CVE-2014-6271 and CVE-2014-7169 / Oracle Linux

Hi ,
patches required to resolve the vulnerabilities described in CVE-2014-6271 and CVE-2014-7169 in Oracle linux 5 (x86) is "bash-3.2-33.el5_11.4.x86_64.rpm "
from where i can get this patch, its not availible on support.oracle/patches !!
Thanks,
Thamer

Your Oracle Linux system should be configured to automatically install packages either from the Unbreakable Linux Network or public-yum.oracle.com. You might want to ask your Linux sysadmin for assistance if your servers aren't already configured for updates.
You can also check Chapter 1 and Chapter 2 of the Oracle Linux Administrator's Guide for more details on using ULN or public-yum: Oracle® Linux (it's for OL6 but the concepts are the same for OL5).

Similar Messages

Gnome automount and media.repo under Oracle Linux 6.3

Hello,
I experiencing a strange behavior testing the following under Oracle Linux 6.3 (x86-64-bit) UEK2 with all latest updates. I selected the Gnome desktop packages using the "customize now" ratio button when installing the OS
* Log in to a graphical shell such as GNOME
* Insert addition media disk into the computer
* Observe the media is mounted by the session
* Wait a couple of seconds
* Observe the /etc/yum.repos.d/packagekit-media.repo now exists
The above is explained in more details at http://people.redhat.com/rhughes/media-repo.txt
I don't know what the "addition media disk" is, but inserted the Oracle Linux 6.3 x86_64 binary distribution DVD, which also has media.repo file in the root directory. And btw, I'm using VirtualBox and the DVD is an .iso disk image.
I'm experiencing the following:
Gnome automount works and automatically opens the DVD when inserted.
It does not create the /etc/yum.repos.d/packagekit-media.repo file.
It actually does create the named repo file, but only after one waits about 15 minutes. Perhaps this has anything to do with gpk-update-icon, but when run manually it hangs.
With the packagekit-media.repo file finally created. The gpk-application however complains: "The group list was invalid".
I know how to create a yum configuration file pointing to a local repository, which is also coverd in the Oracle Linux 6.3 distribution readme. I just wonder about the problem. Th automatic business with the media.repo file seems broken and useless. I did one more test using the original RHEL kernel which, as expected, did not make a difference.
Does anyone know more about it?
Thanks!

I cannot create an SR, but I did some more tests creating my own DVD, playing with the info in the media.repo file. It seems matching the mediaid and .discinfo information alone doesn't fix it.
Actually some of the stuff is explained in the link I already used: http://people.redhat.com/rhughes/media-repo.txt. The problem seems that it doesn't work as advertised.
It takes exactly 15 min. before the system (gnome) automatically copies the media.repo file from DVD to /etc/packagekit-media.repo. If the file already exists it gets overwritten.
I think it might be a good idea to make an entry in the media.repo file on the DVD, such as:
baseurl=file:///media/<disklabel>
skip_if_unavailable=True
Then when inserting the DVD under gnome it would not be necessary to create a yum repository configuration file to use the DVD. The 15 min. delay will have to be fixed, which is only supposed to take a couple of seconds.
Edited by: Dude on Aug 27, 2012 5:51 PM

R12.1.3 certification for JDK and other products on Oracle Linux 6

Hello
We are in the process of migrating R12.1.3 from Linux 5.4 (64bit) on physical server to OEL 6.5 (64bit) on Oracle VM.
Currently running IAS 10.1.3.5 , Forms 10.1.2.3, JDK 1.6_10 on HTTP Server Node and 1.4.2_14-b05 on Developer 10g (Forms/Reports). JRE client is 1.6_24.
The future state is R12.1.3 on OEL 6.5 on Oracle VM with JRE 7.
The plan is to use Rapid Clone as we are already on 10.1.3.5 and DB 11.2.0.3.
The uncertainty is with JDK as the certification on MOS for R12.1.3/OEL 6 indicates minimum version of JDK is 1.6_26.
Should I upgrade to JDK 1.6_26 as a minimum, on the apps tier 10.1.3_HOME and 10.1.2_HOME on Linux 5.4 before cloning to OEL 6.5? Or can we continue running the current JDK apps tier versions on OEL 6.5 and only upgrade the client to JRE 7, without updating JDK?
Taking into account the current versions, can I use the pre-build R12.1.3 VM templates on the new hardware and then clone?
Furthermore, I read the following comment on Steven Chan's blog, it was in June 2012, are these products certified now?
"there is still some unsupported products on OEL6*
Oracle Advanced Supply Chain Planning (MSC)
Oracle Inventory Optimization (MSR)
Oracle Constraint Based Optimization (MSO)
Oracle Work In Process (WIP)
Oracle Manufacturing Scheduling (WPS)"
Any suggestions/assistance will be appreciated.
Thanks in advance.
Asha

Pl do not post duplicates - R12.1.3 JDK certification for OEL 6.5

Forms and Reports 11gR2 on Oracle Linux 6 Update 3

I am installing:
Oracle Forms and Reports 11gR2 on OL6 and
Oracle Database 11gR2 (11.2.0.3.0 Patch 10404530) on OL6
In database instructions, it says to run the oracle-rdms-server preinstall: yum install oracle-rdbms-server-12cR1-preinstall
Is it OK to run the same pre-install for Oracle Forms and Reports?
Thank you in advance.

Hi.
You can but at least (as far as I can remember) motif package wont be installed as it is needed by Reports. Best to stick with prerequisites for F&R 11gR2 in installation manual.
Best regards.

How to startup and install listener in oracle linux after intalling database ?

hi
i am installing oracle database on linux 6 and when its finishe i cant run sqlplus or i cant run dbca or netca ?
what i am doing after installataion oracle database with ruinInstallet (oui) ?
thanks

Hi,
you have to set environement variables $ORACLE_HOME and $PATH in user profile ( .bash_profile in your home directory). some think like this :
export ORACLE_HOME=/u01/app/oracle/product/11.2.3/db_1
export PATH=$ORACLE_HOME/bin:$PATH
after that you execute ths profile . .profile or reconnect to load the variables, you can then use netca,sqlplus or any other utilities in bin directory of your ORACLE_HOME

Oracle 11gR2 certification for Oracle Linux 6

Hello,
According to Oracle documentation, database certification and support for Oracle 11gR2 under Oracle Linux starts with 11.2.0.3.
I was wondering if this might have anything to do with the i386 software prerequisites. Speaking of Oracle 11gR2 x86_64, the need for i386 libraries was removed with 11gR2 11.2.0.2. Or in other words, one can go straight to 11.2.0.2 without the need to install any 32-bit libraries.
Under Oracle Linux 5 x86_64, the "oracle-validated" package triggers the installation of several i386 packages. Under Oracle Linux 6 x86_64, the oracle-rdbms-server-11gr2-preinstall package uses x86_64 only. Under Oracle Linux 6, i386 changed to i686.
For what it's worth, I have installed Oracle 11gR2 database 11.2.0.1 under Oracle Linux 6.1 to 6.3, both x86_64, simply by using the oracle-rdbms-server-11gr2-preinstall package, and so far have not noticed any problems. Is there some information available, why 11.2.0.1 (x86_64) should not be used or is not certified for Oracle Linux 6 (x86_64)?
Thanks.

I was afraid of that. Since the question is Oracle Linux 6 specific, I thought I'd try my luck here, thinking that if I get an answer, then probably here. Maybe it was not very realistic to get an answer anyway.
For what it's worth. Using "oracle-validated" under Oracle Linux 5, and "oracle-rdbms-server-11gR2-preinstall" under Oracle Linux 6, I was able to install Oracle 11gR2 11.2.0.1 just fine, both platforms x86_64 and 32-bit. I have not found any operational issues yet and it seems to run perfectly well.
The only trouble I had was with Grid Infrastructure 11.2.0.1, and here 11.2.0.3 is indeed required for it to install. I made a custom patch, just a few lines and after that 11.2.0.1, both x86_64 and 32-bit installed just fine and is fully operational.
I'm though I could post the patch. I guess it might make those people happy who do not have access to Oracle support and download 11.2.0.3. The patch will allow them to use the 11gR2 OTN version and install it under Oracle Linux 6. It won't be certified, but it is good enough for the purpose of education.
I'm closing the thread.

Oracle Linux 6.2 installation

Hi,
I am new to the Linux world. Want to install Oracle Linux on my PC.
Downloaded the 4 parts (V29608-01, V29459-01, V29611-01 and V29612-01) of Oracle Linux Release 6 Update 2 Media Pack for x86_64 (64 bit) and put each part on a separate DVD.
Can you please help me with the steps to install from the download.
Thanks in Advance.
--Jag.

Can you please help me with the steps to install from the download.First, tell us what you want to do with Linux. Then tell us what kind of hardware you want to install on.
Next decide what kind of installation you want to do:
<ol>
<li>Replace that other operating system, the one with the blue-screen;
<li>Make a dual-boot system, capable of booting either Linux or that other O/S;
<li>Keep your current O/S and run Linux in a virtual machine.
</ol>

11g Release 2 installation on Oracle Linux 6

Aloha!
I I'am installing 11g Release 2 Database on Oracle Linux 6 but i stumble on this problem, that i cant install the said application, either I,m running the wrong file or i downloaded the wrong installation kit for OL 6.
1) I downloaded "Oracle Database 11g Release 2 (11.2.0.1.0) for Linux x86" installer. Extracted it and paste it on Oracle Linux 6 OS.
2) I access the directory where i paste the said installer and run "runInstaller" file and i'm having a prompt saying "Permission denied".
Could it be that the installation kit I downloaded is not for Oracle Linux 6. Is there something that I miss thats why I'm having this prompt?
Thanks in advance.
Hades,

Hi Dude,
I did manage to install OLE 5 and installed successfully 11gR2 on it. I'm on the process of creating an instance on the said database, but i stumble on several errors;
1. ORA-09925: Unable to create audit trail file
after clicking OK i will receive this error;
2. ORA-01017: invalid username/password; log on denied
and after;
3. ORA-01012: not logged on
This prompts appears during the creation on instance. Please refer below for reference.
[oracle@ole5 ~]$ id
uid=501(oracle) gid=501(oinstall) groups=501(oinstall),502(dba),503(oper),504(asmadmin)
[oracle@ole5 ~]$ env|sort
CLASSPATH=/u01/app/oracle/product/11.2.0/db_1/jlib:/u01/app/oracle/product/11.2.0/db_1/rdbms/jlib
COLORTERM=gnome-terminal
DBUS_SESSION_BUS_ADDRESS=unix:abstract=/tmp/dbus-AnrEnr2Rfk,guid=64a668470bd8d74af646f6004e0de25b
DESKTOP_SESSION=default
DESKTOP_STARTUP_ID=
DISPLAY=:0.0
G_BROKEN_FILENAMES=1
GDMSESSION=default
GDM_XSERVER_LOCATION=local
GNOME_DESKTOP_SESSION_ID=Default
GNOME_KEYRING_SOCKET=/tmp/keyring-IwnPgJ/socket
GTK_RC_FILES=/etc/gtk/gtkrc:/home/oracle/.gtkrc-1.2-gnome2
HISTSIZE=1000
HOME=/home/oracle
HOSTNAME=ole5.localdomain
INPUTRC=/etc/inputrc
LANG=en_US.UTF-8
LD_LIBRARY_PATH=/u01/app/oracle/product/11.2.0/db_1/lib:/lib:/usr/lib
LESSOPEN=|/usr/bin/lesspipe.sh %s
LOGNAME=oracle
LS_COLORS=no=00:fi=00:di=00;34:ln=00;36:pi=40;33:so=00;35:bd=40;33;01:cd=40;33;01:or=01;05;37;41:mi=01;05;37;41:ex=00;32:.cmd=00;32:.exe=00;32:.com=00;32:.btm=00;32:.bat=00;32:.sh=00;32:.csh=00;32:.tar=00;31:.tgz=00;31:.arj=00;31:.taz=00;31:.lzh=00;31:.zip=00;31:.z=00;31:.Z=00;31:.gz=00;31:.bz2=00;31:.bz=00;31:.tz=00;31:.rpm=00;31:.cpio=00;31:.jpg=00;35:.gif=00;35:.bmp=00;35:.xbm=00;35:.xpm=00;35:.png=00;35:.tif=00;35:
MAIL=/var/spool/mail/oracle
ORACLE_BASE=/u01/app/oracle
ORACLE_HOME=/u01/app/oracle/product/11.2.0/db_1
ORACLE_HOSTNAME=ol5-11gr2.localdomain
ORACLE_SID=DB11G
ORACLE_UNQNAME=DB11G
PATH=/u01/app/oracle/product/11.2.0/db_1/bin:/usr/sbin:/usr/kerberos/bin:/usr/local/bin:/usr/bin:/bin:/usr/X11R6/bin:/home/oracle/bin
PWD=/home/oracle
SESSION_MANAGER=local/ole5.localdomain:/tmp/.ICE-unix/2727
SHELL=/bin/bash
SHLVL=2
SSH_AGENT_PID=2763
SSH_ASKPASS=/usr/libexec/openssh/gnome-ssh-askpass
SSH_AUTH_SOCK=/tmp/ssh-AUwvgn2727/agent.2727
TERM=xterm
TMPDIR=/tmp
TMP=/tmp
USERNAME=oracle
USER=oracle
_=/usr/bin/env
WINDOWID=24117329
XAUTHORITY=/tmp/.gdmZKBUXV
XMODIFIERS=@im=none
[oracle@ole5 ~]$
Thanks in advance.
With Thanks,
Hades

Installing Oracle Linux 5.8

Hi ,
I wish to remove Win7 (32 bit Home Edition) and install Oracle Linux 5.8 in it.
Configuration of my workstation :
1. 4GB RAM
2. 500 GB HDD
3. Intel Core i5 processor (2.27 GHz * 2).
Could you please tell me how to install the this ? Also, please suggest a good anti-virus for it. Also, is VM required to be installed before installing Oracle Linux ?
Thanks,
Haider

Haider Hussain wrote:
Hi ,
I wish to remove Win7 (32 bit Home Edition) and install Oracle Linux 5.8 in it.
Configuration of my workstation :
1. 4GB RAM
2. 500 GB HDD
3. Intel Core i5 processor (2.27 GHz * 2).
Could you please tell me how to install the this ? Also, please suggest a good anti-virus for it. Also, is VM required to be installed before installing Oracle Linux ?
Thanks,
HaiderIf you want to remove the existing Windows installation and replace it with Oracle Linux any other operating system, then you need to have the installation media for that new OS on a CD, and boot from there. You need to also make sure the new OS supports the hardware on which you intend to install. This question would be better asked in the [url https://forums.oracle.com/forums/forum.jspa?forumID=822] Oracle Linux forum
If you want to remove the existing Windows installation and replace it with Oracle Linux any other operating system, then a vm is not requried. A vm is required to create the new OS as a vm, which runs as a task under the host OS.
Edited by: EdStevens on Jan 29, 2013 11:18 AM

How to Install Xvfb on oracle linux 6.5

Dear,
I wanted to run Autovue on oracle linux, so that needs the first run Xvfb.
How can I install and run Xvfb o oracle Linux 6.5?
Best regards,
Saeed.

If the problem is only to install Xvfb, you can do that doing the following:
# yum list "*xvfb*"
Available Packages
xorg-x11-server-Xvfb.x86_64 1.15.0-22.el6 public_ol6_latest
# yum install xorg-x11-server-Xvfb

OCA Oracle Linux (Beta) 1Z1-100 - nobody took it?

I am a former UNIX/Linux admin, but stopped my job in this field 5-7 years ago. I took without preparation and updated know-how Oracle Linux 5 and 6 System Administrator" (OCA) Certification Exam (1Z1-100).
Nobody other? Any reviews and field reports from exam? Couldn't find with search function.

I didn't take this exam and have no plans to take the beta. I will be taking the production version soon after it comes out. You'll know if the beta received few takers if they extend the end date past December 14th. I took the Linux Essentials exam, which has about 50% of the topics in 1Z0-100. I reviewed that exam here:
Oracle 1ZO-460: The Essence of Oracle Linux 6 | GoCertify
I'm not really sure what information you're looking for. Once I take 1Z0-100, I'll certainly create a review similar to the above one. That won't be for something like 16 weeks... assuming the beta ends as currently scheduled.

Oracle Linux Patching/Updates Impact on Oracle Database

I have several questions regarding Oracle Linux patching and its impact on Oracle Database.
3 node Cluster
Operating System: Oracle Linux Release 5 update 2
Kernel: 2.6.18-92.1.22.0.1.el5 x86_64 GNU/Linux
Grid Infrastructure: Oracle Grid Infrastructure 11g Release 2 (11.2.0.2)
Database: Oracle Database 11g Release 2 Enterprise Edition (11.2.0.2) with RAC option
ASM with ASMLib is being used for Data and FRA.
*1)* Given your at Oracle Linux Release 5 update 2, will applying only Security Patches require any changes to ASMLib, Oracle Grid Infrastructure and/or Oracle Database (software binaries, configuration etc.)?
*2)* Given your at Oracle Linux Release 5 update 2, will applying Bug Fixes and Security Patches to Oracle Linux 5 update 2 require any changes to ASMLib, Oracle Grid Infrastructure and/or Oracle Database (software binaries, configuration etc.)?
*3)* Given your updating from Oracle Linux Release 5 update 2 to Oracle Linux Release 5 update 8, will this require any changes to ASMLib, Oracle Grid Infrastructure and/or Oracle Database (software binaries, configuration etc.)?
I would most whole heartedly appreciate if someone could answer the specific questions asked, inline if possible. Our System Administrator is preparing to perform some patching and as the DBA I'd like to be certain what changes I need to prepare for? I also have a single instance database setup with Oracle Restart. I don't know if this impacts the answers above.
Thanks in advance.

How do you plan to apply Oracle Linux security patches? As far as I'm aware the yum security plug-in does not work with the Oracle public yum repository and there is no really feasible way to automate and determine security related patches only, unless you setup Oracle Enterprise Manager Grid Control (11g) or Cloud (12c) and have a subscription to Oracle ULN.
If you upgrade your Oracle Linux to the latest available version using the public yum repository, all patches, including errata will be applied. You cannot apply patches and stay on a specific release version unless you have a subscription and appropriate yum repository access.
As far as I'm aware there are no changes required to your Oracle database or ASM setup and configuration when updating the OS, provided the version of the Oracle database is supported for the specific OS version (ASM features like ADVM/ACFS are kernel version depending). Upgrading from one major release to another, such as upgrading Oracle Linux 5 to Oracle Linux 6 is not supported and will require upgrading the Oracle Database to 11.2.0.3. You can check the Oracle database certification matrix to determine which Oracle database release version is required for which OS version http://docs.oracle.com/cd/E11882_01/relnotes.112/e23558/toc.htm
The relinking of Oracle Database binaries is a common practice when updating the OS. I do not think it is necessary under Linux. Oracle binaries are typically standalone applications, or use Oracle provided libraries, or in some cases use OS shared libraries, which does not require relinking of Oracle binaries. Upgrading the Oracle database software of course requires relinking.
Edited by: Dude on Dec 4, 2012 2:09 PM

CVE-2014-6271 and CVE-2014-7169 Patch Availability Document for Oracle Linux

Hi,
Can you suggest from where we need to download bash rpm for OEL 6 :-
bash-4.1.2-15.el6_5.2.x86_64.rpm
bash-doc-4.1.2-15.el6_5.2.x86_64.rpm
Thanks in Advance !!
Mukesh

First see the document I linked about creating a local yum mirror (How to Create a Local Yum Repository for Oracle Linux). I very strongly recommend setting this up so your systems can get other updates besides bash.
The individual RPMs can be found at Index of /repo/OracleLinux/OL6/latest/x86_64/ -- but I cannot stress the importance of updating entire systems rather than just bash. If you are not updating your systems periodically, bash is just one of your worries (as you're undoubtedly vulnerable to hundreds of other exploits in other packages besides Shellshock). Please set up an update repository and use it.
Patching only the vulnerabilities you see in the news is equivalent to locking your home's front door, but leaving the security alarm disconnected and the back door held open with a doorstop. You need all the updates, not just bash.

Impact of CVE-2014-6271 and CVE-2014-7169 (Shellshock) on NetWare6.5 SP8

Greetings, all...
I see that Novell has a handy security note out regarding CVE-2014-6271:
http://support.novell.com/security/c...2014-6271.html
as it pertains to SUSE and SLE, as well as one for CVE-2014-7169:
http://support.novell.com/security/c...2014-7169.html
Testing in a bash shell on one of my NetWare boxes, I've been pleasantly
surprised, though remain unconvinced that the older bash port is entirely
free of vulnerability, here.
Yes, I do have a couple SSL sites running on NetWare Apache (2.2.27), though
I don't believe that anyone is using mod_cgi or mod_cgid.
(BTW, if anyone needs patched versions of bash 3.0.27 for CentOS 4.8, I have
32 and 64-bit binary rpms on my FTP server:
ftp.2rosenthals.com/pub/CentOS/4.8 .)
Just curious as to what the consensus is regarding NetWare with this thing.
TIA
Lewis
Lewis G Rosenthal, CNA, CLP, CLE, CWTS
Rosenthal & Rosenthal, LLC www.2rosenthals.com
Need a managed Wi-Fi hotspot? www.hautspot.com
visit my IT blog www.2rosenthals.net/wordpress

The concern with the bash shell is that services MAY be setup to run as
users which use those shells, and therefore be able to have things
injected into those shells. Nothing on NetWare uses bash by default,
because NetWare is not anything like Linux/Unix in its use of shells.
Sure, you can load bash for fun and profit on NetWare, but unless you
explicitly request it the bash.nlm file is never used. On NetWare I do
not think it is even possible to have any normal non-Bash environment
variable somehow be exported/inherited into a bash shell, though I've
never tried.
Good luck.
If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...

NX-OS ( n7000-s1-dk9.5.1.3.bin ) BASH VULNERABILITY - CVE-2014-6271 and CVE-2014-7169

Hi ,
Nexus 7000 evaluation for CVE-2014-6271 and CVE-2014-7169 , I am referring below link to check for NX OS - n7000-s1-dk9.5.1.3.bin
https://tools.cisco.com/bugsearch/bug/CSCur04856
5.1.3 is not mentioned in the affected list.Need help to know if 5.1 is affected with BASH Vulnerability .
Thanks for help in advance .

The concern with the bash shell is that services MAY be setup to run as
users which use those shells, and therefore be able to have things
injected into those shells. Nothing on NetWare uses bash by default,
because NetWare is not anything like Linux/Unix in its use of shells.
Sure, you can load bash for fun and profit on NetWare, but unless you
explicitly request it the bash.nlm file is never used. On NetWare I do
not think it is even possible to have any normal non-Bash environment
variable somehow be exported/inherited into a bash shell, though I've
never tried.
Good luck.
If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...

CVE-2014-6271 and CVE-2014-7169 / Oracle Linux

Similar Messages

Maybe you are looking for