From 11819d8bdf5645d3c2c0de3537406d9cc89d174e Mon Sep 17 00:00:00 2001 From: Denys Vlasenko Date: Thu, 17 Oct 2024 19:28:21 +0200 Subject: [PATCH] kernel-rt-4.18.0-553.27.1.rt7.368.el8_10 * Thu Oct 17 2024 Denys Vlasenko [4.18.0-553.27.1.rt7.368.el8_10] - [rt] build kernel-rt-4.18.0-553.27.1.rt7.368.el8_10 [RHEL-59541] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] Resolves: RHEL-59541, RHEL-49310, RHEL-57240, RHEL-60670, RHEL-49415, RHEL-62139, RHEL-57234 Signed-off-by: Denys Vlasenko --- kernel.spec | 21 ++++++++++++++++++--- sources | 2 +- 2 files changed, 19 insertions(+), 4 deletions(-) diff --git a/kernel.spec b/kernel.spec index 1e339dd..54cde1d 100644 --- a/kernel.spec +++ b/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.26.1.rt7.367.el8_10 +%define pkgrelease 553.27.1.rt7.368.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.26.1.rt7.367%{?dist} +%define specrelease 553.27.1.rt7.368%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -148,7 +148,7 @@ # The preempt RT patch level %global rttag .rt7 # realtimeN -%global rtbuild .367 +%global rtbuild .368 %define with_doc 0 %define with_headers 0 %define with_cross_headers 0 @@ -2699,6 +2699,21 @@ fi # # %changelog +* Thu Oct 17 2024 Denys Vlasenko [4.18.0-553.27.1.rt7.368.el8_10] +- [rt] build kernel-rt-4.18.0-553.27.1.rt7.368.el8_10 [RHEL-59541] +- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} +- bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} +- bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} +- bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} +- xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} +- tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] +- tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] +- ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} +- xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] +- loopback: fix lockdep splat (Xin Long) [RHEL-58100] +- blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] +- loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] + * Wed Oct 09 2024 Denys Vlasenko [4.18.0-553.26.1.rt7.367.el8_10] - [rt] build kernel-rt-4.18.0-553.26.1.rt7.367.el8_10 [RHEL-59541] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} diff --git a/sources b/sources index 27b2887..bb59447 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (linux-4.18.0-553.26.1.rt7.367.el8_10.tar.xz) = 4030b08bb7527360ee84d41328bb7f19b4e8b9d3085f9d52a377d552dc6dfc71def0438872d86f4d2a492d7db04ca5ffa16f2011e31a30178a76fb0dcc85b39e +SHA512 (linux-4.18.0-553.27.1.rt7.368.el8_10.tar.xz) = 7d8010f021898ffada6ab1e605010ac790a99d107610a6507f9e7516fead7dd040e95c8f16d499f30438fc00b7896ac09fdeaca75490fba32bf79df77ce5de6c