[oraclelinux] Updating 8 and 9 for ELSA-2024-5534 ELSA-2024-5529 ELSA-2024-5530 ELSA-2024-5524

[amsteinb-orcl]

This update incorporates fixes for CVE-2024-6345, CVE-2024-2398, CVE-2024-1737, CVE-2024-1975

See the following for details:

https://linux.oracle.com/errata/ELSA-2024-5530.html
https://linux.oracle.com/errata/ELSA-2024-5524.html
https://linux.oracle.com/errata/ELSA-2024-5534.html
https://linux.oracle.com/errata/ELSA-2024-5529.html

Signed-off-by: Alan Steinberg alan.steinberg@oracle.com

[amsteinb-orcl]

Republished with amd64v8 commit hash due to missing OL9 full image caused by rebuild.

[github-actions]

Diff for dc364b5:

diff --git a/_bashbrew-cat b/_bashbrew-cat
index fc4ef84..72feef5 100644
--- a/_bashbrew-cat
+++ b/_bashbrew-cat
@@ -1,9 +1,9 @@
 Maintainers: Oracle Linux Product Team <ol-ovm-info_ww@oracle.com> (@Oracle)
 GitRepo: https://github.com/oracle/container-images.git
 GitCommit: 5c8a1c296acd6e90487cd261d16cf85fd6bcb73f
-amd64-GitCommit: ebd9ccbe2d59c8b0c99767e1a59367e102e726d8
+amd64-GitCommit: 53082608c83ad0df59197d2ac14f1c1403764bf6
 amd64-GitFetch: refs/heads/dist-amd64
-arm64v8-GitCommit: 448f7e0fe048c20a408292a73f6b6eb3621c52a2
+arm64v8-GitCommit: 584963be844e344c6b385c93ce2e3399c65207b4
 arm64v8-GitFetch: refs/heads/dist-arm64v8
 
 Tags: 7-slim
diff --git a/oraclelinux_8/oraclelinux-8-amd64-rootfs.tar.xz b/oraclelinux_8/oraclelinux-8-amd64-rootfs.tar.xz
index fe1b084..40e8cab 100644
Binary files a/oraclelinux_8/oraclelinux-8-amd64-rootfs.tar.xz and b/oraclelinux_8/oraclelinux-8-amd64-rootfs.tar.xz differ
diff --git a/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz b/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz
index 14271b0..9e2653d 100644
Binary files a/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz and b/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz differ
diff --git a/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz  'tar -t' b/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz  'tar -t'
index 6bc0b21..3aa3422 100644
--- a/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz  'tar -t'	
+++ b/oraclelinux_9/oraclelinux-9-amd64-rootfs.tar.xz  'tar -t'	
@@ -25,7 +25,6 @@ etc/X11/xinit/
 etc/X11/xinit/xinitrc.d/
 etc/X11/xinit/xinitrc.d/50-systemd-user.sh
 etc/X11/xinit/xinput.d/
-etc/X11/xorg.conf.d/
 etc/adjtime
 etc/aliases
 etc/alternatives/
@@ -6882,6 +6881,10 @@ usr/share/publicsuffix/public_suffix_list.dafsa
 usr/share/pythonXXX-wheels/
 usr/share/pythonXXX-wheels/pip-21.2.3-pyXXX-none-any.whl
 usr/share/pythonXXX-wheels/setuptools-53.0.0-pyXXX-none-any.whl
+usr/share/selinux/
+usr/share/selinux/packages/
+usr/share/selinux/packages/targeted/
+usr/share/selinux/packages/targeted/systemd-container-coredump.pp.bz2
 usr/share/sounds/
 usr/share/systemd/
 usr/share/systemd/kbd-model-map

Relevant Maintainers:

• oraclelinux: @oracle

[tianon]

I love the -etc/X11/xorg.conf.d/ 😄

(distro maintenance is always a really interesting set of problems and tradeoffs, and I'm sure there's probably a good story underneath this one being included before and it being removed 😄)

[amsteinb-orcl]

@tianon I am missing something. Where do you see the etc/X11/xorg.conf.d reference?

[tianon]

That's in the diff -- it was apparently an empty directory in the previous oraclelinux:9 image that was removed in the updated one. I'm guessing it was probably owned by/provided by some core package in the base OS and the reasons for that are no longer applicable (or the "ownership" of that directory has simply shifted to another package which isn't in the minimal base set). Not spicy at all, but definitely the kind of thing I find (personally) interesting and there's almost always a story behind changes like that. 😄