[oraclelinux] Updating 8/8-slim/8-fips/9/9-slim for ELSA-2023-5837, ELSA-2023-5838, ELSA-2023-5763,ELSA-2023-5462 #15588
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Addresses the following errata/CVEs: * <https://linux.oracle.com/errata/ELSA-2023-5837.html> * <https://linux.oracle.com/cve/CVE-2023-44487.html> * <https://linux.oracle.com/errata/ELSA-2023-5838.html> * <https://linux.oracle.com/cve/CVE-2023-44487.html> * <https://linux.oracle.com/errata/ELSA-2023-5763.html> * <https://linux.oracle.com/cve/CVE-2023-38545.html> * <https://linux.oracle.com/cve/CVE-2023-38546.html> * <https://linux.oracle.com/errata/ELSA-2023-5462.html> * <https://linux.oracle.com/cve/CVE-2023-40217.html> Signed-off-by: Alan Steinberg <alan.steinberg@oracle.com>
Diff for fdcd0a0:diff --git a/_bashbrew-cat b/_bashbrew-cat
index fd8a431..0a67cfc 100644
--- a/_bashbrew-cat
+++ b/_bashbrew-cat
@@ -1,9 +1,9 @@
Maintainers: Oracle Linux Product Team <ol-ovm-info_ww@oracle.com> (@Oracle)
GitRepo: https://github.com/oracle/container-images.git
GitCommit: 5c8a1c296acd6e90487cd261d16cf85fd6bcb73f
-amd64-GitCommit: 27c114bdedfaf42464804fe198b8cf4dcafd0bd8
+amd64-GitCommit: 6c5531adf48feee7f9ac11d963ca0ecc695743f4
amd64-GitFetch: refs/heads/dist-amd64
-arm64v8-GitCommit: 0fe93d2573f36d7adf52eab0a27d9897b0bb6684
+arm64v8-GitCommit: 7f7f2e3312abe74857e4f5d830effc39aef5462f
arm64v8-GitFetch: refs/heads/dist-arm64v8
Tags: 7-slim
diff --git a/oraclelinux_8-slim-fips/oraclelinux-8-slim-fips-amd64-rootfs.tar.xz b/oraclelinux_8-slim-fips/oraclelinux-8-slim-fips-amd64-rootfs.tar.xz
index 1f634dc..55abaab 100644
Binary files a/oraclelinux_8-slim-fips/oraclelinux-8-slim-fips-amd64-rootfs.tar.xz and b/oraclelinux_8-slim-fips/oraclelinux-8-slim-fips-amd64-rootfs.tar.xz differ
diff --git a/oraclelinux_8-slim/oraclelinux-8-slim-amd64-rootfs.tar.xz b/oraclelinux_8-slim/oraclelinux-8-slim-amd64-rootfs.tar.xz
index a47a73c..796f9ef 100644
Binary files a/oraclelinux_8-slim/oraclelinux-8-slim-amd64-rootfs.tar.xz and b/oraclelinux_8-slim/oraclelinux-8-slim-amd64-rootfs.tar.xz differ
diff --git a/oraclelinux_8/oraclelinux-8-amd64-rootfs.tar.xz b/oraclelinux_8/oraclelinux-8-amd64-rootfs.tar.xz
index b6128c5..33d2eb7 100644
Binary files a/oraclelinux_8/oraclelinux-8-amd64-rootfs.tar.xz and b/oraclelinux_8/oraclelinux-8-amd64-rootfs.tar.xz differ
diff --git a/oraclelinux_9-slim/oraclelinux-9-slim-amd64-rootfs.tar.xz b/oraclelinux_9-slim/oraclelinux-9-slim-amd64-rootfs.tar.xz
index 5062608..0cb1181 100644
Binary files a/oraclelinux_9-slim/oraclelinux-9-slim-amd64-rootfs.tar.xz and b/oraclelinux_9-slim/oraclelinux-9-slim-amd64-rootfs.tar.xz differ
diff --git a/oraclelinux_9-slim/oraclelinux-9-slim-amd64-rootfs.tar.xz 'tar -t' b/oraclelinux_9-slim/oraclelinux-9-slim-amd64-rootfs.tar.xz 'tar -t'
index fc0d118..8599a9d 100644
--- a/oraclelinux_9-slim/oraclelinux-9-slim-amd64-rootfs.tar.xz 'tar -t'
+++ b/oraclelinux_9-slim/oraclelinux-9-slim-amd64-rootfs.tar.xz 'tar -t'
@@ -39,6 +39,7 @@ etc/crypto-policies/back-ends/nss.config
etc/crypto-policies/back-ends/openssh.config
etc/crypto-policies/back-ends/opensshserver.config
etc/crypto-policies/back-ends/openssl.config
+etc/crypto-policies/back-ends/openssl_fips.config
etc/crypto-policies/back-ends/opensslcnf.config
etc/crypto-policies/config
etc/crypto-policies/local.d/
@@ -1109,6 +1110,7 @@ usr/share/crypto-policies/DEFAULT/nss.txt
usr/share/crypto-policies/DEFAULT/openssh.txt
usr/share/crypto-policies/DEFAULT/opensshserver.txt
usr/share/crypto-policies/DEFAULT/openssl.txt
+usr/share/crypto-policies/DEFAULT/openssl_fips.txt
usr/share/crypto-policies/DEFAULT/opensslcnf.txt
usr/share/crypto-policies/FIPS/
usr/share/crypto-policies/FIPS/bind.txt
@@ -1122,6 +1124,7 @@ usr/share/crypto-policies/FIPS/nss.txt
usr/share/crypto-policies/FIPS/openssh.txt
usr/share/crypto-policies/FIPS/opensshserver.txt
usr/share/crypto-policies/FIPS/openssl.txt
+usr/share/crypto-policies/FIPS/openssl_fips.txt
usr/share/crypto-policies/FIPS/opensslcnf.txt
usr/share/crypto-policies/FUTURE/
usr/share/crypto-policies/FUTURE/bind.txt
@@ -1135,6 +1138,7 @@ usr/share/crypto-policies/FUTURE/nss.txt
usr/share/crypto-policies/FUTURE/openssh.txt
usr/share/crypto-policies/FUTURE/opensshserver.txt
usr/share/crypto-policies/FUTURE/openssl.txt
+usr/share/crypto-policies/FUTURE/openssl_fips.txt
usr/share/crypto-policies/FUTURE/opensslcnf.txt
usr/share/crypto-policies/LEGACY/
usr/share/crypto-policies/LEGACY/bind.txt
@@ -1148,6 +1152,7 @@ usr/share/crypto-policies/LEGACY/nss.txt
usr/share/crypto-policies/LEGACY/openssh.txt
usr/share/crypto-policies/LEGACY/opensshserver.txt
usr/share/crypto-policies/LEGACY/openssl.txt
+usr/share/crypto-policies/LEGACY/openssl_fips.txt
usr/share/crypto-policies/LEGACY/opensslcnf.txt
usr/share/crypto-policies/back-ends/
usr/share/crypto-policies/back-ends/DEFAULT/
@@ -1162,6 +1167,7 @@ usr/share/crypto-policies/back-ends/DEFAULT/nss.config
usr/share/crypto-policies/back-ends/DEFAULT/openssh.config
usr/share/crypto-policies/back-ends/DEFAULT/opensshserver.config
usr/share/crypto-policies/back-ends/DEFAULT/openssl.config
+usr/share/crypto-policies/back-ends/DEFAULT/openssl_fips.config
usr/share/crypto-policies/back-ends/DEFAULT/opensslcnf.config
usr/share/crypto-policies/back-ends/FIPS/
usr/share/crypto-policies/back-ends/FIPS/bind.config
@@ -1175,6 +1181,7 @@ usr/share/crypto-policies/back-ends/FIPS/nss.config
usr/share/crypto-policies/back-ends/FIPS/openssh.config
usr/share/crypto-policies/back-ends/FIPS/opensshserver.config
usr/share/crypto-policies/back-ends/FIPS/openssl.config
+usr/share/crypto-policies/back-ends/FIPS/openssl_fips.config
usr/share/crypto-policies/back-ends/FIPS/opensslcnf.config
usr/share/crypto-policies/back-ends/FUTURE/
usr/share/crypto-policies/back-ends/FUTURE/bind.config
@@ -1188,6 +1195,7 @@ usr/share/crypto-policies/back-ends/FUTURE/nss.config
usr/share/crypto-policies/back-ends/FUTURE/openssh.config
usr/share/crypto-policies/back-ends/FUTURE/opensshserver.config
usr/share/crypto-policies/back-ends/FUTURE/openssl.config
+usr/share/crypto-policies/back-ends/FUTURE/openssl_fips.config
usr/share/crypto-policies/back-ends/FUTURE/opensslcnf.config
usr/share/crypto-policies/back-ends/LEGACY/
usr/share/crypto-policies/back-ends/LEGACY/bind.config
@@ -1201,6 +1209,7 @@ usr/share/crypto-policies/back-ends/LEGACY/nss.config
usr/share/crypto-policies/back-ends/LEGACY/openssh.config
usr/share/crypto-policies/back-ends/LEGACY/opensshserver.config
usr/share/crypto-policies/back-ends/LEGACY/openssl.config
+usr/share/crypto-policies/back-ends/LEGACY/openssl_fips.config
usr/share/crypto-policies/back-ends/LEGACY/opensslcnf.config
usr/share/crypto-policies/default-config
usr/share/crypto-policies/policies/
@@ -1213,6 +1222,7 @@ usr/share/crypto-policies/policies/modules/
usr/share/crypto-policies/policies/modules/AD-SUPPORT-LEGACY.pmod
usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod
usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod
+usr/share/crypto-policies/policies/modules/NO-ENFORCE-EMS.pmod
usr/share/crypto-policies/policies/modules/NO-SHA1.pmod
usr/share/crypto-policies/policies/modules/OSPP.pmod
usr/share/crypto-policies/policies/modules/SHA1.pmod
diff --git a/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz b/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz
index 51da462..88df00e 100644
Binary files a/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz and b/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz differ
diff --git a/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz 'tar -t' b/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz 'tar -t'
index cae8ca7..f98d6b7 100644
--- a/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz 'tar -t'
+++ b/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz 'tar -t'
@@ -46,6 +46,7 @@ etc/crypto-policies/back-ends/nss.config
etc/crypto-policies/back-ends/openssh.config
etc/crypto-policies/back-ends/opensshserver.config
etc/crypto-policies/back-ends/openssl.config
+etc/crypto-policies/back-ends/openssl_fips.config
etc/crypto-policies/back-ends/opensslcnf.config
etc/crypto-policies/config
etc/crypto-policies/local.d/
@@ -5847,6 +5848,7 @@ usr/share/crypto-policies/DEFAULT/nss.txt
usr/share/crypto-policies/DEFAULT/openssh.txt
usr/share/crypto-policies/DEFAULT/opensshserver.txt
usr/share/crypto-policies/DEFAULT/openssl.txt
+usr/share/crypto-policies/DEFAULT/openssl_fips.txt
usr/share/crypto-policies/DEFAULT/opensslcnf.txt
usr/share/crypto-policies/FIPS/
usr/share/crypto-policies/FIPS/bind.txt
@@ -5860,6 +5862,7 @@ usr/share/crypto-policies/FIPS/nss.txt
usr/share/crypto-policies/FIPS/openssh.txt
usr/share/crypto-policies/FIPS/opensshserver.txt
usr/share/crypto-policies/FIPS/openssl.txt
+usr/share/crypto-policies/FIPS/openssl_fips.txt
usr/share/crypto-policies/FIPS/opensslcnf.txt
usr/share/crypto-policies/FUTURE/
usr/share/crypto-policies/FUTURE/bind.txt
@@ -5873,6 +5876,7 @@ usr/share/crypto-policies/FUTURE/nss.txt
usr/share/crypto-policies/FUTURE/openssh.txt
usr/share/crypto-policies/FUTURE/opensshserver.txt
usr/share/crypto-policies/FUTURE/openssl.txt
+usr/share/crypto-policies/FUTURE/openssl_fips.txt
usr/share/crypto-policies/FUTURE/opensslcnf.txt
usr/share/crypto-policies/LEGACY/
usr/share/crypto-policies/LEGACY/bind.txt
@@ -5886,6 +5890,7 @@ usr/share/crypto-policies/LEGACY/nss.txt
usr/share/crypto-policies/LEGACY/openssh.txt
usr/share/crypto-policies/LEGACY/opensshserver.txt
usr/share/crypto-policies/LEGACY/openssl.txt
+usr/share/crypto-policies/LEGACY/openssl_fips.txt
usr/share/crypto-policies/LEGACY/opensslcnf.txt
usr/share/crypto-policies/back-ends/
usr/share/crypto-policies/back-ends/DEFAULT/
@@ -5900,6 +5905,7 @@ usr/share/crypto-policies/back-ends/DEFAULT/nss.config
usr/share/crypto-policies/back-ends/DEFAULT/openssh.config
usr/share/crypto-policies/back-ends/DEFAULT/opensshserver.config
usr/share/crypto-policies/back-ends/DEFAULT/openssl.config
+usr/share/crypto-policies/back-ends/DEFAULT/openssl_fips.config
usr/share/crypto-policies/back-ends/DEFAULT/opensslcnf.config
usr/share/crypto-policies/back-ends/FIPS/
usr/share/crypto-policies/back-ends/FIPS/bind.config
@@ -5913,6 +5919,7 @@ usr/share/crypto-policies/back-ends/FIPS/nss.config
usr/share/crypto-policies/back-ends/FIPS/openssh.config
usr/share/crypto-policies/back-ends/FIPS/opensshserver.config
usr/share/crypto-policies/back-ends/FIPS/openssl.config
+usr/share/crypto-policies/back-ends/FIPS/openssl_fips.config
usr/share/crypto-policies/back-ends/FIPS/opensslcnf.config
usr/share/crypto-policies/back-ends/FUTURE/
usr/share/crypto-policies/back-ends/FUTURE/bind.config
@@ -5926,6 +5933,7 @@ usr/share/crypto-policies/back-ends/FUTURE/nss.config
usr/share/crypto-policies/back-ends/FUTURE/openssh.config
usr/share/crypto-policies/back-ends/FUTURE/opensshserver.config
usr/share/crypto-policies/back-ends/FUTURE/openssl.config
+usr/share/crypto-policies/back-ends/FUTURE/openssl_fips.config
usr/share/crypto-policies/back-ends/FUTURE/opensslcnf.config
usr/share/crypto-policies/back-ends/LEGACY/
usr/share/crypto-policies/back-ends/LEGACY/bind.config
@@ -5939,6 +5947,7 @@ usr/share/crypto-policies/back-ends/LEGACY/nss.config
usr/share/crypto-policies/back-ends/LEGACY/openssh.config
usr/share/crypto-policies/back-ends/LEGACY/opensshserver.config
usr/share/crypto-policies/back-ends/LEGACY/openssl.config
+usr/share/crypto-policies/back-ends/LEGACY/openssl_fips.config
usr/share/crypto-policies/back-ends/LEGACY/opensslcnf.config
usr/share/crypto-policies/default-config
usr/share/crypto-policies/policies/
@@ -5951,6 +5960,7 @@ usr/share/crypto-policies/policies/modules/
usr/share/crypto-policies/policies/modules/AD-SUPPORT-LEGACY.pmod
usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod
usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod
+usr/share/crypto-policies/policies/modules/NO-ENFORCE-EMS.pmod
usr/share/crypto-policies/policies/modules/NO-SHA1.pmod
usr/share/crypto-policies/policies/modules/OSPP.pmod
usr/share/crypto-policies/policies/modules/SHA1.pmodRelevant Maintainers:
|
yosifkit
approved these changes
Oct 20, 2023
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This update incorporates fixes for CVE-2023-40217,CVE-2023-44487,CVE-2023-38545,CVE-2023-38546
See the following for details:
https://linux.oracle.com/errata/ELSA-2023-5462.html
https://linux.oracle.com/errata/ELSA-2023-5838.html
https://linux.oracle.com/errata/ELSA-2023-5837.html
https://linux.oracle.com/errata/ELSA-2023-5763.html
Signed-off-by: Alan Steinberg alan.steinberg@oracle.com