proc: fix a dentry lock race between release_task and lookup
hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 qla4xxx: bring back deprecated PCI ids lpfc: bring back deprecated PCI ids be2iscsi: bring back deprecated PCI ids kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained Use AlmaLinux OS secure boot cert Debrand for AlmaLinux OS Add KVM support for ppc64le KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds
This commit is contained in:
root
commit
cb8bea6729
6
.gitignore
vendored
6
.gitignore
vendored
@ -1,6 +1,6 @@
|
||||
SOURCES/kernel-abi-stablelists-5.14.0-687.34.1.el9_8.tar.bz2
|
||||
SOURCES/kernel-kabi-dw-5.14.0-687.34.1.el9_8.tar.bz2
|
||||
SOURCES/linux-5.14.0-687.34.1.el9_8.tar.xz
|
||||
SOURCES/kernel-abi-stablelists-5.14.0-687.36.1.el9_8.tar.bz2
|
||||
SOURCES/kernel-kabi-dw-5.14.0-687.36.1.el9_8.tar.bz2
|
||||
SOURCES/linux-5.14.0-687.36.1.el9_8.tar.xz
|
||||
SOURCES/nvidiabfdpu.x509
|
||||
SOURCES/nvidiagpuoot001.x509
|
||||
SOURCES/nvidiajetsonsoc.x509
|
||||
|
||||
@ -1,6 +1,6 @@
|
||||
0358490f1fecf51bc56cc0fd770793fd9cec54b6 SOURCES/kernel-abi-stablelists-5.14.0-687.34.1.el9_8.tar.bz2
|
||||
fd3b4a5ea1f0a2b4b796b9d80d098aefa3732e12 SOURCES/kernel-kabi-dw-5.14.0-687.34.1.el9_8.tar.bz2
|
||||
192fe3aae0d12a08f309c57977b18beda18d0bdf SOURCES/linux-5.14.0-687.34.1.el9_8.tar.xz
|
||||
0ba384f8e1dd565339b3e139d9c2cbb5e7ac4db1 SOURCES/kernel-abi-stablelists-5.14.0-687.36.1.el9_8.tar.bz2
|
||||
e2fb3b35cd695ebc51b9d9c67d009785aed413d2 SOURCES/kernel-kabi-dw-5.14.0-687.36.1.el9_8.tar.bz2
|
||||
d81c0aea0998d685beb2ad98bc9671fcb223a01e SOURCES/linux-5.14.0-687.36.1.el9_8.tar.xz
|
||||
3dc4997e0273ca116d52a52238a57403aba5dafb SOURCES/nvidiabfdpu.x509
|
||||
4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509
|
||||
18378ab150ef13ef65609224e10a2e8501d82915 SOURCES/nvidiajetsonsoc.x509
|
||||
|
||||
@ -12,7 +12,7 @@ RHEL_MINOR = 8
|
||||
#
|
||||
# Use this spot to avoid future merge conflicts.
|
||||
# Do not trim this comment.
|
||||
RHEL_RELEASE = 687.34.1
|
||||
RHEL_RELEASE = 687.36.1
|
||||
|
||||
#
|
||||
# ZSTREAM
|
||||
|
||||
@ -1,3 +1,25 @@
|
||||
* Wed Aug 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.36.1.el9_8]
|
||||
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
|
||||
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
|
||||
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
|
||||
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
|
||||
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
|
||||
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
|
||||
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
|
||||
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
|
||||
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}
|
||||
Resolves: RHEL-193526, RHEL-211058, RHEL-215575
|
||||
|
||||
* Tue Aug 04 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.35.1.el9_8]
|
||||
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
|
||||
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
|
||||
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
|
||||
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
|
||||
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
|
||||
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
|
||||
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}
|
||||
Resolves: RHEL-179745, RHEL-186331
|
||||
|
||||
* Mon Aug 03 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.34.1.el9_8]
|
||||
- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
|
||||
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
|
||||
|
||||
@ -176,15 +176,15 @@ Summary: The Linux kernel
|
||||
# define buildid .local
|
||||
%define specversion 5.14.0
|
||||
%define patchversion 5.14
|
||||
%define pkgrelease 687.34.1
|
||||
%define pkgrelease 687.36.1
|
||||
%define kversion 5
|
||||
%define tarfile_release 5.14.0-687.34.1.el9_8
|
||||
%define tarfile_release 5.14.0-687.36.1.el9_8
|
||||
# This is needed to do merge window version magic
|
||||
%define patchlevel 14
|
||||
# This allows pkg_release to have configurable %%{?dist} tag
|
||||
%define specrelease 687.34.1%{?buildid}%{?dist}
|
||||
%define specrelease 687.36.1%{?buildid}%{?dist}
|
||||
# This defines the kabi tarball version
|
||||
%define kabiversion 5.14.0-687.34.1.el9_8
|
||||
%define kabiversion 5.14.0-687.36.1.el9_8
|
||||
|
||||
#
|
||||
# End of genspec.sh variables
|
||||
@ -3795,7 +3795,7 @@ fi
|
||||
#
|
||||
#
|
||||
%changelog
|
||||
* Thu Aug 06 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 5.14.0-687.34.1
|
||||
* Fri Aug 07 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 5.14.0-687.36.1
|
||||
- proc: fix a dentry lock race between release_task and lookup
|
||||
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
|
||||
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
|
||||
@ -3807,12 +3807,32 @@ fi
|
||||
- kernel/rh_messages.h: enable all disabled pci devices by moving to
|
||||
unmaintained
|
||||
|
||||
* Thu Aug 06 2026 Eduard Abdullin <eabdullin@almalinux.org> - 5.14.0-687.34.1
|
||||
* Fri Aug 07 2026 Eduard Abdullin <eabdullin@almalinux.org> - 5.14.0-687.36.1
|
||||
- Use AlmaLinux OS secure boot cert
|
||||
- Debrand for AlmaLinux OS
|
||||
- Add KVM support for ppc64le
|
||||
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds
|
||||
|
||||
* Wed Aug 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.36.1.el9_8]
|
||||
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
|
||||
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
|
||||
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
|
||||
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
|
||||
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
|
||||
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
|
||||
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
|
||||
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
|
||||
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}
|
||||
|
||||
* Tue Aug 04 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.35.1.el9_8]
|
||||
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
|
||||
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
|
||||
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
|
||||
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
|
||||
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
|
||||
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
|
||||
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}
|
||||
|
||||
* Mon Aug 03 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.34.1.el9_8]
|
||||
- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
|
||||
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
|
||||
|
||||
Loading…
Reference in New Issue
Block a user