diff --git a/.gitignore b/.gitignore index 7c3094c6..1e0c55de 100644 --- a/.gitignore +++ b/.gitignore @@ -2,7 +2,7 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -SOURCES/linux-4.18.0-553.89.1.el8_10.tar.xz +SOURCES/linux-4.18.0-553.92.1.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer diff --git a/.kernel.metadata b/.kernel.metadata index 5da2c3aa..34824a28 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,8 +1,8 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -41aac99ab74b653a2ad85486c79e43f3c0523d4b SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 -58acdefe9b43ea6e2f6b30ab368d664e66c35edf SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -735ea56cb29779b1d0d8aa895ee7d069e85e4f42 SOURCES/linux-4.18.0-553.89.1.el8_10.tar.xz +893271a50b6947df0b4ec8d08ee984c1e0f1bf14 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 +cd2142606c7568a31beaa8a562de2bb295319354 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 +2a83ad64c516d2a2a6531f2d0707a9f4221a2237 SOURCES/linux-4.18.0-553.92.1.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 68d8a0c2..5118aa29 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.89.1.el8_10 +%define pkgrelease 553.92.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.89.1%{?dist} +%define specrelease 553.92.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2705,6 +2705,37 @@ fi # # %changelog +* Tue Jan 06 2026 CKI KWF Bot [4.18.0-553.92.1.el8_10] +- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} +- media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} +- media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] +- media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] +- media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] +- media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] + +* Tue Dec 23 2025 CKI KWF Bot [4.18.0-553.91.1.el8_10] +- gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] +- gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] +- gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] +- gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] +- gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] +- gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] +- gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] +- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} +- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) +- cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] +- perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] +- perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] +- ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] +- ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] +- blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] +- blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] +- blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] +- sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] + +* Sat Dec 13 2025 CKI KWF Bot [4.18.0-553.90.1.el8_10] +- NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] + * Sat Nov 29 2025 CKI KWF Bot [4.18.0-553.89.1.el8_10] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}