1
0
forked from rpms/kernel

Import from CS git

This commit is contained in:
eabdullin 2025-11-24 12:36:32 +00:00
parent d18a5fdbeb
commit 3446e99054
4 changed files with 24 additions and 5 deletions

2
.gitignore vendored
View File

@ -2,7 +2,7 @@ SOURCES/centossecureboot201.cer
SOURCES/centossecurebootca2.cer
SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2
SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2
SOURCES/linux-4.18.0-553.84.1.el8_10.tar.xz
SOURCES/linux-4.18.0-553.85.1.el8_10.tar.xz
SOURCES/redhatsecureboot302.cer
SOURCES/redhatsecureboot303.cer
SOURCES/redhatsecureboot501.cer

View File

@ -1,8 +1,8 @@
2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer
bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer
4f19d084532e404edec67867b3244945ad1dece8 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2
a34b110fa6d45cc2268ec83087c1368828eccb70 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2
49b7afc6ac8117cbe2ee06f0639c4fe7a16fb3bc SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2
315bb9cccd18d84a32761a58fc58570d1731c4be SOURCES/linux-4.18.0-553.84.1.el8_10.tar.xz
fa1fb52125cee5d045f828d45071b930916440f2 SOURCES/linux-4.18.0-553.85.1.el8_10.tar.xz
13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer
e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer
ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer

View File

@ -26,6 +26,8 @@ emptyrpm:
- kernel-debug
- kernel-zfcpdump
- kernel-zfcpdump-modules
- kernel-rt
- kernel-rt-debug
patches:
ignore_list:

View File

@ -38,10 +38,10 @@
# define buildid .local
%define specversion 4.18.0
%define pkgrelease 553.84.1.el8_10
%define pkgrelease 553.85.1.el8_10
# allow pkg_release to have configurable %%{?dist} tag
%define specrelease 553.84.1%{?dist}
%define specrelease 553.85.1%{?dist}
%define pkg_release %{specrelease}%{?buildid}
@ -2705,6 +2705,23 @@ fi
#
#
%changelog
* Thu Nov 13 2025 Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.85.1.el8_10]
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970}
- i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799]
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971}
- i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799]
- i40e: remove i40e_status (Michal Schmidt) [RHEL-123799]
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799]
- drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122]
- NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
- nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
- The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková)
* Thu Nov 06 2025 Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.84.1.el8_10]
- cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775]
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718}