When I try to run "yum update" now, I get the following dependency 
errors (below).  I suspect some packages unrelated to the kernel update 
were released from "fastbugs" prematurely, without their dependencies 
coming along for the ride...

Gilbert

------------

Resolving Dependencies
--> Running transaction check
---> Package python2-ipaclient.noarch 0:4.6.8-5.sl7_9.10 will be updated
--> Processing Dependency: python2-ipaclient = 4.6.8-5.sl7_9.10 for 
package: ipa-client-4.6.8-5.sl7_9.10.x86_64
---> Package python2-ipaclient.noarch 0:4.6.8-5.sl7_9.15 will be an update
--> Processing Dependency: ipa-client-common = 4.6.8-5.sl7_9.15 for 
package: python2-ipaclient-4.6.8-5.sl7_9.15.noarch
--> Processing Dependency: ipa-common = 4.6.8-5.sl7_9.15 for package: 
python2-ipaclient-4.6.8-5.sl7_9.15.noarch
---> Package python2-ipalib.noarch 0:4.6.8-5.sl7_9.10 will be updated
---> Package python2-ipalib.noarch 0:4.6.8-5.sl7_9.15 will be an update
--> Processing Dependency: ipa-common = 4.6.8-5.sl7_9.15 for package: 
python2-ipalib-4.6.8-5.sl7_9.15.noarch
--> Finished Dependency Resolution
Error: Package: ipa-client-4.6.8-5.sl7_9.10.x86_64 (@sl-security)
            Requires: python2-ipaclient = 4.6.8-5.sl7_9.10
            Removing: python2-ipaclient-4.6.8-5.sl7_9.10.noarch 
(@sl-security)
                python2-ipaclient = 4.6.8-5.sl7_9.10
            Updated By: python2-ipaclient-4.6.8-5.sl7_9.15.noarch 
(sl-security)
                python2-ipaclient = 4.6.8-5.sl7_9.15
            Available: python2-ipaclient-4.6.8-5.sl7.noarch (sl)
                python2-ipaclient = 4.6.8-5.sl7
            Available: python2-ipaclient-4.6.8-5.sl7_9.4.noarch 
(sl-security)
                python2-ipaclient = 4.6.8-5.sl7_9.4
            Available: python2-ipaclient-4.6.8-5.sl7_9.9.noarch 
(sl-security)
                python2-ipaclient = 4.6.8-5.sl7_9.9
Error: Package: python2-ipaclient-4.6.8-5.sl7_9.15.noarch (sl-security)
            Requires: ipa-common = 4.6.8-5.sl7_9.15
            Installed: ipa-common-4.6.8-5.sl7_9.10.noarch (@sl-security)
                ipa-common = 4.6.8-5.sl7_9.10
            Available: ipa-common-4.6.8-5.sl7.noarch (sl)
                ipa-common = 4.6.8-5.sl7
            Available: ipa-common-4.6.8-5.sl7_9.4.noarch (sl-security)
                ipa-common = 4.6.8-5.sl7_9.4
            Available: ipa-common-4.6.8-5.sl7_9.9.noarch (sl-security)
                ipa-common = 4.6.8-5.sl7_9.9
Error: Package: python2-ipalib-4.6.8-5.sl7_9.15.noarch (sl-security)
            Requires: ipa-common = 4.6.8-5.sl7_9.15
            Installed: ipa-common-4.6.8-5.sl7_9.10.noarch (@sl-security)
                ipa-common = 4.6.8-5.sl7_9.10
            Available: ipa-common-4.6.8-5.sl7.noarch (sl)
                ipa-common = 4.6.8-5.sl7
            Available: ipa-common-4.6.8-5.sl7_9.4.noarch (sl-security)
                ipa-common = 4.6.8-5.sl7_9.4
            Available: ipa-common-4.6.8-5.sl7_9.9.noarch (sl-security)
                ipa-common = 4.6.8-5.sl7_9.9
Error: Package: python2-ipaclient-4.6.8-5.sl7_9.15.noarch (sl-security)
            Requires: ipa-client-common = 4.6.8-5.sl7_9.15
            Installed: ipa-client-common-4.6.8-5.sl7_9.10.noarch 
(@sl-security)
                ipa-client-common = 4.6.8-5.sl7_9.10
            Available: ipa-client-common-4.6.8-5.sl7.noarch (sl)
                ipa-client-common = 4.6.8-5.sl7
            Available: ipa-client-common-4.6.8-5.sl7_9.4.noarch 
(sl-security)
                ipa-client-common = 4.6.8-5.sl7_9.4
            Available: ipa-client-common-4.6.8-5.sl7_9.9.noarch 
(sl-security)
                ipa-client-common = 4.6.8-5.sl7_9.9
  You could try using --skip-broken to work around the problem
  You could try running: rpm -Va --nofiles --nodigest

On 2023-08-30 2:53 p.m., Farhan Ahmed wrote:
> Synopsis:          Important: kernel security and bug fix update
> Advisory ID:       SLSA-2023:4819-1
> Issue Date:        2023-08-30
> CVE Numbers:       CVE-2023-35788
>                     CVE-2023-20593
> --
> 
> Security Fix(es):
> 
> * kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt()
> (CVE-2023-35788)
> 
> * hw: amd: Cross-Process Information Leak (CVE-2023-20593)
> 
> For more details about the security issue(s), including the impact, a CVSS
> score, acknowledgments, and other related information, refer to the CVE
> 
> Bug Fix(es):
> 
> * nf_conntrack causing nfs to stall
> 
> * Request to backport upstream commit 5e2d2cc2588b, 26a8b12747c9, and
> e98fa02c4f2e for SL 7.9.z
> 
> * Fix soft lockup happens in gfs2_dir_get_hash_table()
> --
> 
> SL7
>    x86_64
>      bpftool-3.10.0-1160.99.1.el7.x86_64.rpm
>      bpftool-debuginfo-3.10.0-1160.99.1.el7.x86_64.rpm
>      kernel-3.10.0-1160.99.1.el7.x86_64.rpm
>      kernel-debug-3.10.0-1160.99.1.el7.x86_64.rpm
>      kernel-debug-debuginfo-3.10.0-1160.99.1.el7.x86_64.rpm
>      kernel-debug-devel-3.10.0-1160.99.1.el7.x86_64.rpm
>      kernel-debuginfo-3.10.0-1160.99.1.el7.x86_64.rpm
>      kernel-debuginfo-common-x86_64-3.10.0-1160.99.1.el7.x86_64.rpm
>      kernel-devel-3.10.0-1160.99.1.el7.x86_64.rpm
>      kernel-headers-3.10.0-1160.99.1.el7.x86_64.rpm
>      kernel-tools-3.10.0-1160.99.1.el7.x86_64.rpm
>      kernel-tools-debuginfo-3.10.0-1160.99.1.el7.x86_64.rpm
>      kernel-tools-libs-3.10.0-1160.99.1.el7.x86_64.rpm
>      perf-3.10.0-1160.99.1.el7.x86_64.rpm
>      perf-debuginfo-3.10.0-1160.99.1.el7.x86_64.rpm
>      python-perf-3.10.0-1160.99.1.el7.x86_64.rpm
>      python-perf-debuginfo-3.10.0-1160.99.1.el7.x86_64.rpm
>      kernel-tools-libs-devel-3.10.0-1160.99.1.el7.x86_64.rpm
>    noarch
>      kernel-abi-whitelists-3.10.0-1160.99.1.el7.noarch.rpm
>      kernel-doc-3.10.0-1160.99.1.el7.noarch.rpm
> 
> - Scientific Linux Development Team