diff --git a/.gitignore b/.gitignore index f807a75..63009d9 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,3 @@ -SOURCES/kernel-rt-3.10.0-862.rt56.804.tar.xz +SOURCES/kernel-rt-3.10.0-862.2.3.rt56.806.tar.xz SOURCES/rheldup3.x509 SOURCES/rhelkpatch1.x509 diff --git a/.kernel-rt.metadata b/.kernel-rt.metadata index 9c4689e..f5196b9 100644 --- a/.kernel-rt.metadata +++ b/.kernel-rt.metadata @@ -1,3 +1,3 @@ -02dd3c45f1ec6cc6864a8c2b923db6152241f9f3 SOURCES/kernel-rt-3.10.0-862.rt56.804.tar.xz +3ee3e2b1e29d16f8e947daa0f22948bfaf83f65f SOURCES/kernel-rt-3.10.0-862.2.3.rt56.806.tar.xz 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509 d90885108d225a234a5a9d054fc80893a5bd54d0 SOURCES/rhelkpatch1.x509 diff --git a/SPECS/kernel-rt.spec b/SPECS/kernel-rt.spec index 56c496e..dfeb1b0 100644 --- a/SPECS/kernel-rt.spec +++ b/SPECS/kernel-rt.spec @@ -4,15 +4,13 @@ Summary: The Linux Realtime kernel # catch building on Fedora -%if "%{?dist}" == "" || "0%{?fedora}" != "0" %global dist .el7 -%endif # realtimeN -%global rtbuild 804 +%global rtbuild 806 # RHEL7 build number -%global rhel_build 862 +%global rhel_build 862.2.3 # The preempt RT patch level %global rttag rt56 @@ -1400,6 +1398,55 @@ fi %endif %changelog +* Mon Apr 30 2018 Clark Williams [3.10.0-862.2.3.rt56.806.el7] +- [rt] Update source tree to match RHEL 7.5 tree [1549768 1462329] +- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087} +- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897} + +* Fri Apr 13 2018 Luis Claudio R. Goncalves [3.10.0-862.1.1.rt56.805.el7] +- [rt] Update source tree to match RHEL 7.5 tree [1549768 1462329] +- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061] +- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061] +- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091} +- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651] +- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003] +- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003] +- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003] +- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003] +- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847] +- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647] +- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911] +- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927] +- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927] +- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags & wrapper (Mauricio Oliveira) [1563096 1553927] +- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716] +- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731] +- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058] +- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058] +- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058] +- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163] +- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163] +- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163] +- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163] +- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163] +- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670] +- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047] +- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047] +- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047] +- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047] +- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047] +- [crypto] chelsio: make skb_put & friends return void pointers (Arjun Vynipadath) [1561899 1548047] +- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911] +- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911] +- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911] +- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911] +- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499] +- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068} +- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068} +- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068} +- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068} +- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939} + * Thu Mar 22 2018 Luis Claudio R. Goncalves [3.10.0-862.rt56.804.el7] - [rt] Update source tree to match RHEL 7.5 tree [1462329] - [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]