diff --git a/.gitignore b/.gitignore index a0c9afb..15d9407 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,6 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer -SOURCES/linux-4.18.0-553.112.1.rt7.453.el8_10.tar.xz +SOURCES/linux-4.18.0-553.115.1.rt7.456.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer diff --git a/.kernel-rt.metadata b/.kernel-rt.metadata index 0285910..e791875 100644 --- a/.kernel-rt.metadata +++ b/.kernel-rt.metadata @@ -1,6 +1,6 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -cfdfaf08e5b616bf06c030a5ec4bd3f92b2d9fae SOURCES/linux-4.18.0-553.112.1.rt7.453.el8_10.tar.xz +df5724451665a493648d8bedcd8487b907420b0d SOURCES/linux-4.18.0-553.115.1.rt7.456.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index d85184a..a48a766 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.112.1.rt7.453.el8_10 +%define pkgrelease 553.115.1.rt7.456.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.112.1.rt7.453%{?dist} +%define specrelease 553.115.1.rt7.456%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -148,7 +148,7 @@ # The preempt RT patch level %global rttag .rt7 # realtimeN -%global rtbuild .453 +%global rtbuild .456 %define with_doc 0 %define with_headers 0 %define with_cross_headers 0 @@ -2708,6 +2708,49 @@ fi # # %changelog +* Mon Mar 23 2026 CKI KWF Bot [4.18.0-553.115.1.rt7.456.el8_10] +- x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] +- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} +- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] +- tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] +- xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] +- xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] +- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] +- tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] +- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] +- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} +- x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] + +* Wed Mar 18 2026 CKI KWF Bot [4.18.0-553.114.1.rt7.455.el8_10] +- s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] +- s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] +- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) +- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] +- gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] +- gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] +- gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] +- gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] +- gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] +- gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] +- gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] +- gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] +- gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] +- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} +- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} + +* Wed Mar 11 2026 CKI KWF Bot [4.18.0-553.113.1.rt7.454.el8_10] +- scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] +- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] +- scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] +- scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] +- scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] +- scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] +- scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] +- scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] +- scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] +- scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] +- scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] + * Thu Mar 05 2026 CKI KWF Bot [4.18.0-553.112.1.rt7.453.el8_10] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235]