diff --git a/kernel.spec b/kernel.spec
index a62196b..5b7e7e7 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.13.1.rt7.354.el8_10
+%define pkgrelease 553.14.1.rt7.355.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.13.1.rt7.354%{?dist}
+%define specrelease 553.14.1.rt7.355%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -148,7 +148,7 @@
 # The preempt RT patch level
 %global rttag .rt7
 # realtimeN
-%global rtbuild .354
+%global rtbuild .355
 %define with_doc 0
 %define with_headers 0
 %define with_cross_headers 0
@@ -2699,6 +2699,33 @@ fi
 #
 #
 %changelog
+* Thu Jul 25 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.14.1.rt7.355.el8_10]
+- [rt] build kernel-rt-4.18.0-553.14.1.rt7.355.el8_10 [RHEL-44553]
+- s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754]
+- perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798]
+- vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823}
+- cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754]
+- xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984]
+- xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984]
+- xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984]
+- xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984]
+- xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984]
+- xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984]
+- xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984]
+- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790}
+- stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627}
+- s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755]
+- tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489}
+- xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472}
+- fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686}
+- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686}
+- fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686}
+- exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686}
+- scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811}
+- scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929}
+- scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930}
+- scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931}
+
 * Tue Jul 23 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.13.1.rt7.354.el8_10]
 - [rt] build kernel-rt-4.18.0-553.13.1.rt7.354.el8_10 [RHEL-44553]
 - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko)
diff --git a/sources b/sources
index 1f41afa..32acb94 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (linux-4.18.0-553.13.1.rt7.354.el8_10.tar.xz) = e0b6eca78b55bb34759e5f1fea8a2aaefae783b835eb397dd6c442c89832335eafd8aca469b7a635a256d239ff2dfa1859522952cdffe462c136bc0a27e54061
+SHA512 (linux-4.18.0-553.14.1.rt7.355.el8_10.tar.xz) = d7d40e6146889ae53727912eaef5ed16d69ea9e039fe0df24a2060e7275dff769bfa9bcdabfcfce498fbd357aea094299bebf1b36f4a4e2fe5639f305dad5b4a