Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-54575

Опубликовано: 13 авг. 2026
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2026-54575: dracut security update (IMPORTANT)

[049-246.git20260728.0.1]

  • Refactor get_ucode_file [Orabug: 36989953]
  • Revert the fixes for bugs 33676753 and 33888951 due to regressions [Orabug: 35656614]
  • Fix typo in orabug33888951-dracut-Enable-the-code-to-create-ifcfg-file.patch [Orabug: 35268918]
  • Enable the code to create ifcfg file [Orabug: 33888951]
  • Skip parse iscsiroot.sh on PV VMs [Orabug: 33676753]
  • Add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs [Orabug: 33603682]
  • Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  • Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  • Restore 51-dracut-rescue-postinst.sh for anaconda compatibility
  • Install missing 68-del-part-node.rules [Orabug: 32827579]
  • Add manpage for single-dhcp [Orabug 32201686]
  • Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  • Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
  • Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  • Revert fix for [Orabug: 31404167]
  • drop 51-dracut-rescue.install patch
  • Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  • add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  • dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  • Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  • Update list of necessary files after squashfs execution [Orabug: 29864620]
  • Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  • Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  • Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  • Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  • Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  • 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  • Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  • add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)

[049-246.git20260728]

  • fix(base): escape die() message in emergency hook script
  • fix(base): replace eval with safe variable indirection in

[049-246.git20260728]

  • fix(base): escape die() message in emergency hook script
  • fix(base): replace eval with safe variable indirection in

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

dracut

049-246.git20260728.0.1.el8_10

dracut-caps

049-246.git20260728.0.1.el8_10

dracut-config-generic

049-246.git20260728.0.1.el8_10

dracut-config-rescue

049-246.git20260728.0.1.el8_10

dracut-live

049-246.git20260728.0.1.el8_10

dracut-network

049-246.git20260728.0.1.el8_10

dracut-squash

049-246.git20260728.0.1.el8_10

dracut-tools

049-246.git20260728.0.1.el8_10

Oracle Linux x86_64

dracut

049-246.git20260728.0.1.el8_10

dracut-caps

049-246.git20260728.0.1.el8_10

dracut-config-generic

049-246.git20260728.0.1.el8_10

dracut-config-rescue

049-246.git20260728.0.1.el8_10

dracut-live

049-246.git20260728.0.1.el8_10

dracut-network

049-246.git20260728.0.1.el8_10

dracut-squash

049-246.git20260728.0.1.el8_10

dracut-tools

049-246.git20260728.0.1.el8_10

Связанные CVE

Связанные уязвимости

CVSS3: 7.5
ubuntu
11 дней назад

A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.

CVSS3: 7.5
redhat
12 дней назад

A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.

CVSS3: 7.5
nvd
11 дней назад

A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.

CVSS3: 7.5
debian
11 дней назад

A flaw was found in dracut. The die() error-handling function writes i ...

suse-cvrf
4 дня назад

Security update for dracut