From 2956eacb25a6b576cbec5d1e322ce3f812ad93fb Mon Sep 17 00:00:00 2001 From: Denys Vlasenko Date: Fri, 5 Apr 2024 12:58:42 +0200 Subject: [PATCH] kernel-4.18.0-551.el8 * Fri Apr 05 2024 Denys Vlasenko [4.18.0-551.el8] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] Resolves: RHEL-22992, RHEL-30040 Signed-off-by: Denys Vlasenko --- kernel.spec | 11 ++++++++--- sources | 6 +++--- 2 files changed, 11 insertions(+), 6 deletions(-) diff --git a/kernel.spec b/kernel.spec index 8b758eadb..aeeeb8382 100644 --- a/kernel.spec +++ b/kernel.spec @@ -12,7 +12,7 @@ # change below to w4T.xzdio): %define _binary_payload w3T.xzdio -%global distro_build 550 +%global distro_build 551 # Sign the x86_64 kernel for secure boot authentication %ifarch x86_64 aarch64 s390x ppc64le @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 550.el8 +%define pkgrelease 551.el8 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 550%{?dist} +%define specrelease 551%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2695,6 +2695,11 @@ fi # # %changelog +* Fri Apr 05 2024 Denys Vlasenko [4.18.0-551.el8] +- x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} +- i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] +- i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] + * Sun Mar 31 2024 Denys Vlasenko [4.18.0-550.el8] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} diff --git a/sources b/sources index b64758403..720b5131e 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-4.18.0-550.el8.tar.xz) = 26a261319e9833cdc8b1db9bde2322dd33e0b654de94bed96f6c6de8b626c8d8e0c299ad7e619f31e19de292e266009631714c07f8b0cfb5ea76905cb54d9433 -SHA512 (kernel-abi-stablelists-4.18.0-550.tar.bz2) = dcffd58fc41703afb6fde78cf5a9559b85256faef274011a381f63630dadbfe07dcad4b67dc26aacf612f2e91386f1eb67fffc8621473149411a2fdac5562b97 -SHA512 (kernel-kabi-dw-4.18.0-550.tar.bz2) = 8a671ed3c9b7f4b25fd4e594b62bc4a26474cb705d3ed22ca376618b3c7962fc72ace1ffd02c9c3a192d9d2c449d38228809542d7f16ebad16f8127020eb2faf +SHA512 (linux-4.18.0-551.el8.tar.xz) = be37d68b8c19d0691dd38cda2e47b1debf83fcdbe1c81eb4c6fea951a130e7d5bdefa42a30ffa47568f34c8b227ab2fbda6ebdb525d686f1f9766a1fb4b278bf +SHA512 (kernel-abi-stablelists-4.18.0-551.tar.bz2) = 5f297583923252ef42fed273c83c532a3615744e0885b56cf5cbd63d32aac42762ec5e396d2738a4c8300c7ca2e7506abdcd9cafa23d5ea6d6ec9ec649dccb33 +SHA512 (kernel-kabi-dw-4.18.0-551.tar.bz2) = 8a671ed3c9b7f4b25fd4e594b62bc4a26474cb705d3ed22ca376618b3c7962fc72ace1ffd02c9c3a192d9d2c449d38228809542d7f16ebad16f8127020eb2faf