From 355b642a0277fc45dac6daf42800796e9630ef93 Mon Sep 17 00:00:00 2001 From: "Herton R. Krzesinski" Date: Mon, 6 Feb 2023 14:29:51 +0000 Subject: [PATCH] kernel-5.14.0-259.el9 * Mon Feb 06 2023 Herton R. Krzesinski [5.14.0-259.el9] - net: Fix return value of qdisc ingress handling on success (Paolo Abeni) [2162711] - net: sched: gred: prevent races when adding offloads to stats (Davide Caratti) [2162634] - net/sched: sch_taprio: do not schedule in taprio_reset() (Davide Caratti) [2162634] - net/sched: sch_taprio: fix possible use-after-free (Davide Caratti) [2162634] - sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb (Davide Caratti) [2162634] - net: sched: disallow noqueue for qdisc classes (Davide Caratti) [2162634] - net: sched: fix memory leak in tcindex_set_parms (Davide Caratti) [2162634] - net: sched: cake: fix null pointer access issue when cake_init() fails (Davide Caratti) [2162634] - cifs: fix use-after-free caused by invalid pointer `hostname` (Ronnie Sahlberg) [2154174] - KVM: SVM: Only dump VMSA to klog at KERN_DEBUG level (Vitaly Kuznetsov) [2160005] - fs/buffer: remove bh_submit_read() helper (Lukas Czerner) [2160719] - ext2: replace bh_submit_read() helper with bh_read() (Lukas Czerner) [2160719] - fs/buffer: remove ll_rw_block() helper (Lukas Czerner) [2160719] - udf: replace ll_rw_block() (Lukas Czerner) [2160719] - jbd2: replace ll_rw_block() (Lukas Czerner) [2160719] - isofs: replace ll_rw_block() (Lukas Czerner) [2160719] - gfs2: replace ll_rw_block() (Lukas Czerner) [2160719] - fs/buffer: replace ll_rw_block() (Lukas Czerner) [2160719] - fs/buffer: add some new buffer read helpers (Lukas Czerner) [2160719] - fs/buffer: remove __breadahead_gfp() (Lukas Czerner) [2160719] - tipc: fix an use-after-free issue in tipc_recvmsg (Xin Long) [2160540] - tipc: keep the skb in rcv queue until the whole data is read (Xin Long) [2160540] - tipc: fix unexpected link reset due to discovery messages (Xin Long) [2160540] - tipc: call tipc_lxc_xmit without holding node_read_lock (Xin Long) [2160540] - tipc: Fix potential OOB in tipc_link_proto_rcv() (Xin Long) [2160540] - tipc: check skb_linearize() return value in tipc_disc_rcv() (Xin Long) [2160540] - tipc: add an extra conn_get in tipc_conn_alloc (Xin Long) [2160540] - tipc: set con sock in tipc_conn_alloc (Xin Long) [2160540] - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long) [2160540] - tipc: fix a null-ptr-deref in tipc_topsrv_accept (Xin Long) [2160540] - thermal/drivers/qcom/tsens: Rework debugfs file structure (Eric Chanudet) [2159524] - thermal/drivers/qcom/tsens: Fix wrong version id dbg_version_show (Eric Chanudet) [2159524] - thermal/drivers/qcom/tsens: Init debugfs only with successful probe (Eric Chanudet) [2159524] - thermal/drivers/tsens: Allow configuring min and max trips (Eric Chanudet) [2159524] - thermal/drivers/tsens: Add support for combined interrupt (Eric Chanudet) [2159524] - thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id (Eric Chanudet) [2159524] - thermal/drivers/qcom: Remove get_trend function (Eric Chanudet) [2159524] - iio: adc: qcom-vadc-common: add reverse scaling for PMIC5 Gen2 ADC_TM (Eric Chanudet) [2159524] - thermal/drivers/tsens: register thermal zones as hwmon sensors (Eric Chanudet) [2159524] - thermal/drivers/tsens: Add timeout to get_temp_tsens_valid (Eric Chanudet) [2159524] - thermal/drivers/tsens: Fix wrong check for tzd in irq handlers (Eric Chanudet) [2159524] - RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. (Kamal Heib) [2131780] - mailbox: qcom-ipcc: flag IRQ NO_THREAD (Eric Chanudet) [2135552] - fbmem: Check virtual screen sizes in fb_set_var() (Wander Lairson Costa) [2109118] {CVE-2021-33655} - fbcon: Prevent that screen size is smaller than font size (Wander Lairson Costa) [2109118] {CVE-2021-33655} - fbcon: Disallow setting font bigger than screen size (Wander Lairson Costa) [2109118] {CVE-2021-33655} - video: of_display_timing.h: include errno.h (Wander Lairson Costa) [2109118] {CVE-2021-33655} - fbdev: fbmem: Fix logo center image dx issue (Wander Lairson Costa) [2109118] {CVE-2021-33655} Resolves: rhbz#2162711, rhbz#2162634, rhbz#2154174, rhbz#2160005, rhbz#2160719, rhbz#2160540, rhbz#2159524, rhbz#2131780, rhbz#2135552, rhbz#2109118 Signed-off-by: Herton R. Krzesinski --- Makefile.rhelver | 2 +- kernel.spec | 58 ++++++++++++++++++++++++++++++++++++++++++++---- sources | 6 ++--- 3 files changed, 58 insertions(+), 8 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index a2fc127..bd06edd 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 2 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 258 +RHEL_RELEASE = 259 # # ZSTREAM diff --git a/kernel.spec b/kernel.spec index 5e504b6..98dee04 100755 --- a/kernel.spec +++ b/kernel.spec @@ -119,15 +119,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 258 +%define pkgrelease 259 %define kversion 5 -%define tarfile_release 5.14.0-258.el9 +%define tarfile_release 5.14.0-259.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 258%{?buildid}%{?dist} +%define specrelease 259%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-258.el9 +%define kabiversion 5.14.0-259.el9 # # End of genspec.sh variables @@ -3116,6 +3116,56 @@ fi # # %changelog +* Mon Feb 06 2023 Herton R. Krzesinski [5.14.0-259.el9] +- net: Fix return value of qdisc ingress handling on success (Paolo Abeni) [2162711] +- net: sched: gred: prevent races when adding offloads to stats (Davide Caratti) [2162634] +- net/sched: sch_taprio: do not schedule in taprio_reset() (Davide Caratti) [2162634] +- net/sched: sch_taprio: fix possible use-after-free (Davide Caratti) [2162634] +- sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb (Davide Caratti) [2162634] +- net: sched: disallow noqueue for qdisc classes (Davide Caratti) [2162634] +- net: sched: fix memory leak in tcindex_set_parms (Davide Caratti) [2162634] +- net: sched: cake: fix null pointer access issue when cake_init() fails (Davide Caratti) [2162634] +- cifs: fix use-after-free caused by invalid pointer `hostname` (Ronnie Sahlberg) [2154174] +- KVM: SVM: Only dump VMSA to klog at KERN_DEBUG level (Vitaly Kuznetsov) [2160005] +- fs/buffer: remove bh_submit_read() helper (Lukas Czerner) [2160719] +- ext2: replace bh_submit_read() helper with bh_read() (Lukas Czerner) [2160719] +- fs/buffer: remove ll_rw_block() helper (Lukas Czerner) [2160719] +- udf: replace ll_rw_block() (Lukas Czerner) [2160719] +- jbd2: replace ll_rw_block() (Lukas Czerner) [2160719] +- isofs: replace ll_rw_block() (Lukas Czerner) [2160719] +- gfs2: replace ll_rw_block() (Lukas Czerner) [2160719] +- fs/buffer: replace ll_rw_block() (Lukas Czerner) [2160719] +- fs/buffer: add some new buffer read helpers (Lukas Czerner) [2160719] +- fs/buffer: remove __breadahead_gfp() (Lukas Czerner) [2160719] +- tipc: fix an use-after-free issue in tipc_recvmsg (Xin Long) [2160540] +- tipc: keep the skb in rcv queue until the whole data is read (Xin Long) [2160540] +- tipc: fix unexpected link reset due to discovery messages (Xin Long) [2160540] +- tipc: call tipc_lxc_xmit without holding node_read_lock (Xin Long) [2160540] +- tipc: Fix potential OOB in tipc_link_proto_rcv() (Xin Long) [2160540] +- tipc: check skb_linearize() return value in tipc_disc_rcv() (Xin Long) [2160540] +- tipc: add an extra conn_get in tipc_conn_alloc (Xin Long) [2160540] +- tipc: set con sock in tipc_conn_alloc (Xin Long) [2160540] +- tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long) [2160540] +- tipc: fix a null-ptr-deref in tipc_topsrv_accept (Xin Long) [2160540] +- thermal/drivers/qcom/tsens: Rework debugfs file structure (Eric Chanudet) [2159524] +- thermal/drivers/qcom/tsens: Fix wrong version id dbg_version_show (Eric Chanudet) [2159524] +- thermal/drivers/qcom/tsens: Init debugfs only with successful probe (Eric Chanudet) [2159524] +- thermal/drivers/tsens: Allow configuring min and max trips (Eric Chanudet) [2159524] +- thermal/drivers/tsens: Add support for combined interrupt (Eric Chanudet) [2159524] +- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id (Eric Chanudet) [2159524] +- thermal/drivers/qcom: Remove get_trend function (Eric Chanudet) [2159524] +- iio: adc: qcom-vadc-common: add reverse scaling for PMIC5 Gen2 ADC_TM (Eric Chanudet) [2159524] +- thermal/drivers/tsens: register thermal zones as hwmon sensors (Eric Chanudet) [2159524] +- thermal/drivers/tsens: Add timeout to get_temp_tsens_valid (Eric Chanudet) [2159524] +- thermal/drivers/tsens: Fix wrong check for tzd in irq handlers (Eric Chanudet) [2159524] +- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. (Kamal Heib) [2131780] +- mailbox: qcom-ipcc: flag IRQ NO_THREAD (Eric Chanudet) [2135552] +- fbmem: Check virtual screen sizes in fb_set_var() (Wander Lairson Costa) [2109118] {CVE-2021-33655} +- fbcon: Prevent that screen size is smaller than font size (Wander Lairson Costa) [2109118] {CVE-2021-33655} +- fbcon: Disallow setting font bigger than screen size (Wander Lairson Costa) [2109118] {CVE-2021-33655} +- video: of_display_timing.h: include errno.h (Wander Lairson Costa) [2109118] {CVE-2021-33655} +- fbdev: fbmem: Fix logo center image dx issue (Wander Lairson Costa) [2109118] {CVE-2021-33655} + * Fri Feb 03 2023 Herton R. Krzesinski [5.14.0-258.el9] - HID: amd_sfh: Fix warning unwind goto (Benjamin Tissoires) [2122844] - HID: revert CHERRY_MOUSE_000C quirk (Benjamin Tissoires) [2122844] diff --git a/sources b/sources index 93be652..5d67f98 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-258.el9.tar.xz) = 11654dde5d4522807011d36fe7b4429282a90ad80cede2ffa6837902c6b6e1e1e3828ccdb6e40b255f55e8ac4d845b0cd7d5ca50d718e7953d98116855191e20 -SHA512 (kernel-abi-stablelists-5.14.0-258.el9.tar.bz2) = 2ca34a526f7b983b930c1320b3eed0e69a2130d04686c71d9426f1244e31b46ff392ac1d8c9c3967d19b452b975c25e7184f8125037a00f13eace16c0602fb1a -SHA512 (kernel-kabi-dw-5.14.0-258.el9.tar.bz2) = 1abdf1c489b58e7a908095d5b13cc1dc82c929148e762e5c52d3cffc827edfbe2c7569809a59a74ea86bdfaa9bf1832aba3e84409d5e96b2fe17a303b333d70d +SHA512 (linux-5.14.0-259.el9.tar.xz) = 6f8396b28c6b6acf05f01ebbe1dc83a96b418e7f6a38e4c0b17b0ad20fabc781099bbf09883ffa9fe2468a2eed377dd04483d91f520bd19e7bb8b0024e2bc08d +SHA512 (kernel-abi-stablelists-5.14.0-259.el9.tar.bz2) = cab5acbaafc50b432f9a39f46cff471d4fe6bdeb71ab0adf542b51a054df02a284eb738ac01de879b6673388eb0518ded3139bca104a6ec9d11baf2a646a26ae +SHA512 (kernel-kabi-dw-5.14.0-259.el9.tar.bz2) = ec25687586bfd387715d1641d75e2f9db70d562a81971424dc3d721c4f663ea269172390ac1fb91bd62c70e5fd0503984ed839f39059f2cdb4e369852c83958c