diff --git a/.gitignore b/.gitignore index 54581aa..d2dfc5b 100644 --- a/.gitignore +++ b/.gitignore @@ -2,7 +2,7 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -SOURCES/linux-4.18.0-553.60.1.el8_10.tar.xz +SOURCES/linux-4.18.0-553.62.1.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer diff --git a/.kernel.metadata b/.kernel.metadata index 1ad40a3..7745423 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,8 +1,8 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -6bb55d317002e3a9516feee2a1914be103297d4f SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 +0366b385b710c216a544be5b66117b26dd8449ad SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 2318474e4033305aa0461e29d5962ca0a5dc24cb SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -3c3f71f5687520c3e961a2a5c93dac8a3074e46f SOURCES/linux-4.18.0-553.60.1.el8_10.tar.xz +bf4131f8793a0776bfe88926568f6f3bbdccb917 SOURCES/linux-4.18.0-553.62.1.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index d1d371a..43c53ef 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.60.1.el8_10 +%define pkgrelease 553.62.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.60.1%{?dist} +%define specrelease 553.62.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2696,6 +2696,46 @@ fi # # %changelog +* Thu Jul 10 2025 Denys Vlasenko [4.18.0-553.62.1.el8_10] +- s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] +- mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] +- driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] +- driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] +- Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] +- cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] +- cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] +- cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] +- cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] +- file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] +- cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] +- cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] +- cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] +- locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] +- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} +- media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] +- media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] +- media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] +- media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] +- media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] +- media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] +- media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} +- media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] +- media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] +- media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] +- media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} +- cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} +- Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] +- fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] +- fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] +- mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] + +* Thu Jul 03 2025 Denys Vlasenko [4.18.0-553.61.1.el8_10] +- s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] +- ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} +- ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} +- net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} +- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} + * Thu Jun 26 2025 Denys Vlasenko [4.18.0-553.60.1.el8_10] - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037]