From b3270d12c4e3f9244001f60bc698d0995e9ee76d Mon Sep 17 00:00:00 2001 From: eabdullin Date: Tue, 26 Nov 2024 06:43:13 +0000 Subject: [PATCH] Import from CS git --- .gitignore | 4 ++-- .kernel.metadata | 4 ++-- SPECS/kernel.spec | 35 +++++++++++++++++++++++++++++++++-- 3 files changed, 37 insertions(+), 6 deletions(-) diff --git a/.gitignore b/.gitignore index c3b8342..61f2da9 100644 --- a/.gitignore +++ b/.gitignore @@ -2,11 +2,11 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -SOURCES/linux-4.18.0-553.27.1.el8_10.tar.xz +SOURCES/linux-4.18.0-553.30.1.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer SOURCES/redhatsecurebootca3.cer SOURCES/redhatsecurebootca7.cer SOURCES/rheldup3.x509 -SOURCES/rhelkpatch1.x509 \ No newline at end of file +SOURCES/rhelkpatch1.x509 diff --git a/.kernel.metadata b/.kernel.metadata index 791c74b..4aa4c5d 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,8 +1,8 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -d1cb24b71ee0c1b2078420cfb6c209a4a71cda87 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 +8e4ca83f457b52fc05bac2eea29078a6ba16db37 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 618f2302d26295e300718d59e8551a0cdfc98022 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -edee5eb28d631dda54509fd86188a4b37d32111d SOURCES/linux-4.18.0-553.27.1.el8_10.tar.xz +5ba0a0a0aac8e6fff931ff6006040080429265b5 SOURCES/linux-4.18.0-553.30.1.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index baf47ff..9c78f73 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.27.1.el8_10 +%define pkgrelease 553.30.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.27.1%{?dist} +%define specrelease 553.30.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2696,6 +2696,37 @@ fi # # %changelog +* Fri Nov 15 2024 Denys Vlasenko [4.18.0-553.30.1.el8_10] +- media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} +- blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] +- rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] +- rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] +- rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] +- smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] +- cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] +- cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] +- cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] +- autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] +- autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] +- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} + +* Thu Nov 07 2024 Denys Vlasenko [4.18.0-553.29.1.el8_10] +- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} +- mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} +- cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] + +* Thu Oct 31 2024 Denys Vlasenko [4.18.0-553.28.1.el8_10] +- s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] +- smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] +- smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] +- cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] +- Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] +- gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) +- x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] +- audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] +- KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] +- raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] + * Thu Oct 17 2024 Denys Vlasenko [4.18.0-553.27.1.el8_10] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989}