5110882113
* Mon May 04 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-701.el9]
- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172207]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172207]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172207]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172207]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172207] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172207] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172207]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172207] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172207] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172207]
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171433] {CVE-2026-31607}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-171326] {CVE-2026-31408}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-169810]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-159283]
- s390/mm: Add missing secure storage access fixups for donated memory (Mete Durlu) [RHEL-168793]
- Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-144961]
- audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-145408]
- audit: Use kzalloc() instead of kmalloc()/memset() in audit_krule_to_data() (Ricardo Robaina) [RHEL-145408]
- audit: fix comment misindentation in audit.h (Ricardo Robaina) [RHEL-145408]
- audit: add a missing tab (Ricardo Robaina) [RHEL-145408]
- audit: fix typo in auditfilter.c comment (Ricardo Robaina) [RHEL-145408]
- audit: Replace deprecated strcpy() with strscpy() (Ricardo Robaina) [RHEL-145408]
- audit: fix indentation in audit_log_exit() (Ricardo Robaina) [RHEL-145408]
- audit: mark audit_log_vformat() with __printf() attribute (Ricardo Robaina) [RHEL-145408]
- auditsc: replace memcpy() with strscpy() (Ricardo Robaina) [RHEL-145408]
- audit: use fsnotify group lock helpers (Ricardo Robaina) [RHEL-145408]
- x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Ricardo Robaina) [RHEL-144439]
- kaslr: rename physmem_end and PHYSMEM_END to direct_map_physmem_end (Ricardo Robaina) [RHEL-144439]
- arm64: Expose the end of the linear map in PHYSMEM_END (Ricardo Robaina) [RHEL-144439]
Resolves: RHEL-144439, RHEL-144961, RHEL-145408, RHEL-159283, RHEL-168793, RHEL-169810, RHEL-171326, RHEL-171433, RHEL-172207
Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
38 lines
1.4 KiB
Makefile
38 lines
1.4 KiB
Makefile
RHEL_MAJOR = 9
|
|
RHEL_MINOR = 9
|
|
|
|
#
|
|
# RHEL_RELEASE
|
|
# -------------
|
|
#
|
|
# Represents build number in 'release' part of RPM's name-version-release.
|
|
# name is <package_name>, e.g. kernel
|
|
# version is upstream kernel version this kernel is based on, e.g. 4.18.0
|
|
# release is <RHEL_RELEASE>.<dist_tag>[<buildid>], e.g. 100.el8
|
|
#
|
|
# Use this spot to avoid future merge conflicts.
|
|
# Do not trim this comment.
|
|
RHEL_RELEASE = 701
|
|
|
|
#
|
|
# ZSTREAM
|
|
# -------
|
|
#
|
|
# This variable controls whether we use zstream numbering or not for the
|
|
# package release. The zstream release keeps the build number of the last
|
|
# build done for ystream for the Beta milestone, and increments a second
|
|
# number for each build. The third number is used for branched builds
|
|
# (eg.: for builds with security fixes or hot fixes done outside of the
|
|
# batch release process).
|
|
#
|
|
# For example, with ZSTREAM unset or set to "no", all builds will contain
|
|
# a release with only the build number, eg.: kernel-<kernel version>-X.el*,
|
|
# where X is the build number. With ZSTREAM set to "yes", we will have
|
|
# builds with kernel-<kernel version>-X.Y.Z.el*, where X is the last
|
|
# RHEL_RELEASE number before ZSTREAM flag was set to yes, Y will now be the
|
|
# build number and Z will always be 1 except if you're doing a branched build
|
|
# (when you give RHDISTGIT_BRANCH on the command line, in which case the Z
|
|
# number will be incremented instead of the Y).
|
|
#
|
|
ZSTREAM ?= no
|