0656fa94dc
This upgrade fixes the CVEs listed below. We refresh the patches against the new rt-kernel source. rcu-Don-t-wake-rcuc-X-kthreads-on-NOCB-CPUs.patch is deleted because upstream has fixed this bug, and it is no longer needed. CVE bug: CVE-2019-11810:kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS CVE bug: CVE-2019-11811: kernel: use-after-free in IPMI Edit CVE bug: CVE-2019-14835: kernel: vhost-net: guest to host kernel escape during migration Closes-Bug: 1849206 Closes-Bug: 1849209 Closes-Bug: 1847817 Change-Id: Iaf5eae5d64b621f44f8faad51d22f9439431911f Depends-On: https://review.opendev.org/#/c/695355/ Signed-off-by: Robin Lu <bin1.lu@intel.com>
44 lines
1.9 KiB
Diff
44 lines
1.9 KiB
Diff
From d85ae09a0e333ba2c0b2630a1d4768655cacf481 Mon Sep 17 00:00:00 2001
|
|
Message-Id: <d85ae09a0e333ba2c0b2630a1d4768655cacf481.1566591106.git.Jim.Somerville@windriver.com>
|
|
In-Reply-To: <5d869ea9407975726a95d046391cd640b726ca93.1566591106.git.Jim.Somerville@windriver.com>
|
|
References: <5d869ea9407975726a95d046391cd640b726ca93.1566591106.git.Jim.Somerville@windriver.com>
|
|
From: Bin Yang <bin.yang@intel.com>
|
|
Date: Wed, 31 Jul 2019 14:23:20 +0800
|
|
Subject: [PATCH 2/2] Compile issues
|
|
|
|
Signed-off-by: Bin Yang <bin.yang@intel.com>
|
|
Signed-off-by: Jim Somerville <Jim.Somerville@windriver.com>
|
|
---
|
|
SPECS/kernel-rt.spec | 8 ++++++++
|
|
1 file changed, 8 insertions(+)
|
|
|
|
diff --git a/SPECS/kernel-rt.spec b/SPECS/kernel-rt.spec
|
|
index f7aad95..29d3878 100644
|
|
--- a/SPECS/kernel-rt.spec
|
|
+++ b/SPECS/kernel-rt.spec
|
|
@@ -425,6 +425,11 @@ Patch1031: epoll-fix-use-after-free-in-eventpoll_release_file.patch
|
|
Patch1032: ipvs-fix-memory-leak-in-ip_vs_ctl.c.patch
|
|
Patch1033: rh-ext4-release-leaked-posix-acl-in-ext4_acl_chmod.patch
|
|
Patch1034: rh-ext4-release-leaked-posix-acl-in-ext4_xattr_set_a.patch
|
|
+Patch1035: fix-compilation-issues.patch
|
|
+# Fix CentOS 7.6 upgrade compile error
|
|
+Patch1036: fix-CentOS-7.6-upgrade-compile-error.patch
|
|
+# Compile fix for disabling CONFIG_MEMCG_KMEM
|
|
+Patch1037: compile-fix-for-disabling-CONFIG_MEMCG_KMEM.patch
|
|
|
|
BuildRoot: %{_tmppath}/kernel-%{KVERREL}-root
|
|
|
|
@@ -798,6 +803,9 @@ ApplyPatch epoll-fix-use-after-free-in-eventpoll_release_file.patch
|
|
ApplyPatch ipvs-fix-memory-leak-in-ip_vs_ctl.c.patch
|
|
ApplyPatch rh-ext4-release-leaked-posix-acl-in-ext4_acl_chmod.patch
|
|
ApplyPatch rh-ext4-release-leaked-posix-acl-in-ext4_xattr_set_a.patch
|
|
+ApplyPatch fix-compilation-issues.patch
|
|
+ApplyPatch fix-CentOS-7.6-upgrade-compile-error.patch
|
|
+ApplyPatch compile-fix-for-disabling-CONFIG_MEMCG_KMEM.patch
|
|
|
|
# move off upstream version mechanism
|
|
if [ -e localversion-rt ]; then
|
|
--
|
|
1.8.3.1
|
|
|