Описание
ELSA-2026-26532: dracut security update (IMPORTANT)
[107-8.0.1]
- Suppress stderr for btrfs subvolume check [Orabug: 39059254]
- fips: add logic for /boot subvolume on BTRFS [Orabug: 36028061]
- Skip unneeded FIPS logic on UEK with special FIPS [Orabug: 38138800] [Orabug: 38709306]
- Include correct modprobe into squashfs root [Orabug: 38559936]
- Ship Oracle IMA certificate [Orabug: 35992862]
- Ship 98-integrity.conf, populating initramfs with Oracle IMA certificate [Orabug: 35992862]
- Include sys-fs-fuse-connections.mount if needed [Orabug: 35267570]
- Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
- Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
- Install missing 68-del-part-node.rules [Orabug: 32827579]
- Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
- dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
- Update list of necessary files after squashfs execution [Orabug: 29864620]
- Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
- Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
- Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
- Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
- Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
- add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)
[107-8]
- revert: 'feat(i18n): pull 'drm' or 'simpledrm' module unless excluded'
[107-7]
- build: rebuild without an obsoleted patch
[107-6]
- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation Related: RHEL-170844
[107-5]
- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace echo writes with printf to prevent variable injection Resolves: RHEL-170844
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
dracut-caps
107-8.0.1.el10_2
dracut-live
107-8.0.1.el10_2
dracut
107-8.0.1.el10_2
dracut-config-generic
107-8.0.1.el10_2
dracut-config-rescue
107-8.0.1.el10_2
dracut-network
107-8.0.1.el10_2
dracut-squash
107-8.0.1.el10_2
dracut-tools
107-8.0.1.el10_2
Oracle Linux x86_64
dracut-caps
107-8.0.1.el10_2
dracut-live
107-8.0.1.el10_2
dracut
107-8.0.1.el10_2
dracut-config-generic
107-8.0.1.el10_2
dracut-config-rescue
107-8.0.1.el10_2
dracut-network
107-8.0.1.el10_2
dracut-squash
107-8.0.1.el10_2
dracut-tools
107-8.0.1.el10_2
Связанные CVE
Связанные уязвимости
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.
Dracut: dracut: root code execution via dhcp options command injection
A flaw was found in dracut. A remote attacker on the adjacent network ...