diff --git a/.gitignore b/.gitignore index d29bf21..bdd8112 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,6 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer -SOURCES/linux-4.18.0-553.129.1.rt7.470.el8_10.tar.xz +SOURCES/linux-4.18.0-553.132.1.rt7.473.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer diff --git a/.kernel-rt.metadata b/.kernel-rt.metadata index 833863a..fd488ac 100644 --- a/.kernel-rt.metadata +++ b/.kernel-rt.metadata @@ -1,6 +1,6 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -1a7f0d3827f067168deb12b1739ea95b50054ab7 SOURCES/linux-4.18.0-553.129.1.rt7.470.el8_10.tar.xz +cf51fe162df00b37f9d32e399cf192e94dc06f53 SOURCES/linux-4.18.0-553.132.1.rt7.473.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SOURCES/gating.yaml b/SOURCES/gating.yaml index 7e16237..69169fb 100644 --- a/SOURCES/gating.yaml +++ b/SOURCES/gating.yaml @@ -4,7 +4,6 @@ product_versions: decision_context: osci_compose_gate rules: - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.kernel-aarch64.tier1.functional} - - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.kernel-debug-x86_64.tier1.functional} - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.kernel-ppc64le.tier1.functional} - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.kernel-s390x.tier1.functional} - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.kernel-x86_64.tier1.functional} @@ -14,6 +13,5 @@ product_versions: - rhel-8 decision_context: osci_compose_gate rules: - - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.kernel-rt-debug-x86_64.tier1.functional} - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.kernel-rt-x86_64.tier1.functional} packages: [kernel-rt] diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 5910671..2341ba8 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.129.1.rt7.470.el8_10 +%define pkgrelease 553.132.1.rt7.473.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.129.1.rt7.470%{?dist} +%define specrelease 553.132.1.rt7.473%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -148,7 +148,7 @@ # The preempt RT patch level %global rttag .rt7 # realtimeN -%global rtbuild .470 +%global rtbuild .473 %define with_doc 0 %define with_headers 0 %define with_cross_headers 0 @@ -2711,7 +2711,7 @@ fi # # %changelog -* Thu Jun 04 2026 Andrei Lukoshko - 4.18.0-553.129.1.rt7.470 +* Wed Jun 10 2026 Andrei Lukoshko - 4.18.0-553.132.1.rt7.473 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -2722,10 +2722,28 @@ fi - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained -* Thu Jun 04 2026 Eduard Abdullin - 4.18.0-553.129.1.rt7.470 +* Wed Jun 10 2026 Eduard Abdullin - 4.18.0-553.132.1.rt7.473 - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS +* Wed Jun 10 2026 CKI KWF Bot [4.18.0-553.132.1.rt7.473.el8_10] +- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} +- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} +- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} + +* Fri Jun 05 2026 CKI KWF Bot [4.18.0-553.131.1.rt7.472.el8_10] +- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} +- nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] +- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} +- ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] +- ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] +- ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} +- ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} + +* Wed Jun 03 2026 CKI KWF Bot [4.18.0-553.130.1.rt7.471.el8_10] +- RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} +- md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] + * Tue Jun 02 2026 CKI KWF Bot [4.18.0-553.129.1.rt7.470.el8_10] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243}