From 58be09717802ac1c063397f4122bb59701c05edc Mon Sep 17 00:00:00 2001 From: Denys Vlasenko Date: Wed, 25 Sep 2024 17:26:13 +0200 Subject: [PATCH] kernel-rt-4.18.0-553.24.1.rt7.365.el8_10 * Wed Sep 25 2024 Denys Vlasenko [4.18.0-553.24.1.rt7.365.el8_10] - [rt] build kernel-rt-4.18.0-553.24.1.rt7.365.el8_10 [RHEL-59541] - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] Resolves: RHEL-59541, RHEL-43865, RHEL-44032, RHEL-56163, RHEL-56253, RHEL-58543, RHEL-56235 Signed-off-by: Denys Vlasenko --- kernel.spec | 22 +++++++++++++++++++--- sources | 2 +- 2 files changed, 20 insertions(+), 4 deletions(-) diff --git a/kernel.spec b/kernel.spec index b59061f..6db59a5 100644 --- a/kernel.spec +++ b/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.23.1.rt7.364.el8_10 +%define pkgrelease 553.24.1.rt7.365.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.23.1.rt7.364%{?dist} +%define specrelease 553.24.1.rt7.365%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -148,7 +148,7 @@ # The preempt RT patch level %global rttag .rt7 # realtimeN -%global rtbuild .364 +%global rtbuild .365 %define with_doc 0 %define with_headers 0 %define with_cross_headers 0 @@ -2699,6 +2699,22 @@ fi # # %changelog +* Wed Sep 25 2024 Denys Vlasenko [4.18.0-553.24.1.rt7.365.el8_10] +- [rt] build kernel-rt-4.18.0-553.24.1.rt7.365.el8_10 [RHEL-59541] +- cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] +- padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} +- i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] +- sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} +- net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} +- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} +- r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} +- netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} +- memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} +- memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} +- mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} +- mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} +- ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] + * Thu Sep 19 2024 Denys Vlasenko [4.18.0-553.23.1.rt7.364.el8_10] - [rt] build kernel-rt-4.18.0-553.23.1.rt7.364.el8_10 [RHEL-59541] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] diff --git a/sources b/sources index 064778f..e232d45 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (linux-4.18.0-553.23.1.rt7.364.el8_10.tar.xz) = eac1c60f7117c54c380a48ac4e57994e1c809d38bb8a4a00e714565b10b32a4139138e071a86b731b121d10ea3f5d2727f22040380ac1c770e7ae087c3ec7eec +SHA512 (linux-4.18.0-553.24.1.rt7.365.el8_10.tar.xz) = 0410646fa7f3caa01bae79be185f68303ca29b379ae2cbfaa80462f00b92472d5b71c8bf2ca8080498d1e8d88555932e157df8cd6ac91800ce93538ca9def896