ELBA-2025-17424 Oracle Linux 8 dnsmasq bug fix and enhancement update
ELBA-2025-17422 Oracle Linux 8 gnome-shell bug fix and enhancement update
ELBA-2025-17421 Oracle Linux 8 protobuf bug fix and enhancement update
ELSA-2025-20650 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
ELBA-2025-17420 Oracle Linux 8 gnome-shell-extensions bug fix and enhancement update
ELBA-2025-17414 Oracle Linux 8 autofs bug fix and enhancement update
ELBA-2025-17413 Oracle Linux 8 lshw bug fix and enhancement update
ELBA-2025-17409 Oracle Linux 8 net-snmp bug fix and enhancement update
ELBA-2025-17407 Oracle Linux 8 curl bug fix and enhancement update
ELSA-2025-20650 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update
ELBA-2025-17349 Oracle Linux 9 sos bug fix and enhancement update
ELBA-2025-17406 Oracle Linux 8 file bug fix update
ELBA-2025-17349 Oracle Linux 8 sos bug fix and enhancement update
ELSA-2025-20650 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update
ELSA-2025-20649 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update
ELBA-2025-17349 Oracle Linux 10 sos bug fix and enhancement update
ELSA-2025-20649 Important: Unbreakable Enterprise kernel security update
ELBA-2025-17424 Oracle Linux 8 dnsmasq bug fix and enhancement update
Oracle Linux Bug Fix Advisory ELBA-2025-17424
http://linux.oracle.com/errata/ELBA-2025-17424.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
dnsmasq-2.79-35.el8_10.x86_64.rpm
dnsmasq-utils-2.79-35.el8_10.x86_64.rpm
aarch64:
dnsmasq-2.79-35.el8_10.aarch64.rpm
dnsmasq-utils-2.79-35.el8_10.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/dnsmasq-2.79-35.el8_10.src.rpm
Description of changes:
[2.79-35]
- Fix dnsmasq caching of intertwined CNAMES
- Resolves: RHEL-61943
[2.79-34]
- Enable retries again (RHEL-6586)
ELBA-2025-17422 Oracle Linux 8 gnome-shell bug fix and enhancement update
Oracle Linux Bug Fix Advisory ELBA-2025-17422
http://linux.oracle.com/errata/ELBA-2025-17422.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
gnome-shell-3.32.2-58.el8_10.x86_64.rpm
aarch64:
gnome-shell-3.32.2-58.el8_10.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/gnome-shell-3.32.2-58.el8_10.src.rpm
Description of changes:
[3.32.2-58]
- Don't hard depend on gnome-session-xsession to allow
using other session types, e.g. wayland
Resolves: RHEL-110531
ELBA-2025-17421 Oracle Linux 8 protobuf bug fix and enhancement update
Oracle Linux Bug Fix Advisory ELBA-2025-17421
http://linux.oracle.com/errata/ELBA-2025-17421.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
protobuf-3.5.0-17.el8_10.i686.rpm
protobuf-3.5.0-17.el8_10.x86_64.rpm
protobuf-compiler-3.5.0-17.el8_10.i686.rpm
protobuf-compiler-3.5.0-17.el8_10.x86_64.rpm
protobuf-devel-3.5.0-17.el8_10.i686.rpm
protobuf-devel-3.5.0-17.el8_10.x86_64.rpm
protobuf-lite-3.5.0-17.el8_10.i686.rpm
protobuf-lite-3.5.0-17.el8_10.x86_64.rpm
protobuf-lite-devel-3.5.0-17.el8_10.i686.rpm
protobuf-lite-devel-3.5.0-17.el8_10.x86_64.rpm
python3-protobuf-3.5.0-17.el8_10.noarch.rpm
aarch64:
protobuf-3.5.0-17.el8_10.aarch64.rpm
protobuf-compiler-3.5.0-17.el8_10.aarch64.rpm
protobuf-devel-3.5.0-17.el8_10.aarch64.rpm
protobuf-lite-3.5.0-17.el8_10.aarch64.rpm
protobuf-lite-devel-3.5.0-17.el8_10.aarch64.rpm
python3-protobuf-3.5.0-17.el8_10.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/protobuf-3.5.0-17.el8_10.src.rpm
Description of changes:
[3.5.0-17]
- Rebuild
[3.5.0-16]
- Rebuild for changes to test setup
ELSA-2025-20650 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
Oracle Linux Security Advisory ELSA-2025-20650
http://linux.oracle.com/errata/ELSA-2025-20650.html
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-5.4.17-2136.347.6.4.el7uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.347.6.4.el7uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.347.6.4.el7uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.347.6.4.el7uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.347.6.4.el7uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.347.6.4.el7uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.347.6.4.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.347.6.4.el7uek.x86_64.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-5.4.17-2136.347.6.4.el7uek.src.rpm
Related CVEs:
CVE-2025-38724
Description of changes:
[5.4.17-2136.347.6.4.el7uek]
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38501612] {CVE-2025-38724}
ELBA-2025-17420 Oracle Linux 8 gnome-shell-extensions bug fix and enhancement update
Oracle Linux Bug Fix Advisory ELBA-2025-17420
http://linux.oracle.com/errata/ELBA-2025-17420.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
gnome-classic-session-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-apps-menu-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-auto-move-windows-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-classification-banner-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-common-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-custom-menu-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-dash-to-dock-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-dash-to-panel-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-desktop-icons-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-disable-screenshield-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-drive-menu-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-gesture-inhibitor-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-heads-up-display-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-horizontal-workspaces-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-launch-new-instance-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-native-window-placement-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-no-hot-corner-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-panel-favorites-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-places-menu-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-screenshot-window-sizer-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-systemMonitor-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-top-icons-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-updates-dialog-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-user-theme-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-window-grouper-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-window-list-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-windowsNavigator-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-workspace-indicator-3.32.1-44.el8_10.noarch.rpm
aarch64:
gnome-classic-session-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-apps-menu-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-auto-move-windows-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-classification-banner-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-common-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-custom-menu-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-dash-to-dock-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-dash-to-panel-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-desktop-icons-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-disable-screenshield-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-drive-menu-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-gesture-inhibitor-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-heads-up-display-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-horizontal-workspaces-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-launch-new-instance-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-native-window-placement-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-no-hot-corner-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-panel-favorites-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-places-menu-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-screenshot-window-sizer-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-systemMonitor-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-top-icons-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-updates-dialog-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-user-theme-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-window-grouper-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-window-list-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-windowsNavigator-3.32.1-44.el8_10.noarch.rpm
gnome-shell-extension-workspace-indicator-3.32.1-44.el8_10.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/gnome-shell-extensions-3.32.1-44.el8_10.src.rpm
Description of changes:
[3.32.1-44]
- Consider range around edges for dwelling
Resolves: RHEL-28818
[3.32.1-43]
- Make workspace names more prominent
Resolves: RHEL-96219
[3.32.1-42]
- Indicate urgency-hint in dash-to-panel
Resolves: RHEL-76834
ELBA-2025-17414 Oracle Linux 8 autofs bug fix and enhancement update
Oracle Linux Bug Fix Advisory ELBA-2025-17414
http://linux.oracle.com/errata/ELBA-2025-17414.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
autofs-5.1.4-114.0.1.el8_10.5.x86_64.rpm
aarch64:
autofs-5.1.4-114.0.1.el8_10.5.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/autofs-5.1.4-114.0.1.el8_10.5.src.rpm
Description of changes:
[5.1.4-114.0.1.5]
- Add autofs-5.0.5-lookup-mounts.patch [Orabug:12658280]
[5.1.4-114.el8_10.5]
- RHEL-111930 - automount blocked when attempting to lookup ldap maps
- fix missing unlock in sasl_do_kinit_ext_cc().
- Resolves: RHEL-111930
ELBA-2025-17413 Oracle Linux 8 lshw bug fix and enhancement update
Oracle Linux Bug Fix Advisory ELBA-2025-17413
http://linux.oracle.com/errata/ELBA-2025-17413.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
lshw-B.02.19.2-6.el8_10.1.x86_64.rpm
lshw-gui-B.02.19.2-6.el8_10.1.x86_64.rpm
aarch64:
lshw-B.02.19.2-6.el8_10.1.aarch64.rpm
lshw-gui-B.02.19.2-6.el8_10.1.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/lshw-B.02.19.2-6.el8_10.1.src.rpm
Description of changes:
[B.02.19.2-6.1]
- Resolves: RHEL-91281
ELBA-2025-17409 Oracle Linux 8 net-snmp bug fix and enhancement update
Oracle Linux Bug Fix Advisory ELBA-2025-17409
http://linux.oracle.com/errata/ELBA-2025-17409.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
net-snmp-5.8-31.0.1.el8_10.x86_64.rpm
net-snmp-agent-libs-5.8-31.0.1.el8_10.i686.rpm
net-snmp-agent-libs-5.8-31.0.1.el8_10.x86_64.rpm
net-snmp-devel-5.8-31.0.1.el8_10.i686.rpm
net-snmp-devel-5.8-31.0.1.el8_10.x86_64.rpm
net-snmp-libs-5.8-31.0.1.el8_10.i686.rpm
net-snmp-libs-5.8-31.0.1.el8_10.x86_64.rpm
net-snmp-perl-5.8-31.0.1.el8_10.x86_64.rpm
net-snmp-utils-5.8-31.0.1.el8_10.x86_64.rpm
aarch64:
net-snmp-5.8-31.0.1.el8_10.aarch64.rpm
net-snmp-agent-libs-5.8-31.0.1.el8_10.aarch64.rpm
net-snmp-devel-5.8-31.0.1.el8_10.aarch64.rpm
net-snmp-libs-5.8-31.0.1.el8_10.aarch64.rpm
net-snmp-perl-5.8-31.0.1.el8_10.aarch64.rpm
net-snmp-utils-5.8-31.0.1.el8_10.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/net-snmp-5.8-31.0.1.el8_10.src.rpm
Description of changes:
[5.8-31.0.1]
- fix error index value when snmpget is used a proxy pass [Orabug: 34905643]
[1:5.8-31]
- fix use after free issue (RHEL-64696)
ELBA-2025-17407 Oracle Linux 8 curl bug fix and enhancement update
Oracle Linux Bug Fix Advisory ELBA-2025-17407
http://linux.oracle.com/errata/ELBA-2025-17407.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
curl-7.61.1-34.el8_10.8.x86_64.rpm
libcurl-7.61.1-34.el8_10.8.i686.rpm
libcurl-7.61.1-34.el8_10.8.x86_64.rpm
libcurl-devel-7.61.1-34.el8_10.8.i686.rpm
libcurl-devel-7.61.1-34.el8_10.8.x86_64.rpm
libcurl-minimal-7.61.1-34.el8_10.8.i686.rpm
libcurl-minimal-7.61.1-34.el8_10.8.x86_64.rpm
aarch64:
curl-7.61.1-34.el8_10.8.aarch64.rpm
libcurl-7.61.1-34.el8_10.8.aarch64.rpm
libcurl-devel-7.61.1-34.el8_10.8.aarch64.rpm
libcurl-minimal-7.61.1-34.el8_10.8.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/curl-7.61.1-34.el8_10.8.src.rpm
Description of changes:
[7.61.1-34.el8_10.8]
- NTLM: force the connection to HTTP/1.1 (RHEL-73788)
[7.61.1-34.el8_10.7]
* crypto: ensure crypto initialization works (RHEL-102601)
[7.61.1-34.el8_10.6]
- libssh: Fix matching user-specified MD5 hex key (RHEL-94574)
[7.61.1-34.el8_10.5]
- asyn-thread: fix EBADF regression (RHEL-85602)
[7.61.1-34.el8_10.4]
- make up incomplete patch for host name wildcard checking (RHEL-5680)
- asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602)
ELSA-2025-20650 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update
Oracle Linux Security Advisory ELSA-2025-20650
http://linux.oracle.com/errata/ELSA-2025-20650.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
aarch64:
kernel-uek-5.4.17-2136.347.6.4.el8uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.347.6.4.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.347.6.4.el8uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.347.6.4.el8uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.347.6.4.el8uek.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.347.6.4.el8uek.src.rpm
Related CVEs:
CVE-2025-38724
Description of changes:
[5.4.17-2136.347.6.4.el8uek]
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38501612] {CVE-2025-38724}
ELBA-2025-17349 Oracle Linux 9 sos bug fix and enhancement update
Oracle Linux Bug Fix Advisory ELBA-2025-17349
http://linux.oracle.com/errata/ELBA-2025-17349.html
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
x86_64:
sos-4.10.0-4.0.1.el9_6.noarch.rpm
sos-audit-4.10.0-4.0.1.el9_6.noarch.rpm
aarch64:
sos-4.10.0-4.0.1.el9_6.noarch.rpm
sos-audit-4.10.0-4.0.1.el9_6.noarch.rpm
SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/sos-4.10.0-4.0.1.el9_6.src.rpm
Description of changes:
[4.10.0-4.0.1]
- Disable all upload options [Orabug: 37845593]
- Add Keyboard exception handler to collector [Orabug: 37854316]
- Print stack of all un-interrupted process [Orabug: 37713383]
- Update the enabled and skipped plugins lists to match ExaData's
requirements. [Orabug: 37440321]
- os detect string [Orabug: 28674897]
- Disable upload options [Orabug: 31969352]
- Disable upload-option to sos report collector [Orabug: 36068606]
- Add irq debugfs to sosreport [Orabug: 36511145]
- Adding socket statistics command output [Orabug: 36594481]
- Remove file type check and append string to file name [Orabug: 37241057]
- Remove rpc_clnt directory from sunrpc debugfs [Orabug: 37129232]
- Disable ethtool EEPROM dump for link down interfaces [Orabug: 37129428]
- Modify sos.spec to make python3-file-magic as dependency for sos package [Orabug: 36834417]
- Append .txt extension to files rejected by MOS policy [Orabug: 36727763]
- Collecting last 50k lines of ftrace file trace [Orabug: 36590767]
- Adding socket statistics command output [Orabug: 36594481]
- Add IO queue depth of all the devices on node [Orabug: 36594679]
- Disable upload option to sos report collector [Orabug: 36068606]
- Add irq debugfs to sosreport [Orabug: 36511145]
- Collect all rsyslogs files for all-logs option [Orabug: 36402382]
- Set SIGPIPE to default action for Broken Pipe Error [Orabug: 35969973]
- Modifying dnf history info transaction index [Orabug: 35497720]
- Adding virsh guest cgroup configuration [Orabug: 35145501]
- Adding virsh qemu-monitor info tree command [Orabug: 35148435]
- Adding Plugin option support for ksplice and btrfs [Orabug: 35115193]
- append .txt to .com domain named files [Orabug: 34527958]
- Adding dmesg -T to show timestamp for syslog comparison [Orabug: 34250313]
- Adding uptrack-uname to show effective ksplice kernel version [Orabug: 33553351]
- Added sos-oraclelinux-vendor-vendorurl.patch
- Fix patch for Orabug 31969352 [Orabug: 32822570]
- [ovn_central] call podman exec without a timeout
Resolves: bz1767359
- Adjusted ksplice plugin patches for path change [Orabug: 32881277]
- Fix os detect string for Oracle Linux [Orabug: 28674897]
- Add ksplice plugin [Orabug: 30273666] (Philippe Vanhaesendonck)
- Disable upload options for OracleLinux [Orabug: 31969352]
- Replace RH_FTP_HOST and RH_API_HOST with "_none_" [Orabug: 31975601]
- Allow a journal log size to be smaller than 100M [Orabug: 32454362]
- Do not exit on unknown plugin [Orabug: 32556170]
- Add in some btrfs commands [Orabug: 32727607]
- Add /var/run/ksplice/debug to sos ksplice plugin [Orabug: 32618933]
- Fix ksplice plugin does not show description [Orabug: 32886513]
[4.10.0-4]
- Update to 4.10.0-4
Resolves: RHEL-113795
[4.10.0-3]
- Update to 4.10.0-3
Resolves: RHEL-113795
[4.10.0-2]
- Update to 4.10.0-2
Resolves: RHEL-113795
[4.10.0-1]
- Update to 4.10.0
Resolves: RHEL-110499
Resolves: RHEL-110500
Resolves: RHEL-110501
Resolves: RHEL-110502
Resolves: RHEL-110503
Resolves: RHEL-110504
Resolves: RHEL-110505
ELBA-2025-17406 Oracle Linux 8 file bug fix update
Oracle Linux Bug Fix Advisory ELBA-2025-17406
http://linux.oracle.com/errata/ELBA-2025-17406.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
file-5.33-27.el8_10.x86_64.rpm
file-devel-5.33-27.el8_10.i686.rpm
file-devel-5.33-27.el8_10.x86_64.rpm
file-libs-5.33-27.el8_10.i686.rpm
file-libs-5.33-27.el8_10.x86_64.rpm
python3-magic-5.33-27.el8_10.noarch.rpm
aarch64:
file-5.33-27.el8_10.aarch64.rpm
file-devel-5.33-27.el8_10.aarch64.rpm
file-libs-5.33-27.el8_10.aarch64.rpm
python3-magic-5.33-27.el8_10.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/file-5.33-27.el8_10.src.rpm
Description of changes:
[5.33-27]
- Fix incorrect magic pattern for databases
Resolves: RHEL-84532
ELBA-2025-17349 Oracle Linux 8 sos bug fix and enhancement update
Oracle Linux Bug Fix Advisory ELBA-2025-17349
http://linux.oracle.com/errata/ELBA-2025-17349.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
sos-4.10.0-4.0.1.el8_10.noarch.rpm
sos-audit-4.10.0-4.0.1.el8_10.noarch.rpm
aarch64:
sos-4.10.0-4.0.1.el8_10.noarch.rpm
sos-audit-4.10.0-4.0.1.el8_10.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/sos-4.10.0-4.0.1.el8_10.src.rpm
Description of changes:
[4.10.0-4.0.1]
- Adding OSMH support information [Orabug: 38158377]
- Add Keyboard exception handler to collector [Orabug: 37874482]
- Print stack of all un-interrupted processes [Orabug: 37630111]
- Update the enabled and skipped plugins lists to match ExaData's
requirements. [Orabug: 37440315]
- Disable upload options [Orabug: 31969352]
- Disable upload option to sos report collector [Orabug: 36069764]
- Adding socket statistics command output [Orabug: 36491747]
- Add irq debugfs to sosreport [Orabug: 36511145]
- Added os detect string [Orabug: 28674897]
- Added sos-oraclelinux-vendor-vendorurl.patch
- Remove rpc_clnt directory from sunrpc debugfs [Orabug: 37097463]
- Disable ethtool EEPROM dump for link down interfaces [Orabug: 37050543]
- Modify sos.spec to make python3-magic as dependency for sos package [Orabug: 36826342]
- Add exadata plugin to collect exadata specific info [Orabug: 35312548]
- Append .txt extension to files rejected by MOS policy [Orabug: 35801795]
- Collecting last 50k lines of ftrace file trace [Orabug: 36448808]
- Adding socket statistics command output [Orabug: 36491747]
- Add IO queue depth of all the devices on node [Orabug: 35849258]
- Disable upload option to sos report collector [Orabug: 36069764]
- Add irq debugfs to sosreport [Orabug: 36511145]
- Collect all rsyslogs files for all-logs option [Orabug: 36264341]
- Set SIGPIPE to default action for BrokenPipeError [Orabug: 36016241]
- Modifying dnf history info remove empty files [Orabug: 35350237]
- Modifying dnf history info transaction index [Orabug: 35350237]
- Adding virsh guest cgroup configuration [Orabug: 35088964]
- Adding PluginOpt support for ksplice and btrfs [Orabug: 34993258]
- Adding virsh qemu-monitor info-tree command [Orabug: 34650374]
- append .txt to .com domain named files [Orabug: 34523347]
- Adding dmesg -T to show timestamp for syslog comparison [Orabug: 34250313]
- Adding uptrack-uname to show effective ksplice kernel version [Orabug: 33553351]
- Fix ksplice plugin does not show description [Orabug: 32886513]
- Adjusted ksplice plugin patches for path change [Orabug: 32881277]
- Fix patch for Orabug 31969352 [Orabug: 32822570]
- Add in some btrfs commands [Orabug: 32727607]
- Add /var/run/ksplice/debug to sos ksplice plugin [Orabug: 32618933]
- Do not exit on unknown plugin [Orabug: 32556170]
- Allow a journal log size to be smaller than 100M [Orabug: 32454362]
- Replace RH_FTP_HOST and RH_API_HOST with "_none_" [Orabug: 31975601]
- Disable upload options for OracleLinux [Orabug: 31969352]
- Added sos-oraclelinux-vendor-vendorurl.patch
- Fix os detect string for Oracle Linux [Orabug: 28674897]
- Add ksplice plugin [Orabug: 30273666] (Philippe Vanhaesendonck)
- [ovn_central] call podman exec without a timeout
Resolves: bz1767359
[4.10.0-4]
- Update to 4.10.0-4
Resolves: RHEL-112413
[4.10.0-2]
- Update to 4.10.0-2
Resolves: RHEL-112413
[4.10.0-1]
- Update to 4.10.0
Resolves: RHEL-110499
Resolves: RHEL-110500
Resolves: RHEL-110501
Resolves: RHEL-110502
Resolves: RHEL-110503
Resolves: RHEL-110504
Resolves: RHEL-110505
ELSA-2025-20650 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update
Oracle Linux Security Advisory ELSA-2025-20650
http://linux.oracle.com/errata/ELSA-2025-20650.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-5.4.17-2136.347.6.4.el8uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.347.6.4.el8uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.347.6.4.el8uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.347.6.4.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.347.6.4.el8uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.347.6.4.el8uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.347.6.4.el8uek.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.347.6.4.el8uek.src.rpm
Related CVEs:
CVE-2025-38724
Description of changes:
[5.4.17-2136.347.6.4.el8uek]
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38501612] {CVE-2025-38724}
ELSA-2025-20649 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update
Oracle Linux Security Advisory ELSA-2025-20649
http://linux.oracle.com/errata/ELSA-2025-20649.html
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-core-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-debug-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-devel-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-doc-6.12.0-103.40.4.4.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-103.40.4.4.el9uek.x86_64.rpm
kernel-uek-tools-6.12.0-103.40.4.4.el9uek.x86_64.rpm
aarch64:
kernel-uek-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-core-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-debug-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-devel-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-modules-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek-tools-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek64k-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek64k-core-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-103.40.4.4.el9uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-103.40.4.4.el9uek.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-6.12.0-103.40.4.4.el9uek.src.rpm
Related CVEs:
CVE-2025-38724
CVE-2025-39698
CVE-2025-39866
CVE-2025-39881
Description of changes:
[6.12.0-103.40.4.4.el9uek]
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38500610] {CVE-2025-38724}
- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (Jens Axboe) [Orabug: 38500621] {CVE-2025-39698}
- kernfs: Fix UAF in polling when open file is released (Chen Ridong) [Orabug: 38500629] {CVE-2025-39881}
- fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue) [Orabug: 38500632] {CVE-2025-39866}
ELBA-2025-17349 Oracle Linux 10 sos bug fix and enhancement update
Oracle Linux Bug Fix Advisory ELBA-2025-17349
http://linux.oracle.com/errata/ELBA-2025-17349.html
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
x86_64:
sos-4.10.0-4.0.1.el10_0.noarch.rpm
aarch64:
sos-4.10.0-4.0.1.el10_0.noarch.rpm
SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/sos-4.10.0-4.0.1.el10_0.src.rpm
Description of changes:
[4.10.0-4.0.1]
- Disable all upload options [Orabug: 37854589]
- Update the enabled and skipped plugins lists to match ExaDatas requirements. [Orabug: 37440321]
- Add Keyboard exception handler to collector [Orabug: 37854316]
- Print stack of all un-interrupted process [Orabug: 37713383]
- Remove file type check and append string to file name [Orabug: 37241057]
- Remove rpc_clnt directory from sunrpc debugfs [Orabug: 37129232]
- Disable ethtool EEPROM dump for link down interfaces [Orabug: 37129428]
- Modify sos.spec to make python3-file-magic as dependency for sos package [Orabug: 36834417]
- Append .txt extension to files rejected by MOS policy [Orabug: 36727763]
- Collecting last 50k lines of ftrace file trace [Orabug: 36590767]
- Adding socket statistics command output [Orabug: 36594481]
- Add IO queue depth of all the devices on node [Orabug: 36594679]
- Disable upload option to sos report collector [Orabug: 36068606]
- Add irq debugfs to sosreport [Orabug: 36511145]
- Collect all rsyslogs files for all-logs option [Orabug: 36402382]
- Set SIGPIPE to default action for Broken Pipe Error [Orabug: 35969973]
- Modifying dnf history info transaction index [Orabug: 35497720]
- Adding virsh guest cgroup configuration [Orabug: 35145501]
- Adding virsh qemu-monitor info tree command [Orabug: 35148435]
- Adding Plugin option support for ksplice and btrfs [Orabug: 35115193]
- append .txt to .com domain named files [Orabug: 34527958]
- Adding dmesg -T to show timestamp for syslog comparison [Orabug: 34250313]
- Adding uptrack-uname to show effective ksplice kernel version [Orabug: 33553351]
- Added sos-oraclelinux-vendor-vendorurl.patch
- Fix patch for Orabug 31969352 [Orabug: 32822570]
- [ovn_central] call podman exec without a timeout
Resolves: bz1767359
- Adjusted ksplice plugin patches for path change [Orabug: 32881277]
- Fix os detect string for Oracle Linux [Orabug: 28674897]
- Add ksplice plugin [Orabug: 30273666] (Philippe Vanhaesendonck)
- Disable upload options for OracleLinux [Orabug: 31969352]
- Replace RH_FTP_HOST and RH_API_HOST with "_none_" [Orabug: 31975601]
- Allow a journal log size to be smaller than 100M [Orabug: 32454362]
- Do not exit on unknown plugin [Orabug: 32556170]
- Add in some btrfs commands [Orabug: 32727607]
- Add /var/run/ksplice/debug to sos ksplice plugin [Orabug: 32618933]
- Fix ksplice plugin does not show description [Orabug: 32886513]
[4.10.0-4]
- Update to 4.10.0-4
Resolves: RHEL-113793
[4.10.0-3]
- Update to 4.10.0-3
Resolves: RHEL-113793
[4.10.0-2]
- Update to 4.10.0-2
Resolves: RHEL-113793
[4.10.0-1]
- Update to 4.10.0
Resolves: RHEL-110499
Resolves: RHEL-110500
Resolves: RHEL-110501
Resolves: RHEL-110502
Resolves: RHEL-110503
Resolves: RHEL-110504
Resolves: RHEL-110505
ELSA-2025-20649 Important: Unbreakable Enterprise kernel security update
Oracle Linux Security Advisory ELSA-2025-20649
http://linux.oracle.com/errata/ELSA-2025-20649.html
The following updated rpms for have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-core-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-devel-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-doc-6.12.0-103.40.4.4.el10uek.noarch.rpm
kernel-uek-modules-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-tools-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-debug-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-103.40.4.4.el10uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-103.40.4.4.el10uek.x86_64.rpm
aarch64:
kernel-uek-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-core-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-devel-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-modules-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-tools-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-debug-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek64k-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek64k-core-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-103.40.4.4.el10uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-103.40.4.4.el10uek.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-uek-6.12.0-103.40.4.4.el10uek.src.rpm
Related CVEs:
CVE-2025-38724
CVE-2025-39698
CVE-2025-39866
CVE-2025-39881
Description of changes:
[6.12.0-103.40.4.4.el10uek]
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38500610] {CVE-2025-38724}
- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (Jens Axboe) [Orabug: 38500621] {CVE-2025-39698}
- kernfs: Fix UAF in polling when open file is released (Chen Ridong) [Orabug: 38500629] {CVE-2025-39881}
- fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue) [Orabug: 38500632] {CVE-2025-39866}
