From 15b8914228d6b2dbba2b35901e5de147b764b2b2 Mon Sep 17 00:00:00 2001 From: eabdullin Date: Tue, 30 Sep 2025 08:54:52 +0000 Subject: [PATCH] Import from CS git --- .gitignore | 2 +- .kernel.metadata | 4 ++-- SPECS/kernel.spec | 12 ++++++++++-- 3 files changed, 13 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index abb3f67..8437859 100644 --- a/.gitignore +++ b/.gitignore @@ -2,7 +2,7 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -SOURCES/linux-4.18.0-553.76.1.el8_10.tar.xz +SOURCES/linux-4.18.0-553.77.1.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer diff --git a/.kernel.metadata b/.kernel.metadata index e0929b7..1b76b4c 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,8 +1,8 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -3b8f59efde5235edfd2294bf667ddd6497e0a08e SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 +b9bd835de63a18ec4fe15b8ebc123ee2201388b7 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 2318474e4033305aa0461e29d5962ca0a5dc24cb SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -9e0a8c678228941f1e20762eb20f1b18f37c8bee SOURCES/linux-4.18.0-553.76.1.el8_10.tar.xz +53890a01ad488b9b9a3d8966dce7fd7e7870f780 SOURCES/linux-4.18.0-553.77.1.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 4b7eb7f..3f7e294 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.76.1.el8_10 +%define pkgrelease 553.77.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.76.1%{?dist} +%define specrelease 553.77.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2705,6 +2705,14 @@ fi # # %changelog +* Thu Sep 18 2025 Denys Vlasenko [4.18.0-553.77.1.el8_10] +- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} +- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} +- net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] +- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} +- firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} +- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} + * Sun Sep 14 2025 Denys Vlasenko [4.18.0-553.76.1.el8_10] - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}