From 7d0d16faa1bd432a518f78cdb4fce560c3e13050 Mon Sep 17 00:00:00 2001 From: Denys Vlasenko Date: Wed, 9 Oct 2024 22:52:14 +0200 Subject: [PATCH] kernel-4.18.0-553.26.1.el8_10 * Wed Oct 09 2024 Denys Vlasenko [4.18.0-553.26.1.el8_10] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] Resolves: RHEL-28867, RHEL-35118, RHEL-35757, RHEL-37335, RHEL-39397, RHEL-41075, RHEL-56156, RHEL-58037, RHEL-60251 Signed-off-by: Denys Vlasenko --- kernel.spec | 34 ++++++++++++++++++++++++++++++++-- sources | 4 ++-- 2 files changed, 34 insertions(+), 4 deletions(-) diff --git a/kernel.spec b/kernel.spec index cdca658f0..e335c95bb 100644 --- a/kernel.spec +++ b/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.25.1.el8_10 +%define pkgrelease 553.26.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.25.1%{?dist} +%define specrelease 553.26.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2696,6 +2696,36 @@ fi # # %changelog +* Wed Oct 09 2024 Denys Vlasenko [4.18.0-553.26.1.el8_10] +- nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} +- cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] +- ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] +- gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] +- gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] +- gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] +- gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] +- gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] +- gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] +- gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] +- gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] +- gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] +- gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] +- gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] +- gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] +- gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] +- gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] +- gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] +- gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] +- gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] +- dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} +- dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} +- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] +- NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] +- cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] +- cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] +- cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] +- cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] + * Wed Oct 02 2024 Denys Vlasenko [4.18.0-553.25.1.el8_10] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] diff --git a/sources b/sources index b9ac6c88a..195fde473 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-4.18.0-553.25.1.el8_10.tar.xz) = 738039a50fb1a1e8c0c706531f79ad9d4b3c7d5e73147f7f1f5fc49ef3b09d0c832d6278a0f57ad6c302c2717ebc6bd7d9855e2a09921d9659833b0e074e99d0 -SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = fa85538df5e9c14e4fa4bceb53c6e0f936df60fd4034687ff51b9438356dcfb4e4234426fbf35b988baac3fc1e39e105c02bf7f49b2fb5daee4e6988a1184d45 +SHA512 (linux-4.18.0-553.26.1.el8_10.tar.xz) = 500617aff15055e72de39c1dd8175d0293c31d453b59d27daac8c5967037c5b25e777f155ca366a67cbba1a5b544cc57589e0791bcca387ab549f827ba2d1576 +SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = e0fa8058da162474c32db56ed996d7704ab55ee8da7fd4e1c7608cbb3b5336da80fe01d10ef0af51c03491cfcbaa2b408dcfb30c0a5f2227859487f91438b735 SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 8a671ed3c9b7f4b25fd4e594b62bc4a26474cb705d3ed22ca376618b3c7962fc72ace1ffd02c9c3a192d9d2c449d38228809542d7f16ebad16f8127020eb2faf