Compare commits

..

11 Commits

4 changed files with 43 additions and 34 deletions

View File

@ -1,2 +1,2 @@
83780d4004613f3924fe404f22a1a2155db400c8 SOURCES/stable_20260609.tar.gz
b8475afdd5b669b6db3a4cb73dea4cf804359cad SOURCES/1.20260521.tar.gz
d6c1f8c50dd6a0e9e8eebaefc836165ba1395572 SOURCES/oldstable_20260612.tar.gz

View File

@ -1,6 +1,6 @@
From bdec30ca8e18bc7d9a5d25d7cd9ca7976aef8aa2 Mon Sep 17 00:00:00 2001
From 830e3d1891cd911bee5d3424445b47c1f50c317e Mon Sep 17 00:00:00 2001
From: Koichiro Iwao <meta@almalinux.org>
Date: Mon, 19 May 2025 13:09:29 +0900
Date: Tue, 31 Mar 2026 17:52:13 +0900
Subject: [PATCH 1/2] Apply config patch for Raspberry Pi (BCM2711)
The patch is originally provided by Pablo Greco <pgreco@centosproject.org>.
@ -11,19 +11,19 @@ Signed-off-by: Koichiro Iwao <meta@almalinux.org>
1 file changed, 40 insertions(+), 2 deletions(-)
diff --git a/arch/arm64/configs/bcm2711_defconfig b/arch/arm64/configs/bcm2711_defconfig
index ce3e13572fb4..324800576e6a 100644
index 56795bf145bd..2ba26e955191 100644
--- a/arch/arm64/configs/bcm2711_defconfig
+++ b/arch/arm64/configs/bcm2711_defconfig
@@ -1690,8 +1690,6 @@ CONFIG_DLM=m
@@ -1714,8 +1714,6 @@ CONFIG_DLM=m
CONFIG_UNICODE=m
CONFIG_KEY_DH_OPERATIONS=y
CONFIG_SECURITY=y
-CONFIG_SECURITY_APPARMOR=y
-CONFIG_LSM=""
CONFIG_CRYPTO_USER=m
CONFIG_CRYPTO_NULL=m
CONFIG_CRYPTO_CRYPTD=m
CONFIG_CRYPTO_AES=m
@@ -1742,3 +1740,43 @@ CONFIG_SCHED_TRACER=y
@@ -1762,3 +1760,43 @@ CONFIG_FTRACE_SYSCALLS=y
CONFIG_BLK_DEV_IO_TRACE=y
# CONFIG_UPROBE_EVENTS is not set
# CONFIG_STRICT_DEVMEM is not set
@ -68,5 +68,5 @@ index ce3e13572fb4..324800576e6a 100644
+CONFIG_EROFS_POSIX_ACL=y
+CONFIG_EROFS_FS_SECURITY=y
--
2.49.0
2.53.0

View File

@ -1,6 +1,6 @@
From c6064f14a8c32e3109ee83c736097e2ee03086ca Mon Sep 17 00:00:00 2001
From c79f1902314f6aca86f4df9bec6f203f6bdb1231 Mon Sep 17 00:00:00 2001
From: Koichiro Iwao <meta@almalinux.org>
Date: Mon, 19 May 2025 13:10:35 +0900
Date: Tue, 31 Mar 2026 17:53:02 +0900
Subject: [PATCH 2/2] Apply config patch for Raspberry Pi (BCM2712)
The patch is originally provided by Pablo Greco <pgreco@centosproject.org>.
@ -11,19 +11,19 @@ Signed-off-by: Koichiro Iwao <meta@almalinux.org>
1 file changed, 40 insertions(+), 2 deletions(-)
diff --git a/arch/arm64/configs/bcm2712_defconfig b/arch/arm64/configs/bcm2712_defconfig
index 9e2bda050f81..51afa99f75e3 100644
index 65e4f476536a..5530ed8c9dda 100644
--- a/arch/arm64/configs/bcm2712_defconfig
+++ b/arch/arm64/configs/bcm2712_defconfig
@@ -1692,8 +1692,6 @@ CONFIG_DLM=m
@@ -1716,8 +1716,6 @@ CONFIG_DLM=m
CONFIG_UNICODE=m
CONFIG_KEY_DH_OPERATIONS=y
CONFIG_SECURITY=y
-CONFIG_SECURITY_APPARMOR=y
-CONFIG_LSM=""
CONFIG_CRYPTO_USER=m
CONFIG_CRYPTO_NULL=m
CONFIG_CRYPTO_CRYPTD=m
CONFIG_CRYPTO_AES=m
@@ -1744,3 +1742,43 @@ CONFIG_SCHED_TRACER=y
@@ -1764,3 +1762,43 @@ CONFIG_FTRACE_SYSCALLS=y
CONFIG_BLK_DEV_IO_TRACE=y
# CONFIG_UPROBE_EVENTS is not set
# CONFIG_STRICT_DEVMEM is not set
@ -68,5 +68,5 @@ index 9e2bda050f81..51afa99f75e3 100644
+CONFIG_EROFS_POSIX_ACL=y
+CONFIG_EROFS_FS_SECURITY=y
--
2.49.0
2.53.0

View File

@ -1,5 +1,5 @@
%global firmware_tag 1.20260521
%global version_tag 20260612
%global version_tag 20260609
ExclusiveArch: aarch64
@ -18,8 +18,8 @@ ExclusiveArch: aarch64
%define rpisuffix 2
%define ksuffix 4
%define kversion 6.12
%define patchlevel 93
%define kversion 6.18
%define patchlevel 34
%if 0%{?rhel} >= 10 || 0%{?fedora} >= 40
%define pathfix %{__python3} %{_rpmconfigdir}/redhat/pathfix.py
@ -43,7 +43,7 @@ Summary: Specific kernel and bootcode for Raspberry Pi
License: GPL-2.0 WITH Linux-syscall-note
URL: https://github.com/raspberrypi/linux
Source0: https://github.com/raspberrypi/linux/archive/oldstable_%{version_tag}.tar.gz
Source0: https://github.com/raspberrypi/linux/archive/stable_%{version_tag}.tar.gz
Source1: https://github.com/raspberrypi/firmware/archive/refs/tags/%{firmware_tag}.tar.gz
Patch100: config_2711.patch
Patch101: config_2712.patch
@ -51,7 +51,6 @@ Patch101: config_2712.patch
Source2000: cpupower.service
Source2001: cpupower.config
Source2002: kvm_stat.logrotate
# AlmaLinux patches
BuildRequires: kmod, patch, bash, coreutils, tar
BuildRequires: bzip2, xz, findutils, gzip, m4, perl, perl-Carp, make, diffutils, gawk
@ -228,7 +227,7 @@ glibc package.
%endif
%prep
%setup -q -n linux-oldstable_%{version_tag}
%setup -q -n linux-stable_%{version_tag}
%patch -P 100 -p1
%patch -P 101 -p1
perl -p -i -e "s/^EXTRAVERSION.*/EXTRAVERSION = -%{release}/" Makefile
@ -490,6 +489,8 @@ cp $(ls -1 /boot/config-kernel-*-*|sort -V|tail -1) /boot/config-kernel.inc
%{_datadir}/bash-completion/completions/cpupower
%{_unitdir}/cpupower.service
%{_mandir}/man[1-8]/cpupower*
%{_libexecdir}/cpupower
%config(noreplace) %{_sysconfdir}/cpupower-service.conf
%config(noreplace) %{_sysconfdir}/sysconfig/cpupower
%{_bindir}/tmon
%{_bindir}/iio_event_monitor
@ -508,7 +509,7 @@ cp $(ls -1 /boot/config-kernel-*-*|sort -V|tail -1) /boot/config-kernel.inc
%files kernel%{?ksuffix}-tools-libs
%{_libdir}/libcpupower.so.1
%{_libdir}/libcpupower.so.0.0.1
%{_libdir}/libcpupower.so.1.0.1
%files kernel%{?ksuffix}-tools-libs-devel
%{_libdir}/libcpupower.so
@ -535,23 +536,31 @@ cp $(ls -1 /boot/config-kernel-*-*|sort -V|tail -1) /boot/config-kernel.inc
%endif
%changelog
* Thu Jul 09 2026 Koichiro Iwao <meta@almalinux.org> - 6.12.93-20260612.v8.1
- Update kernel to v6.12.93 oldstable_20260612
* Thu Jul 09 2026 Koichiro Iwao <meta@almalinux.org> - 6.18.34-20260609.v8.1
- Update kernel to v6.18.34 stable_20260609
* Tue Jun 09 2026 Koichiro Iwao <meta@almalinux.org> - 6.18.33-20260527.v8.1
- Update kernel to v6.18.33 stable_20260527
- Update firmware to 1.20260521
* Thu May 14 2026 Koichiro Iwao <meta@almalinux.org> - 6.12.47-20250916.v8.6
- net: skbuff: propagate shared-frag marker through pskb_copy() {CVE-2026-46300}
- ptrace: require CAP_SYS_PTRACE when task has no mm {CVE-2026-46333}
* Fri May 15 2026 Koichiro Iwao <meta@almalinux.org> - 6.18.29-20260513.v8.1
- Update kernel to v6.18.29 a72a0085
* Fri May 08 2026 Koichiro Iwao <meta@almalinux.org> - 6.12.47-20250916.v8.5
- rxrpc: linearize incoming DATA packet when it has paged frags {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags {CVE-2026-43284}
* Fri May 08 2026 Koichiro Iwao <meta@almalinux.org> - 6.18.28-20260508.v8.1
- Update kernel to v6.18.28 6b979ced
* Thu Apr 30 2026 Koichiro Iwao <meta@almalinux.org> - 6.12.47-20250916.v8.4
- Update CVE-2026-31431 patch to include more upstream commits
* Fri May 08 2026 Koichiro Iwao <meta@almalinux.org> - 6.18.27-20260507.v8.1
- Update kernel to v6.18.27 9dc8796e
* Thu Apr 30 2026 Koichiro Iwao <meta@almalinux.org> - 6.12.47-20250916.v8.3
- Apply fix for CVE-2026-31431 Copy Fail
* Thu Apr 30 2026 Koichiro Iwao <meta@almalinux.org> - 6.18.24-20260430.v8.1
- Update kernel to v6.18.26 3d3dd592
* Thu Apr 30 2026 Koichiro Iwao <meta@almalinux.org> - 6.18.24-20260423.v8.1
- Update kernel to v6.18.24 f2f68e79
- Update firmware to 1.20260408
* Wed Apr 01 2026 Koichiro Iwao <meta@almalinux.org> - 6.18.20-20260329.v8.1
- Update kernel to v6.18.20 21da81b5
* Mon Mar 02 2026 Koichiro Iwao <meta@almalinux.org> - 6.12.47-20250916.v8.2
- Add a pseudo subpackage -modules-extra-matched to resolve dependency issue