-
Wed Aug 10 2022 Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> [3.10.0-1160.76.1.0.1.el7.OL7]
- debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499}
-
Wed Aug 10 2022 Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> [3.10.0-1160.76.1.el7.OL7]
- Update Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.9.el7
- Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)
-
Tue Jul 26 2022 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]
- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]
-
Tue Jul 19 2022 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]
- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]
-
Wed Jul 13 2022 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]
- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]
-
Thu Jul 07 2022 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]
- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]
-
Tue Jun 28 2022 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]
- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]
-
Wed Jun 15 2022 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]
- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]
-
Tue Jun 14 2022 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]
- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]
-
Mon Jun 06 2022 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]
- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]