From cfaf21378d347b689a4416547097b1c2faebabe0 Mon Sep 17 00:00:00 2001 From: eabdullin Date: Mon, 23 Feb 2026 14:33:37 +0000 Subject: [PATCH] Import from CS git --- .gitignore | 2 +- .kernel.metadata | 6 +++--- SPECS/kernel.spec | 18 ++++++++++++++++-- 3 files changed, 20 insertions(+), 6 deletions(-) diff --git a/.gitignore b/.gitignore index ce662cea..11bff214 100644 --- a/.gitignore +++ b/.gitignore @@ -2,7 +2,7 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -SOURCES/linux-4.18.0-553.105.1.el8_10.tar.xz +SOURCES/linux-4.18.0-553.107.1.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer diff --git a/.kernel.metadata b/.kernel.metadata index 2537a656..c4028e2f 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,8 +1,8 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -b816ded8258e1b948329f301440ea1153a27e070 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 -23dd2007acb047ee8a21488b28d3b21ee1e47b71 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -74feceeaebaf05d9bd02c2ed404658d134401ee3 SOURCES/linux-4.18.0-553.105.1.el8_10.tar.xz +64b08f55411aae416b31e04b794da03fb0e6b305 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 +53e6c46058bd2ab53d5eb4ae63e65162856efa2a SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 +da5cde4a5e0c037d89f75639b87c26cec176c21d SOURCES/linux-4.18.0-553.107.1.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 2e860def..1e11e41c 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.105.1.el8_10 +%define pkgrelease 553.107.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.105.1%{?dist} +%define specrelease 553.107.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2705,6 +2705,20 @@ fi # # %changelog +* Tue Feb 17 2026 CKI KWF Bot [4.18.0-553.107.1.el8_10] +- autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] +- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} +- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] +- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] +- audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] + +* Tue Feb 17 2026 CKI KWF Bot [4.18.0-553.106.1.el8_10] +- bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} +- net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} +- page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} +- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} +- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} + * Sat Feb 07 2026 CKI KWF Bot [4.18.0-553.105.1.el8_10] - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}