diff --git a/.gitignore b/.gitignore index 0fe387e81..bfb95d7aa 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,6 @@ -SOURCES/kernel-abi-stablelists-5.14.0-687.36.1.el9_8.tar.bz2 -SOURCES/kernel-kabi-dw-5.14.0-687.36.1.el9_8.tar.bz2 -SOURCES/linux-5.14.0-687.36.1.el9_8.tar.xz +SOURCES/kernel-abi-stablelists-5.14.0-687.38.1.el9_8.tar.bz2 +SOURCES/kernel-kabi-dw-5.14.0-687.38.1.el9_8.tar.bz2 +SOURCES/linux-5.14.0-687.38.1.el9_8.tar.xz SOURCES/nvidiabfdpu.x509 SOURCES/nvidiagpuoot001.x509 SOURCES/nvidiajetsonsoc.x509 diff --git a/.kernel.metadata b/.kernel.metadata index 1cff92dae..7718dfe9a 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,6 +1,6 @@ -0ba384f8e1dd565339b3e139d9c2cbb5e7ac4db1 SOURCES/kernel-abi-stablelists-5.14.0-687.36.1.el9_8.tar.bz2 -e2fb3b35cd695ebc51b9d9c67d009785aed413d2 SOURCES/kernel-kabi-dw-5.14.0-687.36.1.el9_8.tar.bz2 -d81c0aea0998d685beb2ad98bc9671fcb223a01e SOURCES/linux-5.14.0-687.36.1.el9_8.tar.xz +5cc749afafacdf78cafbd9c362e244c106117fec SOURCES/kernel-abi-stablelists-5.14.0-687.38.1.el9_8.tar.bz2 +6cd2d746435f4a141e29c5d3d2a65cf8a9f2c22f SOURCES/kernel-kabi-dw-5.14.0-687.38.1.el9_8.tar.bz2 +7b60a35c5b309edd2dc98114f8d86e0c1800ee6c SOURCES/linux-5.14.0-687.38.1.el9_8.tar.xz 3dc4997e0273ca116d52a52238a57403aba5dafb SOURCES/nvidiabfdpu.x509 4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509 18378ab150ef13ef65609224e10a2e8501d82915 SOURCES/nvidiajetsonsoc.x509 diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver index 2716a4b32..090f18a1f 100644 --- a/SOURCES/Makefile.rhelver +++ b/SOURCES/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 8 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 687.36.1 +RHEL_RELEASE = 687.38.1 # # ZSTREAM diff --git a/SOURCES/kernel.changelog b/SOURCES/kernel.changelog index 633f97054..4466f9096 100644 --- a/SOURCES/kernel.changelog +++ b/SOURCES/kernel.changelog @@ -1,3 +1,23 @@ +* Mon Aug 10 2026 CKI KWF Bot [5.14.0-687.38.1.el9_8] +- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] +- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] +- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] +- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] +- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] +- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] +- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] +- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} +Resolves: RHEL-192999, RHEL-223404 + +* Fri Aug 07 2026 CKI KWF Bot [5.14.0-687.37.1.el9_8] +- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] +- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] +- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} +- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} +- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] +- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} +Resolves: RHEL-180691, RHEL-188790, RHEL-213036, RHEL-215578, RHEL-215580, RHEL-222495 + * Wed Aug 05 2026 CKI KWF Bot [5.14.0-687.36.1.el9_8] - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index d00155d7a..55694d7c9 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 687.36.1 +%define pkgrelease 687.38.1 %define kversion 5 -%define tarfile_release 5.14.0-687.36.1.el9_8 +%define tarfile_release 5.14.0-687.38.1.el9_8 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 687.36.1%{?buildid}%{?dist} +%define specrelease 687.38.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-687.36.1.el9_8 +%define kabiversion 5.14.0-687.38.1.el9_8 # # End of genspec.sh variables @@ -3795,7 +3795,7 @@ fi # # %changelog -* Fri Aug 07 2026 Andrew Lukoshko - 5.14.0-687.36.1 +* Wed Aug 12 2026 Andrew Lukoshko - 5.14.0-687.38.1 - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -3807,12 +3807,30 @@ fi - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained -* Fri Aug 07 2026 Eduard Abdullin - 5.14.0-687.36.1 +* Wed Aug 12 2026 Eduard Abdullin - 5.14.0-687.38.1 - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds +* Mon Aug 10 2026 CKI KWF Bot [5.14.0-687.38.1.el9_8] +- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] +- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] +- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] +- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] +- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] +- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] +- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] +- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} + +* Fri Aug 07 2026 CKI KWF Bot [5.14.0-687.37.1.el9_8] +- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] +- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] +- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} +- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} +- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] +- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} + * Wed Aug 05 2026 CKI KWF Bot [5.14.0-687.36.1.el9_8] - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]