Commit c409b5e3 authored by Rocky Automation's avatar Rocky Automation 📺
Browse files

import kernel-4.18.0-305.7.1.el8_4

parent b1b285e0
SOURCES/kernel-abi-stablelists-4.18.0-305.tar.bz2
SOURCES/kernel-kabi-dw-4.18.0-305.tar.bz2
SOURCES/linux-4.18.0-305.3.1.el8_4.tar.xz
SOURCES/linux-4.18.0-305.7.1.el8_4.tar.xz
SOURCES/rheldup3.x509
SOURCES/rhelkpatch1.x509
bf2922872b49aeeb6fe4cdb149d4061604ed7488 SOURCES/kernel-abi-stablelists-4.18.0-305.tar.bz2
4d18d659f47e29331ec86f06d9bd64b93dbac657 SOURCES/kernel-kabi-dw-4.18.0-305.tar.bz2
d2b288ebb87c686a7c29407664622b9ffce66562 SOURCES/linux-4.18.0-305.3.1.el8_4.tar.xz
126a73223304ec88d39b54118a436e877a2d23b0 SOURCES/linux-4.18.0-305.7.1.el8_4.tar.xz
......@@ -2094,6 +2094,8 @@
# CONFIG_SYSTEMPORT is not set
# CONFIG_SYSTEM_BLACKLIST_KEYRING is not set
# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
# CONFIG_SYSTEM_REVOCATION_KEYS is not set
# CONFIG_SYSTEM_REVOCATION_LIST is not set
# CONFIG_SYSV68_PARTITION is not set
# CONFIG_SYSV_FS is not set
# CONFIG_SYS_HYPERVISOR is not set
......
......@@ -2167,6 +2167,8 @@
# CONFIG_SYSTEMPORT is not set
# CONFIG_SYSTEM_BLACKLIST_KEYRING is not set
# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
# CONFIG_SYSTEM_REVOCATION_KEYS is not set
# CONFIG_SYSTEM_REVOCATION_LIST is not set
# CONFIG_SYSV68_PARTITION is not set
# CONFIG_SYSV_FS is not set
# CONFIG_SYS_HYPERVISOR is not set
......
......@@ -1838,6 +1838,8 @@
# CONFIG_SYSCON_REBOOT_MODE is not set
# CONFIG_SYSFS_DEPRECATED is not set
# CONFIG_SYSTEMPORT is not set
# CONFIG_SYSTEM_REVOCATION_KEYS is not set
# CONFIG_SYSTEM_REVOCATION_LIST is not set
# CONFIG_SYSV68_PARTITION is not set
# CONFIG_SYSV_FS is not set
# CONFIG_T5403 is not set
......
......@@ -1912,6 +1912,8 @@
# CONFIG_SYSCON_REBOOT_MODE is not set
# CONFIG_SYSFS_DEPRECATED is not set
# CONFIG_SYSTEMPORT is not set
# CONFIG_SYSTEM_REVOCATION_KEYS is not set
# CONFIG_SYSTEM_REVOCATION_LIST is not set
# CONFIG_SYSV68_PARTITION is not set
# CONFIG_SYSV_FS is not set
# CONFIG_T5403 is not set
......
......@@ -1955,6 +1955,8 @@
# CONFIG_SYSFS_DEPRECATED is not set
# CONFIG_SYSTEMPORT is not set
# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
# CONFIG_SYSTEM_REVOCATION_KEYS is not set
# CONFIG_SYSTEM_REVOCATION_LIST is not set
# CONFIG_SYSV68_PARTITION is not set
# CONFIG_SYSV_FS is not set
# CONFIG_T5403 is not set
......
......@@ -2184,6 +2184,8 @@
# CONFIG_SYSTEM_BLACKLIST_KEYRING is not set
# CONFIG_SYSTEM_DATA_VERIFICATION is not set
# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
# CONFIG_SYSTEM_REVOCATION_KEYS is not set
# CONFIG_SYSTEM_REVOCATION_LIST is not set
# CONFIG_SYSV68_PARTITION is not set
# CONFIG_SYSVIPC is not set
# CONFIG_SYSV_FS is not set
......
......@@ -2028,6 +2028,8 @@
# CONFIG_SYSFS_DEPRECATED is not set
# CONFIG_SYSTEMPORT is not set
# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
# CONFIG_SYSTEM_REVOCATION_KEYS is not set
# CONFIG_SYSTEM_REVOCATION_LIST is not set
# CONFIG_SYSV68_PARTITION is not set
# CONFIG_SYSV_FS is not set
# CONFIG_T5403 is not set
......
......@@ -1850,6 +1850,8 @@
# CONFIG_SYSFS_DEPRECATED is not set
# CONFIG_SYSTEMPORT is not set
# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
# CONFIG_SYSTEM_REVOCATION_KEYS is not set
# CONFIG_SYSTEM_REVOCATION_LIST is not set
# CONFIG_SYSV68_PARTITION is not set
# CONFIG_SYSV_FS is not set
# CONFIG_T5403 is not set
......
......@@ -1920,6 +1920,8 @@
# CONFIG_SYSFS_DEPRECATED is not set
# CONFIG_SYSTEMPORT is not set
# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
# CONFIG_SYSTEM_REVOCATION_KEYS is not set
# CONFIG_SYSTEM_REVOCATION_LIST is not set
# CONFIG_SYSV68_PARTITION is not set
# CONFIG_SYSV_FS is not set
# CONFIG_T5403 is not set
......
......@@ -42,10 +42,10 @@
# define buildid .local
 
%define rpmversion 4.18.0
%define pkgrelease 305.3.1.el8_4
%define pkgrelease 305.7.1.el8_4
 
# allow pkg_release to have configurable %%{?dist} tag
%define specrelease 305.3.1%{?dist}
%define specrelease 305.7.1%{?dist}
 
%define pkg_release %{specrelease}%{?buildid}
 
......@@ -2601,7 +2601,7 @@ fi
#
#
%changelog
* Mon Jun 21 2021 Sherif Nagy <sherif@rockylinux.org> - 4.18.0-305.3.1
* Tue Jun 29 2021 Sherif Nagy <sherif@rockylinux.org> - 4.18.0-305.7.1
- Adding prod certs and changed cert date to 20210620
- Adding Rocky secure boot certs
- Fixing vmlinuz removal
......@@ -2609,9 +2609,63 @@ fi
- Porting to 8.4, debranding and Rocky branding
- Fixing pesign_key_name values
 
* Mon Jun 21 2021 Louis Abel <label@rockylinux.org> - 4.18.0-305.3.1
* Tue Jun 29 2021 Louis Abel <label@rockylinux.org> - 4.18.0-305.7.1
- Debrand the kernel
 
* Mon Jun 14 2021 Jan Stancek <jstancek@redhat.com> [4.18.0-305.7.1.el8_4]
- net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
- net: cls_api: Fix uninitialised struct field bo->unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
- net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
- net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
- flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
- Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
- x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
- net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]
* Mon Jun 07 2021 Jan Stancek <jstancek@redhat.com> [4.18.0-305.6.1.el8_4]
- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
- net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
- redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
- net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
- dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]
* Tue Jun 01 2021 Jan Stancek <jstancek@redhat.com> [4.18.0-305.5.1.el8_4]
- gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
- gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
- gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
- gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
- gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
- gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
- gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
- gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
- gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
- gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
- gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- CI: Update builder containers (Veronika Kabatova)
* Tue May 25 2021 Jan Stancek <jstancek@redhat.com> [4.18.0-305.4.1.el8_4]
- vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]
* Mon May 17 2021 Jan Stancek <jstancek@redhat.com> [4.18.0-305.3.1.el8_4]
- Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment