kernel-4.18.0-506.el8

* Thu Jul 27 2023 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-506.el8]
- libceph: harden msgr2.1 frame segment length checks (Ilya Dryomov) [2222256]
- netfilter: nf_conntrack_netlink: need to hold rcu readlock when doing l4proto lookup (Florian Westphal) [2188230]
- net/mlx5: Expose steering dropped packets counter (Amir Tzin) [2223198]
- net/mlx5: Expose vnic diagnostic counters for eswitch managed vports (Amir Tzin) [2223198]
- igbvf: add PCI reset handler functions (Corinna Vinschen) [2153365]
- igbvf: Regard vf reset nack as success (Corinna Vinschen) [2153365]
- intel/igbvf: free irq on the error path in igbvf_request_msix() (Corinna Vinschen) [2153365]
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Ricardo Robaina) [2139617] {CVE-2022-3640}
- Bluetooth: L2CAP: Fix build errors in some archs (Ricardo Robaina) [2139617] {CVE-2022-3640}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression (Ricardo Robaina) [2139617] {CVE-2022-3640}
- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Ricardo Robaina) [2139617] {CVE-2022-3640}
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put (Ricardo Robaina) [2139617] {CVE-2022-3640}
- iavf: fix reset task race with iavf_remove() (Petr Oros) [2223604]
- iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (Petr Oros) [2223604]
- Revert "iavf: Do not restart Tx queues after reset task failure" (Petr Oros) [2223604]
- Revert "iavf: Detach device during reset task" (Petr Oros) [2223604]
- iavf: Wait for reset in callbacks which trigger it (Petr Oros) [2223604]
- iavf: use internal state to free traffic IRQs (Petr Oros) [2223604]
- iavf: Fix out-of-bounds when setting channels on remove (Petr Oros) [2223604]
- iavf: Fix use-after-free in free_netdev (Petr Oros) [2223604]
- iavf: make functions static where possible (Petr Oros) [2223604]
- iavf: fix err handling for MAC replace (Petr Oros) [2223604]
- iavf: remove some unused functions and pointless wrappers (Petr Oros) [2223604]
- iavf: remove mask from iavf_irq_enable_queues() (Petr Oros) [2223604]
- iavf: send VLAN offloading caps once after VFR (Petr Oros) [2223604]
- cpufreq: Fix parameter in parse_perf_domain() (Mark Langsdorf) [2181273]
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules (Mark Langsdorf) [2181273]
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (Mark Langsdorf) [2181273]
- cpufreq: Make kobj_type structure constant (Mark Langsdorf) [2181273]
- driver core: make kobj_type constant. (Mark Langsdorf) [2181273]
- cpufreq: Make cpufreq_unregister_driver() return void (Mark Langsdorf) [2181273]
- drivers/cpufreq: Remove "select SRCU" (Mark Langsdorf) [2181273]
- cpufreq: intel_pstate: Drop ACPI _PSS states table patching (Mark Langsdorf) [2181273]
- cpufreq: stats: Convert to use sysfs_emit_at() API (Mark Langsdorf) [2181273]
- cpufreq: Init completion before kobject_init_and_add() (Mark Langsdorf) [2181273]
- cpufreq: intel_pstate: Allow EPP 0x80 setting by the firmware (Mark Langsdorf) [2181273]
- cpufreq: ACPI: Use str_enabled_disabled() helper (Mark Langsdorf) [2181273]
- cpufreq: Generalize of_perf_domain_get_sharing_cpumask phandle format (Mark Langsdorf) [2181273]
- cpufreq: Add of_perf_domain_get_sharing_cpumask (Mark Langsdorf) [2181273]
- cpufreq: intel_pstate: Read all MSRs on the target CPU (Mark Langsdorf) [2181273]
- ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid() (Mark Langsdorf) [2181273]
Resolves: rhbz#2139617, rhbz#2153365, rhbz#2181273, rhbz#2188230, rhbz#2222256, rhbz#2223198, rhbz#2223604

Signed-off-by: Denys Vlasenko <dvlasenk@redhat.com>
This commit is contained in:
Denys Vlasenko 2023-07-27 11:23:07 +02:00
parent 9b35356798
commit 72412f1193
2 changed files with 49 additions and 6 deletions

View File

@ -12,7 +12,7 @@
# change below to w4T.xzdio): # change below to w4T.xzdio):
%define _binary_payload w3T.xzdio %define _binary_payload w3T.xzdio
%global distro_build 505 %global distro_build 506
# Sign the x86_64 kernel for secure boot authentication # Sign the x86_64 kernel for secure boot authentication
%ifarch x86_64 aarch64 s390x ppc64le %ifarch x86_64 aarch64 s390x ppc64le
@ -38,10 +38,10 @@
# define buildid .local # define buildid .local
%define rpmversion 4.18.0 %define rpmversion 4.18.0
%define pkgrelease 505.el8 %define pkgrelease 506.el8
# allow pkg_release to have configurable %%{?dist} tag # allow pkg_release to have configurable %%{?dist} tag
%define specrelease 505%{?dist} %define specrelease 506%{?dist}
%define pkg_release %{specrelease}%{?buildid} %define pkg_release %{specrelease}%{?buildid}
@ -2695,6 +2695,49 @@ fi
# #
# #
%changelog %changelog
* Thu Jul 27 2023 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-506.el8]
- libceph: harden msgr2.1 frame segment length checks (Ilya Dryomov) [2222256]
- netfilter: nf_conntrack_netlink: need to hold rcu readlock when doing l4proto lookup (Florian Westphal) [2188230]
- net/mlx5: Expose steering dropped packets counter (Amir Tzin) [2223198]
- net/mlx5: Expose vnic diagnostic counters for eswitch managed vports (Amir Tzin) [2223198]
- igbvf: add PCI reset handler functions (Corinna Vinschen) [2153365]
- igbvf: Regard vf reset nack as success (Corinna Vinschen) [2153365]
- intel/igbvf: free irq on the error path in igbvf_request_msix() (Corinna Vinschen) [2153365]
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Ricardo Robaina) [2139617] {CVE-2022-3640}
- Bluetooth: L2CAP: Fix build errors in some archs (Ricardo Robaina) [2139617] {CVE-2022-3640}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression (Ricardo Robaina) [2139617] {CVE-2022-3640}
- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Ricardo Robaina) [2139617] {CVE-2022-3640}
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put (Ricardo Robaina) [2139617] {CVE-2022-3640}
- iavf: fix reset task race with iavf_remove() (Petr Oros) [2223604]
- iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (Petr Oros) [2223604]
- Revert "iavf: Do not restart Tx queues after reset task failure" (Petr Oros) [2223604]
- Revert "iavf: Detach device during reset task" (Petr Oros) [2223604]
- iavf: Wait for reset in callbacks which trigger it (Petr Oros) [2223604]
- iavf: use internal state to free traffic IRQs (Petr Oros) [2223604]
- iavf: Fix out-of-bounds when setting channels on remove (Petr Oros) [2223604]
- iavf: Fix use-after-free in free_netdev (Petr Oros) [2223604]
- iavf: make functions static where possible (Petr Oros) [2223604]
- iavf: fix err handling for MAC replace (Petr Oros) [2223604]
- iavf: remove some unused functions and pointless wrappers (Petr Oros) [2223604]
- iavf: remove mask from iavf_irq_enable_queues() (Petr Oros) [2223604]
- iavf: send VLAN offloading caps once after VFR (Petr Oros) [2223604]
- cpufreq: Fix parameter in parse_perf_domain() (Mark Langsdorf) [2181273]
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules (Mark Langsdorf) [2181273]
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (Mark Langsdorf) [2181273]
- cpufreq: Make kobj_type structure constant (Mark Langsdorf) [2181273]
- driver core: make kobj_type constant. (Mark Langsdorf) [2181273]
- cpufreq: Make cpufreq_unregister_driver() return void (Mark Langsdorf) [2181273]
- drivers/cpufreq: Remove "select SRCU" (Mark Langsdorf) [2181273]
- cpufreq: intel_pstate: Drop ACPI _PSS states table patching (Mark Langsdorf) [2181273]
- cpufreq: stats: Convert to use sysfs_emit_at() API (Mark Langsdorf) [2181273]
- cpufreq: Init completion before kobject_init_and_add() (Mark Langsdorf) [2181273]
- cpufreq: intel_pstate: Allow EPP 0x80 setting by the firmware (Mark Langsdorf) [2181273]
- cpufreq: ACPI: Use str_enabled_disabled() helper (Mark Langsdorf) [2181273]
- cpufreq: Generalize of_perf_domain_get_sharing_cpumask phandle format (Mark Langsdorf) [2181273]
- cpufreq: Add of_perf_domain_get_sharing_cpumask (Mark Langsdorf) [2181273]
- cpufreq: intel_pstate: Read all MSRs on the target CPU (Mark Langsdorf) [2181273]
- ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid() (Mark Langsdorf) [2181273]
* Tue Jul 25 2023 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-505.el8] * Tue Jul 25 2023 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-505.el8]
- gfs2: Don't deref jdesc in evict (Bob Peterson) [2214356] {CVE-2023-3212} - gfs2: Don't deref jdesc in evict (Bob Peterson) [2214356] {CVE-2023-3212}
- md/raid5: Don't do accounting for non-align read io (Nigel Croxon) [2183033] - md/raid5: Don't do accounting for non-align read io (Nigel Croxon) [2183033]

View File

@ -1,3 +1,3 @@
SHA512 (linux-4.18.0-505.el8.tar.xz) = 5cd51cc39108455959105e3c596deb46fde3be2cf5a0b4de4f627a0bdf11cfe7030e253f9353b2e5ea7b1006d53c2446c804d38c1446f52f1eef05d2940a818f SHA512 (linux-4.18.0-506.el8.tar.xz) = 252232c2d8248cd97341be96daac29961b1ce25978760750987f4f38dd4bbbbf364be34764c2d4c3a288020d60646b6d87bb9423adc7d65a826ae50214959476
SHA512 (kernel-abi-stablelists-4.18.0-505.tar.bz2) = e6db968d667239f0f52bb82e5eff4c4f77ae579716bf847b2bfef0f50d65ef43f3fff4d750c8792585919c98d21c70509a43081bd1f6d51ecce7de5dc384f9da SHA512 (kernel-abi-stablelists-4.18.0-506.tar.bz2) = 66307098575a0496c16879342fe4b3535cc244dfd08743a8eea6b87e5b4b2713697345f34554128494c7b45bd759b451477e1ed3f66df41f48417e644942db7a
SHA512 (kernel-kabi-dw-4.18.0-505.tar.bz2) = f7bbf94096acc33486535d9eece268c543c6a05d93ee262d64dc22b220f1cb3ff49b4cf091a5c748811c4229fdf674be4c816174575161b0ca5e457726595b32 SHA512 (kernel-kabi-dw-4.18.0-506.tar.bz2) = f7bbf94096acc33486535d9eece268c543c6a05d93ee262d64dc22b220f1cb3ff49b4cf091a5c748811c4229fdf674be4c816174575161b0ca5e457726595b32