diff --git a/Makefile.rhelver b/Makefile.rhelver index 4fae7df..8748050 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 1 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 148 +RHEL_RELEASE = 149 # # ZSTREAM diff --git a/kernel.spec b/kernel.spec index 257b6c6..1a37d5d 100755 --- a/kernel.spec +++ b/kernel.spec @@ -121,13 +121,13 @@ Summary: The Linux kernel %define kversion 5.14 %define rpmversion 5.14.0 -%define pkgrelease 148.el9 +%define pkgrelease 149.el9 # This is needed to do merge window version magic %define patchlevel 14 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 148%{?buildid}%{?dist} +%define specrelease 149%{?buildid}%{?dist} %define pkg_release %{specrelease} @@ -679,7 +679,7 @@ BuildRequires: lld # exact git commit you can run # # xzcat -qq ${TARBALL} | git get-tar-commit-id -Source0: linux-5.14.0-148.el9.tar.xz +Source0: linux-5.14.0-149.el9.tar.xz Source1: Makefile.rhelver @@ -1351,8 +1351,8 @@ ApplyOptionalPatch() fi } -%setup -q -n kernel-5.14.0-148.el9 -c -mv linux-5.14.0-148.el9 linux-%{KVERREL} +%setup -q -n kernel-5.14.0-149.el9 -c +mv linux-5.14.0-149.el9 linux-%{KVERREL} cd linux-%{KVERREL} cp -a %{SOURCE1} . @@ -3018,6 +3018,55 @@ fi # # %changelog +* Fri Aug 19 2022 Herton R. Krzesinski [5.14.0-149.el9] +- netfilter: h323: merge nat hook pointers into one (Florian Westphal) [2111270] +- netfilter: nf_conntrack: use rcu accessors where needed (Florian Westphal) [2111270] +- netfilter: nf_conntrack: add missing __rcu annotations (Florian Westphal) [2111270] +- netfilter: conntrack: use correct format characters (Florian Westphal) [2111270] +- netfilter: conntrack: use fallthrough to cleanup (Florian Westphal) [2111270] +- netfilter: ctnetlink: fix up for "netfilter: conntrack: remove unconfirmed list" (Florian Westphal) [2111270] +- netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit (Florian Westphal) [2111270] +- netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit (Florian Westphal) [2111270] +- netfilter: nfnetlink: fix warn in nfnetlink_unbind (Florian Westphal) [2111270] +- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2111270] +- netfilter: prefer extension check to pointer check (Florian Westphal) [2111270] +- netfilter: conntrack: add nf_conntrack_events autodetect mode (Florian Westphal) [2111270] +- netfilter: conntrack: un-inline nf_ct_ecache_ext_add (Florian Westphal) [2111270] +- netfilter: conntrack: add nf_ct_iter_data object for nf_ct_iterate_cleanup*() (Florian Westphal) [2111270] +- netfilter: nfnetlink: allow to detect if ctnetlink listeners exist (Florian Westphal) [2111270] +- netfilter: conntrack: avoid unconditional local_bh_disable (Florian Westphal) [2111270] +- netfilter: conntrack: remove unconfirmed list (Florian Westphal) [2111270] +- netfilter: conntrack: remove __nf_ct_unconfirmed_destroy (Florian Westphal) [2111270] +- netfilter: cttimeout: decouple unlink and free on netns destruction (Florian Westphal) [2111270] +- netfilter: extensions: introduce extension genid count (Florian Westphal) [2111270] +- netfilter: remove nf_ct_unconfirmed_destroy helper (Florian Westphal) [2111270] +- netfilter: cttimeout: decouple unlink and free on netns destruction (Florian Westphal) [2111270] +- netfilter: conntrack: remove the percpu dying list (Florian Westphal) [2111270] +- netfilter: conntrack: include ecache dying list in dumps (Florian Westphal) [2111270] +- netfilter: ecache: use dedicated list for event redelivery (Florian Westphal) [2111270] +- netfilter: conntrack: split inner loop of list dumping to own function (Florian Westphal) [2111270] +- netfilter: ctnetlink: remove useless type conversion to bool (Florian Westphal) [2111270] +- netfilter: ecache: move to separate structure (Florian Westphal) [2111270] +- netfilter: ctnetlink: use dump structure instead of raw args (Florian Westphal) [2111270] +- netfilter: cttimeout: use option structure (Florian Westphal) [2111270] +- netfilter: ecache: don't use nf_conn spinlock (Florian Westphal) [2111270] +- netfilter: ecache: remove nf_exp_event_notifier structure (Florian Westphal) [2111270] +- netfilter: ecache: prepare for event notifier merge (Florian Westphal) [2111270] +- netfilter: ecache: add common helper for nf_conntrack_eventmask_report (Florian Westphal) [2111270] +- netfilter: ecache: remove another indent level (Florian Westphal) [2111270] +- netfilter: ecache: remove one indent level (Florian Westphal) [2111270] +- netfilter: conntrack: pptp: use single option structure (Florian Westphal) [2111270] +- netfilter: conntrack: don't refresh sctp entries in closed state (Florian Westphal) [2111270] +- netfilter: conntrack: revisit gc autotuning (Florian Westphal) [2111270] +- netfilter: nf_conntrack_netbios_ns: fix helper module alias (Florian Westphal) [2111270] +- netfilter: conntrack: Remove useless assignment statements (Florian Westphal) [2111270] +- netfilter: conntrack: Use memset_startat() to zero struct nf_conn (Florian Westphal) [2111270] +- netfilter: ctnetlink: missing counters and timestamp in nfnetlink_{log,queue} (Florian Westphal) [2111270] +- netfilter: ctnetlink: allow to filter dump by status bits (Florian Westphal) [2111270] +- netfilter: ctnetlink: add and use a helper for mark parsing (Florian Westphal) [2111270] +- netfilter: ctnetlink: remove expired entries first (Florian Westphal) [2111270] +- net: align static siphash keys (Florian Westphal) [2111270] + * Thu Aug 18 2022 Herton R. Krzesinski [5.14.0-148.el9] - lockdown: also lock down previous kgdb use (Lenny Szubowicz) [2104750] {CVE-2022-21499} - perf build: Stop using __weak bpf_object__next_map() to handle older libbpf versions (Michael Petlan) [2102240] diff --git a/sources b/sources index 334c43b..5d74929 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-148.el9.tar.xz) = cf467e5bc01e264788a632e5f452135afed16872260cc24e1330b1872cfd3b4db5863ac33c0df2dfa7560c22deff1b0181b8d479aedfea26f873862357805530 -SHA512 (kernel-abi-stablelists-5.14.0-148.el9.tar.bz2) = f54f66b02d251c29c6abcf3e57e36eaac74e0fe4f42d91837730f12ebf1a21ff1110afd98da0c4440926e9baea594a53cc51927e02ead40e8ed0614c4d1f323e -SHA512 (kernel-kabi-dw-5.14.0-148.el9.tar.bz2) = 6ecbab2e35049ac3b994640a70f491a074f6d12f6047b47e9c68e3186fd1ebd9729d3a5f33023c36f2010ccbc6aa079169b99db1a5220d49075d0890a74564c5 +SHA512 (linux-5.14.0-149.el9.tar.xz) = 211d38cd4de5019a106b0973b8bd753979a48e9a666c2442b77b5ac03fa373adf8e5f4110cb2ca1c055eeb368b93d49fb7e8fdba148474b12030523ba934c928 +SHA512 (kernel-abi-stablelists-5.14.0-149.el9.tar.bz2) = d2c2441b06eae724c43dcf69f56d8ec707e5f2b1639fa8720889da2b0ff64e309af391bed1a1120d670fd115933ac83d97e0473551e7a1459e9d6472c294e9a9 +SHA512 (kernel-kabi-dw-5.14.0-149.el9.tar.bz2) = 3a735e620f194c128f2437afb89c86bb8acd62e02a608f152fc83f8eb51d5d5580a94618437b93a478830c56e6e6c73776ad285b18f8ac0a4403f0986d45cf3a