diff --git a/.gitignore b/.gitignore index 04c51c676..6ed82f8e6 100644 --- a/.gitignore +++ b/.gitignore @@ -2,7 +2,7 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -SOURCES/linux-4.18.0-553.129.1.el8_10.tar.xz +SOURCES/linux-4.18.0-553.132.1.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer diff --git a/.kernel.metadata b/.kernel.metadata index 38385c217..fa546de7d 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,8 +1,8 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -58e959545555dbee3c2480b2a5a82de711c66e82 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 -a9412293ca3fa02952c7aa91ac7089b13d017b6a SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -4d1d35f4fd8435065c2a9f77aa4be2c002893a82 SOURCES/linux-4.18.0-553.129.1.el8_10.tar.xz +ad1ad277bc1443136b0d7214995839b7cfd05970 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 +2711397f678e8d5629a103a1b5a861f781d8aeb2 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 +43f060bd69d23c6e6e8a54266cabdcf6e3842285 SOURCES/linux-4.18.0-553.132.1.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SOURCES/gating.yaml b/SOURCES/gating.yaml index 7e162375c..69169fb2f 100644 --- a/SOURCES/gating.yaml +++ b/SOURCES/gating.yaml @@ -4,7 +4,6 @@ product_versions: decision_context: osci_compose_gate rules: - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.kernel-aarch64.tier1.functional} - - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.kernel-debug-x86_64.tier1.functional} - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.kernel-ppc64le.tier1.functional} - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.kernel-s390x.tier1.functional} - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.kernel-x86_64.tier1.functional} @@ -14,6 +13,5 @@ product_versions: - rhel-8 decision_context: osci_compose_gate rules: - - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.kernel-rt-debug-x86_64.tier1.functional} - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.kernel-rt-x86_64.tier1.functional} packages: [kernel-rt] diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 6a126d75e..cae329710 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.129.1.el8_10 +%define pkgrelease 553.132.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.129.1%{?dist} +%define specrelease 553.132.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2707,6 +2707,24 @@ fi # # %changelog +* Wed Jun 10 2026 CKI KWF Bot [4.18.0-553.132.1.el8_10] +- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} +- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} +- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} + +* Fri Jun 05 2026 CKI KWF Bot [4.18.0-553.131.1.el8_10] +- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} +- nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] +- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} +- ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] +- ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] +- ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} +- ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} + +* Wed Jun 03 2026 CKI KWF Bot [4.18.0-553.130.1.el8_10] +- RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} +- md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] + * Tue Jun 02 2026 CKI KWF Bot [4.18.0-553.129.1.el8_10] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243}