diff --git a/download b/download index d4d2e7800f67db024e8ff15a88c1077ff5e71c3d..f397db401a2712ac3fa4b3761865872204001f15 100644 --- a/download +++ b/download @@ -1,3 +1,3 @@ -34e7fef58de8395cb9a0d0a24a360449 kernel-abi-stablelists-4.18.0-477.tar.bz2 -1f91fd0fb81d4c7531deee29e42a147a kernel-kabi-dw-4.18.0-477.tar.bz2 -c26a924c6de8eb47c3dd7b31c905859f linux-4.18.0-477.27.1.el8_8.tar.xz +fe546b760da1a45540f3a6ed86e46e35 kernel-abi-stablelists-4.18.0-477.tar.bz2 +72e6a55b853d8c916e5bedfeb926dd55 kernel-kabi-dw-4.18.0-477.tar.bz2 +face8c9ef5bbcda84a95f336451857ae linux-4.18.0-477.36.1.el8_8.tar.xz diff --git a/kernel.spec b/kernel.spec index 573f9e6a449fb903eab28218b3ee1b04358d3775..219dd263dd858fb59eabbf5f4f7c05e65949533b 100644 --- a/kernel.spec +++ b/kernel.spec @@ -39,10 +39,10 @@ # define buildid .local %define rpmversion 4.18.0 -%define pkgrelease 477.27.1.el8_8 +%define pkgrelease 477.36.1.el8_8 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 477.27.1%{anolis_release}%{?dist} +%define specrelease 477.36.1%{anolis_release}%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2702,9 +2702,170 @@ fi # # %changelog -* Wed Sep 20 2023 Xiaoping Liu - 4.18.0-477.27.1.0.1 +* Fri Dec 01 2023 Xiaoping Liu - 4.18.0-477.36.1.0.1 - kernel:repair dwarves causes kernel compilation to fail +* Thu Nov 09 2023 Lucas Zampieri [4.18.0-477.36.1.el8_8] +- cifs: sanitize paths in cifs_update_super_prepath. (Ronnie Sahlberg) [RHEL-9462 2182472] +- cifs: Fix UAF in cifs_demultiplex_thread() (Scott Mayhew) [RHEL-15158 RHEL-15160] {CVE-2023-1192} +- RDMA/restrack: Release MR restrack when delete (Kamal Heib) [2244423 2170076] + +* Thu Nov 02 2023 Lucas Zampieri [4.18.0-477.35.1.el8_8] +- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Florian Westphal) {CVE-2023-42753} +- sched/fair: Block nohz tick_stop when cfs bandwidth in use (Phil Auld) [RHEL-12722] +- sched, cgroup: Restore meaning to hierarchical_quota (Phil Auld) [RHEL-12722] +- sched/fair: Hide unused init_cfs_bandwidth() stub (Phil Auld) [RHEL-12722] +- redhat: fix bug/zjira sort in the changelog (Patrick Talbert) +- blk-mq: enforce op-specific segment limits in blk_insert_cloned_request (Ming Lei) [RHEL-14723] +- ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1 (Florian Westphal) [RHEL-12378] +- powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close (Mamatha Inamdar) [2236703 2224883] + +* Fri Oct 27 2023 Lucas Zampieri [4.18.0-477.34.1.el8_8] +- fbcon: set_con2fb_map needs to set con2fb_map! (Wander Lairson Costa) [RHEL-1185 RHEL-1183] +- fbcon: Fix error paths in set_con2fb_map (Wander Lairson Costa) [RHEL-1185 RHEL-1183] + +* Fri Oct 20 2023 Lucas Zampieri [4.18.0-477.33.1.el8_8] +- ice: Don't tx before switchdev is fully configured (Michal Schmidt) [RHEL-11330] +- mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() (Rafael Aquini) [RHEL-11586] +- rbd: take header_rwsem in rbd_dev_refresh() only when updating (Ilya Dryomov) [RHEL-12688] +- rbd: decouple parent info read-in from updating rbd_dev (Ilya Dryomov) [RHEL-12688] +- rbd: decouple header read-in from updating rbd_dev->header (Ilya Dryomov) [RHEL-12688] +- rbd: move rbd_dev_refresh() definition (Ilya Dryomov) [RHEL-12688] + +* Thu Oct 12 2023 Lucas Zampieri [4.18.0-477.32.1.el8_8] +- md: Fix bitmap offset type in sb writer (Nigel Croxon) [2235655 2189478] +- md/raid5: Improve performance for sequential IO (Nigel Croxon) [2235655 2189478] +- md/raid5: remove unused working_disks variable (Nigel Croxon) [2235655 2189478] +- md/raid10: fix memleak of md thread (Nigel Croxon) [2235655 2189478] +- md/raid10: fix memleak for 'conf->bio_split' (Nigel Croxon) [2235655 2189478] +- md/raid10: fix leak of 'r10bio->remaining' for recovery (Nigel Croxon) [2235655 2189478] +- md/raid10: don't BUG_ON() in raise_barrier() (Nigel Croxon) [2235655 2189478] +- md: fix soft lockup in status_resync (Nigel Croxon) [2235655 2189478] +- md: add error_handlers for raid0 and linear (Nigel Croxon) [2235655 2189478] +- md: Use optimal I/O size for last bitmap page (Nigel Croxon) [2235655 2189478] +- md: Fix types in sb writer (Nigel Croxon) [2235655 2189478] +- md: Move sb writer loop to its own function (Nigel Croxon) [2235655 2189478] +- md/raid10: Fix typo in comment (replacment -> replacement) (Nigel Croxon) [2235655 2189478] +- md/raid10: fix null-ptr-deref in raid10_sync_request (Nigel Croxon) [2235655 2189478] +- md/raid10: fix task hung in raid10d (Nigel Croxon) [2235655 2189478] +- md: simplify sysctl registration (Nigel Croxon) [2235655 2189478] +- i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters() (Ivan Vecera) [2238305 2153348] +- i40e: fix misleading debug logs (Ivan Vecera) [2238305 2153348] +- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Ivan Vecera) [2238305 2153348] +- i40e: fix i40e_setup_misc_vector() error handling (Ivan Vecera) [2238305 2153348] +- i40e: fix registers dump after run ethtool adapter self test (Ivan Vecera) [2238305 2153348] +- i40e: fix accessing vsi->active_filters without holding lock (Ivan Vecera) [2238305 2153348] +- i40e: fix flow director packet filter programming (Ivan Vecera) [2238305 2153348] +- i40e: Fix kernel crash during reboot when adapter is in recovery mode (Ivan Vecera) [2238305 2153348] +- i40e: Add checking for null for nlmsg_find_attr() (Ivan Vecera) [2238305 2153348] +- i40e: add double of VLAN header when computing the max MTU (Ivan Vecera) [2238305 2153348] +- i40e: Disallow ip4 and ip6 l4_4_bytes (Ivan Vecera) [2238305 2153348] +- i40e: Fix for VF MAC address 0 (Ivan Vecera) [2238305 2153348] +- i40e: Fix not setting default xps_cpus after reset (Ivan Vecera) [2238305 2153348] +- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229883 2229884] {CVE-2022-40982} +- KVM: Add GDS_NO support to KVM (Waiman Long) [2229883 2229884] {CVE-2022-40982} +- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229883 2229884] {CVE-2022-40982} +- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229883 2229884] {CVE-2022-40982} +- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229883 2229884] {CVE-2022-40982} +- x86/bugs: Use sysfs_emit() (Waiman Long) [2229883 2229884] {CVE-2022-40982} +- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229883 2229884] {CVE-2022-40982} +- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229883 2229884] {CVE-2022-40982} +- arm64: correct the effect of mitigations off on kpti (Waiman Long) [2229883 2229884] {CVE-2022-40982} +- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229883 2229884] {CVE-2022-40982} +- CI: Remove unused kpet_tree_family (Nikolai Kondrashov) +- iavf: schedule a request immediately after add/delete vlan (Petr Oros) [2240751 2231174] +- iavf: add iavf_schedule_aq_request() helper (Petr Oros) [2240751 2231174] +- ice: always add legacy 32byte RXDID in supported_rxdids (Michal Schmidt) [RHEL-10392] +- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Dean Nelson) {CVE-2022-45919} +- media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Dean Nelson) {CVE-2022-45884} +- media: dvb-core: Fix use-after-free due on race condition at dvb_net (Dean Nelson) {CVE-2022-45886} +- media: dvb_ca_en50221: fix a size write bug (Dean Nelson) {CVE-2022-45919} +- media: dvbdev: fix refcnt bug (Dean Nelson) {CVE-2022-45884} +- media: dvbdev: adopts refcnt to avoid UAF (Dean Nelson) {CVE-2022-45884} +- media: dvbdev: fix error logic at dvb_register_device() (Dean Nelson) {CVE-2022-45884} +- media: dvb_net: avoid speculation from net slot (Dean Nelson) {CVE-2022-45886} +- media: dvb_ca_en50221: avoid speculation from CA slot (Dean Nelson) {CVE-2022-45919} +- media: dvbdev: Fix memleak in dvb_register_device (Dean Nelson) {CVE-2022-45884} +- media: media/dvb: Use kmemdup rather than duplicating its implementation (Dean Nelson) {CVE-2022-45884} +- media: dvbdev: remove double-unlock (Dean Nelson) {CVE-2022-45884} +- media: dvb-core: fix epoll() by calling poll_wait first (Dean Nelson) {CVE-2022-45919} +- media: dvb_ca_en50221: off by one in dvb_ca_en50221_io_do_ioctl() (Dean Nelson) {CVE-2022-45919} +- bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar) [2239475 2229965] +- sched/fair: Block nohz tick_stop when cfs bandwidth in use (Phil Auld) [RHEL-12722] +- sched, cgroup: Restore meaning to hierarchical_quota (Phil Auld) [RHEL-12722] +- sched/fair: Hide unused init_cfs_bandwidth() stub (Phil Auld) [RHEL-12722] + +* Fri Oct 06 2023 Lucas Zampieri [4.18.0-477.31.1.el8_8] +- mm/userfaultfd: don't consider uffd-wp bit of writable migration entries (Rafael Aquini) [2237947 2231554] +- mm/userfaultfd: fix uffd-wp handling for THP migration entries (Rafael Aquini) [2237947 2231554] +- mm/userfaultfd: fix uffd-wp special cases for fork() (Rafael Aquini) [2237947 2231554] +- mm/thp: simplify copying of huge zero page pmd when fork (Rafael Aquini) [2237947 2231554] + +* Thu Sep 28 2023 Lucas Zampieri [4.18.0-477.30.1.el8_8] +- redhat: list Z-Jiras in the changelog before Y-Jiras (Herton R. Krzesinski) +- scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (Ewan D. Milne) [2238770 2171092] +- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225492 2225202] {CVE-2023-3609} +- ibmvnic: Do not reset dql stats on NON_FATAL err (Mamatha Inamdar) [2236701 2227904] + +* Thu Sep 21 2023 Lucas Zampieri [4.18.0-477.29.1.el8_8] +- tools/power/x86/intel-speed-select: v1.14 release (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Adjust uncore max/min frequency (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Fix display of uncore min frequency (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Add Emerald Rapid quirk (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: turbo-freq auto mode with SMT off (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: cpufreq reads on offline CPUs (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Use null-terminated string (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Remove duplicate dup() (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Handle open() failure case (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Remove unused non_block flag (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Remove wrong check in set_isst_id() (Prarit Bhargava) [2230163 2154078] +- platform/x86: ISST: Fix typo in comments (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Release v1.13 (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Optimize CPU initialization (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Utilize cpu_map to get physical id (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Remove unused struct clos_config fields (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Enforce isst_id value (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Do not export get_physical_id (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Introduce is_cpu_in_power_domain helper (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Cleanup get_physical_id usage (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Convert more function to use isst_id (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Add pkg and die in isst_id (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Introduce struct isst_id (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Remove unused core_mask array (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Remove dead code (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Fix cpu count for TDP level display (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Remove unneeded semicolon (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Fix off by one check (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Fix warning for perf_cap.cpu (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: Display error on turbo mode disabled (Prarit Bhargava) [2230163 2154078] +- tools/power/x86/intel-speed-select: fix build failure when using -Wl,--as-needed (Prarit Bhargava) [2230163 2154078] +- tools/power turbostat: Introduce support for EMR (Prarit Bhargava) [2230154 2156806] +- powercap: intel_rapl: add support for Emerald Rapids (Prarit Bhargava) [2230146 2156804] +- Revert "NFSv4: Retry LOCK on OLD_STATEID during delegation return" (Benjamin Coddington) [2237840 2217658] +- intel_idle: add Emerald Rapids Xeon support (Prarit Bhargava) [2230155 2156824] +- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (David Arcari) [2223403 2221276] +- netfilter: snat: evict closing tcp entries on reply tuple collision (Florian Westphal) [2236514 2196717] +- cpufreq: intel_pstate: Enable HWP IO boost for all servers (Prarit Bhargava) [2232123 2175625] +- pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE (Benjamin Coddington) [2238394 2218539] + +* Thu Sep 14 2023 Patrick Talbert [4.18.0-477.28.1.el8_8] +- Revert "xfs: expose the blockgc workqueue knobs publicly" (Bill O'Donnell) [2236813 2223260] +- iommu/vt-d: Fix buggy QAT device mask (Jerry Snitselaar) [2221097 2169568] +- iommu/vt-d: Add a fix for devices need extra dtlb flush (Jerry Snitselaar) [2221097 2169568] +- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228709 2225512] {CVE-2023-4128} +- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228709 2225512] {CVE-2023-4128} +- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228709 2225512] {CVE-2023-4128} +- EDAC/i10nm: Add Intel Emerald Rapids server support (Aristeu Rozanski) [2230161 2165649] +- EDAC/skx_common: Delete duplicated and unreachable code (Aristeu Rozanski) [2230161 2165649] +- EDAC/skx_common: Enable EDAC support for the "near" memory (Aristeu Rozanski) [2230161 2165649] +- EDAC/i10nm: Print an extra register set of retry_rd_err_log (Aristeu Rozanski) [2230161 2165649] +- EDAC/i10nm: Retrieve and print retry_rd_err_log registers for HBM (Aristeu Rozanski) [2230161 2165649] +- EDAC/skx_common: Add ChipSelect ADXL component (Aristeu Rozanski) [2230161 2165649] +- EDAC/i10nm: Fix NVDIMM detection (Aristeu Rozanski) [2230161 2165649] +- EDAC/skx_common: Set the memory type correctly for HBM memory (Aristeu Rozanski) [2230161 2165649] +- EDAC/mc: Add new HBM2 memory type (Aristeu Rozanski) [2230161 2165649] +- EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function (Aristeu Rozanski) [2230161 2165649] + * Thu Aug 31 2023 Lucas Zampieri [4.18.0-477.27.1.el8_8] - gfs2: Fix freeze consistency check in gfs2_trans_add_meta (Andreas Gruenbacher) [2231825 2095340] - gfs2: gfs2_freeze_lock_shared cleanup (Andreas Gruenbacher) [2231825 2095340]