Oracle Errata System Oracle Linux 5.11 2026-06-23T10:13:58 Oracle Linux 9 [252-67.0.1.el9_8.2] - serialize: don't allocate 1M on the stack just like that [LINUX-16166] - Route logs from container mapped uids to the system journal [Orabug: 38135007] - Drop delay when nspawn fails to reset loginuid [Orabug: 37793135] - Improve logging for api bus connection and subscribers [Orabug: 38040980] - Defer processing of timeout events in sd-bus api [Orabug: 38064217] - coredump: use %d in kernel core pattern - CVE-2025-4598 - Add bus description to sd-bus outgoing sockets [Orabug: 37347576] - Add log messages about daemon-reload requester and duration [Orabug: 37347576] - Reverted back to previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved. - drop IN_ATTRIB from parent directory inotify watches [Orabug: 37118224] - 1A) Fix local-fs and remote-fs targets during system boot (replaces old Orabug: 25897792) [Orabug: 36269319] - 1B) Add 'systemd-fstab-generator-reload-targets.service' file [Orabug: 36269319] - 1C) Add required rpms for correct kickstart/systemd functionality within systemd.spec [Orabug: 36269319] - 1D) Important: Review 1001-systemd-fstab-generator-reload-targets.patch for important build details/steps [Orabug: 36269319] - Due to a new [Orabug: 36564551] filed on April 29 2024, reverting from back to - previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved. - drop IN_ATTRIB from parent directory inotify watches [Orabug: 37118224] - Reverted back to previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved. - Re-Added 1001-Fix-missing-netdev-for-iscsi-entry-in-fstab.patch [Orabug: 25897792] - Backport upstream pstore dmesg fix [Orabug: 34868110] - Remove upstream references [Orabug: 33995357] - Disable unprivileged BPF by default [Orabug: 32870980] - udev rules: fix memory hot add and remove [Orabug: 31310273] - set 'RemoveIPC=no' in logind.conf as default for OL7.2 [Orabug: 22224874] - allow dm remove ioctl to co-operate with UEK3 [Orabug: 18467469] - shutdown: get only active md arrays. [Orabug: 34467234] - Wait for an extra configurable time before udevd kills a worker [Orabug: 36017407] - Removed unneeded patches from the systemd.spec - 1A) 1004-orabug34272490-0001-core-device-ignore-DEVICE_FOUND_UDEV-bit-on-switchin.patch [Orabug: 34272490] - 1B) 1005-orabug34272490-0002-core-device-drop-unnecessary-condition.patch [Orabug: 34272490] - 1C) 1007-orabug34868110-pstore-fixes-for-dmesg.txt-reconstruction.patch [Orabug: 34868110] - Removed the following, associated with [Orabug: 36269319]: - 2A) Remove 1001-systemd-fstab-generator-reload-targets.patch - 2B) Remove Fix local-fs and remote-fs targets during system boot [Orabug: 36269319] - 2C) Remove 'systemd-fstab-generator-reload-targets.service' file [Orabug: 36269319] - 2D) Remove required rpms for correct kickstart/systemd functionality within systemd.spec [Orabug: 36269319] - 2E) Remove Important: Review 1001-systemd-fstab-generator-reload-targets.patch for important build details/steps [Orabug: 36269319] [252-67.2] - core: validate input cgroup path more prudently (RHEL-152082) [252-67.1] - manager: fix scope for environment generators (RHEL-154262) [252-67] - core: only activate transaction that contain useful jobs (RHEL-143727) [252-66] - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) [252-65] - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) [252-64] - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) [252-63] - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add 'background-light' session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) [252-62] - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558) - timer: rebase last_trigger timestamp if needed (RHEL-118215) [252-61] - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215) - strv: introduce string_strv_hashmap_remove() (RHEL-14112) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801) MODERATE Copyright 2026 Oracle, Inc. CVE-2026-29111 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9:8:baseos_base cpe:/o:oracle:linux:9::baseos_latest