diff --git a/kernel.spec b/kernel.spec index e0c1452b8..51528c64a 100644 --- a/kernel.spec +++ b/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.111.1.el8_10 +%define pkgrelease 553.112.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.111.1%{?dist} +%define specrelease 553.112.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2705,6 +2705,121 @@ fi # # %changelog +* Thu Mar 05 2026 CKI KWF Bot [4.18.0-553.112.1.el8_10] +- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] +- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] +- cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] +- smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] +- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] +- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] +- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] +- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] +- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] +- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] +- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] +- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] +- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] +- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] +- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] +- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] +- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] +- smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} +- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] +- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] +- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] +- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] +- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] +- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] +- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] +- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] +- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] +- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] +- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] +- smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] +- smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] +- smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] +- smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} +- smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} +- cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] +- smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] +- smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] +- smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] +- smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] +- smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] +- smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] +- smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] +- smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] +- smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] +- cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] +- smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} +- fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] +- smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] +- smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] +- smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] +- smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] +- smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] +- cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] +- cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] +- cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] +- cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] +- cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] +- cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] +- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] +- cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] +- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} +- smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] +- cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] +- cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] +- cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} +- cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] +- cifs: remove unused function (Paulo Alcantara) [RHEL-138235] +- cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] +- cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] +- cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] +- cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] +- cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] +- cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] +- cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] +- cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] +- cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] +- cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] +- cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] +- cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] +- cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] +- cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] +- cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] +- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] +- x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] +- x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] +- x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] +- x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] +- x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] +- x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] +- x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] +- x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] +- x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] +- x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] +- x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] +- x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] + * Sat Feb 28 2026 CKI KWF Bot [4.18.0-553.111.1.el8_10] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} diff --git a/sources b/sources index c4c9bea76..cc1223de2 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-4.18.0-553.111.1.el8_10.tar.xz) = a87dac91fbd683b08490a622c3366b32fe782be89b64c39f2050622cd04064133ca0511043c90266e618be980516b0e3d0609e887cee16bacf15bd6d5a9d7206 -SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 8d6520fc9c4e11e7266f0eefa0111824dd3a5aea89c97bd5eba5b328428ba6ba88f37e2184bf8e4d70a62bd98fde7dca20286e4e13f1073b95420d73f5e1df11 -SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 6c8ef7ccdf89dc4b8b10312a328fc10245eeb9bbb84b00a48cc06f5ee62a53029607fc7e3faf07fdabf34082c702fa63cf5f95701ba665168c2caa04f458a52b +SHA512 (linux-4.18.0-553.112.1.el8_10.tar.xz) = 41f384337d7113c40e9cdfef85e1f36ff73a3f86ecdeb814bf0d4bbf57ee72218e6ed487885748b6ce1afabfb6e87e4367ad0133e9cee99fa840bb44a1a8f4f2 +SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 0e6bee6153aceb386492fb5669ae78eeb28afcbfe949d7245a8cca8cd54869f46c7ac6f01ab2ef2610a338abf76739bf96a9c67ecb5c8ba3318f9a6f70f4c212 +SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = b17ae39000b94b9966078c6b11670140b71f769f1b4836ac3af4550f86d20cae732d4db54ed7f655ad9c1653731342f235af1fa846fde31561cc839ab0dc9f34