diff --git a/.gitignore b/.gitignore index bfb95d7aa..719663ac2 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,6 @@ -SOURCES/kernel-abi-stablelists-5.14.0-687.38.1.el9_8.tar.bz2 -SOURCES/kernel-kabi-dw-5.14.0-687.38.1.el9_8.tar.bz2 -SOURCES/linux-5.14.0-687.38.1.el9_8.tar.xz +SOURCES/kernel-abi-stablelists-5.14.0-687.39.1.el9_8.tar.bz2 +SOURCES/kernel-kabi-dw-5.14.0-687.39.1.el9_8.tar.bz2 +SOURCES/linux-5.14.0-687.39.1.el9_8.tar.xz SOURCES/nvidiabfdpu.x509 SOURCES/nvidiagpuoot001.x509 SOURCES/nvidiajetsonsoc.x509 diff --git a/.kernel.metadata b/.kernel.metadata index 7718dfe9a..65fa32f84 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,6 +1,6 @@ -5cc749afafacdf78cafbd9c362e244c106117fec SOURCES/kernel-abi-stablelists-5.14.0-687.38.1.el9_8.tar.bz2 -6cd2d746435f4a141e29c5d3d2a65cf8a9f2c22f SOURCES/kernel-kabi-dw-5.14.0-687.38.1.el9_8.tar.bz2 -7b60a35c5b309edd2dc98114f8d86e0c1800ee6c SOURCES/linux-5.14.0-687.38.1.el9_8.tar.xz +99a18f4e02d7cb93498fc6fe395d8bc1f3ea1882 SOURCES/kernel-abi-stablelists-5.14.0-687.39.1.el9_8.tar.bz2 +e39b37a9bc0ec6764efabcc4d0e0190320f6dc62 SOURCES/kernel-kabi-dw-5.14.0-687.39.1.el9_8.tar.bz2 +c81d57f195b6523b8da7e3897cec0794c341ef31 SOURCES/linux-5.14.0-687.39.1.el9_8.tar.xz 3dc4997e0273ca116d52a52238a57403aba5dafb SOURCES/nvidiabfdpu.x509 4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509 18378ab150ef13ef65609224e10a2e8501d82915 SOURCES/nvidiajetsonsoc.x509 diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver index 090f18a1f..99794e6e6 100644 --- a/SOURCES/Makefile.rhelver +++ b/SOURCES/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 8 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 687.38.1 +RHEL_RELEASE = 687.39.1 # # ZSTREAM diff --git a/SOURCES/kernel.changelog b/SOURCES/kernel.changelog index 4466f9096..5f61b1657 100644 --- a/SOURCES/kernel.changelog +++ b/SOURCES/kernel.changelog @@ -1,3 +1,11 @@ +* Wed Aug 12 2026 CKI KWF Bot [5.14.0-687.39.1.el9_8] +- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] +- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} +- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] +- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] +- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} +Resolves: RHEL-192081, RHEL-214434, RHEL-218181, RHEL-220787 + * Mon Aug 10 2026 CKI KWF Bot [5.14.0-687.38.1.el9_8] - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 55694d7c9..1c3be7cb0 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 687.38.1 +%define pkgrelease 687.39.1 %define kversion 5 -%define tarfile_release 5.14.0-687.38.1.el9_8 +%define tarfile_release 5.14.0-687.39.1.el9_8 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 687.38.1%{?buildid}%{?dist} +%define specrelease 687.39.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-687.38.1.el9_8 +%define kabiversion 5.14.0-687.39.1.el9_8 # # End of genspec.sh variables @@ -3795,7 +3795,7 @@ fi # # %changelog -* Wed Aug 12 2026 Andrew Lukoshko - 5.14.0-687.38.1 +* Tue Aug 18 2026 Andrew Lukoshko - 5.14.0-687.39.1 - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -3807,12 +3807,19 @@ fi - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained -* Wed Aug 12 2026 Eduard Abdullin - 5.14.0-687.38.1 +* Tue Aug 18 2026 Eduard Abdullin - 5.14.0-687.39.1 - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds +* Wed Aug 12 2026 CKI KWF Bot [5.14.0-687.39.1.el9_8] +- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] +- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} +- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] +- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] +- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} + * Mon Aug 10 2026 CKI KWF Bot [5.14.0-687.38.1.el9_8] - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]