elsa-2026-1241

oracle_linux
Description

[4.9.0-54.27] - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139760, RHEL-140787 [4.9.0-54.24] - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136031 [4.9.0-54.23] - nfsserver: add ability to set e.g. 'pipefs-directory=/run/nfs/rpc_pipefs' in /etc/nfs.conf to avoid issues with non-clustered Kerberized mounts Resolves: RHEL-102979 [4.9.0-54.21] - db2: fix monitor_retries_sleep variable name Resolves: RHEL-124815 [4.9.0-54.20] - portblock: add promotable support, and method and status_check parameters Resolves: RHEL-116150 [4.9.0-54.19] - db2: use reintegration flag to avoid race condition on cluster reintegration Resolves: RHEL-118625 [4.9.0-54.17] - db2: add 'skip_basic_sql_health_check' parameter to avoid failing on systems with high load - db2: add 'monitor_retries', 'monitor_sleep', and 'monitor_retry_all_errors' parameters to be able to avoid failing on first try Resolves: RHEL-115783, RHEL-115781 [4.9.0-54.16] - bundled requests: fix CVE-2024-47081 Resolves: RHEL-104761 [4.9.0-54.15] - ocf-shellfuncs/AWS agents: dont sleep after the final try in curl_retry() Resolves: RHEL-102731 [4.9.0-54.13] - Filesystem: add support for aznfs Resolves: RHEL-91257

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2025-66418",
    "CVE-2025-66471",
    "CVE-2026-21441"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[4.9.0-54.27]\n- bundled urllib3: fix CVE-2025-66471\n- bundled urllib3: fix CVE-2026-21441\n\n  Resolves: RHEL-139760, RHEL-140787\n\n[4.9.0-54.24]\n- bundled urllib3: fix CVE-2025-66418\n\n  Resolves: RHEL-136031\n\n[4.9.0-54.23]\n- nfsserver: add ability to set e.g. 'pipefs-directory=/run/nfs/rpc_pipefs'\n  in /etc/nfs.conf to avoid issues with non-clustered Kerberized mounts\n\n  Resolves: RHEL-102979\n\n[4.9.0-54.21]\n- db2: fix monitor_retries_sleep variable name\n\n  Resolves: RHEL-124815\n\n[4.9.0-54.20]\n- portblock: add promotable support, and method and status_check\n  parameters\n\n  Resolves: RHEL-116150\n\n[4.9.0-54.19]\n- db2: use reintegration flag to avoid race condition on cluster\n  reintegration\n\n  Resolves: RHEL-118625\n\n[4.9.0-54.17]\n- db2: add 'skip_basic_sql_health_check' parameter to avoid failing on\n  systems with high load\n- db2: add 'monitor_retries', 'monitor_sleep', and 'monitor_retry_all_errors'\n  parameters to be able to avoid failing on first try\n\n  Resolves: RHEL-115783, RHEL-115781\n\n[4.9.0-54.16]\n- bundled requests: fix CVE-2024-47081\n\n  Resolves: RHEL-104761\n\n[4.9.0-54.15]\n- ocf-shellfuncs/AWS agents: dont sleep after the final try in\n  curl_retry()\n\n  Resolves: RHEL-102731\n\n[4.9.0-54.13]\n- Filesystem: add support for aznfs\n\n  Resolves: RHEL-91257",
  "id": "ELSA-2026-1241",
  "ovalId": "oval:com.oracle.elsa:def:20261241",
  "source": "oracle_linux",
  "title": "ELSA-2026-1241:  resource-agents security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-1241.html"
}
View JSON API Download JSON