The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-9689 http://linux.oracle.com/errata/ELSA-2026-9689.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable LinuxNetwork: x86_64: java-21-openjdk-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-demo-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-demo-fastdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-demo-slowdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-devel-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-devel-fastdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-devel-slowdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-fastdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-headless-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-headless-fastdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-headless-slowdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-javadoc-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-javadoc-zip-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-jmods-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-jmods-fastdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-jmods-slowdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-slowdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-src-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-src-fastdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-src-slowdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-static-libs-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-static-libs-fastdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm java-21-openjdk-static-libs-slowdebug-21.0.11.0.10-2.0.1.el9.x86_64.rpm aarch64: java-21-openjdk-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-demo-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-demo-fastdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-demo-slowdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-devel-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-devel-fastdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-devel-slowdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-fastdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-headless-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-headless-fastdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-headless-slowdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-javadoc-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-javadoc-zip-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-jmods-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-jmods-fastdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-jmods-slowdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-slowdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-src-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-src-fastdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-src-slowdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-static-libs-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-static-libs-fastdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm java-21-openjdk-static-libs-slowdebug-21.0.11.0.10-2.0.1.el9.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/java-21-openjdk-21.0.11.0.10-2.0.1.el9.src.rpm Related CVEs: CVE-2026-22007 CVE-2026-22013 CVE-2026-22016 CVE-2026-22018 CVE-2026-22021 CVE-2026-23865 CVE-2026-34268 CVE-2026-34282 Description of changes: [1:21.0.11.0.10-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.11.0.10-2] - Bump release for PQC build - Related: RHEL-169609 [1:21.0.11.0.10-1] - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves:RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 [1:21.0.10.0.7-2] - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 _______________________________________________ El-errata mailing list
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2024-4349 http://linux.oracle.com/errata/ELSA-2024-4349.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable LinuxNetwork: x86_64: bpftool-7.3.0-427.24.1.el9_4.x86_64.rpm kernel-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-abi-stablelists-5.14.0-427.24.1.el9_4.noarch.rpm kernel-core-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-cross-headers-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-debug-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-debug-core-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-debug-devel-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-debug-devel-matched-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-debug-modules-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-debug-modules-core-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-debug-modules-extra-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-debug-uki-virt-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-devel-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-devel-matched-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-doc-5.14.0-427.24.1.el9_4.noarch.rpm kernel-headers-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-modules-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-modules-core-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-modules-extra-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-tools-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-tools-libs-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-tools-libs-devel-5.14.0-427.24.1.el9_4.x86_64.rpm kernel-uki-virt-5.14.0-427.24.1.el9_4.x86_64.rpm libperf-5.14.0-427.24.1.el9_4.x86_64.rpm perf-5.14.0-427.24.1.el9_4.x86_64.rpm python3-perf-5.14.0-427.24.1.el9_4.x86_64.rpm rtla-5.14.0-427.24.1.el9_4.x86_64.rpm rv-5.14.0-427.24.1.el9_4.x86_64.rpm aarch64: bpftool-7.3.0-427.24.1.el9_4.aarch64.rpm kernel-cross-headers-5.14.0-427.24.1.el9_4.aarch64.rpm kernel-headers-5.14.0-427.24.1.el9_4.aarch64.rpm kernel-tools-5.14.0-427.24.1.el9_4.aarch64.rpm kernel-tools-libs-5.14.0-427.24.1.el9_4.aarch64.rpm kernel-tools-libs-devel-5.14.0-427.24.1.el9_4.aarch64.rpm perf-5.14.0-427.24.1.el9_4.aarch64.rpm python3-perf-5.14.0-427.24.1.el9_4.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates//kernel-5.14.0-427.24.1.el9_4.src.rpm RelatedCVEs: CVE-2021-47400 CVE-2023-52626 CVE-2023-52667 CVE-2024-26801 CVE-2024-26974 CVE-2024-27393 CVE-2024-35870 CVE-2024-35960 Description of changes: - [5.14.0-427.24.1.el9_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 4K (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - Fix spelling mistake "Invalide" -> "Invalid" (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - Avoid -Wflex-array-member-not-at-end warnings (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - implement interface for live migration (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - add interface for live migration (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - add bank save and restore flows (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - expand CSR operations for QAT GEN4 devices (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - rename get_sla_arr_of_type() (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - relocate CSR access code (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - move PFVF compat checker to a function (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - relocate and rename 4xxx PF2VM definitions (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - adf_get_etr_base() helper (Vladis Dronov) [RHEL-38546 RHEL-35816] - redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_420XX (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - make ring to service map common for QAT GEN4 (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - fix ring to service map for dcc in 420xx (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - fix ring to service map for dcc in 4xxx (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - fix comment structure (Vladis Dronov) [RHEL-38546RHEL-35816] - crypto: qat - remove unnecessary description from comment (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - remove double initialization of value (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - removed unused macro in adf_cnv_dbgfs.c (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - remove unused macros in qat_comp_alg.c (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - uninitialized variable in adf_hb_error_inject_write() (Vladis Dronov) [RHEL-38546 RHEL-35816] - Documentation: qat: fix auto_reset section (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-38546 RHEL-35816] {CVE-2024-26974} - crypto: qat - change SLAs cleanup flow at shutdown (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - improve aer error reset handling (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - limit heartbeat notifications (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - add auto reset on error (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - add fatal error notification (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - re-enable sriov after pf reset (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - update PFVF protocol for recovery (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - disable arbitration before reset (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - add fatal error notify method (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - add heartbeat error simulator (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - avoid memcpy() overflow warning (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - fix arbiter mapping generation algorithm for QAT 402xx (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - generate dynamically arbiter mappings (Vladis Dronov) [RHEL-38546RHEL-35816] - crypto: qat - add support for ring pair level telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - add support for device telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - add admin msgs for telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - include pci.h for GET_DEV() (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - add support for 420xx devices (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - move fw config related structures (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - relocate portions of qat_4xxx code (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - change signature of uof_get_num_objs() (Vladis Dronov) [RHEL-38546 RHEL-35816] - crypto: qat - relocate and rename get_service_enabled() (Vladis Dronov) [RHEL-38546 RHEL-35816] - seq_file: add helper macro to define attribute for rw file (Vladis Dronov) [RHEL-38546 RHEL-35816] - minmax: Introduce {min,max}_array() (Vladis Dronov) [RHEL-38546 RHEL-35816] [5.14.0-427.23.1.el9_4] - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-34050 RHEL-30492] {CVE-2023-52626} - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-38595 RHEL-36684] - net/sched: flower: Add lock protection when remove filter handle (Petr Oros) [RHEL-35672 RHEL-33379] - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-33913 RHEL-31828] {CVE-2024-26801} - net: hns3: do not allow call hns3_nic_net_open repeatedly (Jose Ignacio Tornos Martinez) [RHEL-38933 RHEL-37707] {CVE-2021-47400} - tmpfs: fix Documentation of noswap and huge mount options (Nico Pache) [RHEL-38252 RHEL-31975] - shmem: add support to ignore swap (Chris von Recklinghausen) [RHEL-38252 RHEL-31975] - shmem: update documentation (Chris von Recklinghausen) [RHEL-38252 RHEL-31975] - shmem: skip page split if we're not reclaiming (Chris von Recklinghausen) [RHEL-38252 RHEL-31975] - shmem: move reclaim check early on writepages()(Chris von Recklinghausen) [RHEL-38252 RHEL-31975] - shmem: set shmem_writepage() variables early (Chris von Recklinghausen) [RHEL-38252 RHEL-31975] - shmem: remove check for folio lock on writepage() (Chris von Recklinghausen) [RHEL-38252 RHEL-31975] - ice: Add automatic VF reset on Tx MDD events (Petr Oros) [RHEL-39083 RHEL-36317] - net/ipv6: SKB symmetric hash should incorporate transport ports (Ivan Vecera) [RHEL-37641 RHEL-36218] - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [RHEL-37669 RHEL-37511] - ipv6: sr: fix missing sk_buff release in seg6_input_core (Hangbin Liu) [RHEL-37669 RHEL-37511] - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [RHEL-37669 RHEL-37511] - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-37669 RHEL-37511] - ipv6: sr: add missing seg6_local_exit (Hangbin Liu) [RHEL-37669 RHEL-37511] - block: fix q-> blkg_list corruption during disk rebind (Ming Lei) [RHEL-36687 RHEL-33577] - ice: fix uninitialized dplls mutex usage (Petr Oros) [RHEL-36716 RHEL-36283] - ice: fix pin phase adjust updates on PF reset (Petr Oros) [RHEL-36716 RHEL-36283] - ice: fix dpll periodic work data updates on PF reset (Petr Oros) [RHEL-36716 RHEL-36283] - ice: fix dpll and dpll_pin data access on PF reset (Petr Oros) [RHEL-36716 RHEL-36283] - ice: fix dpll input pin phase_adjust value updates (Petr Oros) [RHEL-36716 RHEL-36283] - ice: fix connection state of DPLL and out pin (Petr Oros) [RHEL-36716 RHEL-36283] - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-38954 RHEL-37422] {CVE-2024-35960} - smb: client: fix UAF in smb2_reconnect_server() (Jay Shin) [RHEL-28943 RHEL-40177 RHEL-37273 RHEL-7986] {CVE-2024-35870} - smb: client: remove extra @chan_count check in __cifs_put_smb_ses() (Jay Shin) [RHEL-28943 RHEL-31245] - RHEL: enable CONFIG_AMD_ATL (Aristeu Rozanski)[RHEL-36220 RHEL-26704] - EDAC/amd64: Use new AMD Address Translation Library (Aristeu Rozanski) [RHEL-36220 RHEL-26704] - RAS: Introduce AMD Address Translation Library (Aristeu Rozanski) [RHEL-36220 RHEL-26704] _______________________________________________ El-errata mailing list
Get the latest Linux and open source security news straight to your inbox.