[3.10.0-1160.105.1.0.1.el7.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.105.1.el7.OL7] - Update Oracle Linux certificates - Oracle Linux RHCK Module Signing Key was compiled into kernel - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 = 15-2.0.9] - Update oracle value to match new certificate [3.10.0-1160.105.1.el7] - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free [2228703] {CVE-2023-4128} [3.10.0-1160.104.1.el7] - CI: Remove unused kpet_tree_family - xen/x86: don"t lose event interrupts [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs [2229893] - docs/kernel-parameters: Update descriptions for mitigations= param with retbleed [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text [2229893] - x86: Sync Intel family names cpu_vuln_blacklist[] with upstream [2229893] [3.10.0-1160.103.1.el7] - net/sched: sch_qfq: account for stab overhead in qfq_enqueue [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0