import kernel-4.18.0-477.21.1.el8_8

.kernel.checksum

-8b629986a5ee844ebaf16f7a7326e7a557070db0a522aa0991ff2f9a2083f9f3
\ No newline at end of file
+fc3ca7dca7bc40ae1f74eba3df64cb698269b1b1fe07c0e872fc1d4462524a4c

.kernel.metadata

 c6d43c94bcbc73c81df3026bc201a88886b8ceebe98188cdb69bdd61bd6be287 SOURCES/secureboot_ppc.cer
-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 SOURCES/Module.kabi_dup_aarch64
 00d357cd7b0372fbd1e54fcdbcf380d92ac9e698d0082cab486a177ae4cd34bd SOURCES/secureboot_s390.cer
-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 SOURCES/Module.kabi_dup_ppc64le
-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 SOURCES/Module.kabi_dup_s390x
-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 SOURCES/Module.kabi_dup_x86_64
 af61197112f29a3a52f3825d363fe3103dc98cad269763071ee86eb2aedc139b SOURCES/rheldup3.x509
-fdeea7f06eab1d632a07406508351edf77123d2eeab0e39688934e3e18ae2a7b SOURCES/kernel-abi-stablelists-4.18.0-477.tar.bz2
+5bb4e60cb4884ac9fc17d0701304f183cdda678bd1ae2333d0389c398102a680 SOURCES/kernel-abi-stablelists-4.18.0-477.tar.bz2
 59385d0b89010159180c6aa71a06f46e3381f6576341627b4b96363dfceeed68 SOURCES/rhelkpatch1.x509
-814d24ffa0940d627c01bb34182da81d6f698c07fecbcc25c25272015e9f60bf SOURCES/kernel-kabi-dw-4.18.0-477.tar.bz2
-f59784d8a45c337ff3313f46a4d6ee396f4fb9d9ead3a686addaddd3ef07eaa0 SOURCES/linux-4.18.0-477.15.1.el8_8.tar.xz
-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 SOURCES/linux-kernel-test.patch
+818881c2ef981a2166adeaab7aa022ea924c6017ea533196bd9f4564ce86b334 SOURCES/kernel-kabi-dw-4.18.0-477.tar.bz2
+a3f056292def81c1e30276d9eaa443be68f3d548bbf8310300c9608519863572 SOURCES/linux-4.18.0-477.21.1.el8_8.tar.xz
 a41afec466e85f216c3aa468cd4a41e15370fc540484794b147744471c09ca02 SOURCES/redhatsecureboot301.cer
 81ccee9747e67dd8c5e5d08ba5b336da9b9bcdbff89422f5a8cc2fa450b3f03e SOURCES/redhatsecureboot501.cer
 9996c73616ee42f13396c9abfb4b646b538c3c80940474b710afdbe53bf17d32 SOURCES/redhatsecurebootca3.cer

SPECS/kernel.spec

@@ -38,10 +38,10 @@
 # define buildid .local
 %define rpmversion 4.18.0
-%define pkgrelease 477.15.1.el8_8
+%define pkgrelease 477.21.1.el8_8
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 477.15.1%{?dist}
+%define specrelease 477.21.1%{?dist}
 %define pkg_release %{specrelease}%{?buildid}
@@ -2677,7 +2677,7 @@ fi
 #
 #
 %changelog
-* Wed Jun 28 2023 Release Engineering <releng@rockylinux.org> - 4.18.0-477.15.1
+* Tue Aug 08 2023 Release Engineering <releng@rockylinux.org> - 4.18.0-477.21.1
 - Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
 - Adding Rocky secure boot certs (Sherif Nagy)
 - Fixing vmlinuz removal (Sherif Nagy)
@@ -2686,6 +2686,154 @@ fi
 - Fixing pesign_key_name values (Sherif Nagy)
 - Debrand the kernel (Louis Abel)
+* Thu Jul 20 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.21.1.el8_8]
+- ipmi: msghandler: kABI implementation was wrong (Tony Camuso) [2213189 2182345]
+- ipmi: ipmb: Fix the MODULE_PARM_DESC associated to 'retry_time_ms' (Tony Camuso) [2211667 2174220]
+- ipmi:ssif: Add a timer between request retries (Tony Camuso) [2211667 2174220]
+- ipmi:ssif: Remove rtc_us_timer (Tony Camuso) [2211667 2174220]
+- ipmi_ssif: Rename idle state and check (Tony Camuso) [2211667 2174220]
+- ipmi:ssif: resend_msg() cannot fail (Tony Camuso) [2211667 2174220]
+- ipmi/watchdog: use strscpy() to instead of strncpy() (Tony Camuso) [2211667 2174220]
+- ipmi: ssif_bmc: Convert to i2c's .probe_new() (Tony Camuso) [2211667 2174220]
+- ipmi: fix use after free in _ipmi_destroy_user() (Tony Camuso) [2211667 2174220]
+- ipmi:ssif: Increase the message retry time (Tony Camuso) [2211667 2174220]
+- ipmi: Fix some kernel-doc warnings (Tony Camuso) [2211667 2174220]
+- ipmi: ssif_bmc: Use EPOLLIN instead of POLLIN (Tony Camuso) [2211667 2174220]
+- ipmi: fix msg stack when IPMI is disconnected (Tony Camuso) [2211667 2174220]
+- ipmi: fix memleak when unload ipmi driver (Tony Camuso) [2211667 2174220]
+- ipmi: fix long wait in unload when IPMI disconnect (Tony Camuso) [2211667 2174220]
+- ipmi: kcs: Poll OBF briefly to reduce OBE latency (Tony Camuso) [2211667 2174220]
+- ipmi: ssif_bmc: Add SSIF BMC driver (Tony Camuso) [2211667 2174220]
+- ipmi: Remove unused struct watcher_entry (Tony Camuso) [2211667 2174220]
+- ipmi: kcs: aspeed: Update port address comments (Tony Camuso) [2211667 2174220]
+- ipmi: Add __init/__exit annotations to module init/exit funcs (Tony Camuso) [2211667 2174220]
+- ipmi:ipmb: Don't call ipmi_unregister_smi() on a register failure (Tony Camuso) [2211667 2174220]
+- ipmi:ipmb: Fix a vague comment and a typo (Tony Camuso) [2211667 2174220]
+- ipmi: Fix comment typo (Tony Camuso) [2211667 2174220]
+- char: ipmi: modify NPCM KCS configuration (Tony Camuso) [2211667 2174220]
+
+* Thu Jul 13 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.20.1.el8_8]
+- block: make sure local irq is disabled when calling __blkcg_rstat_flush (Ming Lei) [2220810 2208904]
+- blk-cgroup: Flush stats before releasing blkcg_gq (Ming Lei) [2220810 2208904]
+- PCI: vmd: Add quirk to configure PCIe ASPM and LTR (Myron Stowe) [2211198 2136922]
+- PCI: vmd: Create feature grouping for client products (Myron Stowe) [2211198 2136922]
+- PCI: vmd: Use PCI_VDEVICE in device list (Myron Stowe) [2211198 2136922]
+- PCI/ASPM: Add pci_enable_link_state() (Myron Stowe) [2211198 2136922]
+- PCI: vmd: Fix secondary bus reset for Intel bridges (Myron Stowe) [2211198 2136922]
+- PCI: vmd: Disable MSI remapping after suspend (Myron Stowe) [2211198 2136922]
+- PCI: vmd: Add DID 8086:7D0B and 8086:AD0B for Intel MTL SKUs (Myron Stowe) [2211198 2136922]
+- PCI: vmd: Use devm_kasprintf() instead of simple kasprintf() (Myron Stowe) [2211198 2136922]
+- powerpc/pseries: unregister VPA when hot unplugging a CPU (Mamatha Inamdar) [2193375 2143007]
+- net/sched: cls_tcindex: downgrade to imperfect hash (Davide Caratti) [2192307 2192308] {CVE-2023-1829}
+- powerpc/papr_scm: Update the NUMA distance table for the target node (Mamatha Inamdar) [2212451 2183474]
+- hvcs: Synchronize hotplug remove with port free (Mamatha Inamdar) [2212373 2167962]
+- hvcs: Use vhangup in hotplug remove (Mamatha Inamdar) [2212373 2167962]
+- hvcs: Get reference to tty in remove (Mamatha Inamdar) [2212373 2167962]
+- hvcs: Use driver groups to manage driver attributes (Mamatha Inamdar) [2212373 2167962]
+- hvcs: Use dev_groups to manage hvcs device attributes (Mamatha Inamdar) [2212373 2167962]
+- hvcs: Fix hvcs port reference counting (Mamatha Inamdar) [2212373 2167962]
+- tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup() (Mamatha Inamdar) [2212373 2167962]
+- scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity (Tomas Henzl) [2216498 2160149]
+
+* Thu Jul 06 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.19.1.el8_8]
+- crypto: jitter - correct health test during initialization (Vladis Dronov) [2215079 2214270]
+- rbd: get snapshot context after exclusive lock is ensured to be held (Ilya Dryomov) [2216769 2214973]
+- rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting (Ilya Dryomov) [2216769 2214973]
+- PCI: hv: Add a per-bus mutex state_lock (Vitaly Kuznetsov) [2216543 2184863]
+- Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally" (Vitaly Kuznetsov) [2216543 2184863]
+- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (Vitaly Kuznetsov) [2216543 2184863]
+- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (Vitaly Kuznetsov) [2216543 2184863]
+- PCI: hv: Fix a race condition bug in hv_pci_query_relations() (Vitaly Kuznetsov) [2216543 2184863]
+
+* Thu Jun 29 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.18.1.el8_8]
+- mm: swap: get rid of livelock in swapin readahead (Aristeu Rozanski) [2211513 2182084]
+- macvlan: Fix mc_filter calculation (Xin Long) [2209686 2186948]
+- macvlan: Add netlink attribute for broadcast cutoff (Xin Long) [2209686 2186948]
+- macvlan: Skip broadcast queue if multicast with single receiver (Xin Long) [2209686 2186948]
+- net: macvlan: fix memory leaks of macvlan_common_newlink (Xin Long) [2209686 2186948]
+- net: macvlan: change schedule system_wq to system_unbound_wq (Xin Long) [2209686 2186948]
+- net: macvlan: fix potential UAF problem for lowerdev (Xin Long) [2209686 2186948]
+- macvlan: Support for high multicast packet rate (Xin Long) [2209686 2186948]
+- macvlan: Skip loopback packets in RX handler (Xin Long) [2209686 2186948]
+- macvlan: fix null dereference in macvlan_device_event() (Xin Long) [2209686 2186948]
+- macvlan: add cond_resched() during multicast processing (Xin Long) [2209686 2186948]
+- macvlan: schedule bc_work even if error (Xin Long) [2209686 2186948]
+- macvlan: replace kfree_skb by consume_skb for drop profiles (Xin Long) [2209686 2186948]
+- redhat/genlog.py: add support to list/process zstream Jira tickets (Herton R. Krzesinski)
+- Fix genlog.py to ensure that comments retain "%%" characters. (Eder Zulian)
+- redhat: fix duplicate jira issues in the resolves line (Eder Zulian)
+- redhat: add support for Jira issues in changelog (Eder Zulian)
+- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [2213242 2148404] {CVE-2022-42896}
+
+* Thu Jun 15 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.17.1.el8_8]
+- crypto: rng - Use a different crypto_rng for reseeding (Herbert Xu) [2208127 2193410]
+- mm/rmap: split page_dup_rmap() into page_dup_file_rmap() and page_try_dup_anon_rmap() (David Hildenbrand) [2211658 2179164]
+- mm/memory: slightly simplify copy_present_pte() (David Hildenbrand) [2211658 2179164]
+- mm/hugetlb: take src_mm->write_protect_seq in copy_hugetlb_page_range() (David Hildenbrand) [2211658 2179164]
+- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Tony Camuso) [2189482 2188408] {CVE-2023-2194}
+- perf: Fix check before add_event_to_groups() in perf_group_detach() (Michael Petlan) [2209644 2209645] {CVE-2023-2235}
+- net: sched: fix memory leak in tcindex_set_parms (Davide Caratti) [2184146 2181874] {CVE-2023-1281}
+- net/sched: tcindex: search key must be 16 bits (Davide Caratti) [2184146 2181874] {CVE-2023-1281}
+- net/sched: tcindex: update imperfect hash filters respecting rcu (Davide Caratti) [2184146 2181874] {CVE-2023-1281}
+- xfs: fix off-by-one-block in xfs_discard_folio() (Carlos Maiolino) [2184101 2112147]
+- xfs: drop write error injection is unfixable, remove it (Carlos Maiolino) [2184101 2112147]
+- xfs: use iomap_valid method to detect stale cached iomaps (Carlos Maiolino) [2184101 2112147]
+- iomap: write iomap validity checks (Carlos Maiolino) [2184101 2112147]
+- xfs: xfs_bmap_punch_delalloc_range() should take a byte range (Carlos Maiolino) [2184101 2112147]
+- iomap: buffered write failure should not truncate the page cache (Carlos Maiolino) [2184101 2112147]
+- iomap: Export page_cache_seek_hole_data (Carlos Maiolino) [2184101 2112147]
+- xfs,iomap: move delalloc punching to iomap (Carlos Maiolino) [2184101 2112147]
+- xfs: use byte ranges for write cleanup ranges (Carlos Maiolino) [2184101 2112147]
+- xfs: punching delalloc extents on write failure is racy (Carlos Maiolino) [2184101 2112147]
+- xfs: write page faults in iomap are not buffered writes (Carlos Maiolino) [2184101 2112147]
+- iomap: iomap_read_inline_data cleanup (Carlos Maiolino) [2184101 2112147]
+- iomap: Fix inline extent handling in iomap_readpage (Carlos Maiolino) [2184101 2112147]
+- iomap: constify iomap_iter_srcmap (Carlos Maiolino) [2184101 2112147]
+- iomap: rework unshare flag (Carlos Maiolino) [2184101 2112147]
+- iomap: pass an iomap_iter to various buffered I/O helpers (Carlos Maiolino) [2184101 2112147]
+- iomap: remove iomap_apply (Carlos Maiolino) [2184101 2112147]
+- fsdax: Fix infinite loop in dax_iomap_rw() (Carlos Maiolino) [2184101 2112147]
+- fsdax: switch dax_iomap_rw to use iomap_iter (Carlos Maiolino) [2184101 2112147]
+- iomap: switch iomap_swapfile_activate to use iomap_iter (Carlos Maiolino) [2184101 2112147]
+- iomap: switch iomap_seek_data to use iomap_iter (Carlos Maiolino) [2184101 2112147]
+- iomap: switch iomap_seek_hole to use iomap_iter (Carlos Maiolino) [2184101 2112147]
+- iomap: switch iomap_bmap to use iomap_iter (Carlos Maiolino) [2184101 2112147]
+- iomap: switch iomap_fiemap to use iomap_iter (Carlos Maiolino) [2184101 2112147]
+- iomap: switch __iomap_dio_rw to use iomap_iter (Carlos Maiolino) [2184101 2112147]
+- iomap: support REQ_OP_ZONE_APPEND (Carlos Maiolino) [2184101 2112147]
+- iomap: add a filesystem hook for direct I/O bio submission (Carlos Maiolino) [2184101 2112147]
+- iomap: switch iomap_page_mkwrite to use iomap_iter (Carlos Maiolino) [2184101 2112147]
+- iomap: switch iomap_zero_range to use iomap_iter (Carlos Maiolino) [2184101 2112147]
+- iomap: Change calling convention for zeroing (Carlos Maiolino) [2184101 2112147]
+- iomap: switch iomap_file_unshare to use iomap_iter (Carlos Maiolino) [2184101 2112147]
+- iomap: switch iomap_file_buffered_write to use iomap_iter (Carlos Maiolino) [2184101 2112147]
+- iomap: switch readahead and readpage to use iomap_iter (Carlos Maiolino) [2184101 2112147]
+- iomap: add the new iomap_iter model (Carlos Maiolino) [2184101 2112147]
+- iomap: fix the iomap_readpage_actor return value for inline data (Carlos Maiolino) [2184101 2112147]
+- iomap: Support inline data with block size < page size (Carlos Maiolino) [2184101 2112147]
+- fs: mark the iomap argument to __block_write_begin_int const (Carlos Maiolino) [2184101 2112147]
+- fsdax: mark the iomap argument to dax_iomap_sector as const (Carlos Maiolino) [2184101 2112147]
+- iomap: mark the iomap argument to iomap_read_page_sync const (Carlos Maiolino) [2184101 2112147]
+- iomap: mark the iomap argument to iomap_read_inline_data const (Carlos Maiolino) [2184101 2112147]
+- iomap: mark the iomap argument to iomap_inline_data_valid const (Carlos Maiolino) [2184101 2112147]
+- iomap: mark the iomap argument to iomap_inline_data const (Carlos Maiolino) [2184101 2112147]
+- iomap: mark the iomap argument to iomap_sector const (Carlos Maiolino) [2184101 2112147]
+- s390/uaccess: add missing earlyclobber annotations to __clear_user() (Tobias Huschle) [2192602 2183078]
+- ice: sleep, don't busy-wait, in the SQ send retry loop (Michal Schmidt) [2203285 2184013]
+- ice: remove unused buffer copy code in ice_sq_send_cmd_retry() (Michal Schmidt) [2203285 2184013]
+- ice: sleep, don't busy-wait, for ICE_CTL_Q_SQ_CMD_TIMEOUT (Michal Schmidt) [2203285 2184013]
+- ice: remove ice_ctl_q_info::sq_cmd_timeout (Michal Schmidt) [2203285 2184013]
+- ice: increase the GNSS data polling interval to 20 ms (Michal Schmidt) [2203285 2184013]
+- ice: do not busy-wait to read GNSS data (Michal Schmidt) [2203285 2184013]
+- x86/xen: Split HVM vector callback setup and interrupt gate allocation (Prarit Bhargava) [2214281 2187810]
+- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2213366 2184343]
+
+* Fri Jun 09 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.16.1.el8_8]
+- scsi: target: iscsi: Handle abort for WRITE_PENDING cmds (Maurizio Lombardi) [2211494 2156588]
+- scsi: target: iscsit: Fix TAS handling during conn cleanup (Maurizio Lombardi) [2211494 2156588]
+- xfs: verify buffer contents when we skip log replay (Andrey Albershteyn) [2187455 2187454 2187456] {CVE-2023-2124}
+- redhat/scripts/create-tarball.sh: Use nproc instead of rpm (Lucas Zampieri)
+
 * Fri Jun 02 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.15.1.el8_8]
 - ice: Remove LAG+SRIOV mutual exclusion (Michal Schmidt) [2203214 2120585]
 - platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (Prarit Bhargava) [2185604 2139963]