diff --git a/.gitignore b/.gitignore index 6ed82f8..030c2a7 100644 --- a/.gitignore +++ b/.gitignore @@ -2,7 +2,7 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -SOURCES/linux-4.18.0-553.132.1.el8_10.tar.xz +SOURCES/linux-4.18.0-553.134.1.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer diff --git a/.kernel.metadata b/.kernel.metadata index fa546de..78ab5e8 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,8 +1,8 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -ad1ad277bc1443136b0d7214995839b7cfd05970 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 -2711397f678e8d5629a103a1b5a861f781d8aeb2 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -43f060bd69d23c6e6e8a54266cabdcf6e3842285 SOURCES/linux-4.18.0-553.132.1.el8_10.tar.xz +555e8d28360ec2a118580350ee28c4cc847e1873 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 +2cddcac3082705211d8cb9c0ee49b8122c5740a8 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 +2fed2ec6a633bdffed75a405cf3547ce40b5be24 SOURCES/linux-4.18.0-553.134.1.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index cae3297..c2db6e6 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.132.1.el8_10 +%define pkgrelease 553.134.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.132.1%{?dist} +%define specrelease 553.134.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2707,6 +2707,19 @@ fi # # %changelog +* Fri Jun 12 2026 CKI KWF Bot [4.18.0-553.134.1.el8_10] +- wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} +- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} +- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} +- netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} +- netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} +- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} +- xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} +- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} + +* Wed Jun 10 2026 CKI KWF Bot [4.18.0-553.133.1.el8_10] +- Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} + * Wed Jun 10 2026 CKI KWF Bot [4.18.0-553.132.1.el8_10] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125}