From 9854da1e4c73009cb2d3f75e8b27ed64fc08e713 Mon Sep 17 00:00:00 2001 From: "Herton R. Krzesinski" Date: Tue, 15 Feb 2022 02:47:33 +0000 Subject: [PATCH] kernel-5.14.0-60.el9 * Tue Feb 15 2022 Herton R. Krzesinski [5.14.0-60.el9] - crypto: jitter - add oversampling of noise source (Herbert Xu) [2036816] - Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values" (Guillaume Nault) [2027560] - Change "-auto" suffix to fix CI automotive pipeline issues (Julio Faracco) - nvme: drop unused variable ctrl in nvme_setup_cmd (John Meneghini) [2044616] - nvme: increment request genctr on completion (John Meneghini) [2044616] - nvme-pci: Fix abort command id (John Meneghini) [2044616] - nvme: add command id quirk for apple controllers (John Meneghini) [2044616] - nvme: move nvme_multi_css into nvme.h (John Meneghini) [2044616] - nvme: code command_id with a genctr for use-after-free validation (John Meneghini) [2044616] - nvme-pci: limit maximum queue depth to 4095 (John Meneghini) [2044616] - selftests: Calculate udpgso segment count without header adjustment (Xin Long) [2044129] - udp: using datalen to cap ipv6 udp max gso segments (Xin Long) [2044129] - inet_diag: fix kernel-infoleak for UDP sockets (Xin Long) [2044129] - udp: using datalen to cap max gso segments (Xin Long) [2044129] - sctp: hold endpoint before calling cb in sctp_transport_lookup_process (Xin Long) [2043823] - sctp: use call_rcu to free endpoint (Xin Long) [2043823] - sctp: move hlist_node and hashent out of sctp_ep_common (Xin Long) [2043823] - sctp: make the raise timer more simple and accurate (Xin Long) [2043823] - nfsd: fix use-after-free due to delegation race (Benjamin Coddington) [1991929] - bonding: Fix extraction of ports from the packet headers (Jonathan Toppins) [2042548] - bonding: fix ad_actor_system option setting to default (Jonathan Toppins) [2042548] - bonding: make tx_rebalance_counter an atomic (Jonathan Toppins) [2042548] - bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed (Jonathan Toppins) [2042548] - bonding: 3ad: pass parameter bond_params by reference (Jonathan Toppins) [2042548] - bonding: complain about missing route only once for A/B ARP probes (Jonathan Toppins) [2042548] - bonding: improve nl error msg when device can't be enslaved because of IFF_MASTER (Jonathan Toppins) [2042548] - bonding: combine netlink and console error messages (Jonathan Toppins) [2042548] - net, bonding: Refactor bond_xmit_hash for use with xdp_buff (Jonathan Toppins) [2042548] - net: bonding: bond_alb: Remove the dependency on ipx network layer (Jonathan Toppins) [2042548] - bonding: add new option lacp_active (Jonathan Toppins) [1951951 2042548] - bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler() (Jonathan Toppins) [2042548] - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2030418] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2030418] {CVE-2021-4083} - ipv6: Continue processing multipath route even if gateway attribute is invalid (Hangbin Liu) [2041401] - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route (Hangbin Liu) [2041401] - ipv6: Do cleanup if attribute validation fails in multipath route (Hangbin Liu) [2041401] - ipv6: Check attribute length for RTA_GATEWAY in multipath route (Hangbin Liu) [2041401] - ipv6: fix memory leak in fib6_rule_suppress (Hangbin Liu) [2041401] - net: nexthop: reduce rcu synchronizations when replacing resilient groups (Hangbin Liu) [2041401] - net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group (Hangbin Liu) [2041401] - net: ipv6: add fib6_nh_release_dsts stub (Hangbin Liu) [2041401] - ipv6: fix typos in __ip6_finish_output() (Hangbin Liu) [2041401] - igbvf: Refactor trace (Corinna Vinschen) [2040322] - igbvf: fix double free in `igbvf_probe` (Corinna Vinschen) [2040322] - bnx2x: Fix enabling network interfaces without VFs (Manish Chopra) [1998304] - tun: fix bonding active backup with arp monitoring (Jonathan Toppins) [2050837] Resolves: rhbz#1951951, rhbz#1991929, rhbz#1998304, rhbz#2027560, rhbz#2030418, rhbz#2036816, rhbz#2040322, rhbz#2041401, rhbz#2042548, rhbz#2043823, rhbz#2044129, rhbz#2044616, rhbz#2050837 Signed-off-by: Herton R. Krzesinski --- Makefile.rhelver | 2 +- kernel.spec | 60 +++++++++++++++++++++++++++++++++++++++++++----- sources | 6 ++--- 3 files changed, 58 insertions(+), 10 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index 2da5fa688..f6a7eae66 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 0 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 59 +RHEL_RELEASE = 60 # # Early y+1 numbering diff --git a/kernel.spec b/kernel.spec index c460f2088..dfda06880 100755 --- a/kernel.spec +++ b/kernel.spec @@ -79,7 +79,7 @@ Summary: The Linux kernel # the --with-release option overrides this setting.) %define debugbuildsenabled 1 -%global distro_build 59 +%global distro_build 60 %if 0%{?fedora} %define secure_boot_arch x86_64 @@ -123,13 +123,13 @@ Summary: The Linux kernel %define kversion 5.14 %define rpmversion 5.14.0 -%define pkgrelease 59.el9 +%define pkgrelease 60.el9 # This is needed to do merge window version magic %define patchlevel 14 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 59%{?buildid}%{?dist} +%define specrelease 60%{?buildid}%{?dist} %define pkg_release %{specrelease} @@ -675,7 +675,7 @@ BuildRequires: lld # exact git commit you can run # # xzcat -qq ${TARBALL} | git get-tar-commit-id -Source0: linux-5.14.0-59.el9.tar.xz +Source0: linux-5.14.0-60.el9.tar.xz Source1: Makefile.rhelver @@ -1342,8 +1342,8 @@ ApplyOptionalPatch() fi } -%setup -q -n kernel-5.14.0-59.el9 -c -mv linux-5.14.0-59.el9 linux-%{KVERREL} +%setup -q -n kernel-5.14.0-60.el9 -c +mv linux-5.14.0-60.el9 linux-%{KVERREL} cd linux-%{KVERREL} cp -a %{SOURCE1} . @@ -2942,6 +2942,54 @@ fi # # %changelog +* Tue Feb 15 2022 Herton R. Krzesinski [5.14.0-60.el9] +- crypto: jitter - add oversampling of noise source (Herbert Xu) [2036816] +- Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values" (Guillaume Nault) [2027560] +- Change "-auto" suffix to fix CI automotive pipeline issues (Julio Faracco) +- nvme: drop unused variable ctrl in nvme_setup_cmd (John Meneghini) [2044616] +- nvme: increment request genctr on completion (John Meneghini) [2044616] +- nvme-pci: Fix abort command id (John Meneghini) [2044616] +- nvme: add command id quirk for apple controllers (John Meneghini) [2044616] +- nvme: move nvme_multi_css into nvme.h (John Meneghini) [2044616] +- nvme: code command_id with a genctr for use-after-free validation (John Meneghini) [2044616] +- nvme-pci: limit maximum queue depth to 4095 (John Meneghini) [2044616] +- selftests: Calculate udpgso segment count without header adjustment (Xin Long) [2044129] +- udp: using datalen to cap ipv6 udp max gso segments (Xin Long) [2044129] +- inet_diag: fix kernel-infoleak for UDP sockets (Xin Long) [2044129] +- udp: using datalen to cap max gso segments (Xin Long) [2044129] +- sctp: hold endpoint before calling cb in sctp_transport_lookup_process (Xin Long) [2043823] +- sctp: use call_rcu to free endpoint (Xin Long) [2043823] +- sctp: move hlist_node and hashent out of sctp_ep_common (Xin Long) [2043823] +- sctp: make the raise timer more simple and accurate (Xin Long) [2043823] +- nfsd: fix use-after-free due to delegation race (Benjamin Coddington) [1991929] +- bonding: Fix extraction of ports from the packet headers (Jonathan Toppins) [2042548] +- bonding: fix ad_actor_system option setting to default (Jonathan Toppins) [2042548] +- bonding: make tx_rebalance_counter an atomic (Jonathan Toppins) [2042548] +- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed (Jonathan Toppins) [2042548] +- bonding: 3ad: pass parameter bond_params by reference (Jonathan Toppins) [2042548] +- bonding: complain about missing route only once for A/B ARP probes (Jonathan Toppins) [2042548] +- bonding: improve nl error msg when device can't be enslaved because of IFF_MASTER (Jonathan Toppins) [2042548] +- bonding: combine netlink and console error messages (Jonathan Toppins) [2042548] +- net, bonding: Refactor bond_xmit_hash for use with xdp_buff (Jonathan Toppins) [2042548] +- net: bonding: bond_alb: Remove the dependency on ipx network layer (Jonathan Toppins) [2042548] +- bonding: add new option lacp_active (Jonathan Toppins) [1951951 2042548] +- bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler() (Jonathan Toppins) [2042548] +- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2030418] {CVE-2021-4083} +- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2030418] {CVE-2021-4083} +- ipv6: Continue processing multipath route even if gateway attribute is invalid (Hangbin Liu) [2041401] +- ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route (Hangbin Liu) [2041401] +- ipv6: Do cleanup if attribute validation fails in multipath route (Hangbin Liu) [2041401] +- ipv6: Check attribute length for RTA_GATEWAY in multipath route (Hangbin Liu) [2041401] +- ipv6: fix memory leak in fib6_rule_suppress (Hangbin Liu) [2041401] +- net: nexthop: reduce rcu synchronizations when replacing resilient groups (Hangbin Liu) [2041401] +- net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group (Hangbin Liu) [2041401] +- net: ipv6: add fib6_nh_release_dsts stub (Hangbin Liu) [2041401] +- ipv6: fix typos in __ip6_finish_output() (Hangbin Liu) [2041401] +- igbvf: Refactor trace (Corinna Vinschen) [2040322] +- igbvf: fix double free in `igbvf_probe` (Corinna Vinschen) [2040322] +- bnx2x: Fix enabling network interfaces without VFs (Manish Chopra) [1998304] +- tun: fix bonding active backup with arp monitoring (Jonathan Toppins) [2050837] + * Fri Feb 11 2022 Herton R. Krzesinski [5.14.0-59.el9] - gfs2: Fix gfs2_release for non-writers regression (Bob Peterson) [2030397] - gfs2: gfs2_create_inode rework (Andreas Gruenbacher) [2002803] diff --git a/sources b/sources index a91c4eab8..50962ba0b 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-59.el9.tar.xz) = 44854e51fafd8800531df1e2497873a5382f9c02970188c9adfd8146a09b3821cc590a52d61122f393e8feb54557c098ebf375637b885fb883d8218d451ea5bc -SHA512 (kernel-abi-stablelists-5.14.0-59.tar.bz2) = 134deaaad94295e2be7b1d415fea8c6c7f225db356c9efb57b72949e36da5113ad53289265b66baac362e9dba5c60ff61e56a07bd8a2c95166dfda96d3f46081 -SHA512 (kernel-kabi-dw-5.14.0-59.tar.bz2) = b070121d9272e8a1d769379af7d2dd12b48574d66857fe375617fd77ea2863425c5f43322e4bb8d3acb3200366cb47cbfe2590d9cc8a09fa66413dc0878592c3 +SHA512 (linux-5.14.0-60.el9.tar.xz) = 76b4c5a0a35502862ae88db560d37371e2f69a03d72d68e99d1d13824f9d5842892e341574c6dd4abe1c72081e2d0905c5e4ce8794b6ef77f563b02c0ea480c7 +SHA512 (kernel-abi-stablelists-5.14.0-60.tar.bz2) = 1dc1ab8705487a41b005fbbae5e8d62a8e246e64405fcf23fe1acb35d39f15a9de38ce3af5b1fd7ea50e4f00fef356d095491d9879ded41e6e7731d50e15773f +SHA512 (kernel-kabi-dw-5.14.0-60.tar.bz2) = 94d07e5eafeabc31c71170637f0b2357498350801ae542ba5beb0d63cbd4b11fa24bb72397b8b64123d194d76aeab855e1c14a9ee26cdec3f644cfbac4c2fc8a