diff --git a/.gitignore b/.gitignore index d522579ce..7374cd5cf 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,6 @@ -SOURCES/kernel-abi-stablelists-5.14.0-570.39.1.el9_6.tar.bz2 -SOURCES/kernel-kabi-dw-5.14.0-570.39.1.el9_6.tar.bz2 -SOURCES/linux-5.14.0-570.39.1.el9_6.tar.xz +SOURCES/kernel-abi-stablelists-5.14.0-570.41.1.el9_6.tar.bz2 +SOURCES/kernel-kabi-dw-5.14.0-570.41.1.el9_6.tar.bz2 +SOURCES/linux-5.14.0-570.41.1.el9_6.tar.xz SOURCES/nvidiagpuoot001.x509 SOURCES/olima1.x509 SOURCES/olimaca1.x509 diff --git a/.kernel.metadata b/.kernel.metadata index 3a908eab9..45f162881 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,6 +1,6 @@ -a1506ff1c517f8f5cf8d9a941427bd59a8b9aa6a SOURCES/kernel-abi-stablelists-5.14.0-570.39.1.el9_6.tar.bz2 -97b8e118566230b8685dbe1f354ab5a1cfa8e1e1 SOURCES/kernel-kabi-dw-5.14.0-570.39.1.el9_6.tar.bz2 -62d23933e173c6b3c78e911ace286bcd0dd549a5 SOURCES/linux-5.14.0-570.39.1.el9_6.tar.xz +8d93ce89a0ae4ac38a4d242425cbf73aa521c747 SOURCES/kernel-abi-stablelists-5.14.0-570.41.1.el9_6.tar.bz2 +199357449ffa5557080dab2ac6e230e04c5c30e6 SOURCES/kernel-kabi-dw-5.14.0-570.41.1.el9_6.tar.bz2 +d74ef1fad253f9eedbed69dd64f7f4fc7f53573c SOURCES/linux-5.14.0-570.41.1.el9_6.tar.xz 4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509 706ae01dd14efa38f0f565a3706acac19c78df02 SOURCES/olima1.x509 6e3f0d61414c0b50f48dc2d4c3b3cd024e1c3a43 SOURCES/olimaca1.x509 diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver index 18fe1a636..c0ccb03d7 100644 --- a/SOURCES/Makefile.rhelver +++ b/SOURCES/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 6 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 570.39.1 +RHEL_RELEASE = 570.41.1 # # ZSTREAM diff --git a/SOURCES/kernel.changelog b/SOURCES/kernel.changelog index 60721b088..a08edf0fa 100644 --- a/SOURCES/kernel.changelog +++ b/SOURCES/kernel.changelog @@ -1,3 +1,33 @@ +* Thu Aug 28 2025 CKI KWF Bot [5.14.0-570.41.1.el9_6] +- powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Mamatha Inamdar) [RHEL-107002] +- net: ibmveth: make veth_pool_store stop hanging (Mamatha Inamdar) [RHEL-109494] +- ibmveth: Always stop tx queues during close (Mamatha Inamdar) [RHEL-109494] +- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-109723] +- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-109723] +- smb: convert to ctime accessor functions (Paulo Alcantara) [RHEL-109723] +- crypto: tegra - Fix IV usage for AES ECB (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Fix format specifier in tegra_sha_prep_cmd() (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Use HMAC fallback when keyslots are full (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Reserve keyslots to allocate dynamically (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Set IV to NULL explicitly for AES ECB (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Fix CMAC intermediate result handling (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Fix HASH intermediate result handling (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Transfer HASH init function to crypto engine (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - check return value for hash do_one_req (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - finalize crypto req on error (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Do not use fixed size buffers (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Use separate buffer for setkey (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - remove unneeded crypto_engine_stop() call (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - remove redundant error check on ret (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - do not transfer req when tegra init fails (Nirmala Dalvi) [RHEL-107286] +- crypto: engine - Remove prepare/unprepare request (Nirmala Dalvi) [RHEL-107286] +- udmabuf: fix a buf size overflow issue during udmabuf creation (CKI Backport Bot) [RHEL-99746] {CVE-2025-37803} +Resolves: RHEL-107002, RHEL-107286, RHEL-109494, RHEL-109723, RHEL-99746 + +* Wed Aug 27 2025 CKI KWF Bot [5.14.0-570.40.1.el9_6] +- idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106054] {CVE-2025-38392} +Resolves: RHEL-106054 + * Sat Aug 23 2025 CKI KWF Bot [5.14.0-570.39.1.el9_6] - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109529] {CVE-2025-38500} - Merge: net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response [rhel-9.6.z] (Maxim Levitsky) [RHEL-58904] diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index aebae1c99..5fbaab22c 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -165,15 +165,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 570.39.1 +%define pkgrelease 570.41.1 %define kversion 5 -%define tarfile_release 5.14.0-570.39.1.el9_6 +%define tarfile_release 5.14.0-570.41.1.el9_6 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 570.39.1%{?buildid}%{?dist} +%define specrelease 570.41.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-570.39.1.el9_6 +%define kabiversion 5.14.0-570.41.1.el9_6 # # End of genspec.sh variables @@ -3866,7 +3866,7 @@ fi # # %changelog -* Thu Sep 04 2025 Andrew Lukoshko - 5.14.0-570.39.1 +* Thu Sep 11 2025 Andrew Lukoshko - 5.14.0-570.41.1 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -3878,11 +3878,39 @@ fi unmaintained - NFSD: fix hang in nfsd4_shutdown_callback -* Thu Sep 04 2025 Eduard Abdullin - 5.14.0-570.39.1 +* Thu Sep 11 2025 Eduard Abdullin - 5.14.0-570.41.1 - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le +* Thu Aug 28 2025 CKI KWF Bot [5.14.0-570.41.1.el9_6] +- powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Mamatha Inamdar) [RHEL-107002] +- net: ibmveth: make veth_pool_store stop hanging (Mamatha Inamdar) [RHEL-109494] +- ibmveth: Always stop tx queues during close (Mamatha Inamdar) [RHEL-109494] +- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-109723] +- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-109723] +- smb: convert to ctime accessor functions (Paulo Alcantara) [RHEL-109723] +- crypto: tegra - Fix IV usage for AES ECB (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Fix format specifier in tegra_sha_prep_cmd() (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Use HMAC fallback when keyslots are full (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Reserve keyslots to allocate dynamically (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Set IV to NULL explicitly for AES ECB (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Fix CMAC intermediate result handling (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Fix HASH intermediate result handling (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Transfer HASH init function to crypto engine (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - check return value for hash do_one_req (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - finalize crypto req on error (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Do not use fixed size buffers (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - Use separate buffer for setkey (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - remove unneeded crypto_engine_stop() call (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - remove redundant error check on ret (Nirmala Dalvi) [RHEL-107286] +- crypto: tegra - do not transfer req when tegra init fails (Nirmala Dalvi) [RHEL-107286] +- crypto: engine - Remove prepare/unprepare request (Nirmala Dalvi) [RHEL-107286] +- udmabuf: fix a buf size overflow issue during udmabuf creation (CKI Backport Bot) [RHEL-99746] {CVE-2025-37803} + +* Wed Aug 27 2025 CKI KWF Bot [5.14.0-570.40.1.el9_6] +- idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106054] {CVE-2025-38392} + * Sat Aug 23 2025 CKI KWF Bot [5.14.0-570.39.1.el9_6] - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109529] {CVE-2025-38500} - Merge: net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response [rhel-9.6.z] (Maxim Levitsky) [RHEL-58904]