diff --git a/kernel.spec b/kernel.spec
index 9e8f8b226..944e8efc5 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.33.1.el8_10
+%define pkgrelease 553.34.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.33.1%{?dist}
+%define specrelease 553.34.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2696,6 +2696,16 @@ fi
 #
 #
 %changelog
+* Thu Dec 12 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.34.1.el8_10]
+- mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122}
+- NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647]
+- xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924]
+- KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974]
+- x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362]
+- dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860]
+- i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088}
+- i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088}
+
 * Fri Dec 06 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.33.1.el8_10]
 - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073]
 - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796]
diff --git a/sources b/sources
index 236672523..83e74b90b 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.33.1.el8_10.tar.xz) = 1e19e5b435b6880887a5ea28c4d8c75347f5fe9ba282972226a635abf9bd0658cbeebe8c09acd752d288ece3f9c3fb15b1df81348b062d6a887f42fc9e4de35d
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 64c54bed6dc4ec5c5287b5835b0558fb0e6560f1f1cf2ebf26dbfdbe1b17030a6ed2936deaa39a940b294967737226da3cfce9ec06b94993d7fbe7ba3710b48d
+SHA512 (linux-4.18.0-553.34.1.el8_10.tar.xz) = 7f69bd9ed1e5a50207792b03936344ccb81c9314937179266590403faa7721ab941ac426d7cf7faaaaa11f6be0d7699975e2920a2601b6869ece48b39bc80554
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 2dccf433f5370e0c9f83e6cb58d4e24081f9851fb3696ecf4ad679c26009ce928033b8d83896904228892bd881daacb9bd044ec4c438d3f5a7e2fdfd2dc59f08
 SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 8a671ed3c9b7f4b25fd4e594b62bc4a26474cb705d3ed22ca376618b3c7962fc72ace1ffd02c9c3a192d9d2c449d38228809542d7f16ebad16f8127020eb2faf