diff --git a/Makefile.rhelver b/Makefile.rhelver index 1e25dc72a..a1d7b0594 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 6 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 521 +RHEL_RELEASE = 522 # # ZSTREAM diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config index 2fcd780f4..ff1d82275 100644 --- a/kernel-ppc64le-debug-rhel.config +++ b/kernel-ppc64le-debug-rhel.config @@ -832,6 +832,7 @@ CONFIG_CRYPTO_CRYPTD=y CONFIG_CRYPTO_CTR=y CONFIG_CRYPTO_CTS=y CONFIG_CRYPTO_CURVE25519=m +CONFIG_CRYPTO_CURVE25519_PPC64=m CONFIG_CRYPTO_DEFLATE=y CONFIG_CRYPTO_DES=m # CONFIG_CRYPTO_DEV_AMLOGIC_GXL is not set diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config index 73e1fa2b3..fa1d27af5 100644 --- a/kernel-ppc64le-rhel.config +++ b/kernel-ppc64le-rhel.config @@ -832,6 +832,7 @@ CONFIG_CRYPTO_CRYPTD=y CONFIG_CRYPTO_CTR=y CONFIG_CRYPTO_CTS=y CONFIG_CRYPTO_CURVE25519=m +CONFIG_CRYPTO_CURVE25519_PPC64=m CONFIG_CRYPTO_DEFLATE=y CONFIG_CRYPTO_DES=m # CONFIG_CRYPTO_DEV_AMLOGIC_GXL is not set diff --git a/kernel.changelog b/kernel.changelog index da4fa7b6e..155c28518 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,128 @@ +* Sun Oct 20 2024 Rado Vrbovsky [5.14.0-522.el9] +- tcp: fix mptcp DSS corruption due to large pmtu xmit (Paolo Abeni) [RHEL-55470] +- mptcp: handle consistently DSS corruption (Paolo Abeni) [RHEL-55470] +- redhat: spec: add drivers/net to kselftest package (Ivan Vecera) [RHEL-57764] +- netdevsim: fix backwards compatibility in nsim_get_iflink() (Ivan Vecera) [RHEL-57764] +- testing: net-drv: use stats64 for testing (Ivan Vecera) [RHEL-57764] +- net: selftest: add test for netdev netlink queue-get API (Ivan Vecera) [RHEL-57764] +- netdevsim: add NAPI support (Ivan Vecera) [RHEL-57764] +- selftests: net: py: check process exit code in bkg() and background cmd() (Ivan Vecera) [RHEL-57764] +- selftests: drv-net: add require_XYZ() helpers for validating env (Ivan Vecera) [RHEL-57764] +- selftests: drv-net: add a TCP ping test case (and useful helpers) (Ivan Vecera) [RHEL-57764] +- selftests: net: support matching cases by name prefix (Ivan Vecera) [RHEL-57764] +- selftests: drv-net: add a trivial ping test (Ivan Vecera) [RHEL-57764] +- selftests: drv-net: construct environment for running tests which require an endpoint (Ivan Vecera) [RHEL-57764] +- selftests: drv-net: factor out parsing of the env (Ivan Vecera) [RHEL-57764] +- selftests: drv-net: define endpoint structures (Ivan Vecera) [RHEL-57764] +- selftests: net: set the exit code correctly in Python tests (Ivan Vecera) [RHEL-57764] +- selftests: net: fix counting totals when some checks fail (Ivan Vecera) [RHEL-57764] +- net: netdevsim: select PAGE_POOL in Kconfig (Ivan Vecera) [RHEL-57764] +- selftests: net: exercise page pool reporting via netlink (Ivan Vecera) [RHEL-57764] +- selftests: net: support use of NetdevSimDev under "with" in python (Ivan Vecera) [RHEL-57764] +- selftests: net: print full exception on failure (Ivan Vecera) [RHEL-57764] +- selftests: net: print report check location in python tests (Ivan Vecera) [RHEL-57764] +- tools: ynl: don't return None for dumps (Ivan Vecera) [RHEL-57764] +- net: netdevsim: add some fake page pool use (Ivan Vecera) [RHEL-57764] +- selftests: net: reuse common code in bpf_offload (Ivan Vecera) [RHEL-57764] +- testing: net-drv: add a driver test for stats reporting (Ivan Vecera) [RHEL-57764] +- selftests: drivers: add scaffolding for Netlink tests in Python (Ivan Vecera) [RHEL-57764] +- netdevsim: report stats by default, like a real device (Ivan Vecera) [RHEL-57764] +- selftests: nl_netdev: add a trivial Netlink netdev test (Ivan Vecera) [RHEL-57764] +- selftests: net: add scaffolding for Netlink tests in Python (Ivan Vecera) [RHEL-57764] +- selftests: netdevsim: set test timeout to 10 minutes (Ivan Vecera) [RHEL-57764] +- selftests: netdevsim: add a config file (Ivan Vecera) [RHEL-57764] +- selftests: Introduce Makefile variable to list shared bash scripts (Ivan Vecera) [RHEL-57764] +- tools/net/ynl: Report netlink errors without stacktrace (Ivan Vecera) [RHEL-57764] +- tools/net/ynl: Add --output-json arg to ynl cli (Ivan Vecera) [RHEL-57764] +- netdev_features: remove NETIF_F_ALL_FCOE (Michal Schmidt) [RHEL-59091] +- netdev_features: convert NETIF_F_FCOE_MTU to dev->fcoe_mtu (Michal Schmidt) [RHEL-59091] +- netdev_features: convert NETIF_F_NETNS_LOCAL to dev->netns_local (Michal Schmidt) [RHEL-59091] +- netdev_features: convert NETIF_F_LLTX to dev->lltx (Michal Schmidt) [RHEL-59091] +- netdevice: convert private flags > BIT(31) to bitfields (Michal Schmidt) [RHEL-59091] +- RDMA/cxgb4: Added NULL check for lookup_atid (Kamal Heib) [RHEL-61394] +- RDMA/cxgb4: Remove unused declarations (Kamal Heib) [RHEL-61394] +- RDMA/cxgb4: use dma_mmap_coherent() for mapping non-contiguous memory (Kamal Heib) [RHEL-61394] +- RDMA/cxgb4: Delete unused c4iw_ep_redirect prototype (Kamal Heib) [RHEL-61394] +- RDMA/cxgb4: Check skb value for failure to allocate (Kamal Heib) [RHEL-61394] +- RDMA/cxgb4: Set sq_sig_type correctly (Kamal Heib) [RHEL-61394] +- crypto: qat - remove unused adf_devmgr_get_first (Vladis Dronov) [RHEL-52749] +- crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Vladis Dronov) [RHEL-52749] +- crypto: qat/qat_420xx - fix off by one in uof_get_name() (Vladis Dronov) [RHEL-52749] +- crypto: qat - remove check after debugfs_create_dir() (Vladis Dronov) [RHEL-52749] +- crypto: qat - Remove trailing space after \n newline (Vladis Dronov) [RHEL-52749] +- crypto: qat - fix "Full Going True" macro definition (Vladis Dronov) [RHEL-52749] +- crypto: qat - Use static_assert() to check struct sizes (Vladis Dronov) [RHEL-52749] +- crypto: qat - allow disabling SR-IOV VFs (Vladis Dronov) [RHEL-52749] +- crypto: qat - ensure correct order in VF restarting handler (Vladis Dronov) [RHEL-52749] +- crypto: qat - fix recovery flow for VFs (Vladis Dronov) [RHEL-52749] +- crypto: qat - disable IOV in adf_dev_stop() (Vladis Dronov) [RHEL-52749] +- crypto: qat - preserve ADF_GENERAL_SEC (Vladis Dronov) [RHEL-52749] +- crypto: qat - fix unintentional re-enabling of error interrupts (Vladis Dronov) [RHEL-52749] +- crypto: qat - extend scope of lock in adf_cfg_add_key_value_param() (Vladis Dronov) [RHEL-52749] +- Documentation: qat: fix auto_reset attribute details (Vladis Dronov) [RHEL-52749] +- crypto: qat - initialize user_input.lock for rate_limiting (Vladis Dronov) [RHEL-52749] +- crypto: qat - make adf_ctl_class constant (Vladis Dronov) [RHEL-52749] +- crypto: qat - Fix typo (Vladis Dronov) [RHEL-52749] +- crypto: qat - fix linking errors when PCI_IOV is disabled (Vladis Dronov) [RHEL-52749] +- attr: block mode changes of symlinks (CKI Backport Bot) [RHEL-60822] +- selftests: netfilter: Fix nft_audit.sh for newer nft binaries (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: prevent nf_skb_duplicated corruption (Florian Westphal) [RHEL-60554] +- selftests: netfilter: add test case for recent mismatch bug (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: annotate data-races around element expiration (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: store new sets in dedicated list (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU (Florian Westphal) [RHEL-60554] +- netfilter: nft_dynset: annotate data-races around set timeout (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: reject expiration higher than timeout (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: reject element expiration with no timeout (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire (Florian Westphal) [RHEL-60554] +- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level() (Florian Westphal) [RHEL-60554] +- netfilter: nft_socket: make cgroupsv2 matching work with namespaces (Florian Westphal) [RHEL-60554] +- netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: restore IP sanity checks for netdev/egress (Florian Westphal) [RHEL-60554] +- netfilter: flowtable: validate vlan header (Florian Westphal) [RHEL-60554] +- netfilter: nft_counter: Synchronize nft_counter_reset() against reader. (Florian Westphal) [RHEL-60554] +- netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: Introduce nf_tables_getobj_single (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: Audit log dump reset after the fact (Florian Westphal) [RHEL-60554] +- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks (Florian Westphal) [RHEL-60554] +- netfilter: nft_set_pipapo_avx2: disable softinterrupts (Florian Westphal) [RHEL-60554] +- netfilter: nf_set_pipapo: fix initial map fill (Florian Westphal) [RHEL-60554] +- netfilter: ctnetlink: use helper function to calculate expect ID (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: rise cap on SELinux secmark context (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: unconditionally flush pending work before notifier (Florian Westphal) [RHEL-60554] +- netfilter: nft_payload: restore vlan q-in-q match support (Florian Westphal) [RHEL-60554] +- netfilter: nft_payload: skbuff vlan metadata mangle support (Florian Westphal) [RHEL-60554] +- netfilter: nft_payload: rebuild vlan header on h_proto access (Florian Westphal) [RHEL-60554] +- netfilter: nft_payload: rebuild vlan header when needed (Florian Westphal) [RHEL-60554] +- netfilter: nft_payload: move struct nft_payload_set definition where it belongs (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: add and use BE register load-store helpers (Florian Westphal) [RHEL-60554] +- wireguard: send: annotate intentional data race in checking empty queue (CKI Backport Bot) [RHEL-60227] +- wireguard: queueing: annotate intentional data race in cpu round robin (CKI Backport Bot) [RHEL-60227] +- dpll: extend lock_status_get() op by status error and expose to user (Petr Oros) [RHEL-59895] +- dpll: extend uapi by lock status error attribute (Petr Oros) [RHEL-59895] +- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Add support for efficiency latency control (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Do not present separate package-die domain (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Use generic helpers for current frequency (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Get rid of magic min_max argument (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Get rid of magic values (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Re-arrange bit masks (David Arcari) [RHEL-46062] +- platform/x86: intel-uncore-freq: Switch to new Intel CPU model defines (David Arcari) [RHEL-46062] +- selftests: forwarding: router_mpath_hash: Add a new selftest (Ivan Vecera) [RHEL-59087] +- selftests: forwarding: lib: Split sysctl_save() out of sysctl_set() (Ivan Vecera) [RHEL-59087] +- net: ipv4: Add a sysctl to set multipath hash seed (Ivan Vecera) [RHEL-59087] +- net: ipv4,ipv6: Pass multipath hash computation through a helper (Ivan Vecera) [RHEL-59087] +- Enable cryptographic curve25519 config flag for PowerPC (Mamatha Inamdar) [RHEL-52758] +- crypto: vmx - Improved AES/XTS performance of 6-way unrolling for ppc (Mamatha Inamdar) [RHEL-52758] +- crypto: ppc/curve25519 - Low-level primitives for ppc64le (Mamatha Inamdar) [RHEL-52758] +- crypto: ppc/curve25519 - Core functions for ppc64le (Mamatha Inamdar) [RHEL-52758] +- crypto: ppc/curve25519 - Update Kconfig and Makefile for ppc64le (Mamatha Inamdar) [RHEL-52758] +Resolves: RHEL-46062, RHEL-52749, RHEL-52758, RHEL-55470, RHEL-57764, RHEL-59087, RHEL-59091, RHEL-59895, RHEL-60227, RHEL-60554, RHEL-60822, RHEL-61394 + * Sat Oct 19 2024 Rado Vrbovsky [5.14.0-521.el9] - ice: stop calling pci_disable_device() as we use pcim (Myron Stowe) [RHEL-59033] - PCI: keystone: Fix if-statement expression in ks_pcie_quirk() (Myron Stowe) [RHEL-59033] diff --git a/kernel.spec b/kernel.spec index 57c2d504f..1c91cca1a 100755 --- a/kernel.spec +++ b/kernel.spec @@ -165,15 +165,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 521 +%define pkgrelease 522 %define kversion 5 -%define tarfile_release 5.14.0-521.el9 +%define tarfile_release 5.14.0-522.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 521%{?buildid}%{?dist} +%define specrelease 522%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-521.el9 +%define kabiversion 5.14.0-522.el9 # # End of genspec.sh variables @@ -2791,7 +2791,7 @@ export BPFTOOL=$(pwd)/tools/bpf/bpftool/bpftool pushd tools/testing/selftests # We need to install here because we need to call make with ARCH set which # doesn't seem possible to do in the install section. -%{make} %{?_smp_mflags} ARCH=$Arch V=1 TARGETS="bpf cgroup mm livepatch net net/forwarding net/mptcp netfilter tc-testing memfd drivers/net/bonding iommu cachestat" SKIP_TARGETS="" FORCE_TARGETS=1 INSTALL_PATH=%{buildroot}%{_libexecdir}/kselftests VMLINUX_H="${RPM_VMLINUX_H}" DEFAULT_INSTALL_HDR_PATH=0 install +%{make} %{?_smp_mflags} ARCH=$Arch V=1 TARGETS="bpf cgroup mm livepatch net net/forwarding net/mptcp netfilter tc-testing memfd drivers/net/bonding iommu cachestat drivers/net" SKIP_TARGETS="" FORCE_TARGETS=1 INSTALL_PATH=%{buildroot}%{_libexecdir}/kselftests VMLINUX_H="${RPM_VMLINUX_H}" DEFAULT_INSTALL_HDR_PATH=0 install # 'make install' for bpf is broken and upstream refuses to fix it. # Install the needed files manually. @@ -3806,6 +3806,130 @@ fi # # %changelog +* Sun Oct 20 2024 Rado Vrbovsky [5.14.0-522.el9] +- tcp: fix mptcp DSS corruption due to large pmtu xmit (Paolo Abeni) [RHEL-55470] +- mptcp: handle consistently DSS corruption (Paolo Abeni) [RHEL-55470] +- redhat: spec: add drivers/net to kselftest package (Ivan Vecera) [RHEL-57764] +- netdevsim: fix backwards compatibility in nsim_get_iflink() (Ivan Vecera) [RHEL-57764] +- testing: net-drv: use stats64 for testing (Ivan Vecera) [RHEL-57764] +- net: selftest: add test for netdev netlink queue-get API (Ivan Vecera) [RHEL-57764] +- netdevsim: add NAPI support (Ivan Vecera) [RHEL-57764] +- selftests: net: py: check process exit code in bkg() and background cmd() (Ivan Vecera) [RHEL-57764] +- selftests: drv-net: add require_XYZ() helpers for validating env (Ivan Vecera) [RHEL-57764] +- selftests: drv-net: add a TCP ping test case (and useful helpers) (Ivan Vecera) [RHEL-57764] +- selftests: net: support matching cases by name prefix (Ivan Vecera) [RHEL-57764] +- selftests: drv-net: add a trivial ping test (Ivan Vecera) [RHEL-57764] +- selftests: drv-net: construct environment for running tests which require an endpoint (Ivan Vecera) [RHEL-57764] +- selftests: drv-net: factor out parsing of the env (Ivan Vecera) [RHEL-57764] +- selftests: drv-net: define endpoint structures (Ivan Vecera) [RHEL-57764] +- selftests: net: set the exit code correctly in Python tests (Ivan Vecera) [RHEL-57764] +- selftests: net: fix counting totals when some checks fail (Ivan Vecera) [RHEL-57764] +- net: netdevsim: select PAGE_POOL in Kconfig (Ivan Vecera) [RHEL-57764] +- selftests: net: exercise page pool reporting via netlink (Ivan Vecera) [RHEL-57764] +- selftests: net: support use of NetdevSimDev under "with" in python (Ivan Vecera) [RHEL-57764] +- selftests: net: print full exception on failure (Ivan Vecera) [RHEL-57764] +- selftests: net: print report check location in python tests (Ivan Vecera) [RHEL-57764] +- tools: ynl: don't return None for dumps (Ivan Vecera) [RHEL-57764] +- net: netdevsim: add some fake page pool use (Ivan Vecera) [RHEL-57764] +- selftests: net: reuse common code in bpf_offload (Ivan Vecera) [RHEL-57764] +- testing: net-drv: add a driver test for stats reporting (Ivan Vecera) [RHEL-57764] +- selftests: drivers: add scaffolding for Netlink tests in Python (Ivan Vecera) [RHEL-57764] +- netdevsim: report stats by default, like a real device (Ivan Vecera) [RHEL-57764] +- selftests: nl_netdev: add a trivial Netlink netdev test (Ivan Vecera) [RHEL-57764] +- selftests: net: add scaffolding for Netlink tests in Python (Ivan Vecera) [RHEL-57764] +- selftests: netdevsim: set test timeout to 10 minutes (Ivan Vecera) [RHEL-57764] +- selftests: netdevsim: add a config file (Ivan Vecera) [RHEL-57764] +- selftests: Introduce Makefile variable to list shared bash scripts (Ivan Vecera) [RHEL-57764] +- tools/net/ynl: Report netlink errors without stacktrace (Ivan Vecera) [RHEL-57764] +- tools/net/ynl: Add --output-json arg to ynl cli (Ivan Vecera) [RHEL-57764] +- netdev_features: remove NETIF_F_ALL_FCOE (Michal Schmidt) [RHEL-59091] +- netdev_features: convert NETIF_F_FCOE_MTU to dev->fcoe_mtu (Michal Schmidt) [RHEL-59091] +- netdev_features: convert NETIF_F_NETNS_LOCAL to dev->netns_local (Michal Schmidt) [RHEL-59091] +- netdev_features: convert NETIF_F_LLTX to dev->lltx (Michal Schmidt) [RHEL-59091] +- netdevice: convert private flags > BIT(31) to bitfields (Michal Schmidt) [RHEL-59091] +- RDMA/cxgb4: Added NULL check for lookup_atid (Kamal Heib) [RHEL-61394] +- RDMA/cxgb4: Remove unused declarations (Kamal Heib) [RHEL-61394] +- RDMA/cxgb4: use dma_mmap_coherent() for mapping non-contiguous memory (Kamal Heib) [RHEL-61394] +- RDMA/cxgb4: Delete unused c4iw_ep_redirect prototype (Kamal Heib) [RHEL-61394] +- RDMA/cxgb4: Check skb value for failure to allocate (Kamal Heib) [RHEL-61394] +- RDMA/cxgb4: Set sq_sig_type correctly (Kamal Heib) [RHEL-61394] +- crypto: qat - remove unused adf_devmgr_get_first (Vladis Dronov) [RHEL-52749] +- crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Vladis Dronov) [RHEL-52749] +- crypto: qat/qat_420xx - fix off by one in uof_get_name() (Vladis Dronov) [RHEL-52749] +- crypto: qat - remove check after debugfs_create_dir() (Vladis Dronov) [RHEL-52749] +- crypto: qat - Remove trailing space after \n newline (Vladis Dronov) [RHEL-52749] +- crypto: qat - fix "Full Going True" macro definition (Vladis Dronov) [RHEL-52749] +- crypto: qat - Use static_assert() to check struct sizes (Vladis Dronov) [RHEL-52749] +- crypto: qat - allow disabling SR-IOV VFs (Vladis Dronov) [RHEL-52749] +- crypto: qat - ensure correct order in VF restarting handler (Vladis Dronov) [RHEL-52749] +- crypto: qat - fix recovery flow for VFs (Vladis Dronov) [RHEL-52749] +- crypto: qat - disable IOV in adf_dev_stop() (Vladis Dronov) [RHEL-52749] +- crypto: qat - preserve ADF_GENERAL_SEC (Vladis Dronov) [RHEL-52749] +- crypto: qat - fix unintentional re-enabling of error interrupts (Vladis Dronov) [RHEL-52749] +- crypto: qat - extend scope of lock in adf_cfg_add_key_value_param() (Vladis Dronov) [RHEL-52749] +- Documentation: qat: fix auto_reset attribute details (Vladis Dronov) [RHEL-52749] +- crypto: qat - initialize user_input.lock for rate_limiting (Vladis Dronov) [RHEL-52749] +- crypto: qat - make adf_ctl_class constant (Vladis Dronov) [RHEL-52749] +- crypto: qat - Fix typo (Vladis Dronov) [RHEL-52749] +- crypto: qat - fix linking errors when PCI_IOV is disabled (Vladis Dronov) [RHEL-52749] +- attr: block mode changes of symlinks (CKI Backport Bot) [RHEL-60822] +- selftests: netfilter: Fix nft_audit.sh for newer nft binaries (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: prevent nf_skb_duplicated corruption (Florian Westphal) [RHEL-60554] +- selftests: netfilter: add test case for recent mismatch bug (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: annotate data-races around element expiration (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: store new sets in dedicated list (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU (Florian Westphal) [RHEL-60554] +- netfilter: nft_dynset: annotate data-races around set timeout (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: reject expiration higher than timeout (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: reject element expiration with no timeout (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire (Florian Westphal) [RHEL-60554] +- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level() (Florian Westphal) [RHEL-60554] +- netfilter: nft_socket: make cgroupsv2 matching work with namespaces (Florian Westphal) [RHEL-60554] +- netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: restore IP sanity checks for netdev/egress (Florian Westphal) [RHEL-60554] +- netfilter: flowtable: validate vlan header (Florian Westphal) [RHEL-60554] +- netfilter: nft_counter: Synchronize nft_counter_reset() against reader. (Florian Westphal) [RHEL-60554] +- netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: Introduce nf_tables_getobj_single (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: Audit log dump reset after the fact (Florian Westphal) [RHEL-60554] +- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks (Florian Westphal) [RHEL-60554] +- netfilter: nft_set_pipapo_avx2: disable softinterrupts (Florian Westphal) [RHEL-60554] +- netfilter: nf_set_pipapo: fix initial map fill (Florian Westphal) [RHEL-60554] +- netfilter: ctnetlink: use helper function to calculate expect ID (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: rise cap on SELinux secmark context (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: unconditionally flush pending work before notifier (Florian Westphal) [RHEL-60554] +- netfilter: nft_payload: restore vlan q-in-q match support (Florian Westphal) [RHEL-60554] +- netfilter: nft_payload: skbuff vlan metadata mangle support (Florian Westphal) [RHEL-60554] +- netfilter: nft_payload: rebuild vlan header on h_proto access (Florian Westphal) [RHEL-60554] +- netfilter: nft_payload: rebuild vlan header when needed (Florian Westphal) [RHEL-60554] +- netfilter: nft_payload: move struct nft_payload_set definition where it belongs (Florian Westphal) [RHEL-60554] +- netfilter: nf_tables: add and use BE register load-store helpers (Florian Westphal) [RHEL-60554] +- wireguard: send: annotate intentional data race in checking empty queue (CKI Backport Bot) [RHEL-60227] +- wireguard: queueing: annotate intentional data race in cpu round robin (CKI Backport Bot) [RHEL-60227] +- dpll: extend lock_status_get() op by status error and expose to user (Petr Oros) [RHEL-59895] +- dpll: extend uapi by lock status error attribute (Petr Oros) [RHEL-59895] +- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Add support for efficiency latency control (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Do not present separate package-die domain (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Use generic helpers for current frequency (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Get rid of magic min_max argument (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Get rid of magic values (David Arcari) [RHEL-46062] +- platform/x86/intel-uncore-freq: Re-arrange bit masks (David Arcari) [RHEL-46062] +- platform/x86: intel-uncore-freq: Switch to new Intel CPU model defines (David Arcari) [RHEL-46062] +- selftests: forwarding: router_mpath_hash: Add a new selftest (Ivan Vecera) [RHEL-59087] +- selftests: forwarding: lib: Split sysctl_save() out of sysctl_set() (Ivan Vecera) [RHEL-59087] +- net: ipv4: Add a sysctl to set multipath hash seed (Ivan Vecera) [RHEL-59087] +- net: ipv4,ipv6: Pass multipath hash computation through a helper (Ivan Vecera) [RHEL-59087] +- Enable cryptographic curve25519 config flag for PowerPC (Mamatha Inamdar) [RHEL-52758] +- crypto: vmx - Improved AES/XTS performance of 6-way unrolling for ppc (Mamatha Inamdar) [RHEL-52758] +- crypto: ppc/curve25519 - Low-level primitives for ppc64le (Mamatha Inamdar) [RHEL-52758] +- crypto: ppc/curve25519 - Core functions for ppc64le (Mamatha Inamdar) [RHEL-52758] +- crypto: ppc/curve25519 - Update Kconfig and Makefile for ppc64le (Mamatha Inamdar) [RHEL-52758] + * Sat Oct 19 2024 Rado Vrbovsky [5.14.0-521.el9] - ice: stop calling pci_disable_device() as we use pcim (Myron Stowe) [RHEL-59033] - PCI: keystone: Fix if-statement expression in ks_pcie_quirk() (Myron Stowe) [RHEL-59033] diff --git a/sources b/sources index fd4317fd3..6e5044c42 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-521.el9.tar.xz) = ceb37367d78524aee6e259a92539621f50baab7fa8112032e2e0b62f47a2b0afbdbbfbdc0ae5035034e79108dce7dd760463ca4fde6473443efa6ac728084eef -SHA512 (kernel-abi-stablelists-5.14.0-521.el9.tar.bz2) = a84577de59cc421bd34ec211a540f5a9a83821f8246e02a9d051cc4a41b1bfdf9812e71a4da9283be084536f99a12a57ec67c674d2d68b99021b75b6465804dc -SHA512 (kernel-kabi-dw-5.14.0-521.el9.tar.bz2) = 3d08f838767b27b87724fed347ce3be63fce15e5eded0576121c474d14db4a6d07895b350c635e343d5522ac237dfd982d1f39b8480c4129f4eb79f6a64115cb +SHA512 (linux-5.14.0-522.el9.tar.xz) = 63480773f1337418cf984fe45cdeb4aaeef7de257d5c850ad19a9c6ff29f633337087981ec8b7a3ebcf6ddd9ee31da1d6dce0eb61a4acd02ae880dc721bea7fb +SHA512 (kernel-abi-stablelists-5.14.0-522.el9.tar.bz2) = 7850e1349230cc1b069ddb2eb4facb5187d8c28fb56d9f8bd4da0919ae8cdd31b82508c3ca295b09055f73d0dc65f357eaca93159ea8fe9d632fa2b4a83952e9 +SHA512 (kernel-kabi-dw-5.14.0-522.el9.tar.bz2) = 3d08f838767b27b87724fed347ce3be63fce15e5eded0576121c474d14db4a6d07895b350c635e343d5522ac237dfd982d1f39b8480c4129f4eb79f6a64115cb