[El-errata] ELSA-2026-26533 Important: Oracle Linux 9 dracut security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-26533

http://linux.oracle.com/errata/ELSA-2026-26533.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
dracut-057-115.git20260527.0.1.el9_8.x86_64.rpm
dracut-caps-057-115.git20260527.0.1.el9_8.x86_64.rpm
dracut-config-generic-057-115.git20260527.0.1.el9_8.x86_64.rpm
dracut-config-rescue-057-115.git20260527.0.1.el9_8.x86_64.rpm
dracut-live-057-115.git20260527.0.1.el9_8.x86_64.rpm
dracut-network-057-115.git20260527.0.1.el9_8.x86_64.rpm
dracut-squash-057-115.git20260527.0.1.el9_8.x86_64.rpm
dracut-tools-057-115.git20260527.0.1.el9_8.x86_64.rpm

aarch64:
dracut-057-115.git20260527.0.1.el9_8.aarch64.rpm
dracut-caps-057-115.git20260527.0.1.el9_8.aarch64.rpm
dracut-config-generic-057-115.git20260527.0.1.el9_8.aarch64.rpm
dracut-config-rescue-057-115.git20260527.0.1.el9_8.aarch64.rpm
dracut-live-057-115.git20260527.0.1.el9_8.aarch64.rpm
dracut-network-057-115.git20260527.0.1.el9_8.aarch64.rpm
dracut-squash-057-115.git20260527.0.1.el9_8.aarch64.rpm
dracut-tools-057-115.git20260527.0.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/dracut-057-115.git20260527.0.1.el9_8.src.rpm

Related CVEs:

CVE-2026-6893




Description of changes:

[057-115.git20260527.0.1]
- Skip the default FIPS logic on special UEK kernels where the FIPS module is linked directly into the kernel. [Orabug: 38705580]
- Ship Oracle IMA certificate [Orabug: 35992862]
- Ship 98-integrity.conf, populating initramfs with Oracle IMA certificate [Orabug: 35992862]
- Include sys-fs-fuse-connections.mount if needed [Orabug: 35267570]
- network-legacy: Revert some shellcheck that breaks parse_option_121 in dhclient [Orabug: 33778173]
- Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
- Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
- Install missing 68-del-part-node.rules [Orabug: 32827579]
- Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
- dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
- Update list of necessary files after squashfs execution [Orabug: 29864620]
- Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
- Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
- Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
- Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
- 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
- Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons at oracle.com)
- add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)

[057-115.git20260527]
- build: rebuild without an obsoleted patch

[057-115.git20260514]
- fix(network): warn on suspicious shell metacharacters in
- fix(base): escape arguments in initqueue hook script
  Related: RHEL-170857

[057-113.git20260502]
- fix(network-legacy): replace echo writes with printf to
- fix(iscsi): replace echo writes with printf to prevent
- fix(base): replace eval with safe variable indirection in
  Resolves: RHEL-170857