diff --git a/Makefile.common b/Makefile.common index 71e31fc70f1a288584df3b6ee0c2fceb48d152b0..bab12391de1e5a4d6aab373613c73faa2d63ae28 100644 --- a/Makefile.common +++ b/Makefile.common @@ -9,7 +9,7 @@ RPMVERSION:=3.10.0 # marker is git tag which we base off of for exporting patches MARKER:=v3.10 PREBUILD:= -BUILD:=1160.108.1 +BUILD:=1160.114.2 DIST:=.el7 SPECFILE:=kernel.spec RPM:=$(REDHAT)/rpm diff --git a/download b/download index 1d7cadd78768959d5aec01b48dde3f51fa0758e8..c2bf9e7ebc4461d003df3b53c0a0dad0c645f054 100644 --- a/download +++ b/download @@ -1,3 +1,3 @@ dd4c41c2b2b5e2237fa63282e7bbdd7c kernel-abi-whitelists-1160.tar.bz2 85ce224ff3a41d590b5d0a5f7aa08bab kernel-kabi-dw-1160.tar.bz2 -0f125b17cf156e569295ffee50f22966 linux-3.10.0-1160.108.1.el7.tar.xz +8a03b3f180918d94e791e90f412eb230 linux-3.10.0-1160.114.2.el7.tar.xz diff --git a/kernel.spec b/kernel.spec index 54bdda57f3b1ea409c9d3b25db4384febda5a42a..b10e0057072630cb1b080defd3a363a7f9198a71 100644 --- a/kernel.spec +++ b/kernel.spec @@ -1,11 +1,9 @@ -%define anolis_release .0.1 - # We have to override the new %%install behavior because, well... the kernel is special. %global __spec_install_pre %{___build_pre} Summary: The Linux kernel -%define dist .an7 +%define dist .el7 # % define buildid .local @@ -22,10 +20,10 @@ Summary: The Linux kernel %global distro_build 1160 %define specversion 3.10.0 -%define pkgrelease 1160.108.1.el7 +%define pkgrelease 1160.114.2.el7 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 1160.108.1%{anolis_release}%{?dist} +%define specrelease 1160.114.2%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -1812,8 +1810,39 @@ fi %kernel_variant_files %{with_kdump} kdump %changelog -* Mon Feb 26 2024 yangxianzhao [3.10.0-1160.108.1.el7.0.1] -- spec: modified dist +* Sun Mar 03 2024 Rado Vrbovsky [3.10.0-1160.114.2.el7] +- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} + +* Thu Feb 15 2024 Rado Vrbovsky [3.10.0-1160.114.1.el7] +- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086} + +* Mon Feb 12 2024 Rado Vrbovsky [3.10.0-1160.113.1.el7] +- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} +- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} +- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} +- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} +- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} + +* Fri Feb 02 2024 Rado Vrbovsky [3.10.0-1160.112.1.el7] +- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] +- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} +- cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] +- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] +- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227] + +* Thu Jan 25 2024 Rado Vrbovsky [3.10.0-1160.111.1.el7] +- redhat: rewrite genlog and support Y- tags (Jan Stancek) +- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] +- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409} + +* Thu Jan 18 2024 Rado Vrbovsky [3.10.0-1160.110.1.el7] +- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] + +* Thu Jan 11 2024 Rado Vrbovsky [3.10.0-1160.109.1.el7] +- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] +- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] +- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] +- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973] * Thu Jan 04 2024 Rado Vrbovsky [3.10.0-1160.108.1.el7] - net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302] diff --git a/linux-3.10.0-1160.108.1.el7.tar.xz.0f125b17cf156e569295ffee50f22966 b/linux-3.10.0-1160.108.1.el7.tar.xz.0f125b17cf156e569295ffee50f22966 deleted file mode 100644 index 894e5f66fca6c2ffd931464636b6a383929fa5da..0000000000000000000000000000000000000000 Binary files a/linux-3.10.0-1160.108.1.el7.tar.xz.0f125b17cf156e569295ffee50f22966 and /dev/null differ