The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2023-7467 https://linux.oracle.com/errata/ELSA-2023-7467.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable LinuxNetwork: x86_64: ctdb-4.18.6-2.0.1.el8_9.x86_64.rpm libnetapi-4.18.6-2.0.1.el8_9.i686.rpm libnetapi-4.18.6-2.0.1.el8_9.x86_64.rpm libsmbclient-4.18.6-2.0.1.el8_9.i686.rpm libsmbclient-4.18.6-2.0.1.el8_9.x86_64.rpm libwbclient-4.18.6-2.0.1.el8_9.i686.rpm libwbclient-4.18.6-2.0.1.el8_9.x86_64.rpm python3-samba-4.18.6-2.0.1.el8_9.i686.rpm python3-samba-4.18.6-2.0.1.el8_9.x86_64.rpm python3-samba-dc-4.18.6-2.0.1.el8_9.x86_64.rpm python3-samba-test-4.18.6-2.0.1.el8_9.x86_64.rpm samba-4.18.6-2.0.1.el8_9.x86_64.rpm samba-client-4.18.6-2.0.1.el8_9.x86_64.rpm samba-client-libs-4.18.6-2.0.1.el8_9.i686.rpm samba-client-libs-4.18.6-2.0.1.el8_9.x86_64.rpm samba-common-4.18.6-2.0.1.el8_9.noarch.rpm samba-common-libs-4.18.6-2.0.1.el8_9.i686.rpm samba-common-libs-4.18.6-2.0.1.el8_9.x86_64.rpm samba-common-tools-4.18.6-2.0.1.el8_9.x86_64.rpm samba-dc-libs-4.18.6-2.0.1.el8_9.i686.rpm samba-dc-libs-4.18.6-2.0.1.el8_9.x86_64.rpm samba-dcerpc-4.18.6-2.0.1.el8_9.x86_64.rpm samba-krb5-printing-4.18.6-2.0.1.el8_9.x86_64.rpm samba-ldb-ldap-modules-4.18.6-2.0.1.el8_9.x86_64.rpm samba-libs-4.18.6-2.0.1.el8_9.i686.rpm samba-libs-4.18.6-2.0.1.el8_9.x86_64.rpm samba-pidl-4.18.6-2.0.1.el8_9.noarch.rpm samba-test-4.18.6-2.0.1.el8_9.x86_64.rpm samba-test-libs-4.18.6-2.0.1.el8_9.x86_64.rpm samba-tools-4.18.6-2.0.1.el8_9.x86_64.rpm samba-usershares-4.18.6-2.0.1.el8_9.x86_64.rpm samba-vfs-iouring-4.18.6-2.0.1.el8_9.x86_64.rpm samba-winbind-4.18.6-2.0.1.el8_9.x86_64.rpm samba-winbind-clients-4.18.6-2.0.1.el8_9.x86_64.rpm samba-winbind-krb5-locator-4.18.6-2.0.1.el8_9.x86_64.rpm samba-winbind-modules-4.18.6-2.0.1.el8_9.i686.rpm samba-winbind-modules-4.18.6-2.0.1.el8_9.x86_64.rpm samba-winexe-4.18.6-2.0.1.el8_9.x86_64.rpm libnetapi-devel-4.18.6-2.0.1.el8_9.i686.rpm libnetapi-devel-4.18.6-2.0.1.el8_9.x86_64.rpm libsmbclient-devel-4.18.6-2.0.1.el8_9.i686.rpm libsmbclient-devel-4.18.6-2.0.1.el8_9.x86_64.rpm libwbclient-devel-4.18.6-2.0.1.el8_9.i686.rpm libwbclient-devel-4.18.6-2.0.1.el8_9.x86_64.rpm python3-samba-devel-4.18.6-2.0.1.el8_9.i686.rpm python3-samba-devel-4.18.6-2.0.1.el8_9.x86_64.rpm samba-devel-4.18.6-2.0.1.el8_9.i686.rpm samba-devel-4.18.6-2.0.1.el8_9.x86_64.rpm samba-vfs-glusterfs-4.18.6-2.0.1.el8_9.x86_64.rpm aarch64: samba-vfs-glusterfs-4.18.6-2.0.1.el8_9.aarch64.rpm ctdb-4.18.6-2.0.1.el8_9.aarch64.rpm libnetapi-4.18.6-2.0.1.el8_9.aarch64.rpm libsmbclient-4.18.6-2.0.1.el8_9.aarch64.rpm libwbclient-4.18.6-2.0.1.el8_9.aarch64.rpm python3-samba-4.18.6-2.0.1.el8_9.aarch64.rpm python3-samba-dc-4.18.6-2.0.1.el8_9.aarch64.rpm python3-samba-test-4.18.6-2.0.1.el8_9.aarch64.rpm samba-4.18.6-2.0.1.el8_9.aarch64.rpm samba-client-4.18.6-2.0.1.el8_9.aarch64.rpm samba-client-libs-4.18.6-2.0.1.el8_9.aarch64.rpm samba-common-4.18.6-2.0.1.el8_9.noarch.rpm samba-common-libs-4.18.6-2.0.1.el8_9.aarch64.rpm samba-common-tools-4.18.6-2.0.1.el8_9.aarch64.rpm samba-dc-libs-4.18.6-2.0.1.el8_9.aarch64.rpm samba-dcerpc-4.18.6-2.0.1.el8_9.aarch64.rpm samba-krb5-printing-4.18.6-2.0.1.el8_9.aarch64.rpm samba-ldb-ldap-modules-4.18.6-2.0.1.el8_9.aarch64.rpm samba-libs-4.18.6-2.0.1.el8_9.aarch64.rpm samba-pidl-4.18.6-2.0.1.el8_9.noarch.rpm samba-test-4.18.6-2.0.1.el8_9.aarch64.rpm samba-test-libs-4.18.6-2.0.1.el8_9.aarch64.rpm samba-tools-4.18.6-2.0.1.el8_9.aarch64.rpm samba-usershares-4.18.6-2.0.1.el8_9.aarch64.rpm samba-vfs-iouring-4.18.6-2.0.1.el8_9.aarch64.rpm samba-winbind-4.18.6-2.0.1.el8_9.aarch64.rpm samba-winbind-clients-4.18.6-2.0.1.el8_9.aarch64.rpm samba-winbind-krb5-locator-4.18.6-2.0.1.el8_9.aarch64.rpm samba-winbind-modules-4.18.6-2.0.1.el8_9.aarch64.rpm libnetapi-devel-4.18.6-2.0.1.el8_9.aarch64.rpm libsmbclient-devel-4.18.6-2.0.1.el8_9.aarch64.rpm libwbclient-devel-4.18.6-2.0.1.el8_9.aarch64.rpm python3-samba-devel-4.18.6-2.0.1.el8_9.aarch64.rpm samba-devel-4.18.6-2.0.1.el8_9.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol8/SRPMS-updates//samba-4.18.6-2.0.1.el8_9.src.rpm Related CVEs: CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 Description of changes: [4.18.6-2.0.1] - resolves: RHEL-11937 Fix CVE-2023-3961 - smbd must check the pipename - resolves:RHEL-11937 Fix CVE-2023-4091 - SMB clients can truncate files - resolves: RHEL-11937 Fix CVE-2023-42669 - Remove rpcecho server _______________________________________________ El-errata mailing list
Several security issues were fixed in the kernel.. =========================================================================Ubuntu Security Notice USN-1514-1 August 10, 2012 linux-ti-omap4 vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: Several security issues were fixed in the kernel. Software Description: - linux-ti-omap4: Linux kernel for OMAP4 Details: A flaw was discovered in the Linux kernel's macvtap device driver, which is used in KVM (Kernel-based Virtual Machine) to create a network bridge between host and guest. A privleged user in a guest could exploit this flaw to crash the host, if the vhost_net module is loaded with the experimental_zcopytx option enabled. (CVE-2012-2119) An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. (CVE-2012-2136) A flaw was found in how the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem handled MSI (Message Signaled Interrupts). A local unprivileged user could exploit this flaw to cause a denial of service or potentially elevate privileges. (CVE-2012-2137) A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation. A local, unprivileged user could use this flaw to cause a denial of service. (CVE-2012-2372) Ulrich Obergfell discovered an error in the Linux kernel's memory management subsystem on 32 bit PAE systems with more than 4GB of memory installed. A local unprivileged user could exploit this flaw to crash the system. (CVE-2012-2373) Dan Rosenberg discovered flaws in the Linux kernel's NCI (Near Field Communication Controller Interface). A remote attacker could exploitthese flaws to crash the system or potentially execute privileged code. (CVE-2012-3364) A flaw was discovered in the Linux kernel's epoll system call. An unprivileged local user could use this flaw to crash the system. (CVE-2012-3375) Some errors where discovered in the Linux kernel's UDF file system, which is used to mount some CD-ROMs and DVDs. An unprivileged local user could use these flaws to crash the system. (CVE-2012-3400) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: linux-image-3.2.0-1417-omap4 3.2.0-1417.23 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. If you use linux-restricted-modules, you have to update that package as well to get modules which work with the new kernel version. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-server, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-1514-1 CVE-2012-2119, CVE-2012-2136, CVE-2012-2137, CVE-2012-2372, CVE-2012-2373, CVE-2012-3364, CVE-2012-3375, CVE-2012-3400 Package Information: https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.2.0-1417.23 . Significant flaws in the kernel of Ubuntu 12.04 LTS necessitate urgent action. Upgrade promptly to bolster system protection.. Kernel Flaws, Linux Security Patches, OMAP4 Exploits, Ubuntu Updates. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.