From 6e91e28ffa5d70385e9ed68f43f5609272e39c89 Mon Sep 17 00:00:00 2001 From: Denys Vlasenko Date: Fri, 29 Nov 2024 14:35:37 +0100 Subject: [PATCH] kernel-4.18.0-553.32.1.el8_10 * Fri Nov 29 2024 Denys Vlasenko [4.18.0-553.32.1.el8_10] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] Resolves: RHEL-19080, RHEL-58585, RHEL-62869, RHEL-65158, RHEL-66965, RHEL-68025 Signed-off-by: Denys Vlasenko --- kernel.spec | 28 ++++++++++++++++++++++++++-- sources | 4 ++-- 2 files changed, 28 insertions(+), 4 deletions(-) diff --git a/kernel.spec b/kernel.spec index 51cd5c583..305465bea 100644 --- a/kernel.spec +++ b/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.31.1.el8_10 +%define pkgrelease 553.32.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.31.1%{?dist} +%define specrelease 553.32.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2696,6 +2696,30 @@ fi # # %changelog +* Fri Nov 29 2024 Denys Vlasenko [4.18.0-553.32.1.el8_10] +- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} +- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} +- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} +- gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] +- Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] +- gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] +- gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] +- gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] +- KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] +- vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} +- md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] + * Fri Nov 22 2024 Denys Vlasenko [4.18.0-553.31.1.el8_10] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} diff --git a/sources b/sources index 4f127a4bb..fd7880e8b 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-4.18.0-553.31.1.el8_10.tar.xz) = 9d0008b1df1e00b06f5baba8e217a32d8104ffdc5d2f05b2a6f24b7bd1d9c18ff268b2fe09c5791b85c6d142cf05677f5ae6dc28ca53fa7065a41fafebdd99ab -SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 070d63e199b6ff3d212ad5865156defb4b8ab1d51e5c9889b29203808aa351da5c983fbccde6aa7b1622a5c0a0fc1a6a3f292eb31fabd15d28b3525d67ba766f +SHA512 (linux-4.18.0-553.32.1.el8_10.tar.xz) = 73de7726392d47e0c3eb0fc759fbfdf5297dff68c03eb24470bc2c595c8ab903a09235f0e6c6a6903d521c127d94d7be1f8bbe86f684d8dc2382583e46e5017c +SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = f3c4d35a07e021acbbb5a4391e32ed58c52f3069653d7ac1c620ceb575cebebd128cc42022e5b8cdd312a7f5ad00da37c190e85093c240097429f62275ac4491 SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 8a671ed3c9b7f4b25fd4e594b62bc4a26474cb705d3ed22ca376618b3c7962fc72ace1ffd02c9c3a192d9d2c449d38228809542d7f16ebad16f8127020eb2faf