Oracle Linux 6154 Published by

24 updates for Oracle Linux 7 has been released:

ELBA-2017-2567 Oracle Linux 7 seabios bug fix update
ELBA-2017-2568 Oracle Linux 7 ipa bug fix update
ELBA-2017-2571 Oracle Linux 7 nss-softokn bug fix update
ELBA-2017-2572 Oracle Linux 7 bash bug fix update
ELBA-2017-2573 Oracle Linux 7 ghostscript bug fix update
ELBA-2017-2574 Oracle Linux 7 sssd bug fix update
ELBA-2017-2575 Oracle Linux 7 pki-core bug fix and enhancement update
ELBA-2017-2576 Oracle Linux 7 openssh bug fix update
ELBA-2017-2577 Oracle Linux 7 binutils bug fix update
ELBA-2017-2578 Oracle Linux 7 mod_nss bug fix update
ELBA-2017-2579 Oracle Linux 7 selinux-policy bug fix update
ELBA-2017-2580 Oracle Linux 7 fence-agents bug fix update
ELBA-2017-2581 Oracle Linux 7 kernel bug fix update
ELBA-2017-2581-1 Oracle Linux 7 kernel bug fix update
ELBA-2017-2586 Oracle Linux 7 ncurses bug fix update
ELBA-2017-2589 Oracle Linux 7 ipxe bug fix update
ELBA-2017-2590 Oracle Linux 7 kmod bugfix
ELBA-2017-2591 Oracle Linux 7 java-1.8.0-openjdk bug fix update
ELBA-2017-2592 Oracle Linux 7 qemu-kvm bug fix update
ELBA-2017-2593 Oracle Linux 7 cpio bug fix update
ELBA-2017-2595 Oracle Linux 7 sudo bug fix update
ELEA-2017-2584 Oracle Linux 7 scl-utils enhancement update
ELEA-2017-2594 Oracle Linux 7 libvirt bug fix update
ELSA-2017-2569 Moderate: Oracle Linux 7 389-ds-base security and bug fix update



ELBA-2017-2567 Oracle Linux 7 seabios bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2567

http://linux.oracle.com/errata/ELBA-2017-2567.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
seabios-1.10.2-3.el7_4.1.x86_64.rpm
seabios-bin-1.10.2-3.el7_4.1.noarch.rpm
seavgabios-bin-1.10.2-3.el7_4.1.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/seabios-1.10.2-3.el7_4.1.src.rpm



Description of changes:

[1.10.2-3.el7_4.1]
- seabios-virtio-IOMMU-support.patch [bz#1472131]
- Resolves: bz#1472131
(Guest OS will down when disk enable the IOMMU for Virtio)

ELBA-2017-2568 Oracle Linux 7 ipa bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2568

http://linux.oracle.com/errata/ELBA-2017-2568.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
ipa-client-4.5.0-21.0.1.el7_4.1.2.x86_64.rpm
ipa-client-common-4.5.0-21.0.1.el7_4.1.2.noarch.rpm
ipa-common-4.5.0-21.0.1.el7_4.1.2.noarch.rpm
ipa-python-compat-4.5.0-21.0.1.el7_4.1.2.noarch.rpm
ipa-server-4.5.0-21.0.1.el7_4.1.2.x86_64.rpm
ipa-server-common-4.5.0-21.0.1.el7_4.1.2.noarch.rpm
ipa-server-dns-4.5.0-21.0.1.el7_4.1.2.noarch.rpm
ipa-server-trust-ad-4.5.0-21.0.1.el7_4.1.2.x86_64.rpm
python2-ipaclient-4.5.0-21.0.1.el7_4.1.2.noarch.rpm
python2-ipalib-4.5.0-21.0.1.el7_4.1.2.noarch.rpm
python2-ipaserver-4.5.0-21.0.1.el7_4.1.2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/ipa-4.5.0-21.0.1.el7_4.1.2.src.rpm



Description of changes:

[4.5.0-21.0.1.el7_4.1.2]
- Blank out header-logo.png product-name.png
Replace login-screen-logo.png [20362818]

[4.5.0-21.el7.1.2]
- Fixing issues reported by Errata tool

[4.5.0-21.el7.1.1]
- Resolves: #1477046 Use CommonNameToSANDefault in default profile
(new installs only)
- Restore old version of caIPAserviceCert for upgrade only

[4.5.0-21.el7.1]
- Resolves: #1473272 Provide a tooling automating the configuration
of Smart Card authentication on a FreeIPA master
- smart-card advises: configure systemwide NSS DB also on master
- smart-card advises: add steps to store smart card signing CA cert
- Allow to pass in multiple CA cert paths to the smart card advises
- add a class that tracks the indentation in the generated advises
- delegate the indentation handling in advises to dedicated class
- advise: add an infrastructure for formatting Bash compound statements
- delegate formatting of compound Bash statements to dedicated classes
- Fix indentation of statements in Smart card advises
- Use the compound statement formatting API for configuring PKINIT
- smart card advises: use a wrapper around Bash `for` loops
- smart card advise: use password when changing trust flags on HTTP cert
- smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile
(new installs only)
- Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
during search in cn=ad,cn=trusts,dc=example,dc=com
- NULL LDAP context in call to ldap_search_ext_s during search

ELBA-2017-2571 Oracle Linux 7 nss-softokn bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2571

http://linux.oracle.com/errata/ELBA-2017-2571.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
nss-softokn-3.28.3-8.el7_4.i686.rpm
nss-softokn-3.28.3-8.el7_4.x86_64.rpm
nss-softokn-devel-3.28.3-8.el7_4.i686.rpm
nss-softokn-devel-3.28.3-8.el7_4.x86_64.rpm
nss-softokn-freebl-3.28.3-8.el7_4.i686.rpm
nss-softokn-freebl-3.28.3-8.el7_4.x86_64.rpm
nss-softokn-freebl-devel-3.28.3-8.el7_4.i686.rpm
nss-softokn-freebl-devel-3.28.3-8.el7_4.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/nss-softokn-3.28.3-8.el7_4.src.rpm



Description of changes:

[3.28.3-8]
- fix fips post so that they actually run at startup

[3.28.3-7]
- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
patch by Kyle Walker


ELBA-2017-2572 Oracle Linux 7 bash bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2572

http://linux.oracle.com/errata/ELBA-2017-2572.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
bash-4.2.46-29.el7_4.x86_64.rpm
bash-doc-4.2.46-29.el7_4.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/bash-4.2.46-29.el7_4.src.rpm



Description of changes:

[4.2.46-29]
- Fix a pipe fd leak in process substitution
Resolves: #1473245

ELBA-2017-2573 Oracle Linux 7 ghostscript bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2573

http://linux.oracle.com/errata/ELBA-2017-2573.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
ghostscript-9.07-28.el7_4.2.i686.rpm
ghostscript-9.07-28.el7_4.2.x86_64.rpm
ghostscript-cups-9.07-28.el7_4.2.x86_64.rpm
ghostscript-devel-9.07-28.el7_4.2.i686.rpm
ghostscript-devel-9.07-28.el7_4.2.x86_64.rpm
ghostscript-doc-9.07-28.el7_4.2.noarch.rpm
ghostscript-gtk-9.07-28.el7_4.2.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/ghostscript-9.07-28.el7_4.2.src.rpm



Description of changes:

[9.07-28.el7_4.2]
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)

[9.07-28.el7_4.1]
- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)

ELBA-2017-2574 Oracle Linux 7 sssd bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2574

http://linux.oracle.com/errata/ELBA-2017-2574.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
http-parser-2.7.1-5.el7_4.i686.rpm
http-parser-2.7.1-5.el7_4.x86_64.rpm
http-parser-devel-2.7.1-5.el7_4.i686.rpm
http-parser-devel-2.7.1-5.el7_4.x86_64.rpm
libipa_hbac-1.15.2-50.el7_4.2.i686.rpm
libipa_hbac-1.15.2-50.el7_4.2.x86_64.rpm
libipa_hbac-devel-1.15.2-50.el7_4.2.i686.rpm
libipa_hbac-devel-1.15.2-50.el7_4.2.x86_64.rpm
libsss_autofs-1.15.2-50.el7_4.2.x86_64.rpm
libsss_certmap-1.15.2-50.el7_4.2.i686.rpm
libsss_certmap-1.15.2-50.el7_4.2.x86_64.rpm
libsss_certmap-devel-1.15.2-50.el7_4.2.i686.rpm
libsss_certmap-devel-1.15.2-50.el7_4.2.x86_64.rpm
libsss_idmap-1.15.2-50.el7_4.2.i686.rpm
libsss_idmap-1.15.2-50.el7_4.2.x86_64.rpm
libsss_idmap-devel-1.15.2-50.el7_4.2.i686.rpm
libsss_idmap-devel-1.15.2-50.el7_4.2.x86_64.rpm
libsss_nss_idmap-1.15.2-50.el7_4.2.i686.rpm
libsss_nss_idmap-1.15.2-50.el7_4.2.x86_64.rpm
libsss_nss_idmap-devel-1.15.2-50.el7_4.2.i686.rpm
libsss_nss_idmap-devel-1.15.2-50.el7_4.2.x86_64.rpm
libsss_simpleifp-1.15.2-50.el7_4.2.i686.rpm
libsss_simpleifp-1.15.2-50.el7_4.2.x86_64.rpm
libsss_simpleifp-devel-1.15.2-50.el7_4.2.i686.rpm
libsss_simpleifp-devel-1.15.2-50.el7_4.2.x86_64.rpm
libsss_sudo-1.15.2-50.el7_4.2.x86_64.rpm
python-libipa_hbac-1.15.2-50.el7_4.2.x86_64.rpm
python-libsss_nss_idmap-1.15.2-50.el7_4.2.x86_64.rpm
python-sss-1.15.2-50.el7_4.2.x86_64.rpm
python-sss-murmur-1.15.2-50.el7_4.2.x86_64.rpm
python-sssdconfig-1.15.2-50.el7_4.2.noarch.rpm
sssd-1.15.2-50.el7_4.2.x86_64.rpm
sssd-ad-1.15.2-50.el7_4.2.x86_64.rpm
sssd-client-1.15.2-50.el7_4.2.i686.rpm
sssd-client-1.15.2-50.el7_4.2.x86_64.rpm
sssd-common-1.15.2-50.el7_4.2.x86_64.rpm
sssd-common-pac-1.15.2-50.el7_4.2.x86_64.rpm
sssd-dbus-1.15.2-50.el7_4.2.x86_64.rpm
sssd-ipa-1.15.2-50.el7_4.2.x86_64.rpm
sssd-kcm-1.15.2-50.el7_4.2.x86_64.rpm
sssd-krb5-1.15.2-50.el7_4.2.x86_64.rpm
sssd-krb5-common-1.15.2-50.el7_4.2.x86_64.rpm
sssd-ldap-1.15.2-50.el7_4.2.x86_64.rpm
sssd-libwbclient-1.15.2-50.el7_4.2.x86_64.rpm
sssd-libwbclient-devel-1.15.2-50.el7_4.2.i686.rpm
sssd-libwbclient-devel-1.15.2-50.el7_4.2.x86_64.rpm
sssd-polkit-rules-1.15.2-50.el7_4.2.x86_64.rpm
sssd-proxy-1.15.2-50.el7_4.2.x86_64.rpm
sssd-tools-1.15.2-50.el7_4.2.x86_64.rpm
sssd-winbind-idmap-1.15.2-50.el7_4.2.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/http-parser-2.7.1-5.el7_4.src.rpm
http://oss.oracle.com/ol7/SRPMS-updates/sssd-1.15.2-50.el7_4.2.src.rpm



Description of changes:

http-parser
[2.7.1-5]
- Bump http-parser release number to avoid people pulling EPEL package
instead
of RHEL package
Resolves: rhbz#1480321

sssd
[1.15.2-50.2]
- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
ID can mark the AD domain offline [rhel-7.4.z]

[1.15.2-50.1]
- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
[rhel-7.4.z]

ELBA-2017-2575 Oracle Linux 7 pki-core bug fix and enhancement update

Oracle Linux Bug Fix Advisory ELBA-2017-2575

http://linux.oracle.com/errata/ELBA-2017-2575.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
pki-base-10.4.1-13.el7_4.noarch.rpm
pki-base-java-10.4.1-13.el7_4.noarch.rpm
pki-ca-10.4.1-13.el7_4.noarch.rpm
pki-javadoc-10.4.1-13.el7_4.noarch.rpm
pki-kra-10.4.1-13.el7_4.noarch.rpm
pki-server-10.4.1-13.el7_4.noarch.rpm
pki-symkey-10.4.1-13.el7_4.x86_64.rpm
pki-tools-10.4.1-13.el7_4.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/pki-core-10.4.1-13.el7_4.src.rpm



Description of changes:

[10.4.1-13]
- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
[pki-core-server-access-banner-retrieval-validation.patch]

[10.4.1-12]
- Resolves: rhbz
#1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
certificate requests (cfu)
[PREVIOUS PATCH: pki-core-beta.patch]
[PREVIOUS PATCH: pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
error (cfu)
[PREVIOUS PATCH: pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
against CMC signer (cfu)
[PREVIOUS PATCH:
pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
[pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
non-signing cert requests (cfu)
[PREVIOUS PATCH: pki-core-snapshot-1.patch]
[pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
[pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
id-cmc-statusInfoV2 (cfu)
[pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
(dmoluguw)
[pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
(jmagne)
[pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
certificates (cfu)
[pki-core-system-cert-CMC-enroll-profile.patch]


ELBA-2017-2576 Oracle Linux 7 openssh bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2576

http://linux.oracle.com/errata/ELBA-2017-2576.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
openssh-7.4p1-12.el7_4.x86_64.rpm
openssh-askpass-7.4p1-12.el7_4.x86_64.rpm
openssh-cavs-7.4p1-12.el7_4.x86_64.rpm
openssh-clients-7.4p1-12.el7_4.x86_64.rpm
openssh-keycat-7.4p1-12.el7_4.x86_64.rpm
openssh-ldap-7.4p1-12.el7_4.x86_64.rpm
openssh-server-7.4p1-12.el7_4.x86_64.rpm
openssh-server-sysvinit-7.4p1-12.el7_4.x86_64.rpm
pam_ssh_agent_auth-0.10.3-1.12.el7_4.i686.rpm
pam_ssh_agent_auth-0.10.3-1.12.el7_4.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/openssh-7.4p1-12.el7_4.src.rpm



Description of changes:

[7.4p1-12 + 0.10.3-1]
- Revert upstream change to UseDNS=no back to yes (#1478175)

ELBA-2017-2577 Oracle Linux 7 binutils bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2577

http://linux.oracle.com/errata/ELBA-2017-2577.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
binutils-2.25.1-32.base.el7_4.1.x86_64.rpm
binutils-devel-2.25.1-32.base.el7_4.1.i686.rpm
binutils-devel-2.25.1-32.base.el7_4.1.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/binutils-2.25.1-32.base.el7_4.1.src.rpm



Description of changes:

[2.25.1-32.base.1]
- Revert part of the objdump speed up patch which was preventing proper
function name lookup.
(#1479773)

[2.25.1-32.base]
- Revert part of the objdump speed up patch which was preventing proper
function name lookup.
(#1465318)

ELBA-2017-2578 Oracle Linux 7 mod_nss bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2578

http://linux.oracle.com/errata/ELBA-2017-2578.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
mod_nss-1.0.14-10.el7_4.1.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/mod_nss-1.0.14-10.el7_4.1.src.rpm



Description of changes:

[1.0.14-10.1]
- TLS session cache was not working (#1479766)

ELBA-2017-2579 Oracle Linux 7 selinux-policy bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2579

http://linux.oracle.com/errata/ELBA-2017-2579.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
selinux-policy-3.13.1-166.0.2.el7_4.4.noarch.rpm
selinux-policy-devel-3.13.1-166.0.2.el7_4.4.noarch.rpm
selinux-policy-doc-3.13.1-166.0.2.el7_4.4.noarch.rpm
selinux-policy-minimum-3.13.1-166.0.2.el7_4.4.noarch.rpm
selinux-policy-mls-3.13.1-166.0.2.el7_4.4.noarch.rpm
selinux-policy-sandbox-3.13.1-166.0.2.el7_4.4.noarch.rpm
selinux-policy-targeted-3.13.1-166.0.2.el7_4.4.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/selinux-policy-3.13.1-166.0.2.el7_4.4.src.rpm



Description of changes:

[3.13.1-166.0.2.4]
- Obsolete docker-engine-selinux [OraBug 26439663]
- Fix container selinux policy [OraBug 26427364]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

[3.13.1-166.4]
- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308

[3.13.1-166.3]
- Fixing wrong NVR
Resolves: rhbz#1479767

[3.13.1-166.2]
- Increase NVR
Resolves: rhbz#1479767

[3.13.1-166.1]
- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767

ELBA-2017-2580 Oracle Linux 7 fence-agents bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2580

http://linux.oracle.com/errata/ELBA-2017-2580.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
fence-agents-all-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-apc-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-apc-snmp-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-bladecenter-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-brocade-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-cisco-mds-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-cisco-ucs-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-common-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-compute-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-drac5-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-eaton-snmp-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-emerson-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-eps-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-hpblade-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-ibmblade-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-ifmib-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-ilo-moonshot-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-ilo-mp-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-ilo-ssh-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-ilo2-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-intelmodular-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-ipdu-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-ipmilan-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-kdump-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-mpath-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-rhevm-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-rsa-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-rsb-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-sbd-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-scsi-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-virsh-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-vmware-soap-4.0.11-66.el7_4.1.x86_64.rpm
fence-agents-wti-4.0.11-66.el7_4.1.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/fence-agents-4.0.11-66.el7_4.1.src.rpm



Description of changes:

[4.0.11-66.1]
- fence_compute/fence_scsi: fix issue with some parameters
Resolves: rhbz#1479851

ELBA-2017-2581 Oracle Linux 7 kernel bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2581

http://linux.oracle.com/errata/ELBA-2017-2581.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-3.10.0-693.2.1.el7.x86_64.rpm
kernel-abi-whitelists-3.10.0-693.2.1.el7.noarch.rpm
kernel-debug-3.10.0-693.2.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-693.2.1.el7.x86_64.rpm
kernel-devel-3.10.0-693.2.1.el7.x86_64.rpm
kernel-doc-3.10.0-693.2.1.el7.noarch.rpm
kernel-headers-3.10.0-693.2.1.el7.x86_64.rpm
kernel-tools-3.10.0-693.2.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-693.2.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-693.2.1.el7.x86_64.rpm
perf-3.10.0-693.2.1.el7.x86_64.rpm
python-perf-3.10.0-693.2.1.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-3.10.0-693.2.1.el7.src.rpm



Description of changes:

- [3.10.0-693.2.1.el7.OL7]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was compiled into kernel
(olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [bug 24817676]

[3.10.0-693.2.1.el7]
- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown
(Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679
1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry
Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf->handlers->sender()
(Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava)
[1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai
Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD
(Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode
(Jarod Wilson) [1475670 1473481]
- [fs] xfs: use ->b_state to fix buffer I/O accounting release race
(Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free
(Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672
1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo
Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert
Xu) [1475668 1473593]

ELBA-2017-2581-1 Oracle Linux 7 kernel bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2581-1

http://linux.oracle.com/errata/ELBA-2017-2581-1.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-3.10.0-693.2.1.0.1.el7.x86_64.rpm
kernel-abi-whitelists-3.10.0-693.2.1.0.1.el7.noarch.rpm
kernel-debug-3.10.0-693.2.1.0.1.el7.x86_64.rpm
kernel-debug-devel-3.10.0-693.2.1.0.1.el7.x86_64.rpm
kernel-devel-3.10.0-693.2.1.0.1.el7.x86_64.rpm
kernel-doc-3.10.0-693.2.1.0.1.el7.noarch.rpm
kernel-headers-3.10.0-693.2.1.0.1.el7.x86_64.rpm
kernel-tools-3.10.0-693.2.1.0.1.el7.x86_64.rpm
kernel-tools-libs-3.10.0-693.2.1.0.1.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-693.2.1.0.1.el7.x86_64.rpm
perf-3.10.0-693.2.1.0.1.el7.x86_64.rpm
python-perf-3.10.0-693.2.1.0.1.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-3.10.0-693.2.1.0.1.el7.src.rpm



Description of changes:

- [3.10.0-693.2.1.0.1.el7.OL7]
- [ipc] ipc/sem.c: bugfix for semctl(,,GETZCNT) (Manfred Spraul) [orabug
22552377]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was compiled into kernel
(olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [bug 24817676]

[3.10.0-693.2.1.el7]
- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown
(Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679
1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry
Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf->handlers->sender()
(Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava)
[1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai
Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD
(Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode
(Jarod Wilson) [1475670 1473481]
- [fs] xfs: use ->b_state to fix buffer I/O accounting release race
(Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free
(Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672
1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo
Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert
Xu) [1475668 1473593]

ELBA-2017-2586 Oracle Linux 7 ncurses bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2586

http://linux.oracle.com/errata/ELBA-2017-2586.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
ncurses-5.9-14.20130511.el7_4.x86_64.rpm
ncurses-base-5.9-14.20130511.el7_4.noarch.rpm
ncurses-devel-5.9-14.20130511.el7_4.i686.rpm
ncurses-devel-5.9-14.20130511.el7_4.x86_64.rpm
ncurses-libs-5.9-14.20130511.el7_4.i686.rpm
ncurses-libs-5.9-14.20130511.el7_4.x86_64.rpm
ncurses-static-5.9-14.20130511.el7_4.i686.rpm
ncurses-static-5.9-14.20130511.el7_4.x86_64.rpm
ncurses-term-5.9-14.20130511.el7_4.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/ncurses-5.9-14.20130511.el7_4.src.rpm



Description of changes:

[5.9-14.20130511]
- fix crash in libtinfo initialization (#1426215)


ELBA-2017-2589 Oracle Linux 7 ipxe bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2589

http://linux.oracle.com/errata/ELBA-2017-2589.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
ipxe-bootimgs-20170123-1.git4e85b27.el7_4.1.noarch.rpm
ipxe-roms-20170123-1.git4e85b27.el7_4.1.noarch.rpm
ipxe-roms-qemu-20170123-1.git4e85b27.el7_4.1.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/ipxe-20170123-1.git4e85b27.el7_4.1.src.rpm



Description of changes:

[20170123-1.git4e85b27.el7_4.1]
- ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1481180]
- Resolves: bz#1481180
(iommu platform support for ipxe [rhel-7.4.z])

ELBA-2017-2590 Oracle Linux 7 kmod bugfix

Oracle Linux Bug Fix Advisory ELBA-2017-2590

http://linux.oracle.com/errata/ELBA-2017-2590.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kmod-20-15.0.1.el7_4.2.x86_64.rpm
kmod-devel-20-15.0.1.el7_4.2.x86_64.rpm
kmod-libs-20-15.0.1.el7_4.2.i686.rpm
kmod-libs-20-15.0.1.el7_4.2.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kmod-20-15.0.1.el7_4.2.src.rpm



Description of changes:

[20-15.0.1.el7_4.2]
- weak-modules: Add grid installer required support for dry-run
option [Orabug: 26320387]

[20-15.el7_4.2]
- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
Resolves: rhbz#1482385

ELBA-2017-2591 Oracle Linux 7 java-1.8.0-openjdk bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2591

http://linux.oracle.com/errata/ELBA-2017-2591.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
java-1.8.0-openjdk-1.8.0.144-0.b01.el7_4.i686.rpm
java-1.8.0-openjdk-1.8.0.144-0.b01.el7_4.x86_64.rpm
java-1.8.0-openjdk-accessibility-1.8.0.144-0.b01.el7_4.i686.rpm
java-1.8.0-openjdk-accessibility-1.8.0.144-0.b01.el7_4.x86_64.rpm
java-1.8.0-openjdk-accessibility-debug-1.8.0.144-0.b01.el7_4.i686.rpm
java-1.8.0-openjdk-accessibility-debug-1.8.0.144-0.b01.el7_4.x86_64.rpm
java-1.8.0-openjdk-debug-1.8.0.144-0.b01.el7_4.i686.rpm
java-1.8.0-openjdk-debug-1.8.0.144-0.b01.el7_4.x86_64.rpm
java-1.8.0-openjdk-demo-1.8.0.144-0.b01.el7_4.i686.rpm
java-1.8.0-openjdk-demo-1.8.0.144-0.b01.el7_4.x86_64.rpm
java-1.8.0-openjdk-demo-debug-1.8.0.144-0.b01.el7_4.i686.rpm
java-1.8.0-openjdk-demo-debug-1.8.0.144-0.b01.el7_4.x86_64.rpm
java-1.8.0-openjdk-devel-1.8.0.144-0.b01.el7_4.i686.rpm
java-1.8.0-openjdk-devel-1.8.0.144-0.b01.el7_4.x86_64.rpm
java-1.8.0-openjdk-devel-debug-1.8.0.144-0.b01.el7_4.i686.rpm
java-1.8.0-openjdk-devel-debug-1.8.0.144-0.b01.el7_4.x86_64.rpm
java-1.8.0-openjdk-headless-1.8.0.144-0.b01.el7_4.i686.rpm
java-1.8.0-openjdk-headless-1.8.0.144-0.b01.el7_4.x86_64.rpm
java-1.8.0-openjdk-headless-debug-1.8.0.144-0.b01.el7_4.i686.rpm
java-1.8.0-openjdk-headless-debug-1.8.0.144-0.b01.el7_4.x86_64.rpm
java-1.8.0-openjdk-javadoc-1.8.0.144-0.b01.el7_4.noarch.rpm
java-1.8.0-openjdk-javadoc-debug-1.8.0.144-0.b01.el7_4.noarch.rpm
java-1.8.0-openjdk-javadoc-zip-1.8.0.144-0.b01.el7_4.noarch.rpm
java-1.8.0-openjdk-javadoc-zip-debug-1.8.0.144-0.b01.el7_4.noarch.rpm
java-1.8.0-openjdk-src-1.8.0.144-0.b01.el7_4.i686.rpm
java-1.8.0-openjdk-src-1.8.0.144-0.b01.el7_4.x86_64.rpm
java-1.8.0-openjdk-src-debug-1.8.0.144-0.b01.el7_4.i686.rpm
java-1.8.0-openjdk-src-debug-1.8.0.144-0.b01.el7_4.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/java-1.8.0-openjdk-1.8.0.144-0.b01.el7_4.src.rpm



Description of changes:

[1:1.8.0.144-0.b01]
- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that
repo.
- Resolves: rhbz#1481947

ELBA-2017-2592 Oracle Linux 7 qemu-kvm bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2592

http://linux.oracle.com/errata/ELBA-2017-2592.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
qemu-img-1.5.3-141.el7_4.2.x86_64.rpm
qemu-kvm-1.5.3-141.el7_4.2.x86_64.rpm
qemu-kvm-common-1.5.3-141.el7_4.2.x86_64.rpm
qemu-kvm-tools-1.5.3-141.el7_4.2.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/qemu-kvm-1.5.3-141.el7_4.2.src.rpm



Description of changes:

[1.5.3-141.el7_4.2]
- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch
[bz#1482468]
- Resolves: bz#1482468
(KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])

ELBA-2017-2593 Oracle Linux 7 cpio bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2593

http://linux.oracle.com/errata/ELBA-2017-2593.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
cpio-2.11-25.el7_4.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/cpio-2.11-25.el7_4.src.rpm



Description of changes:

[2.11-25]
- fix crc checksum for files ~200M+ (rhbz#1415081)

ELBA-2017-2595 Oracle Linux 7 sudo bug fix update

Oracle Linux Bug Fix Advisory ELBA-2017-2595

http://linux.oracle.com/errata/ELBA-2017-2595.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
sudo-1.8.19p2-11.el7_4.x86_64.rpm
sudo-devel-1.8.19p2-11.el7_4.i686.rpm
sudo-devel-1.8.19p2-11.el7_4.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/sudo-1.8.19p2-11.el7_4.src.rpm



Description of changes:

[1.8.19p2-11]
- Moved libsudo_util.so from the -devel sub-package to main package
Resolves: rhbz#1482929

ELEA-2017-2584 Oracle Linux 7 scl-utils enhancement update

Oracle Linux Enhancement Advisory ELEA-2017-2584

http://linux.oracle.com/errata/ELEA-2017-2584.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
scl-utils-20130529-18.el7_4.x86_64.rpm
scl-utils-build-20130529-18.el7_4.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/scl-utils-20130529-18.el7_4.src.rpm



Description of changes:

[20130529-18]
- fix "scl enable" usage in shebang lines (#1372700)

ELEA-2017-2594 Oracle Linux 7 libvirt bug fix update

Oracle Linux Enhancement Advisory ELEA-2017-2594

http://linux.oracle.com/errata/ELEA-2017-2594.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
libvirt-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-admin-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-client-3.2.0-14.el7_4.3.i686.rpm
libvirt-client-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-config-network-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-config-nwfilter-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-interface-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-lxc-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-network-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-nodedev-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-nwfilter-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-qemu-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-secret-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-storage-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-storage-core-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-storage-disk-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-storage-gluster-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-storage-iscsi-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-storage-logical-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-storage-mpath-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-storage-rbd-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-driver-storage-scsi-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-kvm-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-daemon-lxc-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-devel-3.2.0-14.el7_4.3.i686.rpm
libvirt-devel-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-docs-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-libs-3.2.0-14.el7_4.3.i686.rpm
libvirt-libs-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-lock-sanlock-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-login-shell-3.2.0-14.el7_4.3.x86_64.rpm
libvirt-nss-3.2.0-14.el7_4.3.i686.rpm
libvirt-nss-3.2.0-14.el7_4.3.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/libvirt-3.2.0-14.el7_4.3.src.rpm



Description of changes:

[3.2.0-14.el7_4.3]
- Add support for virtio-net.tx_queue_size (rhbz#1482514)


ELSA-2017-2569 Moderate: Oracle Linux 7 389-ds-base security and bug fix update

Oracle Linux Security Advisory ELSA-2017-2569

http://linux.oracle.com/errata/ELSA-2017-2569.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
389-ds-base-1.3.6.1-19.el7_4.x86_64.rpm
389-ds-base-devel-1.3.6.1-19.el7_4.x86_64.rpm
389-ds-base-libs-1.3.6.1-19.el7_4.x86_64.rpm
389-ds-base-snmp-1.3.6.1-19.el7_4.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/389-ds-base-1.3.6.1-19.el7_4.src.rpm



Description of changes:

[1.3.6.19-1]
- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during
replication online init

[1.3.6.1-18]
- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code
if password is correct

[1.3.6.1-17]
- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not
committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size