From e269e2f543e4354fab5252993eddef2bb6cf8e85 Mon Sep 17 00:00:00 2001 From: rockyautomation <rockyautomation@rockylinux.org> Date: Tue, 26 Nov 2024 07:20:56 +0000 Subject: [PATCH] import kernel-4.18.0-553.30.1.el8_10 --- .kernel.checksum | 2 +- .kernel.metadata | 4 ++-- SPECS/kernel.spec | 37 ++++++++++++++++++++++++++++++++++--- 3 files changed, 37 insertions(+), 6 deletions(-) diff --git a/.kernel.checksum b/.kernel.checksum index d818aaa..6041f38 100644 --- a/.kernel.checksum +++ b/.kernel.checksum @@ -1 +1 @@ -814408e9b28f7db3dc631071562e4443388db53f15701a813ddd294f4a32cd9b +dea7d91c42505027d3cc48cf3d623dadff267a5d90e2fef6ab70a2a0ac5e17f8 diff --git a/.kernel.metadata b/.kernel.metadata index abb02cc..e5cb48c 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,6 +1,6 @@ -274c5211d32d032c4e1fa3e3439c2435ccd9f797cc2e0147b99378365bfbca91 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 +ecf11419fb6a01df599a7531364dc305b8b22b16d75a5ed05e1d3b9cf66bce6f SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 721aa980c9eedf50f81cd7b3a16a2b8780dc3024c337e92e24ec20deab3d6f13 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -eab5e3f4e34c5149e0ed48654ba56450370cdc5b0a40ec8d59f667fa86fb2cd4 SOURCES/linux-4.18.0-553.27.1.el8_10.tar.xz +b0d8ac47c79d59113946835e892fd4ff4e370dd07a2bfead9ee15437f9500bf8 SOURCES/linux-4.18.0-553.30.1.el8_10.tar.xz 00d357cd7b0372fbd1e54fcdbcf380d92ac9e698d0082cab486a177ae4cd34bd SOURCES/redhatsecureboot302.cer c6d43c94bcbc73c81df3026bc201a88886b8ceebe98188cdb69bdd61bd6be287 SOURCES/redhatsecureboot303.cer 81ccee9747e67dd8c5e5d08ba5b336da9b9bcdbff89422f5a8cc2fa450b3f03e SOURCES/redhatsecureboot501.cer diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 14c4a0b..13401b8 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.27.1.el8_10 +%define pkgrelease 553.30.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.27.1%{?dist} +%define specrelease 553.30.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2682,7 +2682,7 @@ fi # # %changelog -* Tue Nov 05 2024 Release Engineering <releng@rockylinux.org> - 4.18.0-553.27.1 +* Tue Nov 26 2024 Release Engineering <releng@rockylinux.org> - 4.18.0-553.30.1 - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) - Adding Rocky secure boot certs (Sherif Nagy) - Fixing vmlinuz removal (Sherif Nagy) @@ -2690,6 +2690,37 @@ fi - Porting to 8.10, debranding and Rocky branding (Louis Abel) - Fixing pesign_key_name values (Sherif Nagy) +* Fri Nov 15 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.30.1.el8_10] +- media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} +- blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] +- rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] +- rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] +- rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] +- smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] +- cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] +- cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] +- cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] +- autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] +- autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] +- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} + +* Thu Nov 07 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.29.1.el8_10] +- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} +- mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} +- cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] + +* Thu Oct 31 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.28.1.el8_10] +- s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] +- smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] +- smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] +- cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] +- Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] +- gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) +- x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] +- audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] +- KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] +- raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] + * Thu Oct 17 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.27.1.el8_10] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} -- GitLab