Skip to Main Content

Open Source

Announcement

For appeals, questions and feedback, please email oracle-forums_moderators_us@oracle.com

kernel-4.18.0-477.15.1.el8_8 packages are missing from Oracle public repos

user-ha38hJul 17 2023 — edited Jul 19 2023

On 6/27/2023 Red Hat released kernel 4.18.0-477.15.1.el8_8 as an update for the TLS security fix CVE-2023-28466

https://access.redhat.com/errata/RHSA-2023:3847

On 7/3/2023 Oracle released a Ksplice update for RHCK 8 (ELSA-2023-3847) for the same fix, referencing ELSA-2023-3847

But ELSA-2023-3847 does not exist on the Oracle errata at https://linux.oracle.com/errata/ELSA-2023-3847.html

The corresponding OL binary and source code RPMs for 477.15.1 are also not present in the Oracle public repos:

https://yum.oracle.com/repo/OracleLinux/OL8/baseos/latest/x86_64/index.html

https://yum.oracle.com/repo/OracleLinux/OL8/baseos/latest/x86_64/index_src.html

i.e. Oracle Linux RHCK 8 in the public repos is now out of sync to Red Hat Linux 8 kernel by 3 weeks.

Note: this is the first kernel update subsequent to the change in RHEL source publishing policy.

Was publishing the Ksplice binary update but not the corresponding public source/binary just an omission due to the change in upstream workflow?

Does Oracle plan to continue updating OL8 RHCK in the public repos to be consistent with Red Hat 8 and OL8 Ksplice?

This post has been answered by Todd Vierling-Oracle on Jul 19 2023
Jump to Answer
Comments
Post Details
Added on Jul 17 2023
1 comment
579 views