diff --git a/.gitignore b/.gitignore index 569a989d7..693f82b6e 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,6 @@ -SOURCES/kernel-abi-stablelists-5.14.0-570.52.1.el9_6.tar.bz2 -SOURCES/kernel-kabi-dw-5.14.0-570.52.1.el9_6.tar.bz2 -SOURCES/linux-5.14.0-570.52.1.el9_6.tar.xz +SOURCES/kernel-abi-stablelists-5.14.0-570.55.1.el9_6.tar.bz2 +SOURCES/kernel-kabi-dw-5.14.0-570.55.1.el9_6.tar.bz2 +SOURCES/linux-5.14.0-570.55.1.el9_6.tar.xz SOURCES/nvidiagpuoot001.x509 SOURCES/olima1.x509 SOURCES/olimaca1.x509 diff --git a/.kernel.metadata b/.kernel.metadata index 18ccc6f59..e48bedbf3 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,6 +1,6 @@ -cc8c09912b51b4c7e745171806a57ebe3fb37669 SOURCES/kernel-abi-stablelists-5.14.0-570.52.1.el9_6.tar.bz2 -02268c77c7e827a0ce0a528d5a5a779ea5dd8901 SOURCES/kernel-kabi-dw-5.14.0-570.52.1.el9_6.tar.bz2 -3eaa57c7ac8a253dab4a30da9f4c1c75817ae4f7 SOURCES/linux-5.14.0-570.52.1.el9_6.tar.xz +231075cbb7a118b2f1e4d8e3174a967f4ece07b9 SOURCES/kernel-abi-stablelists-5.14.0-570.55.1.el9_6.tar.bz2 +d8e2d3f0dbb6520ef5b4ff19d870b9ddee34b7a6 SOURCES/kernel-kabi-dw-5.14.0-570.55.1.el9_6.tar.bz2 +517da583ba6bfd1f256569877c4fccf8d62f858d SOURCES/linux-5.14.0-570.55.1.el9_6.tar.xz 4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509 706ae01dd14efa38f0f565a3706acac19c78df02 SOURCES/olima1.x509 6e3f0d61414c0b50f48dc2d4c3b3cd024e1c3a43 SOURCES/olimaca1.x509 diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver index fdd8a18af..bfdb155a9 100644 --- a/SOURCES/Makefile.rhelver +++ b/SOURCES/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 6 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 570.52.1 +RHEL_RELEASE = 570.55.1 # # ZSTREAM diff --git a/SOURCES/kernel.changelog b/SOURCES/kernel.changelog index 04dc8e317..376de27ba 100644 --- a/SOURCES/kernel.changelog +++ b/SOURCES/kernel.changelog @@ -1,3 +1,25 @@ +* Tue Oct 14 2025 CKI KWF Bot [5.14.0-570.55.1.el9_6] +- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119115] {CVE-2025-39841} +Resolves: RHEL-119115 + +* Sat Oct 11 2025 CKI KWF Bot [5.14.0-570.54.1.el9_6] +- firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-113836] {CVE-2022-50087} +- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110811] +- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110811] {CVE-2025-38571} +- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118256] {CVE-2025-39817} +- sunrpc: fix handling of server side tls alerts (Steve Dickson) [RHEL-111070] {CVE-2025-38566} +- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (Jay Shin) [RHEL-116679] +Resolves: RHEL-110811, RHEL-111070, RHEL-113836, RHEL-116679, RHEL-118256 + +* Thu Oct 09 2025 CKI KWF Bot [5.14.0-570.53.1.el9_6] +- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117578] {CVE-2025-39849} +- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114436] +- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114436] +- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114436] +- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93610] {CVE-2025-22026} +- irdma: free iwdev->rf after removing MSI-X (CKI Backport Bot) [RHEL-111485] +Resolves: RHEL-111485, RHEL-114436, RHEL-117578, RHEL-93610 + * Sat Oct 04 2025 CKI KWF Bot [5.14.0-570.52.1.el9_6] - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117232] {CVE-2023-53373} - ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116186] diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 27a11ac28..6e4c3ac8c 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -165,15 +165,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 570.52.1 +%define pkgrelease 570.55.1 %define kversion 5 -%define tarfile_release 5.14.0-570.52.1.el9_6 +%define tarfile_release 5.14.0-570.55.1.el9_6 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 570.52.1%{?buildid}%{?dist} +%define specrelease 570.55.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-570.52.1.el9_6 +%define kabiversion 5.14.0-570.55.1.el9_6 # # End of genspec.sh variables @@ -3866,7 +3866,7 @@ fi # # %changelog -* Wed Oct 15 2025 Andrew Lukoshko - 5.14.0-570.52.1 +* Tue Oct 21 2025 Andrew Lukoshko - 5.14.0-570.55.1 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -3878,11 +3878,30 @@ fi unmaintained - NFSD: fix hang in nfsd4_shutdown_callback -* Wed Oct 15 2025 Eduard Abdullin - 5.14.0-570.52.1 +* Tue Oct 21 2025 Eduard Abdullin - 5.14.0-570.55.1 - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le +* Tue Oct 14 2025 CKI KWF Bot [5.14.0-570.55.1.el9_6] +- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119115] {CVE-2025-39841} + +* Sat Oct 11 2025 CKI KWF Bot [5.14.0-570.54.1.el9_6] +- firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-113836] {CVE-2022-50087} +- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110811] +- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110811] {CVE-2025-38571} +- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118256] {CVE-2025-39817} +- sunrpc: fix handling of server side tls alerts (Steve Dickson) [RHEL-111070] {CVE-2025-38566} +- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (Jay Shin) [RHEL-116679] + +* Thu Oct 09 2025 CKI KWF Bot [5.14.0-570.53.1.el9_6] +- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117578] {CVE-2025-39849} +- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114436] +- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114436] +- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114436] +- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93610] {CVE-2025-22026} +- irdma: free iwdev->rf after removing MSI-X (CKI Backport Bot) [RHEL-111485] + * Sat Oct 04 2025 CKI KWF Bot [5.14.0-570.52.1.el9_6] - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117232] {CVE-2023-53373} - ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116186]