From 674b8b76a66ae5d413f9a1c7acf1f350a083a18f Mon Sep 17 00:00:00 2001 From: MSVSphere Packaging Team Date: Thu, 26 Dec 2024 03:09:23 +0300 Subject: [PATCH] import kernel-rt-4.18.0-553.32.1.rt7.373.el8_10 --- .gitignore | 2 +- .kernel-rt.metadata | 2 +- SPECS/kernel.spec | 51 ++++++++++++++++++++++++++++++++++++++++++--- 3 files changed, 50 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index 14c2fc6..5fad24b 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,6 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer -SOURCES/linux-4.18.0-553.30.1.rt7.371.el8_10.tar.xz +SOURCES/linux-4.18.0-553.32.1.rt7.373.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer diff --git a/.kernel-rt.metadata b/.kernel-rt.metadata index 5777da0..60c1ca3 100644 --- a/.kernel-rt.metadata +++ b/.kernel-rt.metadata @@ -1,6 +1,6 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -928c694f90de62818f208f6d5a816f9f65de2244 SOURCES/linux-4.18.0-553.30.1.rt7.371.el8_10.tar.xz +39940fd28d6eab989f8f9948040ec3e2b223c448 SOURCES/linux-4.18.0-553.32.1.rt7.373.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index b75eec5..ab31c0a 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.30.1.rt7.371.el8_10 +%define pkgrelease 553.32.1.rt7.373.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.30.1.rt7.371%{?dist} +%define specrelease 553.32.1.rt7.373%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -148,7 +148,7 @@ # The preempt RT patch level %global rttag .rt7 # realtimeN -%global rtbuild .371 +%global rtbuild .373 %define with_doc 0 %define with_headers 0 %define with_cross_headers 0 @@ -2699,6 +2699,51 @@ fi # # %changelog +* Fri Nov 29 2024 Denys Vlasenko [4.18.0-553.32.1.rt7.373.el8_10] +- [rt] build kernel-rt-4.18.0-553.32.1.rt7.373.el8_10 [RHEL-68615] +- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} +- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} +- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} +- gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] +- Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] +- gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] +- gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] +- KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] +- vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} +- md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] + +* Fri Nov 22 2024 Denys Vlasenko [4.18.0-553.31.1.rt7.372.el8_10] +- [rt] build kernel-rt-4.18.0-553.31.1.rt7.372.el8_10 [RHEL-68615] +- xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} +- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} +- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] +- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] +- cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] +- cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] +- cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] +- cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] +- cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] +- cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] +- cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] +- selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} +- gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] +- gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] +- arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} +- net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} +- xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} + * Fri Nov 15 2024 Denys Vlasenko [4.18.0-553.30.1.rt7.371.el8_10] - [rt] build kernel-rt-4.18.0-553.30.1.rt7.371.el8_10 [RHEL-66248] - locking/rtmutex: Use rt_mutex specific scheduler helpers (Daniel Vacek) [RHEL-63166]