rpms/kernel
9
4
Fork 6
Code Issues Pull Requests Releases Activity

kernel-5.14.0-708.el9

Browse Source 
* Wed May 20 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-708.el9]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176922] {CVE-2026-43329}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174565] {CVE-2026-43284}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171139] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-159632]
Resolves: RHEL-159632, RHEL-171139, RHEL-174565, RHEL-176922

Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
This commit is contained in:
CKI KWF Bot 2026-05-20 08:27:39 +00:00
parent 4c4128a147
commit 8c5b71be61
4 changed files with 21 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Makefile.rhelver
View File

@ -12,7 +12,7 @@ RHEL_MINOR = 9
#
# Use this spot to avoid future merge conflicts.
# Do not trim this comment.
RHEL_RELEASE = 707
RHEL_RELEASE = 708
#
# ZSTREAM

7
kernel.changelog
View File

@ -1,3 +1,10 @@
* Wed May 20 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-708.el9]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176922] {CVE-2026-43329}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174565] {CVE-2026-43284}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171139] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-159632]
Resolves: RHEL-159632, RHEL-171139, RHEL-174565, RHEL-176922
* Mon May 18 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-707.el9]
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176447] {CVE-2026-46333}
- mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174754] {CVE-2026-43303}

14
kernel.spec
View File

@ -176,15 +176,15 @@ Summary: The Linux kernel
# define buildid .local
%define specversion 5.14.0
%define patchversion 5.14
%define pkgrelease 707
%define pkgrelease 708
%define kversion 5
%define tarfile_release 5.14.0-707.el9
%define tarfile_release 5.14.0-708.el9
# This is needed to do merge window version magic
%define patchlevel 14
# This allows pkg_release to have configurable %%{?dist} tag
%define specrelease 707%{?buildid}%{?dist}
%define specrelease 708%{?buildid}%{?dist}
# This defines the kabi tarball version
%define kabiversion 5.14.0-707.el9
%define kabiversion 5.14.0-708.el9
#
# End of genspec.sh variables
@ -3753,6 +3753,12 @@ fi
#
#
%changelog
* Wed May 20 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-708.el9]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176922] {CVE-2026-43329}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174565] {CVE-2026-43284}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171139] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-159632]
* Mon May 18 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-707.el9]
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176447] {CVE-2026-46333}
- mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174754] {CVE-2026-43303}

6
sources
View File

@ -1,3 +1,3 @@
SHA512 (linux-5.14.0-707.el9.tar.xz) = f3bb09ccef3ee99b87b8138eb1f4da43021e3e1dfb4eb99624698ea14ecb1cf41057077b1b2462485b59b8035aa6fa64f8cbf025e3da9096a0b178a880d1e43f
SHA512 (kernel-abi-stablelists-5.14.0-707.el9.tar.bz2) = ae128c9db95d0cc905014fbced6afcc11d9cc4541d79e135c704cc08fc8c4ff0d071f48a7f10110c46a8cd82ce07836d9287d4872eef89b575420c95518733fa
SHA512 (kernel-kabi-dw-5.14.0-707.el9.tar.bz2) = 2f9229196bcb36d5acb8c4347b43fe570aa9977531450d6a828d17955c54eeabdfa1fd71319ed3ca8c78e4f8315f49e1ae04d64fde1572ba375b72f22a92bf52
SHA512 (linux-5.14.0-708.el9.tar.xz) = f51dc357d98c1e3a79ac200a2fdad8672faf44b757b2b2767dc6d36f6518c8de1faba0ed184320b8297c9ff01eb8c52b22e40bfb5815e56e5774979a9b3d9d18
SHA512 (kernel-abi-stablelists-5.14.0-708.el9.tar.bz2) = 5ae7c14289e7b089beef856680ba698435b7148f16f13568ec126f822e284aeafeea564d4c4fdeaa4ec1f555c747c2c9e50673a3076a964eecd1d48544bb77f2
SHA512 (kernel-kabi-dw-5.14.0-708.el9.tar.bz2) = 7fb42d829398fbf890d6792ea13055ce1fb3b067567161812955dcad18cb8a8571f68584b53b8de14eb91a91b9160934762433b8195e82d67b788a5af6d23113