ELSA-2023-0837

ELSA-2023-0837 - systemd security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2023-02-22

Description

[239-68.0.2]
- Backport upstream pstore dmesg fix [Orabug: 34850699]
- Standardize ioctl (BTRFS_IOC_QGROUP_CREATE) check and return -ENOTCONN, if quota is not enabled [Orabug: 34694253]
- Disable unprivileged BPF by default [Orabug: 32870980]
- backport upstream pstore tmpfiles patch [Orabug: 31420486]
- udev rules: fix memory hot add and remove [Orabug: 31310273]
- fix to enable systemd-pstore.service [Orabug: 30951066]
- journal: change support URL shown in the catalog entries [Orabug: 30853009]
- fix to generate systemd-pstore.service file [Orabug: 30230056]
- fix _netdev is missing for iscsi entry in /etc/fstab (tony.l.lam@oracle.com) [Orabug: 25897792]
- set 'RemoveIPC=no' in logind.conf as default for OL7.2 [Orabug: 22224874]
- allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
- add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]
- Backport upstream patches for the new systemd-pstore tool (Eric DeVolder) [OraBug: 30230056]

[239-68.4]
- basic: add STRERROR() wrapper for strerror_r() (#2155519)
- coredump: put context array into a struct (#2155519)
- coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155519)

[239-68.3]
- core: bring manager_startup() and manager_reload() more inline (#2164049)

Related CVEs

CVE-2022-4415

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	systemd-239-68.0.2.el8_7.4.src.rpm	87fa54933ead30cbf874aea65efeae93235129836da9e991c9cb78690cc15024	-	ol8_aarch64_baseos_latest
	systemd-239-68.0.2.el8_7.4.src.rpm	87fa54933ead30cbf874aea65efeae93235129836da9e991c9cb78690cc15024	-	ol8_aarch64_u7_baseos_patch
	systemd-239-68.0.2.el8_7.4.aarch64.rpm	5df24f454fb70dfdc5d9131777337e71befb9c02a8d83ca116311406a8aa9812	-	ol8_aarch64_baseos_latest
	systemd-239-68.0.2.el8_7.4.aarch64.rpm	5df24f454fb70dfdc5d9131777337e71befb9c02a8d83ca116311406a8aa9812	-	ol8_aarch64_u7_baseos_patch
	systemd-container-239-68.0.2.el8_7.4.aarch64.rpm	1a858640cb21e4a6133df4413fa5a0106f8f1d5d5e6d196492d6543b32cb9e8b	-	ol8_aarch64_baseos_latest
	systemd-container-239-68.0.2.el8_7.4.aarch64.rpm	1a858640cb21e4a6133df4413fa5a0106f8f1d5d5e6d196492d6543b32cb9e8b	-	ol8_aarch64_u7_baseos_patch
	systemd-devel-239-68.0.2.el8_7.4.aarch64.rpm	1d226ed3698a35f1666b0347a11a2fe9d53341cec52456e0afdd2e3a415aaf70	-	ol8_aarch64_baseos_latest
	systemd-devel-239-68.0.2.el8_7.4.aarch64.rpm	1d226ed3698a35f1666b0347a11a2fe9d53341cec52456e0afdd2e3a415aaf70	-	ol8_aarch64_u7_baseos_patch
	systemd-journal-remote-239-68.0.2.el8_7.4.aarch64.rpm	2c9ce5db2bdda7273554794219935d936ba0168c2e1c7579389294116a102e06	-	ol8_aarch64_baseos_latest
	systemd-journal-remote-239-68.0.2.el8_7.4.aarch64.rpm	2c9ce5db2bdda7273554794219935d936ba0168c2e1c7579389294116a102e06	-	ol8_aarch64_u7_baseos_patch
	systemd-libs-239-68.0.2.el8_7.4.aarch64.rpm	e7e03ecbe0a053156f65e742f48b5a866a57f31b7a93984eee01e218610e24bb	-	ol8_aarch64_baseos_latest
	systemd-libs-239-68.0.2.el8_7.4.aarch64.rpm	e7e03ecbe0a053156f65e742f48b5a866a57f31b7a93984eee01e218610e24bb	-	ol8_aarch64_u7_baseos_patch
	systemd-pam-239-68.0.2.el8_7.4.aarch64.rpm	445d95d90980d4c4722438360cf00a15082e566ec8888f483c4bbd4a11fccb32	-	ol8_aarch64_baseos_latest
	systemd-pam-239-68.0.2.el8_7.4.aarch64.rpm	445d95d90980d4c4722438360cf00a15082e566ec8888f483c4bbd4a11fccb32	-	ol8_aarch64_u7_baseos_patch
	systemd-tests-239-68.0.2.el8_7.4.aarch64.rpm	4e65a441b900717f79c47e8bd499aee9dc39367b75a39f9b8c259c41bec0bbf3	-	ol8_aarch64_baseos_latest
	systemd-tests-239-68.0.2.el8_7.4.aarch64.rpm	4e65a441b900717f79c47e8bd499aee9dc39367b75a39f9b8c259c41bec0bbf3	-	ol8_aarch64_u7_baseos_patch
	systemd-udev-239-68.0.2.el8_7.4.aarch64.rpm	8ece05d59bf91456f336275c8cff8c9e80724c499f67c3ba220939afbd6b8e82	-	ol8_aarch64_baseos_latest
	systemd-udev-239-68.0.2.el8_7.4.aarch64.rpm	8ece05d59bf91456f336275c8cff8c9e80724c499f67c3ba220939afbd6b8e82	-	ol8_aarch64_u7_baseos_patch
Oracle Linux 8 (x86_64)	systemd-239-68.0.2.el8_7.4.src.rpm	87fa54933ead30cbf874aea65efeae93235129836da9e991c9cb78690cc15024	-	ol8_x86_64_baseos_latest
	systemd-239-68.0.2.el8_7.4.src.rpm	87fa54933ead30cbf874aea65efeae93235129836da9e991c9cb78690cc15024	-	ol8_x86_64_u7_baseos_patch
	systemd-239-68.0.2.el8_7.4.i686.rpm	493eddb2146bb0329e3ed618a166064d1f91134d0555fe9f00b0b2ee2567da81	-	ol8_x86_64_baseos_latest
	systemd-239-68.0.2.el8_7.4.i686.rpm	493eddb2146bb0329e3ed618a166064d1f91134d0555fe9f00b0b2ee2567da81	-	ol8_x86_64_u7_baseos_patch
	systemd-239-68.0.2.el8_7.4.x86_64.rpm	3c42eeff4bf819f8bfd28c63b08934b10583380bcbd3e055a0154647f375956a	-	exadata_dbserver_23.1.1.0.0_x86_64_base
	systemd-239-68.0.2.el8_7.4.x86_64.rpm	3c42eeff4bf819f8bfd28c63b08934b10583380bcbd3e055a0154647f375956a	-	exadata_dbserver_23.1.2.0.0_x86_64_base
	systemd-239-68.0.2.el8_7.4.x86_64.rpm	3c42eeff4bf819f8bfd28c63b08934b10583380bcbd3e055a0154647f375956a	-	ol8_x86_64_baseos_latest
	systemd-239-68.0.2.el8_7.4.x86_64.rpm	3c42eeff4bf819f8bfd28c63b08934b10583380bcbd3e055a0154647f375956a	-	ol8_x86_64_u7_baseos_patch
	systemd-container-239-68.0.2.el8_7.4.i686.rpm	64e915dfdf0ef057ab0c334735b4498725456fe19914f8e97bb765ea231a548d	-	ol8_x86_64_baseos_latest
	systemd-container-239-68.0.2.el8_7.4.i686.rpm	64e915dfdf0ef057ab0c334735b4498725456fe19914f8e97bb765ea231a548d	-	ol8_x86_64_u7_baseos_patch
	systemd-container-239-68.0.2.el8_7.4.x86_64.rpm	581d1a2519936563740e48f70f04f07ddcd6efad968544c7380b0609e1b03081	-	exadata_dbserver_23.1.1.0.0_x86_64_base
	systemd-container-239-68.0.2.el8_7.4.x86_64.rpm	581d1a2519936563740e48f70f04f07ddcd6efad968544c7380b0609e1b03081	-	exadata_dbserver_23.1.2.0.0_x86_64_base
	systemd-container-239-68.0.2.el8_7.4.x86_64.rpm	581d1a2519936563740e48f70f04f07ddcd6efad968544c7380b0609e1b03081	-	ol8_x86_64_baseos_latest
	systemd-container-239-68.0.2.el8_7.4.x86_64.rpm	581d1a2519936563740e48f70f04f07ddcd6efad968544c7380b0609e1b03081	-	ol8_x86_64_u7_baseos_patch
	systemd-devel-239-68.0.2.el8_7.4.i686.rpm	ea2d999ae9973889b65800ebb8fdab05775d774bae5cffa793e083acda99f323	-	ol8_x86_64_baseos_latest
	systemd-devel-239-68.0.2.el8_7.4.i686.rpm	ea2d999ae9973889b65800ebb8fdab05775d774bae5cffa793e083acda99f323	-	ol8_x86_64_u7_baseos_patch
	systemd-devel-239-68.0.2.el8_7.4.x86_64.rpm	7152499f4e7cce1126c68c3001a3d95dbfb1607738ba28c00b24a72ce32b7339	-	ol8_x86_64_baseos_latest
	systemd-devel-239-68.0.2.el8_7.4.x86_64.rpm	7152499f4e7cce1126c68c3001a3d95dbfb1607738ba28c00b24a72ce32b7339	-	ol8_x86_64_u7_baseos_patch
	systemd-journal-remote-239-68.0.2.el8_7.4.x86_64.rpm	bf2b7fc332c85fdcbec3fd28eebfec74a11a062c9405a0a26b0fd5540395beea	-	ol8_x86_64_baseos_latest
	systemd-journal-remote-239-68.0.2.el8_7.4.x86_64.rpm	bf2b7fc332c85fdcbec3fd28eebfec74a11a062c9405a0a26b0fd5540395beea	-	ol8_x86_64_u7_baseos_patch
	systemd-libs-239-68.0.2.el8_7.4.i686.rpm	c09dfa796beea9358ad715bc17c8b24a14353195abfa56e1a8ff5cde03c97845	-	ol8_x86_64_baseos_latest
	systemd-libs-239-68.0.2.el8_7.4.i686.rpm	c09dfa796beea9358ad715bc17c8b24a14353195abfa56e1a8ff5cde03c97845	-	ol8_x86_64_u7_baseos_patch
	systemd-libs-239-68.0.2.el8_7.4.x86_64.rpm	f66d4fb4f091b6b7d1b88d80ba72ba7b8ee0940c361ac5ab801382b6d3462883	-	exadata_dbserver_23.1.1.0.0_x86_64_base
	systemd-libs-239-68.0.2.el8_7.4.x86_64.rpm	f66d4fb4f091b6b7d1b88d80ba72ba7b8ee0940c361ac5ab801382b6d3462883	-	exadata_dbserver_23.1.2.0.0_x86_64_base
	systemd-libs-239-68.0.2.el8_7.4.x86_64.rpm	f66d4fb4f091b6b7d1b88d80ba72ba7b8ee0940c361ac5ab801382b6d3462883	-	ol8_x86_64_baseos_latest
	systemd-libs-239-68.0.2.el8_7.4.x86_64.rpm	f66d4fb4f091b6b7d1b88d80ba72ba7b8ee0940c361ac5ab801382b6d3462883	-	ol8_x86_64_u7_baseos_patch
	systemd-pam-239-68.0.2.el8_7.4.x86_64.rpm	877459730265c35dfb440a7ff302ba777c674478cf1f95f2a513017e70d2fc73	-	exadata_dbserver_23.1.1.0.0_x86_64_base
	systemd-pam-239-68.0.2.el8_7.4.x86_64.rpm	877459730265c35dfb440a7ff302ba777c674478cf1f95f2a513017e70d2fc73	-	exadata_dbserver_23.1.2.0.0_x86_64_base
	systemd-pam-239-68.0.2.el8_7.4.x86_64.rpm	877459730265c35dfb440a7ff302ba777c674478cf1f95f2a513017e70d2fc73	-	ol8_x86_64_baseos_latest
	systemd-pam-239-68.0.2.el8_7.4.x86_64.rpm	877459730265c35dfb440a7ff302ba777c674478cf1f95f2a513017e70d2fc73	-	ol8_x86_64_u7_baseos_patch
	systemd-tests-239-68.0.2.el8_7.4.x86_64.rpm	2b10bc416fdf9c80a284c328a6475beadff7e9cc410b3deb894bce30d31e2494	-	ol8_x86_64_baseos_latest
	systemd-tests-239-68.0.2.el8_7.4.x86_64.rpm	2b10bc416fdf9c80a284c328a6475beadff7e9cc410b3deb894bce30d31e2494	-	ol8_x86_64_u7_baseos_patch
	systemd-udev-239-68.0.2.el8_7.4.x86_64.rpm	4102b95daed842ce9e407157f37fab3cd6fcba0ef238d5e95bab4c989431d311	-	exadata_dbserver_23.1.1.0.0_x86_64_base
	systemd-udev-239-68.0.2.el8_7.4.x86_64.rpm	4102b95daed842ce9e407157f37fab3cd6fcba0ef238d5e95bab4c989431d311	-	exadata_dbserver_23.1.2.0.0_x86_64_base
	systemd-udev-239-68.0.2.el8_7.4.x86_64.rpm	4102b95daed842ce9e407157f37fab3cd6fcba0ef238d5e95bab4c989431d311	-	ol8_x86_64_baseos_latest
	systemd-udev-239-68.0.2.el8_7.4.x86_64.rpm	4102b95daed842ce9e407157f37fab3cd6fcba0ef238d5e95bab4c989431d311	-	ol8_x86_64_u7_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team