diff --git a/.gitignore b/.gitignore index d153918bc..9530e2119 100644 --- a/.gitignore +++ b/.gitignore @@ -2,7 +2,7 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -SOURCES/linux-4.18.0-553.159.1.el8_10.tar.xz +SOURCES/linux-4.18.0-553.160.1.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer diff --git a/.kernel.metadata b/.kernel.metadata index 13846ef5c..239b94916 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,8 +1,8 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -a646926a3b509029f7093d2e9dcd751035ba1cc5 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 -b7a04900b724d42cf9a904cf55f9b88f4a271d56 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -7ed4b6fd7a7184c2966dd1115911474e0c4d8a95 SOURCES/linux-4.18.0-553.159.1.el8_10.tar.xz +0836849d25156e13ed3cd143ccef30b9a6d9b0f7 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 +48ce99250c6179a1a97f4881baa839bb1916e05c SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 +9a81c9e6f2678b56fdefab7ad9967ff93c659175 SOURCES/linux-4.18.0-553.160.1.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 67f0a1544..6aab07add 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -49,10 +49,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.159.1.el8_10 +%define pkgrelease 553.160.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.159.1%{?dist} +%define specrelease 553.160.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2797,6 +2797,17 @@ fi # # %changelog +* Thu Sep 03 2026 CKI KWF Bot [4.18.0-553.160.1.el8_10] +- rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} +- net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} +- nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} +- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} +- crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} +- crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} +- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} +- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} +- netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} + * Mon Aug 31 2026 CKI KWF Bot [4.18.0-553.159.1.el8_10] - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144]