rpms/kernel
8
2
Fork 6
Code Issues Pull Requests Releases Activity

kernel-4.18.0-553.85.1.el8_10

Browse Source 
* Thu Nov 13 2025 Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.85.1.el8_10]
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970}
- i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799]
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971}
- i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799]
- i40e: remove i40e_status (Michal Schmidt) [RHEL-123799]
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799]
- drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122]
- NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
- nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
- The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková)
Resolves: RHEL-113849, RHEL-123799, RHEL-22122

Signed-off-by: Alexandra Hájková <ahajkova@redhat.com>
This commit is contained in:
Alexandra Hájková 2025-11-13 16:21:51 +01:00
parent 3f62c5e94d
commit bff18cb216
3 changed files with 23 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
kernel.spec
View File

@ -38,10 +38,10 @@
# define buildid .local
%define specversion 4.18.0
%define pkgrelease 553.84.1.el8_10
%define pkgrelease 553.85.1.el8_10
# allow pkg_release to have configurable %%{?dist} tag
%define specrelease 553.84.1%{?dist}
%define specrelease 553.85.1%{?dist}
%define pkg_release %{specrelease}%{?buildid}
@ -2705,6 +2705,23 @@ fi
#
#
%changelog
* Thu Nov 13 2025 Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.85.1.el8_10]
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970}
- i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799]
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971}
- i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799]
- i40e: remove i40e_status (Michal Schmidt) [RHEL-123799]
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799]
- drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122]
- NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
- nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
- The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková)
* Thu Nov 06 2025 Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.84.1.el8_10]
- cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775]
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718}

2
rpminspect.yaml
View File

@ -26,6 +26,8 @@ emptyrpm:
- kernel-debug
- kernel-zfcpdump
- kernel-zfcpdump-modules
- kernel-rt
- kernel-rt-debug
patches:
ignore_list:

4
sources
View File

@ -1,3 +1,3 @@
SHA512 (linux-4.18.0-553.84.1.el8_10.tar.xz) = 0dffa7747fbe7529df0237252d1a9527db83aff17c0f7fbba2c78dda14662ba9fc5910fbf9201e90d912684c104adc597d1283b87c7829b22721b2ad74109a13
SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 4030373b899e45a1d86c642ea9054f1baeb292cedab63865d18eb5335e264310c2ce1d3129865769a132099208dbc500f5c05fd3e042c25182ac75afc2148885
SHA512 (linux-4.18.0-553.85.1.el8_10.tar.xz) = a135611c3875c23703649a29fde4a7ccb488238498da895e95c3e71810a4b873bdd9caa94ffe730432fe29f025b4afb16eabde0b4ca34d37d7a0e4a6f6262ae2
SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 8cf494d70df684d72fd25a5ddbb1341d64fb60951f4c22d3fa859eb78bf93a1fa41d362c3b192f7fea25c9696a744728e4fc6f1455807a8a6e1dedf25f963916
SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 1ac5ac6985d4f141b2a06df5df02b1f75aad141c1385ce0ba69aaf2c3677d9a8fd7f5194200f071e7b93387e84963ad2a99830c85bad647a06d2cb16dd919562