From 32dd48bbf4eee12e6490dff3437da1ea08d36f67 Mon Sep 17 00:00:00 2001 From: Zhao Hang Date: Mon, 10 Mar 2025 17:42:04 +0800 Subject: [PATCH 1/2] [CVE]update to kernel-4.18.0-553.44.1 to #IBS8OJ update to kernel-4.18.0-553.44.1 for CVE-2024-50302 CVE-2024-53197 CVE-2024-57807 CVE-2024-57979 Project: TC2024080204 Signed-off-by: Zhao Hang --- download | 4 +- kernel.spec | 42 +++++++++++++++---- ...es-causes-kernel-compilation-to-fail.patch | 11 ----- 3 files changed, 37 insertions(+), 20 deletions(-) delete mode 100644 repair-dwarves-causes-kernel-compilation-to-fail.patch diff --git a/download b/download index aeeda25..e0ae3a8 100644 --- a/download +++ b/download @@ -1,3 +1,3 @@ -1ee195930cbe85466027fa94891d89c6 kernel-abi-stablelists-4.18.0-553.tar.bz2 +3f3111a750752f2b7a7ce25cf5ee109a kernel-abi-stablelists-4.18.0-553.tar.bz2 559191ff3ea6f1f91b7d06563f479e39 kernel-kabi-dw-4.18.0-553.tar.bz2 -c6bc78ab71b1ae8a79147dfda9ad4c57 linux-4.18.0-553.40.1.el8_10.tar.xz +c29a64dfd452b5da14f18d78c2f08e09 linux-4.18.0-553.44.1.el8_10.tar.xz diff --git a/kernel.spec b/kernel.spec index 2439565..beae1e3 100644 --- a/kernel.spec +++ b/kernel.spec @@ -1,6 +1,5 @@ # We have to override the new %%install behavior because, well... the kernel is special. %global __spec_install_pre %{___build_pre} -%define anolis_release .0.1 # At the time of this writing (2019-03), RHEL8 packages use w2.xzdio # compression for rpms (xz, level 2). @@ -39,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.40.1.el8_10 +%define pkgrelease 553.44.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.40.1%{anolis_release}%{?dist} +%define specrelease 553.44.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -545,7 +544,6 @@ Source4001: rpminspect.yaml # empty final patch to facilitate testing of kernel patches Patch999999: linux-kernel-test.patch -Patch1000: repair-dwarves-causes-kernel-compilation-to-fail.patch # END OF PATCH DEFINITIONS @@ -1103,7 +1101,6 @@ mv linux-%{specversion}-%{pkgrelease} linux-%{KVERREL} cd linux-%{KVERREL} ApplyOptionalPatch linux-kernel-test.patch -%patch1000 -p0 -b .repair-dwarves-causes-kernel-compilation-to-fail # END OF PATCH APPLICATIONS @@ -2699,8 +2696,39 @@ fi # # %changelog -* Wed Feb 12 2025 Xiaoping Liu - 4.18.0-553.40.1.0.1 -- kernel:repair dwarves causes kernel compilation to fail +* Wed Mar 05 2025 Denys Vlasenko [4.18.0-553.44.1.el8_10] +- HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} +- ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] +- ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] +- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} +- ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] + +* Thu Feb 27 2025 Denys Vlasenko [4.18.0-553.43.1.el8_10] +- s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] +- s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] +- locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] +- pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] +- KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] +- KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] +- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] +- s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] +- KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] +- KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] +- scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} +- net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] +- net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] + +* Thu Feb 20 2025 Denys Vlasenko [4.18.0-553.42.1.el8_10] +- net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] +- NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] +- mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] +- scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] +- ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] +- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] + +* Fri Feb 14 2025 Denys Vlasenko [4.18.0-553.41.1.el8_10] +- virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] +- dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] * Thu Feb 06 2025 Denys Vlasenko [4.18.0-553.40.1.el8_10] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} diff --git a/repair-dwarves-causes-kernel-compilation-to-fail.patch b/repair-dwarves-causes-kernel-compilation-to-fail.patch deleted file mode 100644 index 74f4020..0000000 --- a/repair-dwarves-causes-kernel-compilation-to-fail.patch +++ /dev/null @@ -1,11 +0,0 @@ ---- Makefile.orig 2022-10-07 22:45:37.000000000 +0800 -+++ Makefile 2023-02-22 15:37:33.069118145 +0800 -@@ -378,7 +378,7 @@ - STRIP = $(CROSS_COMPILE)strip - OBJCOPY = $(CROSS_COMPILE)objcopy - OBJDUMP = $(CROSS_COMPILE)objdump --PAHOLE = pahole -+PAHOLE = pahole --skip_encoding_btf_enum64 - RESOLVE_BTFIDS = $(objtree)/tools/bpf/resolve_btfids/resolve_btfids - LEX = flex - YACC = bison -- Gitee From 7e5d63593d4315ddf6cc0c9015f8ff392c37b1c8 Mon Sep 17 00:00:00 2001 From: liuxiaoping Date: Wed, 22 Feb 2023 15:53:19 +0800 Subject: [PATCH 2/2] kernel:repair dwarves causes kernel compilation to fail --- kernel.spec | 8 +++++++- ...ir-dwarves-causes-kernel-compilation-to-fail.patch | 11 +++++++++++ 2 files changed, 18 insertions(+), 1 deletion(-) create mode 100644 repair-dwarves-causes-kernel-compilation-to-fail.patch diff --git a/kernel.spec b/kernel.spec index beae1e3..875b878 100644 --- a/kernel.spec +++ b/kernel.spec @@ -1,5 +1,6 @@ # We have to override the new %%install behavior because, well... the kernel is special. %global __spec_install_pre %{___build_pre} +%define anolis_release .0.1 # At the time of this writing (2019-03), RHEL8 packages use w2.xzdio # compression for rpms (xz, level 2). @@ -41,7 +42,7 @@ %define pkgrelease 553.44.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.44.1%{?dist} +%define specrelease 553.44.1%{anolis_release}%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -544,6 +545,7 @@ Source4001: rpminspect.yaml # empty final patch to facilitate testing of kernel patches Patch999999: linux-kernel-test.patch +Patch1000: repair-dwarves-causes-kernel-compilation-to-fail.patch # END OF PATCH DEFINITIONS @@ -1101,6 +1103,7 @@ mv linux-%{specversion}-%{pkgrelease} linux-%{KVERREL} cd linux-%{KVERREL} ApplyOptionalPatch linux-kernel-test.patch +%patch1000 -p0 -b .repair-dwarves-causes-kernel-compilation-to-fail # END OF PATCH APPLICATIONS @@ -2696,6 +2699,9 @@ fi # # %changelog +* Mon Mar 10 2025 Xiaoping Liu - 4.18.0-553.44.1.0.1 +- kernel:repair dwarves causes kernel compilation to fail + * Wed Mar 05 2025 Denys Vlasenko [4.18.0-553.44.1.el8_10] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] diff --git a/repair-dwarves-causes-kernel-compilation-to-fail.patch b/repair-dwarves-causes-kernel-compilation-to-fail.patch new file mode 100644 index 0000000..74f4020 --- /dev/null +++ b/repair-dwarves-causes-kernel-compilation-to-fail.patch @@ -0,0 +1,11 @@ +--- Makefile.orig 2022-10-07 22:45:37.000000000 +0800 ++++ Makefile 2023-02-22 15:37:33.069118145 +0800 +@@ -378,7 +378,7 @@ + STRIP = $(CROSS_COMPILE)strip + OBJCOPY = $(CROSS_COMPILE)objcopy + OBJDUMP = $(CROSS_COMPILE)objdump +-PAHOLE = pahole ++PAHOLE = pahole --skip_encoding_btf_enum64 + RESOLVE_BTFIDS = $(objtree)/tools/bpf/resolve_btfids/resolve_btfids + LEX = flex + YACC = bison -- Gitee