diff --git a/.gitignore b/.gitignore index 49ca7db69..04476b7f4 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,6 @@ -SOURCES/kernel-abi-stablelists-5.14.0-570.46.1.el9_6.tar.bz2 -SOURCES/kernel-kabi-dw-5.14.0-570.46.1.el9_6.tar.bz2 -SOURCES/linux-5.14.0-570.46.1.el9_6.tar.xz +SOURCES/kernel-abi-stablelists-5.14.0-570.49.1.el9_6.tar.bz2 +SOURCES/kernel-kabi-dw-5.14.0-570.49.1.el9_6.tar.bz2 +SOURCES/linux-5.14.0-570.49.1.el9_6.tar.xz SOURCES/nvidiagpuoot001.x509 SOURCES/olima1.x509 SOURCES/olimaca1.x509 diff --git a/.kernel.metadata b/.kernel.metadata index d6217b80b..7ee5087e9 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,6 +1,6 @@ -c4b6610a15602601dc1810d502e33a27df38a91a SOURCES/kernel-abi-stablelists-5.14.0-570.46.1.el9_6.tar.bz2 -e1750e568ae824777911a4bf2cf6db8a27e0c039 SOURCES/kernel-kabi-dw-5.14.0-570.46.1.el9_6.tar.bz2 -2b6a80c620fc7fc775696743e7aa02730237a990 SOURCES/linux-5.14.0-570.46.1.el9_6.tar.xz +2d4f26f2540e52f5a05c4a69b55daf0065123b57 SOURCES/kernel-abi-stablelists-5.14.0-570.49.1.el9_6.tar.bz2 +fad9f3eec47aa9a95e49fb61fc3da81b519def5b SOURCES/kernel-kabi-dw-5.14.0-570.49.1.el9_6.tar.bz2 +c7a3365dba3cb162391a3a7d429c01719f3eb33f SOURCES/linux-5.14.0-570.49.1.el9_6.tar.xz 4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509 706ae01dd14efa38f0f565a3706acac19c78df02 SOURCES/olima1.x509 6e3f0d61414c0b50f48dc2d4c3b3cd024e1c3a43 SOURCES/olimaca1.x509 diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver index 829a7fda2..1578ada71 100644 --- a/SOURCES/Makefile.rhelver +++ b/SOURCES/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 6 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 570.46.1 +RHEL_RELEASE = 570.49.1 # # ZSTREAM diff --git a/SOURCES/kernel.changelog b/SOURCES/kernel.changelog index d1074f505..86c6261d7 100644 --- a/SOURCES/kernel.changelog +++ b/SOURCES/kernel.changelog @@ -1,3 +1,43 @@ +* Tue Sep 23 2025 CKI KWF Bot [5.14.0-570.49.1.el9_6] +- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114335] {CVE-2025-39698} +- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114326] {CVE-2025-39682} +- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114326] {CVE-2025-39682} +Resolves: RHEL-114326, RHEL-114335 + +* Sat Sep 20 2025 CKI KWF Bot [5.14.0-570.48.1.el9_6] +- perf trace: Add missing perf_tool__init() (Michael Petlan) [RHEL-105393] +- ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-114962] +- ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-114962] +Resolves: RHEL-105393, RHEL-114962 + +* Thu Sep 18 2025 CKI KWF Bot [5.14.0-570.47.1.el9_6] +- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113916] +- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113333] {CVE-2025-38718} +- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-113039] +- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-112558] +- ice: fix NULL access of tx->in_use in ice_ll_ts_intr (Petr Oros) [RHEL-112873] +- ice: fix NULL access of tx->in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-112873] +- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-112558] +- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-112558] +- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-112558] +- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-112558] +- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-112558] +- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-112558] +- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-112558] +- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-112558] +- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-112558] +- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-112683] +- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-112683] +- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-112683] +- ice: Fix E825 initialization (Petr Oros) [RHEL-112683] +- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82136] +- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111196] {CVE-2025-38527} +- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109571] +- cpufreq/cppc: Don't compare desired_perf in target() (Mark Langsdorf) [RHEL-109525] +- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106432] {CVE-2025-38472} +- sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-91800] +Resolves: RHEL-106432, RHEL-109525, RHEL-109571, RHEL-111196, RHEL-112558, RHEL-112683, RHEL-112873, RHEL-113039, RHEL-113333, RHEL-113916, RHEL-82136, RHEL-91800 + * Tue Sep 16 2025 CKI KWF Bot [5.14.0-570.46.1.el9_6] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112246] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112246] {CVE-2023-53125} diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 592219b4c..58dffdc22 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -165,15 +165,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 570.46.1 +%define pkgrelease 570.49.1 %define kversion 5 -%define tarfile_release 5.14.0-570.46.1.el9_6 +%define tarfile_release 5.14.0-570.49.1.el9_6 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 570.46.1%{?buildid}%{?dist} +%define specrelease 570.49.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-570.46.1.el9_6 +%define kabiversion 5.14.0-570.49.1.el9_6 # # End of genspec.sh variables @@ -3866,7 +3866,7 @@ fi # # %changelog -* Wed Sep 24 2025 Andrew Lukoshko - 5.14.0-570.46.1 +* Tue Sep 30 2025 Andrew Lukoshko - 5.14.0-570.49.1 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -3878,11 +3878,48 @@ fi unmaintained - NFSD: fix hang in nfsd4_shutdown_callback -* Wed Sep 24 2025 Eduard Abdullin - 5.14.0-570.46.1 +* Tue Sep 30 2025 Eduard Abdullin - 5.14.0-570.49.1 - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le +* Tue Sep 23 2025 CKI KWF Bot [5.14.0-570.49.1.el9_6] +- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114335] {CVE-2025-39698} +- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114326] {CVE-2025-39682} +- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114326] {CVE-2025-39682} + +* Sat Sep 20 2025 CKI KWF Bot [5.14.0-570.48.1.el9_6] +- perf trace: Add missing perf_tool__init() (Michael Petlan) [RHEL-105393] +- ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-114962] +- ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-114962] + +* Thu Sep 18 2025 CKI KWF Bot [5.14.0-570.47.1.el9_6] +- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113916] +- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113333] {CVE-2025-38718} +- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-113039] +- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-112558] +- ice: fix NULL access of tx->in_use in ice_ll_ts_intr (Petr Oros) [RHEL-112873] +- ice: fix NULL access of tx->in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-112873] +- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-112558] +- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-112558] +- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-112558] +- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-112558] +- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-112558] +- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-112558] +- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-112558] +- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-112558] +- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-112558] +- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-112683] +- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-112683] +- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-112683] +- ice: Fix E825 initialization (Petr Oros) [RHEL-112683] +- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82136] +- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111196] {CVE-2025-38527} +- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109571] +- cpufreq/cppc: Don't compare desired_perf in target() (Mark Langsdorf) [RHEL-109525] +- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106432] {CVE-2025-38472} +- sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-91800] + * Tue Sep 16 2025 CKI KWF Bot [5.14.0-570.46.1.el9_6] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112246] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112246] {CVE-2023-53125}