Package kernel-image-centos: Information

    Source package: kernel-image-centos
    Version: 5.14.0.387-alt1.el9
    Latest version according to Repology
    Build time:  Nov 21, 2023, 07:24 PM in the task #334808
    Report package bug
    License: GPL-2.0-only
    Summary: The Linux kernel (the core of the Linux operating system)
    Description: 
    The kernel package contains the Linux kernel (vmlinuz), the core of any
    Linux operating system.  The kernel handles the basic functions
    of the operating system: memory allocation, process allocation, device
    input and output, etc.
    
    This is a "centos stream" variant of kernel packages.
    
    The list of certified hardware and cloud instances for RHEL9 can be viewed
    at the Red Hat Ecosystem Catalog, https://catalog.redhat.com.

    List of rpms provided by this srpm:
    kernel-headers-centos (x86_64, aarch64)
    kernel-headers-modules-centos (x86_64, aarch64)
    kernel-image-centos (x86_64, aarch64)
    kernel-image-centos-debuginfo (x86_64, aarch64)
    kernel-modules-alsa-centos (x86_64, aarch64)
    kernel-modules-drm-centos (x86_64, aarch64)
    kernel-modules-media-centos (x86_64, aarch64)

    Maintainer: Alexey Gladkov

    List of contributors:
    Alexey Gladkov

      1. bc
      2. lzma-utils
      3. module-init-tools >= 3.16
      4. qemu-system-x86-core
      5. glibc-devel-static
      6. libdb4-devel
      7. libelf-devel
      8. openssl
      9. openssl-devel
      10. rpm-build-kernel
      11. /usr/sbin/initrd-scanmod
      12. ipxe-roms-qemu
      13. dev86
      14. dwarves >= 1.16
      15. flex
      16. rsync
      17. gcc13
      18. gcc13-c++
      19. gcc13-plugin-devel
      20. libgmp-devel
      21. zlib-devel
      22. libmpc-devel

    Last changed


    Nov. 21, 2023 Alexey Gladkov 5.14.0.387-alt1.el9
    - Updated to kernel-5.14.0-387.el9 (fixes: CVE-2023-1192, CVE-2023-20569, CVE-2023-20588, CVE-2023-20593, CVE-2023-28866, CVE-2023-31083, CVE-2023-3567, CVE-2023-3812, CVE-2023-40283, CVE-2023-42753, CVE-2023-5178):
      + Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
      + CNB94: lib: cpu_rmap: Add irq_cpu_rmap_remove to complement irq_cpu_rmap_add
      + CNB94: virtchnl: Sync headers with upstream
      + Enable -Werror for s390x and ppc64le
      + Ext4 Update for 9.4
      + Implement counters for nested guest shadow events
      + KVM: selftests: aarch64: Fix page_fault_test failure
      + Merge remote-tracking branch 'refs/remotes/c9s/merge-requests/3244' into c9s-iommu
      + Merge remote-tracking branch 'refs/remotes/c9s/merge-requests/3245' into c9s-iommu
      + RHEL-9.4 P1 Wireguard stable backport
      + RHEL-9.4 Update IPMI to upstream v6.5+
      + Revert "rcu: Permit start_poll_synchronize_rcu_expedited() to be invoked early"
      + SCSI updates for 9.4
      + USB/TB code rebase of supported drivers to upstream v6.4
      + Update net/bluetooth and drivers/bluetooth to upstream v6.5
      + Updates for Power IOMMU
      + Updates for powerpc CPT SMT
      + [s390] [IBM 9.4 FEAT] Upgrade the SMC driver to latest from upstream, e.g. kernel 6.4
      + [s390] [IBM 9.4 FEAT] Upgrade the qeth driver to latest from upstream, e.g. kernel 6.4
      + arm64: dts: imx8 updates
      + cifs: Fix UAF in cifs_demultiplex_thread()
      + clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name
      + hwmon: (ina3221) Add support for channel summation disable
      + iommu: IOMMU and DMA-mapping API Updates for 9.4
      + livepatch: selected fixes for rhel-9.4
      + nd_btt: Make BTT lanes preemptible
      + net: tun: fix bugs for oversize packet when napi frags enabled
      + netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
      + nvme: update the drivers
      + nvmet-tcp: Fix a possible UAF in queue intialization setup
      + redhat/configs: Increase CONFIG_NODES_SHIFT from 6 to 8 for arm64
      + redhat: various fix ups
      + scsi: mpi3mr: driver update
      + scsi: mpt3sas: driver updates
      + tcp: stable backport for 9.4 phase 1
      + tty: serial: fsl_lpuart: driver updates
      + update drivers/base to v6.4
      + vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
      + vfio: Updates for RHEL9.4
      + wifi: rtw89: Fix loading of compressed firmware
      + x86/speculation: Disable IBRS when idle
      + x86/srso: AMD Speculative RAS Overflow (Inception) Mitigation CVE-2023-20569
    Nov. 13, 2023 Alexey Gladkov 5.14.0.384-alt1.el9
    - Updated to kernel-5.14.0-384.el9 (fixes: CVE-2023-39189, CVE-2023-39193, CVE-2023-39194, CVE-2023-39198, CVE-2023-5717):
      + CNB94: page_pool: allow caching from safely localized NAPI
      + Update 9.4 RT (not printk) part 1
      + Updates for IBM vNIC Driver
      + Updates for rtas_flash
      + drm/qxl: fix UAF on handle creation
      + net: xfrm: Fix xfrm_address_filter OOB read
      + netfilter: nfnetlink_osf: avoid OOB read
      + netfilter: xt_sctp: validate the flag_info count
      + perf: Disallow mis-matched inherited group reads
      + scsi: scsi_debug: Sync with upstream v6.5 and fix scsi/007
      + smartpqi updates
      + tty: update timestamps on all device nodes
    Nov. 7, 2023 Alexey Gladkov 5.14.0.383-alt1.el9
    - Updated to kernel-5.14.0-383.el9:
      + Backport overlayfs features for composefs
      + DRM Backport 9.4 dependencies
      + EFI sync + unaccepted memory support for SNP and TDX
      + KVM: arm64: Fix soft-lockup on 64KB host to boot 4KB guest
      + i40e: Fix VF VLAN offloading when port VLAN is configured
      + ice:  fix ice driver misc irq
      + iommu: Optimise PCI SAC address trick
      + ipv4: First round of upstream fixes for RHEL 9.4.
      + kernel/fork: beware of __put_task_struct() calling context
      + nfsd: lock_rename() needs both directories to live on the same fs
      + ppp: First round of upstream fixes for RHEL 9.4.
      + scsi: megaraid_sas: a driver update
      + soc: qcom: geni-se: Add SPI Peripheral Device mode support for GENI QuPv3
      + target: update to latest version
      + vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE
      + virtio_balloon: Fix endless deflation and inflation on arm64
      + x86/platform/uv: Use alternate source for socket to node data
      + x86/sgx: update sgx subsystem upto v6.6