f01a631720
* Fri Oct 17 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-626.el9]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114300] {CVE-2025-39718}
- vfs: fix copy_file_range() averts filesystem freeze protection (Benjamin Coddington) [RHEL-76048]
- gfs2: Fix unlikely race in gdlm_put_lock (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-116886]
- gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Do not use atomic operations unnecessarily (Andreas Gruenbacher) [RHEL-116886]
- gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-116886]
- gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-116886]
- gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Sanitize gfs2_meta_check, gfs2_metatype_check, gfs2_io_error (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Remove unnecessary gfs2_meta_check_ii argument (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Partially revert "gfs2: do_xmote fixes" (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Minor gfs2_ail1_empty cleanup (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Rename gfs2_withdrawn to gfs2_withdrawing_or_withdrawn (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Juntong Deng) [RHEL-116886]
- gfs2: No more quota complaints after withdraw (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Rename "freeze_workqueue" to "gfs2_freeze" (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-116886]
- gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Remove space before newline (Colin Ian King) [RHEL-116886]
- gfs2: Remove unused sd_withdraw_wait field (Andreas Gruenbacher) [RHEL-116886]
- gfs2: Remove unused GIF_FREE_VFS_INODE flag (Andreas Gruenbacher) [RHEL-116886]
- gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-116886]
- gfs2: Unlock fewer glocks on unmount (Andreas Gruenbacher) [RHEL-116886]
- ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (CKI Backport Bot) [RHEL-115644]
- ptp: allow reading of currently dialed frequency to succeed on free-running clocks (CKI Backport Bot) [RHEL-115644]
- ptp: fix breakage after ptp_vclock_in_use() rework (CKI Backport Bot) [RHEL-115644]
- ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() (CKI Backport Bot) [RHEL-115644]
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106002] {CVE-2025-38461}
Resolves: RHEL-106002, RHEL-114300, RHEL-115644, RHEL-116886, RHEL-76048
Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
68 lines
2.3 KiB
Makefile
68 lines
2.3 KiB
Makefile
RHEL_MAJOR = 9
|
|
RHEL_MINOR = 8
|
|
|
|
#
|
|
# RHEL_RELEASE
|
|
# -------------
|
|
#
|
|
# Represents build number in 'release' part of RPM's name-version-release.
|
|
# name is <package_name>, e.g. kernel
|
|
# version is upstream kernel version this kernel is based on, e.g. 4.18.0
|
|
# release is <RHEL_RELEASE>.<dist_tag>[<buildid>], e.g. 100.el8
|
|
#
|
|
# Use this spot to avoid future merge conflicts.
|
|
# Do not trim this comment.
|
|
RHEL_RELEASE = 626
|
|
|
|
#
|
|
# ZSTREAM
|
|
# -------
|
|
#
|
|
# This variable controls whether we use zstream numbering or not for the
|
|
# package release. The zstream release keeps the build number of the last
|
|
# build done for ystream for the Beta milestone, and increments a second
|
|
# number for each build. The third number is used for branched builds
|
|
# (eg.: for builds with security fixes or hot fixes done outside of the
|
|
# batch release process).
|
|
#
|
|
# For example, with ZSTREAM unset or set to "no", all builds will contain
|
|
# a release with only the build number, eg.: kernel-<kernel version>-X.el*,
|
|
# where X is the build number. With ZSTREAM set to "yes", we will have
|
|
# builds with kernel-<kernel version>-X.Y.Z.el*, where X is the last
|
|
# RHEL_RELEASE number before ZSTREAM flag was set to yes, Y will now be the
|
|
# build number and Z will always be 1 except if you're doing a branched build
|
|
# (when you give RHDISTGIT_BRANCH on the command line, in which case the Z
|
|
# number will be incremented instead of the Y).
|
|
#
|
|
ZSTREAM ?= no
|
|
|
|
#
|
|
# Early y+1 numbering
|
|
# --------------------
|
|
#
|
|
# In early y+1 process, RHEL_RELEASE consists of 2 numbers: x.y
|
|
# First is RHEL_RELEASE inherited/merged from y as-is, second number
|
|
# is incremented with each build starting from 1. After merge from y,
|
|
# it resets back to 1. This way y+1 nvr reflects status of last merge.
|
|
#
|
|
# Example:
|
|
#
|
|
# rhel8.0 rhel-8.1
|
|
# kernel-4.18.0-58.el8 --> kernel-4.18.0-58.1.el8
|
|
# kernel-4.18.0-58.2.el8
|
|
# kernel-4.18.0-59.el8 kernel-4.18.0-59.1.el8
|
|
# kernel-4.18.0-60.el8
|
|
# kernel-4.18.0-61.el8 --> kernel-4.18.0-61.1.el8
|
|
#
|
|
#
|
|
# Use this spot to avoid future merge conflicts.
|
|
# Do not trim this comment.
|
|
EARLY_YSTREAM ?= no
|
|
EARLY_YBUILD:=
|
|
EARLY_YRELEASE:=
|
|
ifneq ("$(ZSTREAM)", "yes")
|
|
ifeq ("$(EARLY_YSTREAM)","yes")
|
|
RHEL_RELEASE:=$(RHEL_RELEASE).$(EARLY_YRELEASE)
|
|
endif
|
|
endif
|