86_64.rpm

SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//grubby-8.28-26.0.9.el7.src.rpm

Description of changes:

[8.28-26.0.9]
- Backported btrfs subvolume support for grub2 [Orabug: 36823304]