-
Tue May 16 2023 Darren Archibald <darren.archibald@oracle.com> [4.18.0-477.10.1.el8_8.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
-
Wed Apr 05 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.10.1.el8_8]
- dm: fix __send_duplicate_bios() to always allow for splitting IO (Benjamin Marzinski) [2184429]
- dm: fix improper splitting for abnormal bios (Benjamin Marzinski) [2184429]
-
Tue Apr 04 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.9.1.el8_8]
- ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165342] {CVE-2023-0386}
-
Mon Apr 03 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.8.1.el8_8]
- redhat/configs: Put CONFIG_SFC_* to a proper location (Vladis Dronov)
- redhat/configs: Put CONFIG_SEV_GUEST to a proper location (Vladis Dronov)
- Reinstate "GFS2: free disk inode which is deleted by remote node -V2" (Bob Peterson) [2181343]
-
Thu Mar 30 2023 Patrick Talbert <ptalbert@redhat.com> [4.18.0-477.7.1.el8_8]
- iavf: fix hang on reboot with ice (Stefan Assmann) [2181811]
- iavf: Fix race condition between iavf_shutdown and iavf_remove (Stefan Assmann) [2181811]
- net/ulp: use consistent error code when blocking ULP (Sabrina Dubroca) [2176955 2176956] {CVE-2023-0461}
- net/ulp: prevent ULP without clone op from entering the LISTEN status (Sabrina Dubroca) [2176955 2176956] {CVE-2023-0461}
- lockd: lockd server-side shouldn't set fl_ops (Jeffrey Layton) [2179329]
- NFS: Correct timing for assigning access cache timestamp (Benjamin Coddington) [2180851]
- Switch to z-stream for 8.8 for CKI pipelines (Michael Hofmann)
-
Wed Mar 22 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.6.1.el8_8]
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (Jon Maloy) [2160033] {CVE-2022-2196}
-
Mon Mar 20 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.5.1.el8_8]
- Revert "GFS2: free disk inode which is deleted by remote node -V2" (Bob Peterson) [2109600]
- gfs2: Evict inodes cooperatively (Andreas Gruenbacher) [2109600]
- gfs2: Flush delete work before shrinking inode cache (Andreas Gruenbacher) [2109600]
- gfs2: Add SDF_DEACTIVATING super block flag (Bob Peterson) [2109600]
- gfs2: check gl_object in rgrp glops (Bob Peterson) [2109600]
- gfs2: Split the two kinds of glock "delete" work (Andreas Gruenbacher) [2109600]
- gfs2: Move delete workqueue into super block (Andreas Gruenbacher) [2109600]
- gfs2: Use container_of() for gfs2_glock(aspace) (Andreas Gruenbacher) [2109600]
- gfs2: Get rid of GLF_PENDING_DELETE flag (Andreas Gruenbacher) [2109600]
- gfs2: Make glock lru list scanning safer (Andreas Gruenbacher) [2109600]
- gfs2: Fix use-after-free in gfs2_glock_shrink_scan (Andreas Gruenbacher) [2109600]
- gfs2: Clean up gfs2_scan_glock_lru (Andreas Gruenbacher) [2109600]
- gfs2: gl_object races fix (Andreas Gruenbacher) [2109600]
- iomap/gfs2: Unlock and put folio in page_done handler (Andreas Gruenbacher) [2109600]
- iomap: Add __iomap_put_folio helper (Andreas Gruenbacher) [2109600]
- gfs2: Remove support for glock holder auto-demotion (2) (Andreas Gruenbacher) [2109600]
- gfs2: Remove support for glock holder auto-demotion (Andreas Gruenbacher) [2109600]
- gfs2: Minor gfs2_try_evict cleanup (Andreas Gruenbacher) [2109600]
- gfs2: Partially revert gfs2_inode_lookup change (Andreas Gruenbacher) [2109600]
- gfs2: Add gfs2_inode_lookup comment (Andreas Gruenbacher) [2109600]
- gfs2: Uninline and improve glock_{set,clear}_object (Andreas Gruenbacher) [2109600]
- gfs2: Simply dequeue iopen glock in gfs2_evict_inode (Andreas Gruenbacher) [2109600]
- gfs2: Clean up after gfs2_create_inode rework (Andreas Gruenbacher) [2109600]
- gfs2: Avoid dequeuing GL_ASYNC glock holders twice (Andreas Gruenbacher) [2109600]
- gfs2: Handle -EBUSY result of insert_inode_locked4 (Andreas Gruenbacher) [2109600]
- gfs2: Fix and clean up create / evict interaction (Andreas Gruenbacher) [2109600]
- gfs2: Clean up initialization of "ip" in gfs2_create_inode (Andreas Gruenbacher) [2109600]
- gfs2: Get rid of ghs[] in gfs2_create_inode (Andreas Gruenbacher) [2109600]
- gfs2: Dequeue waiters when withdrawn (Bob Peterson) [2109600]
- gfs2: Prevent double iput for journal on error (Bob Peterson) [2109600]
- Revert "gfs2: stop using generic_writepages in gfs2_ail1_start_one" (Andreas Gruenbacher) [2109600]
- gfs2: remove ->writepage (Andreas Gruenbacher) [2109600]
- gfs2: stop using generic_writepages in gfs2_ail1_start_one (Andreas Gruenbacher) [2109600]
- gfs2: List traversal in do_promote is safe (Andreas Gruenbacher) [2109600]
- gfs2: do_promote glock holder stealing fix (Bob Peterson) [2109600]
- gfs2: Use better variable name (Andreas Gruenbacher) [2109600]
- gfs2: Make go_instantiate take a glock (Andreas Gruenbacher) [2109600]
- gfs2: Add new go_held glock operation (Andreas Gruenbacher) [2109600]
- gfs2: Revert 'Fix "truncate in progress" hang' (Andreas Gruenbacher) [2109600]
- gfs2: Instantiate glocks ouside of glock state engine (Andreas Gruenbacher) [2109600]
- gfs2: Fix up gfs2_glock_async_wait (Andreas Gruenbacher) [2109600]
- gfs2: Add GL_NOPID flag for process-independent glock holders (Andreas Gruenbacher) [2109600]
- gfs2: dump inode object for iopen glocks (Bob Peterson) [2109600]
- gfs2: convert to use DEFINE_SEQ_ATTRIBUTE macro (Andreas Gruenbacher) [2109600]
- gfs2: Use TRY lock in gfs2_inode_lookup for UNLINKED inodes (Bob Peterson) [2109600]
-
Fri Mar 17 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.4.1.el8_8]
- Updated dist tag to el8_8 (Lucas Zampieri)
- Revert "net/mlx5: Don't perform lookup after already known sec_path" (Amir Tzin) [2176349]
- KVM: x86: do not report a vCPU as preempted outside instruction boundaries (Jon Maloy) [2124800] {CVE-2022-39189}
- Drivers: vmbus: Check for channel allocation before looking up relids (Mohammed Gamal) [2178622]
-
Mon Mar 13 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.3.1.el8]
- drm/nouveau/fb/tu102-: fix register used to determine scrub status (Karol Herbst) [2168648]
- drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (Karol Herbst) [2168648]
- fs/proc: task_mmu.c: don't read mapcount for migration entry (Jay Shin) [2174623]
- perf/core: Fix cgroup event list management (Michael Petlan) [2162525]
-
Wed Mar 08 2023 Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.2.1.el8]
- net: mana: Fix IRQ name - add PCI and queue number (Mohammed Gamal) [2166787]
- crypto: des - disallow des3 in FIPS mode (Vladis Dronov) [2175234]
- self-tests: more rps self tests (Paolo Abeni) [2168878]
- net: make default_rps_mask a per netns attribute (Paolo Abeni) [2168878]
- self-tests: introduce self-tests for RPS default mask (Paolo Abeni) [2168878]
- net: introduce default_rps_mask netns attribute (Paolo Abeni) [2168878]
- net-sysctl: factor-out rpm mask manipulation helpers (Paolo Abeni) [2168878]
- net-sysctl: factor out cpumask parsing helper (Paolo Abeni) [2168878]
- txhash: Make rethinking txhash behavior configurable via sysctl (Paolo Abeni) [2168878]
- net-sysfs: Call dev_hold always in rx_queue_add_kobject (Paolo Abeni) [2168878]
- net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Paolo Abeni) [2168878]
- net-sysfs: fix netdev_queue_add_kobject() breakage (Paolo Abeni) [2168878]
- net-sysfs: Fix reference count leak in rx|netdev_queue_add_kobject (Paolo Abeni) [2168878]