diff --git a/Makefile.rhelver b/Makefile.rhelver index 30e41db3f..62dee9302 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 5 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 485 +RHEL_RELEASE = 486 # # ZSTREAM diff --git a/kernel.changelog b/kernel.changelog index 48ae1591d..27ec65ba1 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,19 @@ +* Tue Jul 23 2024 Lucas Zampieri [5.14.0-486.el9] +- ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47634] {CVE-2024-39502} +- i2c: lpi2c: Avoid calling clk_get_rate during transfer (David Arcari) [RHEL-48206] {CVE-2024-40965} +- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work (David Arcari) [RHEL-48206] {CVE-2024-40965} +- i2c: smbus: Support DDR5 and LPDDR5 SPD EEPROMs (David Arcari) [RHEL-49526] +- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48391] {CVE-2024-40984} +- vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47688] {CVE-2024-39499} +- drm/fbdev-generic: Fix framebuffer on big endian devices (Thomas Huth) [RHEL-45158] +- fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31564] {CVE-2024-26686} +- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31564] +- fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31564] +- of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37072] {CVE-2023-52679} +- of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37072] {CVE-2023-52679} +- of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37072] {CVE-2023-52679} +Resolves: RHEL-31564, RHEL-37072, RHEL-45158, RHEL-47634, RHEL-47688, RHEL-48206, RHEL-48391, RHEL-49526 + * Mon Jul 22 2024 Lucas Zampieri [5.14.0-485.el9] - net/mlx5e: Fix netif state handling (Benjamin Poirier) [RHEL-43870] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Benjamin Poirier) [RHEL-43870] diff --git a/kernel.spec b/kernel.spec index f0a5201d7..ecb1110ad 100755 --- a/kernel.spec +++ b/kernel.spec @@ -165,15 +165,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 485 +%define pkgrelease 486 %define kversion 5 -%define tarfile_release 5.14.0-485.el9 +%define tarfile_release 5.14.0-486.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 485%{?buildid}%{?dist} +%define specrelease 486%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-485.el9 +%define kabiversion 5.14.0-486.el9 # # End of genspec.sh variables @@ -3753,6 +3753,21 @@ fi # # %changelog +* Tue Jul 23 2024 Lucas Zampieri [5.14.0-486.el9] +- ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47634] {CVE-2024-39502} +- i2c: lpi2c: Avoid calling clk_get_rate during transfer (David Arcari) [RHEL-48206] {CVE-2024-40965} +- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work (David Arcari) [RHEL-48206] {CVE-2024-40965} +- i2c: smbus: Support DDR5 and LPDDR5 SPD EEPROMs (David Arcari) [RHEL-49526] +- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48391] {CVE-2024-40984} +- vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47688] {CVE-2024-39499} +- drm/fbdev-generic: Fix framebuffer on big endian devices (Thomas Huth) [RHEL-45158] +- fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31564] {CVE-2024-26686} +- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31564] +- fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31564] +- of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37072] {CVE-2023-52679} +- of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37072] {CVE-2023-52679} +- of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37072] {CVE-2023-52679} + * Mon Jul 22 2024 Lucas Zampieri [5.14.0-485.el9] - net/mlx5e: Fix netif state handling (Benjamin Poirier) [RHEL-43870] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Benjamin Poirier) [RHEL-43870] diff --git a/sources b/sources index fd5bd7607..d02db5614 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-485.el9.tar.xz) = d03f01e1303ebe96aac5ca0375b0bc247d6051dd2c571507bfc8b1ee33f3a80d50b5d8a154710cc6fc7389fdb79be40f941fa5a21c0422fb6a19f3cda57ebc4d -SHA512 (kernel-abi-stablelists-5.14.0-485.el9.tar.bz2) = 3f73e483e7cd378e9532a4fb3c4f5771945aef7ecfb572c357a3a1bdc0483b48ac264808e494fe0d7bf78a0d60de2772ebc49d74da2752c452df70a5cd4510cd -SHA512 (kernel-kabi-dw-5.14.0-485.el9.tar.bz2) = 25b89898a61586ad9839f7007e2bb6d1c6656286b1ad38bbef1a98dc46e42b302954113bdd9ebf18444d57ac9182939010526a309f6e5bb01c754e9186067851 +SHA512 (linux-5.14.0-486.el9.tar.xz) = 39e2aa174d35e256622597dc6fc5ef3521eaacd3b551093a44f368adc1a248b1639e21867cdcc1b9c728beaf89bb0518faa1dd0f623cc034363c83e1ec8e624f +SHA512 (kernel-abi-stablelists-5.14.0-486.el9.tar.bz2) = a592cee671b9344508adbc13c5adca76adfdffc8b03da91ad5765e60f1009013733abe72eb6430d89dc22df9481ea6afe720fdad48c22c92094df98bbfcecc01 +SHA512 (kernel-kabi-dw-5.14.0-486.el9.tar.bz2) = ee2bc38840cb4e8d91e2002b0d21e1ee30d7591e237c182065ee71797b9602ff4f105b594e773c35b28fdf5141ec92d0190102683172b40c1f93cd0770c45fd3