Описание
ELSA-2026-26533: dracut security update (IMPORTANT)
[057-115.git20260527.0.1]
- Skip the default FIPS logic on special UEK kernels where the FIPS module is linked directly into the kernel. [Orabug: 38705580]
- Ship Oracle IMA certificate [Orabug: 35992862]
- Ship 98-integrity.conf, populating initramfs with Oracle IMA certificate [Orabug: 35992862]
- Include sys-fs-fuse-connections.mount if needed [Orabug: 35267570]
- network-legacy: Revert some shellcheck that breaks parse_option_121 in dhclient [Orabug: 33778173]
- Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
- Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
- Install missing 68-del-part-node.rules [Orabug: 32827579]
- Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
- dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
- Update list of necessary files after squashfs execution [Orabug: 29864620]
- Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
- Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
- Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
- Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
- 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
- Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
- add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)
[057-115.git20260527]
- build: rebuild without an obsoleted patch
[057-115.git20260514]
- fix(network): warn on suspicious shell metacharacters in
- fix(base): escape arguments in initqueue hook script Related: RHEL-170857
[057-113.git20260502]
- fix(network-legacy): replace echo writes with printf to
- fix(iscsi): replace echo writes with printf to prevent
- fix(base): replace eval with safe variable indirection in Resolves: RHEL-170857
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
dracut
057-115.git20260527.0.1.el9_8
dracut-caps
057-115.git20260527.0.1.el9_8
dracut-config-generic
057-115.git20260527.0.1.el9_8
dracut-config-rescue
057-115.git20260527.0.1.el9_8
dracut-live
057-115.git20260527.0.1.el9_8
dracut-network
057-115.git20260527.0.1.el9_8
dracut-squash
057-115.git20260527.0.1.el9_8
dracut-tools
057-115.git20260527.0.1.el9_8
Oracle Linux x86_64
dracut
057-115.git20260527.0.1.el9_8
dracut-caps
057-115.git20260527.0.1.el9_8
dracut-config-generic
057-115.git20260527.0.1.el9_8
dracut-config-rescue
057-115.git20260527.0.1.el9_8
dracut-live
057-115.git20260527.0.1.el9_8
dracut-network
057-115.git20260527.0.1.el9_8
dracut-squash
057-115.git20260527.0.1.el9_8
dracut-tools
057-115.git20260527.0.1.el9_8
Связанные CVE
Связанные уязвимости
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.
Dracut: dracut: root code execution via dhcp options command injection
A flaw was found in dracut. A remote attacker on the adjacent network ...