[El-errata] ELBA-2025-8899 Oracle Linux 9 dracut bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2025-8899

http://linux.oracle.com/errata/ELBA-2025-8899.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
dracut-057-88.git20250311.0.1.el9_6.x86_64.rpm
dracut-caps-057-88.git20250311.0.1.el9_6.x86_64.rpm
dracut-config-generic-057-88.git20250311.0.1.el9_6.x86_64.rpm
dracut-config-rescue-057-88.git20250311.0.1.el9_6.x86_64.rpm
dracut-live-057-88.git20250311.0.1.el9_6.x86_64.rpm
dracut-network-057-88.git20250311.0.1.el9_6.x86_64.rpm
dracut-squash-057-88.git20250311.0.1.el9_6.x86_64.rpm
dracut-tools-057-88.git20250311.0.1.el9_6.x86_64.rpm

aarch64:
dracut-057-88.git20250311.0.1.el9_6.aarch64.rpm
dracut-caps-057-88.git20250311.0.1.el9_6.aarch64.rpm
dracut-config-generic-057-88.git20250311.0.1.el9_6.aarch64.rpm
dracut-config-rescue-057-88.git20250311.0.1.el9_6.aarch64.rpm
dracut-live-057-88.git20250311.0.1.el9_6.aarch64.rpm
dracut-network-057-88.git20250311.0.1.el9_6.aarch64.rpm
dracut-squash-057-88.git20250311.0.1.el9_6.aarch64.rpm
dracut-tools-057-88.git20250311.0.1.el9_6.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//dracut-057-88.git20250311.0.1.el9_6.src.rpm



Description of changes:

[057-88.git20250311.0.1]
- Ship Oracle IMA certificate [Orabug: 35992862]
- Ship 98-integrity.conf, populating initramfs with Oracle IMA certificate [Orabug: 35992862]
- fix(systemd): add missing modprobe at .service [Orabug: 35267570]
- Include sys-fs-fuse-connections.mount if needed [Orabug: 35267570]
- network-legacy: Revert some shellcheck that breaks parse_option_121 in dhclient [Orabug: 33778173]
- Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
- Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
- Install missing 68-del-part-node.rules [Orabug: 32827579]
- Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
- dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
- Update list of necessary files after squashfs execution [Orabug: 29864620]
- Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
- Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
- Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
- Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
- 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
- Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons at oracle.com)
- add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)

[057-88.git20250311]
- fix(dracut.sh): don't pass empty string as dir

[057-87.git20250311]
- fix(rescue): create hmac file for rescue kernel

[057-86.git20250217]
- fix(35network-manager): remove duplicate installkernel
- feat(fips): include fips module unconditionally
- fix(dracut.sh): make omit-drivers option do exact match for
- feat: add openssl module

[057-79.git20241127]
- fix(35network-manager): install nftables kernel modules
- fix(35network-manager): install nft binary during module
- fix(dracut-install): copy xattr when use clone ioctl
- feat(dracut.sh): add --add-confdir option
- fix: typo in variable name
- feat(fips): add support for UKIs
- fix(kernel-modules): use modalias info in get_dev_module()
- fix(dracut-functions.sh): convert mmcblk to the real kernel

[057-70.git20240819]
- fix(systemd): set right permissions for the machine-id file
- feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
- feat(dracut-init.sh): give --force-add precedence over --omit

[057-67.git20240812]
- feat(systemd): install systemd-executor
- test: use -device instead of -watchdog to remove qemu
- fix(fips): remove /dev/{random,urandom} pre-creation
- fix(systemd): always include sg module
- fix(fips): do not blindly remove /boot
- fix(github): update format of labeler
- fix(network-manager): add "After" dependency on dbus.service
- fix(url-lib.sh): nfs_already_mounted() with trailing slash in
- feat(systemd-pcrphase): introducing the systemd-pcrphase
- fix(systemd-pcrphase): only include
- fix(nfs): include also entries from /usr/lib/{passwd,group}

[057-53.git20240104]
- fix(dracut-install): use stripped kernel module path as hash

[057-52.git20231207]
- fix(dracut.sh): remove microcode check based on

[057-51.git20231115]
- fix(nvmf): move /etc/nvme/host{nqn,id} requirement to

[057-51.git20231114]
- fix(dracut.sh): correct wrong systemd variable paths
- fix(hwdb): follow shfmt-recommended format
- feat(dracut): add --sbat option to add sbat policy to UKI
- feat(systemd): install systemd-sysroot-fstab-check
- fix(dracut.spec): add jq dependency to network subpackage
- fix(fcoe-uefi): exit early on empty vlan

[057-44.git20230822]
- feat(hwdb): install hwdb on demand when module is needed

[057-43.git20230816]
- feat(spec): include modules for IMA
- fix(dracut): there can be \ at the end on line in awk script
- fix(rngd): spacing
- fix(integrity): do not enable EVM if there is no key
- fix(fips): include openssl's fips.so and openssl.cnf

[057-38.git20230725]
- fix(dracut.sh): use dynamically uefi's sections offset
- fix(dracut.sh): handle imagebase for uefi
- fix(dracut.sh): use gawk for strtonum
- fix(rngd): install system service file
- fix(nvmf): nvme list-subsys prints the address using commas
- fix(nvmf): don't try to validate network connections in
- fix(nvmf): no need to load the nvme module
- fix(nvmf): don't create did-setup file
- fix(nvmf): don't use "finished" queue for autoconnect
- fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes
- fix(nvmf): avoid calling "exit" in a cmdline hook
- fix(nvmf): run cmdline hook before parse-ip-opts.sh
- feat(nvmf): set rd.neednet=1 if tcp records encountered
- fix(nvmf): install 8021q module unconditionally
- fix(nvmf): support /etc/nvme/config.json
- feat(nvmf): add code for parsing the NBFT