diff --git a/.gitignore b/.gitignore index 6d6c8adf4..bd212b5ec 100644 --- a/.gitignore +++ b/.gitignore @@ -1,7 +1,9 @@ -SOURCES/kernel-abi-stablelists-5.14.0-570.32.1.el9_6.tar.bz2 -SOURCES/kernel-kabi-dw-5.14.0-570.32.1.el9_6.tar.bz2 -SOURCES/linux-5.14.0-570.32.1.el9_6.tar.xz +SOURCES/kernel-abi-stablelists-5.14.0-570.33.2.el9_6.tar.bz2 +SOURCES/kernel-kabi-dw-5.14.0-570.33.2.el9_6.tar.bz2 +SOURCES/linux-5.14.0-570.33.2.el9_6.tar.xz SOURCES/nvidiagpuoot001.x509 +SOURCES/olima1.x509 +SOURCES/olimaca1.x509 SOURCES/rheldup3.x509 SOURCES/rhelima.x509 SOURCES/rhelima_centos.x509 diff --git a/.kernel.metadata b/.kernel.metadata index 45680d219..0d9248aad 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,7 +1,9 @@ -7998fa30415656d00a05bae0f3044fcfd550d81d SOURCES/kernel-abi-stablelists-5.14.0-570.32.1.el9_6.tar.bz2 -2a916ddd87e94cec130b092d8c508c7af2b96b07 SOURCES/kernel-kabi-dw-5.14.0-570.32.1.el9_6.tar.bz2 -29cdf4fe7164805e5e70f264a689f9ff428b7c3f SOURCES/linux-5.14.0-570.32.1.el9_6.tar.xz +58402abc63536547eb5b848f47c3c64506c89ff5 SOURCES/kernel-abi-stablelists-5.14.0-570.33.2.el9_6.tar.bz2 +19e7ef500d46ec8035398bb502754bb8c90746fd SOURCES/kernel-kabi-dw-5.14.0-570.33.2.el9_6.tar.bz2 +a6687d9b646b1ac427076752030d6def87b325dc SOURCES/linux-5.14.0-570.33.2.el9_6.tar.xz 4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509 +706ae01dd14efa38f0f565a3706acac19c78df02 SOURCES/olima1.x509 +6e3f0d61414c0b50f48dc2d4c3b3cd024e1c3a43 SOURCES/olimaca1.x509 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509 99e571f9de4188f3b5fdf1f84ff73f6cc4bb6a0e SOURCES/rhelima.x509 61d5a223ff0c79189505abae77e0087c4b2d2b47 SOURCES/rhelima_centos.x509 diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver index 22184a892..31952127a 100644 --- a/SOURCES/Makefile.rhelver +++ b/SOURCES/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 6 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 570.32.1 +RHEL_RELEASE = 570.33.2 # # ZSTREAM diff --git a/SOURCES/kernel.changelog b/SOURCES/kernel.changelog index 2068d5f45..7b689860b 100644 --- a/SOURCES/kernel.changelog +++ b/SOURCES/kernel.changelog @@ -1,3 +1,31 @@ +* Thu Aug 07 2025 Patrick Talbert [5.14.0-570.33.2.el9_6] +- Revert "sch_htb: make htb_qlen_notify() idempotent" (Patrick Talbert) [RHEL-108138] +- Revert "sch_drr: make drr_qlen_notify() idempotent" (Patrick Talbert) [RHEL-108138] +- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Patrick Talbert) [RHEL-108138] +- Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Patrick Talbert) [RHEL-108138] +- Revert "sch_htb: make htb_deactivate() idempotent" (Patrick Talbert) [RHEL-108138] +- Revert "net/sched: Always pass notifications when child class becomes empty" (Patrick Talbert) [RHEL-108138] +Resolves: RHEL-108138 + +* Sat Aug 02 2025 CKI KWF Bot [5.14.0-570.33.1.el9_6] +- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350} +- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350} +- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350} +- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350} +- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350} +- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350} +- redhat: update BUILD_TARGET to rhel-9.6.0-z-test-pesign (Jan Stancek) +- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102666] +- PCI/ACS: Fix 'pci=config_acs=' parameter (Charles Mirabile) [RHEL-102652] +- PCI: Fix pci_enable_acs() support for the ACS quirks (Charles Mirabile) [RHEL-102652] +- Documentation: Fix pci=config_acs= example (Charles Mirabile) [RHEL-102652] +- Revert "PCI: Wait for device readiness with Configuration RRS" (John W. Linville) [RHEL-94414] +- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82564] +- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82564] +- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103219] {CVE-2025-38292} +- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102235] {CVE-2025-38079} +Resolves: RHEL-102235, RHEL-102652, RHEL-102666, RHEL-103219, RHEL-82564, RHEL-93387, RHEL-94414 + * Mon Jul 28 2025 CKI KWF Bot [5.14.0-570.32.1.el9_6] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Davide Caratti) [RHEL-97522] {CVE-2025-38001 CVE-2025-37890} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97522] {CVE-2025-38000} diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 4d32a499f..b9c79ed56 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -165,15 +165,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 570.32.1 +%define pkgrelease 570.33.2 %define kversion 5 -%define tarfile_release 5.14.0-570.32.1.el9_6 +%define tarfile_release 5.14.0-570.33.2.el9_6 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 570.32.1%{?buildid}%{?dist} +%define specrelease 570.33.2%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-570.32.1.el9_6 +%define kabiversion 5.14.0-570.33.2.el9_6 # # End of genspec.sh variables @@ -3865,7 +3865,7 @@ fi # # %changelog -* Wed Aug 06 2025 Andrew Lukoshko - 5.14.0-570.32.1 +* Thu Aug 14 2025 Andrew Lukoshko - 5.14.0-570.33.2 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -3877,11 +3877,37 @@ fi unmaintained - NFSD: fix hang in nfsd4_shutdown_callback -* Wed Aug 06 2025 Eduard Abdullin - 5.14.0-570.32.1 +* Thu Aug 14 2025 Eduard Abdullin - 5.14.0-570.33.2 - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le +* Thu Aug 07 2025 Patrick Talbert [5.14.0-570.33.2.el9_6] +- Revert "sch_htb: make htb_qlen_notify() idempotent" (Patrick Talbert) [RHEL-108138] +- Revert "sch_drr: make drr_qlen_notify() idempotent" (Patrick Talbert) [RHEL-108138] +- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Patrick Talbert) [RHEL-108138] +- Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Patrick Talbert) [RHEL-108138] +- Revert "sch_htb: make htb_deactivate() idempotent" (Patrick Talbert) [RHEL-108138] +- Revert "net/sched: Always pass notifications when child class becomes empty" (Patrick Talbert) [RHEL-108138] + +* Sat Aug 02 2025 CKI KWF Bot [5.14.0-570.33.1.el9_6] +- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350} +- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350} +- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350} +- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350} +- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350} +- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350} +- redhat: update BUILD_TARGET to rhel-9.6.0-z-test-pesign (Jan Stancek) +- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102666] +- PCI/ACS: Fix 'pci=config_acs=' parameter (Charles Mirabile) [RHEL-102652] +- PCI: Fix pci_enable_acs() support for the ACS quirks (Charles Mirabile) [RHEL-102652] +- Documentation: Fix pci=config_acs= example (Charles Mirabile) [RHEL-102652] +- Revert "PCI: Wait for device readiness with Configuration RRS" (John W. Linville) [RHEL-94414] +- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82564] +- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82564] +- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103219] {CVE-2025-38292} +- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102235] {CVE-2025-38079} + * Mon Jul 28 2025 CKI KWF Bot [5.14.0-570.32.1.el9_6] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Davide Caratti) [RHEL-97522] {CVE-2025-38001 CVE-2025-37890} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97522] {CVE-2025-38000}