diff --git a/kernel.spec b/kernel.spec index 3ac077c7a..98846a19e 100644 --- a/kernel.spec +++ b/kernel.spec @@ -12,7 +12,7 @@ # change below to w4T.xzdio): %define _binary_payload w3T.xzdio -%global distro_build 523 +%global distro_build 524 # Sign the x86_64 kernel for secure boot authentication %ifarch x86_64 aarch64 s390x ppc64le @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 523.el8 +%define pkgrelease 524.el8 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 523%{?dist} +%define specrelease 524%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2695,6 +2695,66 @@ fi # # %changelog +* Sun Nov 12 2023 Denys Vlasenko [4.18.0-524.el8] +- pNFS/filelayout: treat GETDEVICEINFO errors as layout failure (Scott Mayhew) [RHEL-4969] +- mm/kmemleak: move up cond_resched() call in page scanning loop (Waiman Long) [RHEL-8630] +- net/sched: cls_rsvp: always try to match inside the linear part of skb (Davide Caratti) [RHEL-11730] {CVE-2023-42755} +- vc_screen: don't clobber return value in vcs_read (Ricardo Robaina) [2221467] {CVE-2023-3567} +- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (Ricardo Robaina) [2221467] {CVE-2023-3567} +- vt_kdsetmode: extend console locking (John W. Linville) [RHEL-3016] {CVE-2021-3753} +- console: consume APC, DM, DCS (John W. Linville) [RHEL-3016] {CVE-2021-3753} +- vt_ioctl: move vt_kdsetmode out of vt_k_ioctl (John W. Linville) [RHEL-3016] {CVE-2021-3753} +- scsi: core: Fix legacy /proc parsing buffer overflow (Ewan D. Milne) [RHEL-14311] +- scsi: core: Improve scsi_vpd_inquiry() checks (Ewan D. Milne) [RHEL-14311] +- scsi: core: Fix a procfs host directory removal regression (Ewan D. Milne) [RHEL-14311] +- scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (Ewan D. Milne) [RHEL-14311] +- ibmvnic: Assign XPS map to correct queue index (Mukesh Chaurasiya) [RHEL-11210] +- ibmvnic: Toggle between queue types in affinity mapping (Mukesh Chaurasiya) [RHEL-11210] +- ibmvnic: Update XPS assignments during affinity binding (Mukesh Chaurasiya) [RHEL-11210] +- ibmvnic: Add hotpluggable CPU callbacks to reassign affinity hints (Mukesh Chaurasiya) [RHEL-11210] +- ibmvnic: Assign IRQ affinity hints to device queues (Mukesh Chaurasiya) [RHEL-11210] +- mm/slub: fix a slab missed to be freed problem (Rafael Aquini) [RHEL-9526] +- mm/slub: simplify __cmpxchg_double_slab() and slab_[un]lock() (Rafael Aquini) [RHEL-9526] +- mm/slub: convert object_map_lock to non-raw spinlock (Rafael Aquini) [RHEL-9526] +- mm/slub: remove slab_lock() usage for debug operations (Rafael Aquini) [RHEL-9526] +- mm/slub: restrict sysfs validation to debug caches and make it safe (Rafael Aquini) [RHEL-9526] +- mm/slub: move free_debug_processing() further (Rafael Aquini) [RHEL-9526] +- mm/slub: remove unneeded return value of slab_pad_check (Rafael Aquini) [RHEL-9526] +- s390/qdio: fix do_sqbs() inline assembly constraint (Tobias Huschle) [RHEL-11194] +- s390/lcs: Convert sysfs sprintf to sysfs_emit (Tobias Huschle) [RHEL-11194] +- s390/lcs: Convert sprintf to scnprintf (Tobias Huschle) [RHEL-11194] +- s390/ctcm: Convert sysfs sprintf to sysfs_emit (Tobias Huschle) [RHEL-11194] +- s390/ctcm: Convert sprintf/snprintf to scnprintf (Tobias Huschle) [RHEL-11194] +- s390/qeth: Fix vipa deletion (Tobias Huschle) [RHEL-11194] +- s390/lcs: Remove FDDI option (Tobias Huschle) [RHEL-11194] +- net/ism: Remove redundant pci_clear_master (Tobias Huschle) [RHEL-11198] +- net/smc: Fix dependency of SMC on ISM (Tobias Huschle) [RHEL-11198] +- s390/ism: Do not unregister clients with registered DMBs (Tobias Huschle) [RHEL-11198] +- s390/ism: Fix and simplify add()/remove() callback handling (Tobias Huschle) [RHEL-11198] +- s390/ism: Fix locking for forwarding of IRQs and events to clients (Tobias Huschle) [RHEL-11198] +- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit() (Tobias Huschle) [RHEL-11198] +- s390/ism: Set DMA coherent mask (Tobias Huschle) [RHEL-11198] +- net/ism: Remove extra include (Tobias Huschle) [RHEL-11198] +- net/smc: Introduce explicit check for v2 support (Tobias Huschle) [RHEL-11198] +- dm: fix a race condition in retrieve_deps (Benjamin Marzinski) [RHEL-13917] +- dm raid: protect md_stop() with 'reconfig_mutex' (Benjamin Marzinski) [RHEL-13917] +- dm raid: clean up four equivalent goto tags in raid_ctr() (Benjamin Marzinski) [RHEL-13917] +- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (Benjamin Marzinski) [RHEL-13917] +- dm integrity: fix double free on memory allocation failure (Benjamin Marzinski) [RHEL-13917] +- dm integrity: scale down the recalculate buffer if memory allocation fails (Benjamin Marzinski) [RHEL-13917] +- dm integrity: only allocate recalculate buffer when needed (Benjamin Marzinski) [RHEL-13917] +- dm integrity: reduce vmalloc space footprint on 32-bit architectures (Benjamin Marzinski) [RHEL-13917] +- dm ioctl: Refuse to create device named "." or ".." (Benjamin Marzinski) [RHEL-13917] +- dm ioctl: Refuse to create device named "control" (Benjamin Marzinski) [RHEL-13917] +- dm ioctl: structs and parameter strings must not overlap (Benjamin Marzinski) [RHEL-13917] +- dm ioctl: Avoid pointer arithmetic overflow (Benjamin Marzinski) [RHEL-13917] +- dm ioctl: Check dm_target_spec is sufficiently aligned (Benjamin Marzinski) [RHEL-13917] +- dm thin: disable discards for thin-pool if no_discard_passdown (Benjamin Marzinski) [RHEL-13917] +- dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client (Benjamin Marzinski) [RHEL-13917] +- dm crypt: fix crypt_ctr_cipher_new return value on invalid AEAD cipher (Benjamin Marzinski) [RHEL-13917] +- dm thin: update .io_hints methods to not require handling discards last (Benjamin Marzinski) [RHEL-13917] +- dm thin: remove return code variable in pool_map (Benjamin Marzinski) [RHEL-13917] + * Wed Nov 08 2023 Denys Vlasenko [4.18.0-523.el8] - cifs: Fix UAF in cifs_demultiplex_thread() (Scott Mayhew) [RHEL-7930 RHEL-9046] {CVE-2023-1192} - x86/platform/uv: Use alternate source for socket to node data (Frank Ramsay) [RHEL-13360] diff --git a/sources b/sources index 429717300..1b2f90494 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-4.18.0-523.el8.tar.xz) = c89555a5aa067901764bdf85a7974deaefdc6310ba125accd51a93deb7f21a67dda96e97d5d0f8c2f7b15c0ae16cbca30a1bbc0e799d53926a0801dfaed4589e -SHA512 (kernel-abi-stablelists-4.18.0-523.tar.bz2) = 6c1eb6a0e42986a3906e12909580da95b660f3123ce8dbe85a7d53faef7a516a127187a230ced3cb637b45de447f2a59440ae2e0ee67a77cefa9db2f310d09b9 -SHA512 (kernel-kabi-dw-4.18.0-523.tar.bz2) = f7bbf94096acc33486535d9eece268c543c6a05d93ee262d64dc22b220f1cb3ff49b4cf091a5c748811c4229fdf674be4c816174575161b0ca5e457726595b32 +SHA512 (linux-4.18.0-524.el8.tar.xz) = 150f44be09917286b85e09ab4338a833c1f83bad5db51a8a5a24281d019f3027337d4274323d07123765f1946f7f0ec578eb4a0a0f65f79718be53351a6311b8 +SHA512 (kernel-abi-stablelists-4.18.0-524.tar.bz2) = 0fb40a506a1fabbfad2ae13d2e8a1dcb956bc1912f69689b3e8d3d1a6aa9fbe6ca36f96ab9f98d2fda4563f82457ea46633420e6f057eec2fade14c227300bfb +SHA512 (kernel-kabi-dw-4.18.0-524.tar.bz2) = f7bbf94096acc33486535d9eece268c543c6a05d93ee262d64dc22b220f1cb3ff49b4cf091a5c748811c4229fdf674be4c816174575161b0ca5e457726595b32