kernel-5.14.0-272.el9

* Wed Feb 15 2023 Herton R. Krzesinski <herton@redhat.com> [5.14.0-272.el9]
- Split partner modules into a sub-package (Alice Mitchell) [2039020]
- Enable kAFS and it's dependancies in RHEL (Alice Mitchell) [2039020]
- netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (Florian Westphal) [2161695]
- netfilter: ipset: fix hash:net,port,net hang with /0 subnet (Florian Westphal) [2161695]
- ipvs: use u64_stats_t for the per-cpu counters (Florian Westphal) [2161695]
- netfilter: flowtable: really fix NAT IPv6 offload (Florian Westphal) [2161695]
- netfilter: conntrack: fix using __this_cpu_add in preemptible (Florian Westphal) [2161695]
- netfilter: flowtable_offload: fix using __this_cpu_add in preemptible (Florian Westphal) [2161695]
- netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one (Florian Westphal) [2161695]
- netfilter: flowtable_offload: add missing locking (Florian Westphal) [2161695]
- netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface (Florian Westphal) [2161695]
- netfilter: ipset: regression in ip_set_hash_ip.c (Florian Westphal) [2161695]
- netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() (Florian Westphal) [2161695]
- netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() (Florian Westphal) [2161695]
- netfilter: nf_tables: nft_parse_register can return a negative value (Florian Westphal) [2161695]
- intel_th: msu: Use memset_startat() for clearing hw header (Eric Chanudet) [2159468]
- redhat/configs: leave -Werror off for now (Eric Chanudet) [2159468]
- gcc-12: disable '-Warray-bounds' universally for now (Eric Chanudet) [2159468]
- kbuild: Fix -Wimplicit-fallthrough=5 error for GCC 5.x and 6.x (Eric Chanudet) [2159468]
- s390: disable -Warray-bounds (Eric Chanudet) [2159468]
- gcc-12: disable '-Wdangling-pointer' warning for now (Eric Chanudet) [2159468]
- Makefile: fix 2 typos (Eric Chanudet) [2159468]
- Makefile: Enable -Wzero-length-bounds (Eric Chanudet) [2159468]
- Makefile: Enable -Warray-bounds (Eric Chanudet) [2159468]
- sparc: Unbreak the build (Eric Chanudet) [2159468]
- Makefile: Enable -Wcast-function-type (Eric Chanudet) [2159468]
- kconfig: Add support for -Wimplicit-fallthrough (Eric Chanudet) [2159468]
- Makefile: use -Wno-main in the full kernel tree (Eric Chanudet) [2159468]
- s390: remove WARN_DYNAMIC_STACK (Eric Chanudet) [2159468]
- Enable '-Werror' by default for all kernel builds (Eric Chanudet) [2159468]
- kbuild: Shuffle blank line to improve comment meaning (Eric Chanudet) [2159468]
- x86/boot: Wrap literal addresses in absolute_pointer() (Eric Chanudet) [2159468]
- scsi: lpfc: Use struct_group() to initialize struct lpfc_cgn_info (Eric Chanudet) [2159468]
- bnx2x: Use struct_group() for memcpy() region (Eric Chanudet) [2159468]
- RDMA/cxgb4: fix accept failure due to increased cpl_t5_pass_accept_rpl size (Eric Chanudet) [2159468]
- iw_cxgb4: Use memset_startat() for cpl_t5_pass_accept_rpl (Eric Chanudet) [2159468]
- dm integrity: Use struct_group() to zero struct journal_sector (Eric Chanudet) [2159468]
- bnxt_en: Use struct_group_attr() for memcpy() region (Eric Chanudet) [2159468]
- ipv6: Use memset_after() to zero rt6_info (Eric Chanudet) [2159468]
- xfrm: Use memset_after() to clear padding (Eric Chanudet) [2159468]
- virtio-pci: Remove wrong address verification in vp_del_vqs() (Eric Chanudet) [2159468]
- ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() (Eric Chanudet) [2159468]
- skbuff: Switch structure bounds to struct_group() (Eric Chanudet) [2159468]
- tracing: Use memset_startat() to zero struct trace_iterator (Eric Chanudet) [2159468]
- kernel/sysctl.c: fixup printk sysctl constants (Eric Chanudet) [2159468]
- crypto: dh - constify struct dh's pointer members (Eric Chanudet) [2159468]
- cert host tools: Stop complaining about deprecated OpenSSL functions (Eric Chanudet) [2159468]
- kernel/sysctl.c: remove unused variable ten_thousand (Eric Chanudet) [2159468]
Resolves: rhbz#2039020, rhbz#2161695, rhbz#2159468

Signed-off-by: Herton R. Krzesinski <herton@redhat.com>

Makefile.rhelver

@@ -12,7 +12,7 @@ RHEL_MINOR = 2
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 271
+RHEL_RELEASE = 272
 
 #
 # ZSTREAM

kernel-aarch64-64k-debug-rhel.config

@@ -144,8 +144,14 @@ CONFIG_ACPI=y
 # CONFIG_AFE4404 is not set
 # CONFIG_AFFS_FS is not set
 # CONFIG_AF_KCM is not set
-# CONFIG_AF_RXRPC is not set
-# CONFIG_AFS_FS is not set
+CONFIG_AF_RXRPC_DEBUG=y
+# CONFIG_AF_RXRPC_INJECT_LOSS is not set
+CONFIG_AF_RXRPC_IPV6=y
+CONFIG_AF_RXRPC=m
+# CONFIG_AFS_DEBUG_CURSOR is not set
+CONFIG_AFS_DEBUG=y
+CONFIG_AFS_FSCACHE=y
+CONFIG_AFS_FS=m
 # CONFIG_AGP is not set
 # CONFIG_AHCI_CEVA is not set
 # CONFIG_AHCI_IMX is not set
@@ -4776,6 +4782,7 @@ CONFIG_RV_REACTORS=y
 CONFIG_RV_REACT_PANIC=y
 CONFIG_RV_REACT_PRINTK=y
 CONFIG_RV=y
+CONFIG_RXKAD=y
 # CONFIG_SAMPLES is not set
 # CONFIG_SATA_ACARD_AHCI is not set
 CONFIG_SATA_AHCI_PLATFORM=m
@@ -6770,6 +6777,7 @@ CONFIG_WATCH_QUEUE=y
 # CONFIG_WCN36XX is not set
 # CONFIG_WDAT_WDT is not set
 # CONFIG_WDTPCI is not set
+# CONFIG_WERROR is not set
 # CONFIG_WIL6210 is not set
 # CONFIG_WILC1000_SDIO is not set
 # CONFIG_WILC1000_SPI is not set

kernel-aarch64-64k-rhel.config

@@ -144,8 +144,14 @@ CONFIG_ACPI=y
 # CONFIG_AFE4404 is not set
 # CONFIG_AFFS_FS is not set
 # CONFIG_AF_KCM is not set
-# CONFIG_AF_RXRPC is not set
-# CONFIG_AFS_FS is not set
+CONFIG_AF_RXRPC_DEBUG=y
+# CONFIG_AF_RXRPC_INJECT_LOSS is not set
+CONFIG_AF_RXRPC_IPV6=y
+CONFIG_AF_RXRPC=m
+# CONFIG_AFS_DEBUG_CURSOR is not set
+CONFIG_AFS_DEBUG=y
+CONFIG_AFS_FSCACHE=y
+CONFIG_AFS_FS=m
 # CONFIG_AGP is not set
 # CONFIG_AHCI_CEVA is not set
 # CONFIG_AHCI_IMX is not set
@@ -4754,6 +4760,7 @@ CONFIG_RV_REACTORS=y
 CONFIG_RV_REACT_PANIC=y
 CONFIG_RV_REACT_PRINTK=y
 CONFIG_RV=y
+CONFIG_RXKAD=y
 # CONFIG_SAMPLES is not set
 # CONFIG_SATA_ACARD_AHCI is not set
 CONFIG_SATA_AHCI_PLATFORM=m
@@ -6746,6 +6753,7 @@ CONFIG_WATCH_QUEUE=y
 # CONFIG_WCN36XX is not set
 # CONFIG_WDAT_WDT is not set
 # CONFIG_WDTPCI is not set
+# CONFIG_WERROR is not set
 # CONFIG_WIL6210 is not set
 # CONFIG_WILC1000_SDIO is not set
 # CONFIG_WILC1000_SPI is not set

kernel-aarch64-debug-rhel.config

@@ -144,8 +144,14 @@ CONFIG_ACPI=y
 # CONFIG_AFE4404 is not set
 # CONFIG_AFFS_FS is not set
 # CONFIG_AF_KCM is not set
-# CONFIG_AF_RXRPC is not set
-# CONFIG_AFS_FS is not set
+CONFIG_AF_RXRPC_DEBUG=y
+# CONFIG_AF_RXRPC_INJECT_LOSS is not set
+CONFIG_AF_RXRPC_IPV6=y
+CONFIG_AF_RXRPC=m
+# CONFIG_AFS_DEBUG_CURSOR is not set
+CONFIG_AFS_DEBUG=y
+CONFIG_AFS_FSCACHE=y
+CONFIG_AFS_FS=m
 # CONFIG_AGP is not set
 # CONFIG_AHCI_CEVA is not set
 # CONFIG_AHCI_IMX is not set
@@ -4773,6 +4779,7 @@ CONFIG_RV_REACTORS=y
 CONFIG_RV_REACT_PANIC=y
 CONFIG_RV_REACT_PRINTK=y
 CONFIG_RV=y
+CONFIG_RXKAD=y
 # CONFIG_SAMPLES is not set
 # CONFIG_SATA_ACARD_AHCI is not set
 CONFIG_SATA_AHCI_PLATFORM=m
@@ -6767,6 +6774,7 @@ CONFIG_WATCH_QUEUE=y
 # CONFIG_WCN36XX is not set
 # CONFIG_WDAT_WDT is not set
 # CONFIG_WDTPCI is not set
+# CONFIG_WERROR is not set
 # CONFIG_WIL6210 is not set
 # CONFIG_WILC1000_SDIO is not set
 # CONFIG_WILC1000_SPI is not set

kernel-aarch64-rhel.config

@@ -144,8 +144,14 @@ CONFIG_ACPI=y
 # CONFIG_AFE4404 is not set
 # CONFIG_AFFS_FS is not set
 # CONFIG_AF_KCM is not set
-# CONFIG_AF_RXRPC is not set
-# CONFIG_AFS_FS is not set
+CONFIG_AF_RXRPC_DEBUG=y
+# CONFIG_AF_RXRPC_INJECT_LOSS is not set
+CONFIG_AF_RXRPC_IPV6=y
+CONFIG_AF_RXRPC=m
+# CONFIG_AFS_DEBUG_CURSOR is not set
+CONFIG_AFS_DEBUG=y
+CONFIG_AFS_FSCACHE=y
+CONFIG_AFS_FS=m
 # CONFIG_AGP is not set
 # CONFIG_AHCI_CEVA is not set
 # CONFIG_AHCI_IMX is not set
@@ -4751,6 +4757,7 @@ CONFIG_RV_REACTORS=y
 CONFIG_RV_REACT_PANIC=y
 CONFIG_RV_REACT_PRINTK=y
 CONFIG_RV=y
+CONFIG_RXKAD=y
 # CONFIG_SAMPLES is not set
 # CONFIG_SATA_ACARD_AHCI is not set
 CONFIG_SATA_AHCI_PLATFORM=m
@@ -6743,6 +6750,7 @@ CONFIG_WATCH_QUEUE=y
 # CONFIG_WCN36XX is not set
 # CONFIG_WDAT_WDT is not set
 # CONFIG_WDTPCI is not set
+# CONFIG_WERROR is not set
 # CONFIG_WIL6210 is not set
 # CONFIG_WILC1000_SDIO is not set
 # CONFIG_WILC1000_SPI is not set

kernel-ppc64le-debug-rhel.config

@@ -139,8 +139,14 @@ CONFIG_ACPI_VIDEO=m
 # CONFIG_AFE4404 is not set
 # CONFIG_AFFS_FS is not set
 # CONFIG_AF_KCM is not set
-# CONFIG_AF_RXRPC is not set
-# CONFIG_AFS_FS is not set
+CONFIG_AF_RXRPC_DEBUG=y
+# CONFIG_AF_RXRPC_INJECT_LOSS is not set
+CONFIG_AF_RXRPC_IPV6=y
+CONFIG_AF_RXRPC=m
+# CONFIG_AFS_DEBUG_CURSOR is not set
+CONFIG_AFS_DEBUG=y
+CONFIG_AFS_FSCACHE=y
+CONFIG_AFS_FS=m
 # CONFIG_AGP is not set
 # CONFIG_AHCI_CEVA is not set
 # CONFIG_AHCI_QORIQ is not set
@@ -4328,6 +4334,7 @@ CONFIG_RV_REACTORS=y
 CONFIG_RV_REACT_PANIC=y
 CONFIG_RV_REACT_PRINTK=y
 CONFIG_RV=y
+CONFIG_RXKAD=y
 # CONFIG_SAMPLES is not set
 # CONFIG_SATA_ACARD_AHCI is not set
 CONFIG_SATA_AHCI=m
@@ -6228,6 +6235,7 @@ CONFIG_WATCH_QUEUE=y
 # CONFIG_WCN36XX is not set
 # CONFIG_WDAT_WDT is not set
 # CONFIG_WDTPCI is not set
+# CONFIG_WERROR is not set
 # CONFIG_WIL6210 is not set
 # CONFIG_WILC1000_SDIO is not set
 # CONFIG_WILC1000_SPI is not set

kernel-ppc64le-rhel.config

@@ -139,8 +139,14 @@ CONFIG_ACPI_VIDEO=m
 # CONFIG_AFE4404 is not set
 # CONFIG_AFFS_FS is not set
 # CONFIG_AF_KCM is not set
-# CONFIG_AF_RXRPC is not set
-# CONFIG_AFS_FS is not set
+CONFIG_AF_RXRPC_DEBUG=y
+# CONFIG_AF_RXRPC_INJECT_LOSS is not set
+CONFIG_AF_RXRPC_IPV6=y
+CONFIG_AF_RXRPC=m
+# CONFIG_AFS_DEBUG_CURSOR is not set
+CONFIG_AFS_DEBUG=y
+CONFIG_AFS_FSCACHE=y
+CONFIG_AFS_FS=m
 # CONFIG_AGP is not set
 # CONFIG_AHCI_CEVA is not set
 # CONFIG_AHCI_QORIQ is not set
@@ -4308,6 +4314,7 @@ CONFIG_RV_REACTORS=y
 CONFIG_RV_REACT_PANIC=y
 CONFIG_RV_REACT_PRINTK=y
 CONFIG_RV=y
+CONFIG_RXKAD=y
 # CONFIG_SAMPLES is not set
 # CONFIG_SATA_ACARD_AHCI is not set
 CONFIG_SATA_AHCI=m
@@ -6206,6 +6213,7 @@ CONFIG_WATCH_QUEUE=y
 # CONFIG_WCN36XX is not set
 # CONFIG_WDAT_WDT is not set
 # CONFIG_WDTPCI is not set
+# CONFIG_WERROR is not set
 # CONFIG_WIL6210 is not set
 # CONFIG_WILC1000_SDIO is not set
 # CONFIG_WILC1000_SPI is not set

kernel-s390x-debug-rhel.config

@@ -139,8 +139,14 @@ CONFIG_ACPI_VIDEO=m
 # CONFIG_AFFS_FS is not set
 CONFIG_AFIUCV=m
 # CONFIG_AF_KCM is not set
-# CONFIG_AF_RXRPC is not set
-# CONFIG_AFS_FS is not set
+CONFIG_AF_RXRPC_DEBUG=y
+# CONFIG_AF_RXRPC_INJECT_LOSS is not set
+CONFIG_AF_RXRPC_IPV6=y
+CONFIG_AF_RXRPC=m
+# CONFIG_AFS_DEBUG_CURSOR is not set
+CONFIG_AFS_DEBUG=y
+CONFIG_AFS_FSCACHE=y
+CONFIG_AFS_FS=m
 # CONFIG_AGP is not set
 CONFIG_AIO=y
 # CONFIG_AIX_PARTITION is not set
@@ -4272,6 +4278,7 @@ CONFIG_RV_REACTORS=y
 CONFIG_RV_REACT_PANIC=y
 CONFIG_RV_REACT_PRINTK=y
 CONFIG_RV=y
+CONFIG_RXKAD=y
 CONFIG_S390_AP_IOMMU=y
 CONFIG_S390_CCW_IOMMU=y
 CONFIG_S390_GUEST=y
@@ -6222,6 +6229,7 @@ CONFIG_WATCH_QUEUE=y
 # CONFIG_WCN36XX is not set
 # CONFIG_WDAT_WDT is not set
 # CONFIG_WDTPCI is not set
+# CONFIG_WERROR is not set
 # CONFIG_WIL6210 is not set
 # CONFIG_WILC1000_SDIO is not set
 # CONFIG_WILC1000_SPI is not set

kernel-s390x-rhel.config

@@ -139,8 +139,14 @@ CONFIG_ACPI_VIDEO=m
 # CONFIG_AFFS_FS is not set
 CONFIG_AFIUCV=m
 # CONFIG_AF_KCM is not set
-# CONFIG_AF_RXRPC is not set
-# CONFIG_AFS_FS is not set
+CONFIG_AF_RXRPC_DEBUG=y
+# CONFIG_AF_RXRPC_INJECT_LOSS is not set
+CONFIG_AF_RXRPC_IPV6=y
+CONFIG_AF_RXRPC=m
+# CONFIG_AFS_DEBUG_CURSOR is not set
+CONFIG_AFS_DEBUG=y
+CONFIG_AFS_FSCACHE=y
+CONFIG_AFS_FS=m
 # CONFIG_AGP is not set
 CONFIG_AIO=y
 # CONFIG_AIX_PARTITION is not set
@@ -4252,6 +4258,7 @@ CONFIG_RV_REACTORS=y
 CONFIG_RV_REACT_PANIC=y
 CONFIG_RV_REACT_PRINTK=y
 CONFIG_RV=y
+CONFIG_RXKAD=y
 CONFIG_S390_AP_IOMMU=y
 CONFIG_S390_CCW_IOMMU=y
 CONFIG_S390_GUEST=y
@@ -6200,6 +6207,7 @@ CONFIG_WATCH_QUEUE=y
 # CONFIG_WCN36XX is not set
 # CONFIG_WDAT_WDT is not set
 # CONFIG_WDTPCI is not set
+# CONFIG_WERROR is not set
 # CONFIG_WIL6210 is not set
 # CONFIG_WILC1000_SDIO is not set
 # CONFIG_WILC1000_SPI is not set

kernel-s390x-zfcpdump-rhel.config

@@ -139,8 +139,14 @@ CONFIG_ACPI_VIDEO=m
 # CONFIG_AFFS_FS is not set
 # CONFIG_AFIUCV is not set
 # CONFIG_AF_KCM is not set
-# CONFIG_AF_RXRPC is not set
-# CONFIG_AFS_FS is not set
+CONFIG_AF_RXRPC_DEBUG=y
+# CONFIG_AF_RXRPC_INJECT_LOSS is not set
+CONFIG_AF_RXRPC_IPV6=y
+CONFIG_AF_RXRPC=m
+# CONFIG_AFS_DEBUG_CURSOR is not set
+CONFIG_AFS_DEBUG=y
+CONFIG_AFS_FSCACHE=y
+CONFIG_AFS_FS=m
 # CONFIG_AGP is not set
 CONFIG_AIO=y
 # CONFIG_AIX_PARTITION is not set
@@ -4269,6 +4275,7 @@ CONFIG_RV_REACTORS=y
 CONFIG_RV_REACT_PANIC=y
 CONFIG_RV_REACT_PRINTK=y
 CONFIG_RV=y
+CONFIG_RXKAD=y
 CONFIG_S390_AP_IOMMU=y
 CONFIG_S390_CCW_IOMMU=y
 # CONFIG_S390_GUEST is not set
@@ -6228,6 +6235,7 @@ CONFIG_WATCH_QUEUE=y
 # CONFIG_WCN36XX is not set
 # CONFIG_WDAT_WDT is not set
 # CONFIG_WDTPCI is not set
+# CONFIG_WERROR is not set
 # CONFIG_WIL6210 is not set
 # CONFIG_WILC1000_SDIO is not set
 # CONFIG_WILC1000_SPI is not set

kernel-x86_64-debug-rhel.config

@@ -155,8 +155,14 @@ CONFIG_ACPI=y
 # CONFIG_AFE4404 is not set
 # CONFIG_AFFS_FS is not set
 # CONFIG_AF_KCM is not set
-# CONFIG_AF_RXRPC is not set
-# CONFIG_AFS_FS is not set
+CONFIG_AF_RXRPC_DEBUG=y
+# CONFIG_AF_RXRPC_INJECT_LOSS is not set
+CONFIG_AF_RXRPC_IPV6=y
+CONFIG_AF_RXRPC=m
+# CONFIG_AFS_DEBUG_CURSOR is not set
+CONFIG_AFS_DEBUG=y
+CONFIG_AFS_FSCACHE=y
+CONFIG_AFS_FS=m
 # CONFIG_AGP is not set
 CONFIG_AIO=y
 # CONFIG_AIX_PARTITION is not set
@@ -4499,6 +4505,7 @@ CONFIG_RV_REACTORS=y
 CONFIG_RV_REACT_PANIC=y
 CONFIG_RV_REACT_PRINTK=y
 CONFIG_RV=y
+CONFIG_RXKAD=y
 # CONFIG_SAMPLE_ANDROID_BINDERFS is not set
 # CONFIG_SAMPLE_AUXDISPLAY is not set
 # CONFIG_SAMPLE_CONFIGFS is not set
@@ -6476,6 +6483,7 @@ CONFIG_WATCH_QUEUE=y
 # CONFIG_WCN36XX is not set
 CONFIG_WDAT_WDT=m
 # CONFIG_WDTPCI is not set
+# CONFIG_WERROR is not set
 # CONFIG_WIL6210 is not set
 # CONFIG_WILC1000_SDIO is not set
 # CONFIG_WILC1000_SPI is not set

kernel-x86_64-rhel.config

@@ -155,8 +155,14 @@ CONFIG_ACPI=y
 # CONFIG_AFE4404 is not set
 # CONFIG_AFFS_FS is not set
 # CONFIG_AF_KCM is not set
-# CONFIG_AF_RXRPC is not set
-# CONFIG_AFS_FS is not set
+CONFIG_AF_RXRPC_DEBUG=y
+# CONFIG_AF_RXRPC_INJECT_LOSS is not set
+CONFIG_AF_RXRPC_IPV6=y
+CONFIG_AF_RXRPC=m
+# CONFIG_AFS_DEBUG_CURSOR is not set
+CONFIG_AFS_DEBUG=y
+CONFIG_AFS_FSCACHE=y
+CONFIG_AFS_FS=m
 # CONFIG_AGP is not set
 CONFIG_AIO=y
 # CONFIG_AIX_PARTITION is not set
@@ -4478,6 +4484,7 @@ CONFIG_RV_REACTORS=y
 CONFIG_RV_REACT_PANIC=y
 CONFIG_RV_REACT_PRINTK=y
 CONFIG_RV=y
+CONFIG_RXKAD=y
 # CONFIG_SAMPLE_ANDROID_BINDERFS is not set
 # CONFIG_SAMPLE_AUXDISPLAY is not set
 # CONFIG_SAMPLE_CONFIGFS is not set
@@ -6453,6 +6460,7 @@ CONFIG_WATCH_QUEUE=y
 # CONFIG_WCN36XX is not set
 CONFIG_WDAT_WDT=m
 # CONFIG_WDTPCI is not set
+# CONFIG_WERROR is not set
 # CONFIG_WIL6210 is not set
 # CONFIG_WILC1000_SDIO is not set
 # CONFIG_WILC1000_SPI is not set

kernel.spec

@@ -149,15 +149,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 271
+%define pkgrelease 272
 %define kversion 5
-%define tarfile_release 5.14.0-271.el9
+%define tarfile_release 5.14.0-272.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 271%{?buildid}%{?dist}
+%define specrelease 272%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-271.el9
+%define kabiversion 5.14.0-272.el9
 
 #
 # End of genspec.sh variables
@@ -850,6 +850,7 @@ Source81: process_configs.sh
 Source82: update_scripts.sh
 
 Source84: mod-internal.list
+Source85: mod-partner.list
 
 Source100: rheldup3.x509
 Source101: rhelkpatch1.x509
@@ -1367,6 +1368,9 @@ Requires: kernel-%{?1:%{1}-}-modules-core-uname-r = %{KVERREL}%{uname_variant %{
 %{expand:%%kernel_modules_extra_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}} %{-m:%{-m}}}\
 %if %{-m:0}%{!-m:1}\
 %{expand:%%kernel_modules_internal_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}}}\
+%if 0%{!?fedora:1}\
+%{expand:%%kernel_modules_partner_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}}}\
+%endif\
 %{expand:%%kernel_debuginfo_package %{?1:%{1}}}\
 %endif\
 %if %{efiuki}\
@@ -1378,6 +1382,27 @@ Requires: kernel%{?1:-%{1}}-modules-core-uname-r = %{KVERREL}%{uname_suffix %{?1
 %endif\
 %{nil}
 
+#
+# This macro creates a kernel-<subpackage>-modules-partner package.
+#	%%kernel_modules_partner_package <subpackage> <pretty-name>
+#
+%define kernel_modules_partner_package() \
+%package %{?1:%{1}-}modules-partner\
+Summary: Extra kernel modules to match the %{?2:%{2} }kernel\
+Group: System Environment/Kernel\
+Provides: kernel%{?1:-%{1}}-modules-partner-%{_target_cpu} = %{version}-%{release}\
+Provides: kernel%{?1:-%{1}}-modules-partner-%{_target_cpu} = %{version}-%{release}%{uname_suffix %{?1:%{1}}}\
+Provides: kernel%{?1:-%{1}}-modules-partner = %{version}-%{release}%{uname_suffix %{?1:%{1}}}\
+Provides: installonlypkg(kernel-module)\
+Provides: kernel%{?1:-%{1}}-modules-partner-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
+Requires: kernel-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
+Requires: kernel%{?1:-%{1}}-modules-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
+AutoReq: no\
+AutoProv: yes\
+%description %{?1:%{1}-}modules-partner\
+This package provides kernel modules for the %{?2:%{2} }kernel package for Red Hat partners usage.\
+%{nil}
+
 # Now, each variant package.
 
 %if %{with_pae}
@@ -2173,6 +2198,10 @@ BuildKernel() {
     %{SOURCE20} $RPM_BUILD_ROOT lib/modules/$KernelVer $(realpath configs/mod-extra.list)
     # Identify modules in the kernel-modules-extras package
     %{SOURCE20} $RPM_BUILD_ROOT lib/modules/$KernelVer %{SOURCE84} internal
+%if 0%{!?fedora:1}
+    # Identify modules in the kernel-modules-partner package
+    %{SOURCE20} $RPM_BUILD_ROOT lib/modules/$KernelVer %{SOURCE85} partner
+%endif
 
     #
     # Generate the kernel-core and kernel-modules files lists
@@ -2190,6 +2219,10 @@ BuildKernel() {
     xargs rm -rf < mod-extra.list
     # don't include anything going int kernel-modules-internal in the file lists
     xargs rm -rf < mod-internal.list
+%if 0%{!?fedora:1}
+    # don't include anything going int kernel-modules-partner in the file lists
+    xargs rm -rf < mod-partner.list
+%endif
 
     if [ $DoModules -eq 1 ]; then
 	# Find all the module files and filter them out into the core and
@@ -2281,6 +2314,9 @@ BuildKernel() {
     sed -e 's/^lib*/\/lib/' %{?zipsed} $RPM_BUILD_ROOT/modules.list >> ../kernel${Variant:+-${Variant}}-modules-core.list
     sed -e 's/^lib*/\/lib/' %{?zipsed} $RPM_BUILD_ROOT/mod-extra.list >> ../kernel${Variant:+-${Variant}}-modules-extra.list
     sed -e 's/^lib*/\/lib/' %{?zipsed} $RPM_BUILD_ROOT/mod-internal.list >> ../kernel${Variant:+-${Variant}}-modules-internal.list
+%if 0%{!?fedora:1}
+    sed -e 's/^lib*/\/lib/' %{?zipsed} $RPM_BUILD_ROOT/mod-partner.list >> ../kernel${Variant:+-${Variant}}-modules-partner.list
+%endif
 
     # Cleanup
     rm -f $RPM_BUILD_ROOT/k-d.list
@@ -2288,6 +2324,9 @@ BuildKernel() {
     rm -f $RPM_BUILD_ROOT/module-dirs.list
     rm -f $RPM_BUILD_ROOT/mod-extra.list
     rm -f $RPM_BUILD_ROOT/mod-internal.list
+%if 0%{!?fedora:1}
+    rm -f $RPM_BUILD_ROOT/mod-partner.list
+%endif
 
 %if %{with_cross}
     make -C $RPM_BUILD_ROOT/lib/modules/$KernelVer/build M=scripts clean
@@ -2928,6 +2967,19 @@ fi\
 /sbin/depmod -a %{KVERREL}%{?1:+%{1}}\
 %{nil}
 
+#
+# This macro defines a %%post script for a kernel*-modules-partner package.
+# It also defines a %%postun script that does the same thing.
+#	%%kernel_modules_partner_post [<subpackage>]
+#
+%define kernel_modules_partner_post() \
+%{expand:%%post %{?1:%{1}-}modules-partner}\
+/sbin/depmod -a %{KVERREL}%{?1:+%{1}}\
+%{nil}\
+%{expand:%%postun %{?1:%{1}-}modules-partner}\
+/sbin/depmod -a %{KVERREL}%{?1:+%{1}}\
+%{nil}
+
 #
 # This macro defines a %%post script for a kernel*-modules package.
 # It also defines a %%postun script that does the same thing.
@@ -2998,6 +3050,9 @@ fi\
 %{expand:%%kernel_modules_core_post %{?-v*}}\
 %{expand:%%kernel_modules_extra_post %{?-v*}}\
 %{expand:%%kernel_modules_internal_post %{?-v*}}\
+%if 0%{!?fedora:1}\
+%{expand:%%kernel_modules_partner_post %{?-v*}}\
+%endif\
 %{expand:%%kernel_variant_posttrans %{?-v*}}\
 %{expand:%%post %{?-v*:%{-v*}-}core}\
 %{-r:\
@@ -3296,6 +3351,9 @@ fi
 %{expand:%%files -f kernel-%{?3:%{3}-}modules-extra.list %{?3:%{3}-}modules-extra}\
 %config(noreplace) /etc/modprobe.d/*-blacklist.conf\
 %{expand:%%files -f kernel-%{?3:%{3}-}modules-internal.list %{?3:%{3}-}modules-internal}\
+%if 0%{!?fedora:1}\
+%{expand:%%files -f kernel-%{?3:%{3}-}modules-partner.list %{?3:%{3}-}modules-partner}\
+%endif\
 %if %{with_debuginfo}\
 %ifnarch noarch\
 %{expand:%%files -f debuginfo%{?3}.list %{?3:%{3}-}debuginfo}\
@@ -3356,6 +3414,56 @@ fi
 #
 #
 %changelog
+* Wed Feb 15 2023 Herton R. Krzesinski <herton@redhat.com> [5.14.0-272.el9]
+- Split partner modules into a sub-package (Alice Mitchell) [2039020]
+- Enable kAFS and it's dependancies in RHEL (Alice Mitchell) [2039020]
+- netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (Florian Westphal) [2161695]
+- netfilter: ipset: fix hash:net,port,net hang with /0 subnet (Florian Westphal) [2161695]
+- ipvs: use u64_stats_t for the per-cpu counters (Florian Westphal) [2161695]
+- netfilter: flowtable: really fix NAT IPv6 offload (Florian Westphal) [2161695]
+- netfilter: conntrack: fix using __this_cpu_add in preemptible (Florian Westphal) [2161695]
+- netfilter: flowtable_offload: fix using __this_cpu_add in preemptible (Florian Westphal) [2161695]
+- netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one (Florian Westphal) [2161695]
+- netfilter: flowtable_offload: add missing locking (Florian Westphal) [2161695]
+- netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface (Florian Westphal) [2161695]
+- netfilter: ipset: regression in ip_set_hash_ip.c (Florian Westphal) [2161695]
+- netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() (Florian Westphal) [2161695]
+- netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() (Florian Westphal) [2161695]
+- netfilter: nf_tables: nft_parse_register can return a negative value (Florian Westphal) [2161695]
+- intel_th: msu: Use memset_startat() for clearing hw header (Eric Chanudet) [2159468]
+- redhat/configs: leave -Werror off for now (Eric Chanudet) [2159468]
+- gcc-12: disable '-Warray-bounds' universally for now (Eric Chanudet) [2159468]
+- kbuild: Fix -Wimplicit-fallthrough=5 error for GCC 5.x and 6.x (Eric Chanudet) [2159468]
+- s390: disable -Warray-bounds (Eric Chanudet) [2159468]
+- gcc-12: disable '-Wdangling-pointer' warning for now (Eric Chanudet) [2159468]
+- Makefile: fix 2 typos (Eric Chanudet) [2159468]
+- Makefile: Enable -Wzero-length-bounds (Eric Chanudet) [2159468]
+- Makefile: Enable -Warray-bounds (Eric Chanudet) [2159468]
+- sparc: Unbreak the build (Eric Chanudet) [2159468]
+- Makefile: Enable -Wcast-function-type (Eric Chanudet) [2159468]
+- kconfig: Add support for -Wimplicit-fallthrough (Eric Chanudet) [2159468]
+- Makefile: use -Wno-main in the full kernel tree (Eric Chanudet) [2159468]
+- s390: remove WARN_DYNAMIC_STACK (Eric Chanudet) [2159468]
+- Enable '-Werror' by default for all kernel builds (Eric Chanudet) [2159468]
+- kbuild: Shuffle blank line to improve comment meaning (Eric Chanudet) [2159468]
+- x86/boot: Wrap literal addresses in absolute_pointer() (Eric Chanudet) [2159468]
+- scsi: lpfc: Use struct_group() to initialize struct lpfc_cgn_info (Eric Chanudet) [2159468]
+- bnx2x: Use struct_group() for memcpy() region (Eric Chanudet) [2159468]
+- RDMA/cxgb4: fix accept failure due to increased cpl_t5_pass_accept_rpl size (Eric Chanudet) [2159468]
+- iw_cxgb4: Use memset_startat() for cpl_t5_pass_accept_rpl (Eric Chanudet) [2159468]
+- dm integrity: Use struct_group() to zero struct journal_sector (Eric Chanudet) [2159468]
+- bnxt_en: Use struct_group_attr() for memcpy() region (Eric Chanudet) [2159468]
+- ipv6: Use memset_after() to zero rt6_info (Eric Chanudet) [2159468]
+- xfrm: Use memset_after() to clear padding (Eric Chanudet) [2159468]
+- virtio-pci: Remove wrong address verification in vp_del_vqs() (Eric Chanudet) [2159468]
+- ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() (Eric Chanudet) [2159468]
+- skbuff: Switch structure bounds to struct_group() (Eric Chanudet) [2159468]
+- tracing: Use memset_startat() to zero struct trace_iterator (Eric Chanudet) [2159468]
+- kernel/sysctl.c: fixup printk sysctl constants (Eric Chanudet) [2159468]
+- crypto: dh - constify struct dh's pointer members (Eric Chanudet) [2159468]
+- cert host tools: Stop complaining about deprecated OpenSSL functions (Eric Chanudet) [2159468]
+- kernel/sysctl.c: remove unused variable ten_thousand (Eric Chanudet) [2159468]
+
 * Wed Feb 15 2023 Herton R. Krzesinski <herton@redhat.com> [5.14.0-271.el9]
 - spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers (Mark Salter) [2071848 2122415]
 - spi: bcm2835aux: Convert to use GPIO descriptors (Mark Salter) [2071848 2122415]

mod-partner.list

@@ -0,0 +1,2 @@
+afs
+rxrpc

sources

@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-271.el9.tar.xz) = 3c952c9b5102e47b641b0fd64462d2a6a0fc0c5cae3fd9eb7e825c023ab6dc2a13da50982a876d5d32dcbf721ee65928a091d2db99b43b6064caff1e2b95c0eb
-SHA512 (kernel-abi-stablelists-5.14.0-271.el9.tar.bz2) = 02a661008115a0a1b2af31ab9ebb2bfd545306bc070a341bcc4d1295b4cb5743bcd1fb51e9e7c42d63c6ab1d82ead8f3ee3f1607ec252737de0899428a1701d0
-SHA512 (kernel-kabi-dw-5.14.0-271.el9.tar.bz2) = e6a1404249049ba97ceb72470c93b3d6f5fcfdc5371b835531d3df024edf0089c156dc28d4357cabbcff77dd7c5ff941ed616011cc4c668876e6b902c33bbac0
+SHA512 (linux-5.14.0-272.el9.tar.xz) = f7423476d3a670d6988011471eee617dffbb8e91b61f61c7c42ffee70e05a6625d447ff338a0ab7c7f48a92b8cf13a8620b7c2c9fde79a5dee28908cc814b4cf
+SHA512 (kernel-abi-stablelists-5.14.0-272.el9.tar.bz2) = 9356015e7bdbb6ad49104daac647f2874fa6555cb22fd5154d3903fa2ad930be29e7df400a8ae6d518d311d60ba1a7b38deabf95768f69a43af64d303968ad1b
+SHA512 (kernel-kabi-dw-5.14.0-272.el9.tar.bz2) = 86c51d551f0ecc96a8f6d8347bdfd5c44029a7b0e8c0227b3bd6aaf45bdab9d149a02b49f85ede973f3791c88ffa559cb0778dbdaf29c3d09ba13c4e66dcefe8