diff --git a/kernel.spec b/kernel.spec
index ec49cf6..aaa8c7d 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.31.1.rt7.372.el8_10
+%define pkgrelease 553.32.1.rt7.373.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.31.1.rt7.372%{?dist}
+%define specrelease 553.32.1.rt7.373%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -148,7 +148,7 @@
 # The preempt RT patch level
 %global rttag .rt7
 # realtimeN
-%global rtbuild .372
+%global rtbuild .373
 %define with_doc 0
 %define with_headers 0
 %define with_cross_headers 0
@@ -2699,6 +2699,31 @@ fi
 #
 #
 %changelog
+* Fri Nov 29 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.32.1.rt7.373.el8_10]
+- [rt] build kernel-rt-4.18.0-553.32.1.rt7.373.el8_10 [RHEL-68615]
+- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192}
+- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192}
+- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082}
+- gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869]
+- Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869]
+- gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869]
+- gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869]
+- gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869]
+- gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869]
+- gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869]
+- gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869]
+- gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869]
+- gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869]
+- gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869]
+- gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869]
+- gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869]
+- gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869]
+- gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869]
+- gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869]
+- KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080]
+- vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264}
+- md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585]
+
 * Fri Nov 22 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.31.1.rt7.372.el8_10]
 - [rt] build kernel-rt-4.18.0-553.31.1.rt7.372.el8_10 [RHEL-68615]
 - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110}
diff --git a/sources b/sources
index d951e63..64b21ce 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (linux-4.18.0-553.31.1.rt7.372.el8_10.tar.xz) = 9f3528cb0afc0c5087268b46e251d0dd0f28c721dd842648935673c227815ab9abe8b4e3a2502061316b042193a8eb2e1fc413cd6e452598de9ec759f0dd46a7
+SHA512 (linux-4.18.0-553.32.1.rt7.373.el8_10.tar.xz) = e27e335c737f893244e260c0f1ad33ab9c3968b916282409fb9f70d7e553b0e9834692ebb63e88c900044d32b9244b6999d6bf7addd789d3bc7397dc0582825b