diff --git a/.gitignore b/.gitignore index 6471c4e..db01fcd 100644 --- a/.gitignore +++ b/.gitignore @@ -1,5 +1,5 @@ SOURCES/kernel-abi-whitelists-1160.tar.bz2 SOURCES/kernel-kabi-dw-1160.tar.bz2 -SOURCES/linux-3.10.0-1160.83.1.el7.tar.xz +SOURCES/linux-3.10.0-1160.88.1.el7.tar.xz SOURCES/rheldup3.x509 SOURCES/rhelkpatch1.x509 diff --git a/.kernel.metadata b/.kernel.metadata index cbdcf0c..3982353 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,5 +1,5 @@ ba5599148e52ecd126ebcf873672e26d3288323e SOURCES/kernel-abi-whitelists-1160.tar.bz2 5000b85c42ef87b6835dd8eef063e4623c2e0fa9 SOURCES/kernel-kabi-dw-1160.tar.bz2 -b8c67631fd35d6a2d8e8a9dd30ae39420f9276ed SOURCES/linux-3.10.0-1160.83.1.el7.tar.xz +4b2ec3a711793136f6d58a0656c6f384804f64c8 SOURCES/linux-3.10.0-1160.88.1.el7.tar.xz 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509 d90885108d225a234a5a9d054fc80893a5bd54d0 SOURCES/rhelkpatch1.x509 diff --git a/README.debrand b/README.debrand deleted file mode 100644 index 01c46d2..0000000 --- a/README.debrand +++ /dev/null @@ -1,2 +0,0 @@ -Warning: This package was configured for automatic debranding, but the changes -failed to apply. diff --git a/SOURCES/Makefile.common b/SOURCES/Makefile.common index c725a4f..16eb1fb 100644 --- a/SOURCES/Makefile.common +++ b/SOURCES/Makefile.common @@ -9,7 +9,7 @@ RPMVERSION:=3.10.0 # marker is git tag which we base off of for exporting patches MARKER:=v3.10 PREBUILD:= -BUILD:=1160.83.1 +BUILD:=1160.88.1 DIST:=.el7 SPECFILE:=kernel.spec RPM:=$(REDHAT)/rpm diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index af1d0b5..ead7175 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -20,10 +20,10 @@ Summary: The Linux kernel %global distro_build 1160 %define rpmversion 3.10.0 -%define pkgrelease 1160.83.1.el7 +%define pkgrelease 1160.88.1.el7 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 1160.83.1%{?dist} +%define specrelease 1160.88.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -1804,6 +1804,44 @@ fi %kernel_variant_files %{with_kdump} kdump %changelog +* Sat Feb 18 2023 Rado Vrbovsky [3.10.0-1160.88.1.el7] +- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] +- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] +- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] + +* Fri Feb 10 2023 Rado Vrbovsky [3.10.0-1160.87.1.el7] +- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} +- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} +- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] +- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} +- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} +- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} +- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} +- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] +- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} +- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} +- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} + +* Thu Feb 02 2023 Rado Vrbovsky [3.10.0-1160.86.1.el7] +- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} +- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} +- gitlab-ci: use CI templates from production branch (Michael Hofmann) +- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] +- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] +- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] +- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] + +* Thu Jan 19 2023 Rado Vrbovsky [3.10.0-1160.85.1.el7] +- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] +- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] +- sctp: handle errors when updating asoc (Xin Long) [2054037] +- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] +- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] + +* Thu Jan 12 2023 Rado Vrbovsky [3.10.0-1160.84.1.el7] +- blk-mq: fix flush-rq race (Ming Lei) [2088029] +- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243] + * Mon Dec 19 2022 Rado Vrbovsky [3.10.0-1160.83.1.el7] - x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]