hpsa: bring back deprecated PCI ids #CFHack #CFHack2024

mptsas: bring back deprecated PCI ids #CFHack #CFHack2024

megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024

qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024

qla4xxx: bring back deprecated PCI ids

lpfc: bring back deprecated PCI ids

be2iscsi: bring back deprecated PCI ids

kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained

Use AlmaLinux OS secure boot cert

Debrand for AlmaLinux OS
This commit is contained in:
Andrew Lukoshko 2025-02-15 01:58:23 +00:00 committed by AlmaLinux Autopatch
commit 398d5d850c
26 changed files with 286 additions and 31 deletions

View File

@ -12,7 +12,7 @@ RHEL_MINOR = 0
#
# Use this spot to avoid future merge conflicts.
# Do not trim this comment.
RHEL_RELEASE = 53
RHEL_RELEASE = 54
#
# RHEL_REBASE_NUM

View File

@ -23,3 +23,4 @@ rules:
- !PassingTestCaseRule {test_case_name: s1-aws-ci_aarch64.brew-build.tier1.functional}
- !PassingTestCaseRule {test_case_name: s1-azure-ci_x86_64.brew-build.tier1.functional}
- !PassingTestCaseRule {test_case_name: s1-azure-ci_aarch64.brew-build.tier1.functional}
- !PassingTestCaseRule {test_case_name: s1-gcp-ci.brew-build.tier1.functional}

View File

@ -2970,7 +2970,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
# CONFIG_INTEL_LDMA is not set
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_PLR_TPMI is not set

View File

@ -2954,7 +2954,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
# CONFIG_INTEL_LDMA is not set
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_PLR_TPMI is not set

View File

@ -3167,7 +3167,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_MEI_WDT is not set

View File

@ -3151,7 +3151,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_MEI_WDT is not set

View File

@ -2967,7 +2967,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
# CONFIG_INTEL_LDMA is not set
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_PLR_TPMI is not set

View File

@ -2951,7 +2951,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
# CONFIG_INTEL_LDMA is not set
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_PLR_TPMI is not set

View File

@ -3011,7 +3011,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
# CONFIG_INTEL_LDMA is not set
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_PLR_TPMI is not set

View File

@ -2995,7 +2995,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
# CONFIG_INTEL_LDMA is not set
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_PLR_TPMI is not set

View File

@ -3008,7 +3008,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
# CONFIG_INTEL_LDMA is not set
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_PLR_TPMI is not set

View File

@ -2992,7 +2992,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
# CONFIG_INTEL_LDMA is not set
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_PLR_TPMI is not set

View File

@ -2636,7 +2636,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
# CONFIG_INTEL_LDMA is not set
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_PLR_TPMI is not set

View File

@ -2620,7 +2620,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
# CONFIG_INTEL_LDMA is not set
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_PLR_TPMI is not set

View File

@ -2620,7 +2620,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
# CONFIG_INTEL_LDMA is not set
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_PLR_TPMI is not set

View File

@ -2604,7 +2604,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
# CONFIG_INTEL_LDMA is not set
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_PLR_TPMI is not set

View File

@ -2611,7 +2611,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
# CONFIG_INTEL_LDMA is not set
CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_PLR_TPMI is not set

View File

@ -1511,6 +1511,7 @@ CONFIG_DRM_I915_HEARTBEAT_INTERVAL=2500
CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000
CONFIG_DRM_I915_PREEMPT_TIMEOUT=640
CONFIG_DRM_I915_PREEMPT_TIMEOUT_COMPUTE=7500
CONFIG_DRM_I915_PXP=y
# CONFIG_DRM_I915_REPLAY_GPU_HANGS_API is not set
CONFIG_DRM_I915_REQUEST_TIMEOUT=20000
# CONFIG_DRM_I915_SELFTEST is not set
@ -2942,7 +2943,7 @@ CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI is not set
# CONFIG_INTEL_MEI_ME is not set
# CONFIG_INTEL_MEI_PXP is not set
CONFIG_INTEL_MEI_PXP=m
# CONFIG_INTEL_MEI_TXE is not set
CONFIG_INTEL_MEI_VSC_HW=m
CONFIG_INTEL_MEI_VSC=m

View File

@ -1503,6 +1503,7 @@ CONFIG_DRM_I915_HEARTBEAT_INTERVAL=2500
CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000
CONFIG_DRM_I915_PREEMPT_TIMEOUT=640
CONFIG_DRM_I915_PREEMPT_TIMEOUT_COMPUTE=7500
CONFIG_DRM_I915_PXP=y
# CONFIG_DRM_I915_REPLAY_GPU_HANGS_API is not set
CONFIG_DRM_I915_REQUEST_TIMEOUT=20000
# CONFIG_DRM_I915_SELFTEST is not set
@ -2926,7 +2927,7 @@ CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI is not set
# CONFIG_INTEL_MEI_ME is not set
# CONFIG_INTEL_MEI_PXP is not set
CONFIG_INTEL_MEI_PXP=m
# CONFIG_INTEL_MEI_TXE is not set
CONFIG_INTEL_MEI_VSC_HW=m
CONFIG_INTEL_MEI_VSC=m

View File

@ -1480,6 +1480,7 @@ CONFIG_DRM_I915=m
CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000
CONFIG_DRM_I915_PREEMPT_TIMEOUT=640
CONFIG_DRM_I915_PREEMPT_TIMEOUT_COMPUTE=7500
CONFIG_DRM_I915_PXP=y
# CONFIG_DRM_I915_REPLAY_GPU_HANGS_API is not set
CONFIG_DRM_I915_REQUEST_TIMEOUT=20000
# CONFIG_DRM_I915_SELFTEST is not set
@ -2835,7 +2836,7 @@ CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
CONFIG_INTEL_MEI=m
CONFIG_INTEL_MEI_ME=m
# CONFIG_INTEL_MEI_PXP is not set
CONFIG_INTEL_MEI_PXP=m
# CONFIG_INTEL_MEI_TXE is not set
CONFIG_INTEL_MEI_VSC_HW=m
CONFIG_INTEL_MEI_VSC=m

View File

@ -1472,6 +1472,7 @@ CONFIG_DRM_I915=m
CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000
CONFIG_DRM_I915_PREEMPT_TIMEOUT=640
CONFIG_DRM_I915_PREEMPT_TIMEOUT_COMPUTE=7500
CONFIG_DRM_I915_PXP=y
# CONFIG_DRM_I915_REPLAY_GPU_HANGS_API is not set
CONFIG_DRM_I915_REQUEST_TIMEOUT=20000
# CONFIG_DRM_I915_SELFTEST is not set
@ -2819,7 +2820,7 @@ CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
CONFIG_INTEL_MEI=m
CONFIG_INTEL_MEI_ME=m
# CONFIG_INTEL_MEI_PXP is not set
CONFIG_INTEL_MEI_PXP=m
# CONFIG_INTEL_MEI_TXE is not set
CONFIG_INTEL_MEI_VSC_HW=m
CONFIG_INTEL_MEI_VSC=m

View File

@ -1482,6 +1482,7 @@ CONFIG_DRM_I915=m
CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000
CONFIG_DRM_I915_PREEMPT_TIMEOUT=640
CONFIG_DRM_I915_PREEMPT_TIMEOUT_COMPUTE=7500
CONFIG_DRM_I915_PXP=y
# CONFIG_DRM_I915_REPLAY_GPU_HANGS_API is not set
CONFIG_DRM_I915_REQUEST_TIMEOUT=20000
# CONFIG_DRM_I915_SELFTEST is not set
@ -2876,7 +2877,7 @@ CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
CONFIG_INTEL_MEI=m
CONFIG_INTEL_MEI_ME=m
# CONFIG_INTEL_MEI_PXP is not set
CONFIG_INTEL_MEI_PXP=m
# CONFIG_INTEL_MEI_TXE is not set
CONFIG_INTEL_MEI_VSC_HW=m
CONFIG_INTEL_MEI_VSC=m

View File

@ -1474,6 +1474,7 @@ CONFIG_DRM_I915=m
CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000
CONFIG_DRM_I915_PREEMPT_TIMEOUT=640
CONFIG_DRM_I915_PREEMPT_TIMEOUT_COMPUTE=7500
CONFIG_DRM_I915_PXP=y
# CONFIG_DRM_I915_REPLAY_GPU_HANGS_API is not set
CONFIG_DRM_I915_REQUEST_TIMEOUT=20000
# CONFIG_DRM_I915_SELFTEST is not set
@ -2860,7 +2861,7 @@ CONFIG_INTEL_MEI_GSC_PROXY=m
# CONFIG_INTEL_MEI_HDCP is not set
CONFIG_INTEL_MEI=m
CONFIG_INTEL_MEI_ME=m
# CONFIG_INTEL_MEI_PXP is not set
CONFIG_INTEL_MEI_PXP=m
# CONFIG_INTEL_MEI_TXE is not set
CONFIG_INTEL_MEI_VSC_HW=m
CONFIG_INTEL_MEI_VSC=m

View File

@ -1,3 +1,119 @@
* Fri Feb 14 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-54.el10]
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (CKI Backport Bot) [RHEL-76120] {CVE-2024-56611}
- Revert "redhat: gating.yaml: drop unstable test" (Jan Stancek)
- nvme: remove multipath module parameter (Bryan Gurney) [RHEL-78133]
- NFSD: Fix CB_GETATTR status fix (Olga Kornievskaia) [RHEL-56888]
- irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() (CKI Backport Bot) [RHEL-78517] {CVE-2024-57949}
- erofs: promote to full support (Ian Kent) [RHEL-78322]
- rxrpc, afs: Fix peer hash locking vs RCU callback (Marc Dionne) [RHEL-78388]
- afs: Fix cleanup of immediately failed async calls (Marc Dionne) [RHEL-78388]
- afs: Fix directory format encoding struct (Marc Dionne) [RHEL-78388]
- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (Marc Dionne) [RHEL-78388]
- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (Marc Dionne) [RHEL-78388]
- rxrpc: Improve setsockopt() handling of malformed user input (Marc Dionne) [RHEL-78388]
- afs: Fix merge preference rule failure condition (Marc Dionne) [RHEL-78388]
- afs: Fix the maximum cell name length (Marc Dionne) [RHEL-78388]
- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-78152]
- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-78152]
- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-78152]
- smb: client: handle lack of EA support in smb2_query_path_info() (Paulo Alcantara) [RHEL-78152]
- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-78152]
- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-78152]
- cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c (Paulo Alcantara) [RHEL-78152]
- smb3: add missing tracepoint for querying wsl EAs (Paulo Alcantara) [RHEL-78152]
- smb: client: fix order of arguments of tracepoints (Paulo Alcantara) [RHEL-78152]
- smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-78152]
- smb: client: correctly handle ErrorContextData as a flexible array (Paulo Alcantara) [RHEL-78152]
- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-78152]
- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-78152]
- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-78152]
- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-78152]
- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-78152]
- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-78152]
- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-78152]
- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-78152]
- cifs: support reconnect with alternate password for SMB1 (Paulo Alcantara) [RHEL-78152]
- smb: client: sync the root session and superblock context passwords before automounting (Paulo Alcantara) [RHEL-78152]
- cifs: Remove unused is_server_using_iface() (Paulo Alcantara) [RHEL-78152]
- smb: enable reuse of deferred file handles for write operations (Paulo Alcantara) [RHEL-78152]
- smb: fix bytes written value in /proc/fs/cifs/Stats (Paulo Alcantara) [RHEL-78152]
- smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-78152] {CVE-2024-54680}
- smb: client: Deduplicate "select NETFS_SUPPORT" in Kconfig (Paulo Alcantara) [RHEL-78152]
- smb: use macros instead of constants for leasekey size and default cifsattrs value (Paulo Alcantara) [RHEL-78152]
- smb: client: destroy cfid_put_wq on module exit (Paulo Alcantara) [RHEL-78152]
- cifs: Use str_yes_no() helper in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-78152]
- cifs: Fix rmdir failure due to ongoing I/O on deleted file (Paulo Alcantara) [RHEL-78152]
- smb3: fix compiler warning in reparse code (Paulo Alcantara) [RHEL-78152]
- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-78152]
- smb3.1.1: fix posix mounts to older servers (Paulo Alcantara) [RHEL-78152]
- fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points (Paulo Alcantara) [RHEL-78152]
- fs/smb/client: Implement new SMB3 POSIX type (Paulo Alcantara) [RHEL-78152]
- fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX (Paulo Alcantara) [RHEL-78152]
- cifs: unlock on error in smb3_reconfigure() (Paulo Alcantara) [RHEL-78152]
- cifs: during remount, make sure passwords are in sync (Paulo Alcantara) [RHEL-78152]
- cifs: support mounting with alternate password to allow password rotation (Paulo Alcantara) [RHEL-78152]
- smb: Initialize cfid->tcon before performing network ops (Paulo Alcantara) [RHEL-78152] {CVE-2024-56729}
- smb: During unmount, ensure all cached dir instances drop their dentry (Paulo Alcantara) [RHEL-78152] {CVE-2024-53176}
- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-78152]
- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-78152]
- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-78152]
- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-78152]
- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-78152]
- cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session (Paulo Alcantara) [RHEL-78152]
- cifs: Validate content of WSL reparse point buffers (Paulo Alcantara) [RHEL-78152]
- cifs: Improve guard for excluding $LXDEV xattr (Paulo Alcantara) [RHEL-78152]
- cifs: Add support for parsing WSL-style symlinks (Paulo Alcantara) [RHEL-78152]
- cifs: Validate content of native symlink (Paulo Alcantara) [RHEL-78152]
- cifs: Fix parsing native symlinks relative to the export (Paulo Alcantara) [RHEL-78152]
- Update misleading comment in cifs_chan_update_iface (Paulo Alcantara) [RHEL-78152]
- smb: client: change return value in open_cached_dir_by_dentry() if !cfids (Paulo Alcantara) [RHEL-78152]
- smb: client: disable directory caching when dir_cache_timeout is zero (Paulo Alcantara) [RHEL-78152]
- smb: client: remove unnecessary checks in open_cached_dir() (Paulo Alcantara) [RHEL-78152]
- smb: prevent use-after-free due to open_cached_dir error paths (Paulo Alcantara) [RHEL-78152] {CVE-2024-53177}
- smb: Don't leak cfid when reconnect races with open_cached_dir (Paulo Alcantara) [RHEL-78152] {CVE-2024-53178}
- smb: client: handle max length for SMB symlinks (Paulo Alcantara) [RHEL-78152]
- smb: client: get rid of bounds check in SMB2_ioctl_init() (Paulo Alcantara) [RHEL-78152]
- smb: client: improve compound padding in encryption (Paulo Alcantara) [RHEL-78152]
- smb3: request handle caching when caching directories (Paulo Alcantara) [RHEL-78152]
- cifs: Recognize SFU char/block devices created by Windows NFS server on Windows Server <<2012 (Paulo Alcantara) [RHEL-78152]
- CIFS: New mount option for cifs.upcall namespace resolution (Paulo Alcantara) [RHEL-78152]
- smb/client: Prevent error pointer dereference (Paulo Alcantara) [RHEL-78152]
- fs/smb/client: implement chmod() for SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-78152]
- smb: cached directories can be more than root file handle (Paulo Alcantara) [RHEL-78152]
- smb: client: Use str_yes_no() helper function (Paulo Alcantara) [RHEL-78152]
- smb: client: memcpy() with surrounding object base address (Paulo Alcantara) [RHEL-78152]
- cifs: Remove pre-historic unused CIFSSMBCopy (Paulo Alcantara) [RHEL-78152]
- bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write (Viktor Malik) [RHEL-78209]
- clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (Waiman Long) [RHEL-77959]
- clocksource: Use pr_info() for "Checking clocksource synchronization" message (Waiman Long) [RHEL-77959]
- kasan: make kasan_record_aux_stack_noalloc() the default behaviour (Waiman Long) [RHEL-71050]
- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (Waiman Long) [RHEL-74109] {CVE-2024-57888}
- smb: client: fix double free of TCP_Server_Info::hostname (CKI Backport Bot) [RHEL-77236] {CVE-2025-21673}
- arm64: Force CONFIG_ARCH_FORCE_MAX_ORDER of 4k kernel to 12 (Waiman Long) [RHEL-67530]
- Enable CONFIG_INTEL_MEI_PXP and CONFIG_DRM_I915_PXP on rhel (David Arcari) [RHEL-77048]
- KVM: nVMX: fix canonical check of vmcs12 HOST_RIP (Maxim Levitsky) [RHEL-44575]
- KVM: x86: model canonical checks more precisely (Maxim Levitsky) [RHEL-44575]
- KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks (Maxim Levitsky) [RHEL-44575]
- KVM: x86: Route non-canonical checks in emulator through emulate_ops (Maxim Levitsky) [RHEL-44575]
- KVM: x86: drop x86.h include from cpuid.h (Maxim Levitsky) [RHEL-44575]
- ext4: force disable fscrypt feature (Brian Foster) [RHEL-64637]
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest (Paolo Bonzini) [RHEL-45114]
- iommufd: Fix struct iommu_hwpt_pgfault init and padding (Eder Zulian) [RHEL-75944]
- iommufd/fault: Use a separate spinlock to protect fault->deliver list (Eder Zulian) [RHEL-75944]
- iommufd/fault: Destroy response and mutex in iommufd_fault_destroy() (Eder Zulian) [RHEL-75944]
- iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (Eder Zulian) [RHEL-75944]
- iommu: iommufd: fix WARNING in iommufd_device_unbind (Eder Zulian) [RHEL-75944]
- smb: client: fix use-after-free of signing key (CKI Backport Bot) [RHEL-76126] {CVE-2024-53179}
- smb: client: fix NULL ptr deref in crypto_aead_setkey() (CKI Backport Bot) [RHEL-76124] {CVE-2024-53185}
- redhat: kernel.spec: add ynl to kernel-tools (Jan Stancek) [RHEL-63081]
- tools/net/ynl: ethtool: support spec load from install location (Jan Stancek) [RHEL-63081]
- tools/net/ynl: add support for --family and --list-families (Jan Stancek) [RHEL-63081]
- tools: ynl: add main install target (Jan Stancek) [RHEL-63081]
- tools: ynl: add install target for generated content (Jan Stancek) [RHEL-63081]
- tools: ynl: add initial pyproject.toml for packaging (Jan Stancek) [RHEL-63081]
- tools: ynl: move python code to separate sub-directory (Jan Stancek) [RHEL-63081]
Resolves: RHEL-44575, RHEL-45114, RHEL-56888, RHEL-63081, RHEL-64637, RHEL-67530, RHEL-71050, RHEL-74109, RHEL-75944, RHEL-76120, RHEL-76124, RHEL-76126, RHEL-77048, RHEL-77236, RHEL-77959, RHEL-78133, RHEL-78152, RHEL-78209, RHEL-78322, RHEL-78388, RHEL-78517
* Tue Feb 11 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-53.el10]
- libperf cpumap: Grow array of read CPUs in smaller increments (Michael Petlan) [RHEL-73893]
- libperf cpumap: Remove perf_cpu_map__read() (Michael Petlan) [RHEL-73893]

View File

@ -164,15 +164,15 @@ Summary: The Linux kernel
%define specrpmversion 6.12.0
%define specversion 6.12.0
%define patchversion 6.12
%define pkgrelease 53
%define pkgrelease 54
%define kversion 6
%define tarfile_release 6.12.0-53.el10
%define tarfile_release 6.12.0-54.el10
# This is needed to do merge window version magic
%define patchlevel 12
# This allows pkg_release to have configurable %%{?dist} tag
%define specrelease 53%{?buildid}%{?dist}
%define specrelease 54%{?buildid}%{?dist}
# This defines the kabi tarball version
%define kabiversion 6.12.0-53.el10
%define kabiversion 6.12.0-54.el10
# If this variable is set to 1, a bpf selftests build failure will cause a
# fatal kernel package build error
@ -234,6 +234,8 @@ Summary: The Linux kernel
%define with_libperf %{?_without_libperf: 0} %{?!_without_libperf: 1}
# tools
%define with_tools %{?_without_tools: 0} %{?!_without_tools: 1}
# ynl
%define with_ynl %{?_without_ynl: 0} %{?!_without_ynl: 1}
# kernel-debuginfo
%define with_debuginfo %{?_without_debuginfo: 0} %{?!_without_debuginfo: 1}
# kernel-abi-stablelists
@ -781,6 +783,11 @@ BuildRequires: pciutils-devel
BuildRequires: libnl3-devel
%endif
%endif
%if %{with_tools} && %{with_ynl}
BuildRequires: python3-pyyaml python3-jsonschema python3-pip python3-setuptools python3-wheel
%endif
%if %{with_tools} || %{signmodules} || %{signkernel}
BuildRequires: openssl-devel
%endif
@ -3164,6 +3171,19 @@ chmod +x tools/perf/check-headers.sh
%endif
%if %{with_tools}
%if %{with_ynl}
pushd tools/net/ynl
export PIP_CONFIG_FILE=/tmp/pip.config
cat <<EOF > $PIP_CONFIG_FILE
[install]
no-index = true
no-build-isolation = false
EOF
%{tools_make} %{?_smp_mflags} DESTDIR=$RPM_BUILD_ROOT install
popd
%endif
%ifarch %{cpupowerarchs}
# cpupower
# make sure version-gen.sh is executable.
@ -4092,6 +4112,12 @@ fi\
%config(noreplace) %{_sysconfdir}/logrotate.d/kvm_stat
%{_bindir}/page_owner_sort
%{_bindir}/slabinfo
%if %{with_ynl}
%{_bindir}/ynl*
%{_docdir}/ynl
%{_datadir}/ynl
%{python3_sitelib}/pyynl*
%endif
%if %{with_debuginfo}
%files -f %{package_name}-tools-debuginfo.list -n %{package_name}-tools-debuginfo
@ -4101,13 +4127,19 @@ fi\
%files -n %{package_name}-tools-libs
%{_libdir}/libcpupower.so.1
%{_libdir}/libcpupower.so.0.0.1
%endif
%files -n %{package_name}-tools-libs-devel
%ifarch %{cpupowerarchs}
%{_libdir}/libcpupower.so
%{_includedir}/cpufreq.h
%{_includedir}/cpuidle.h
%{_includedir}/powercap.h
%endif
%if %{with_ynl}
%{_libdir}/libynl*
%{_includedir}/ynl
%endif
%files -n rtla
%{_bindir}/rtla
@ -4326,7 +4358,7 @@ fi\
#
#
%changelog
* Thu Feb 13 2025 Andrei Lukoshko <alukoshko@almalinux.org> - 6.12.0-53
* Sat Feb 15 2025 Andrei Lukoshko <alukoshko@almalinux.org> - 6.12.0-54
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
@ -4337,10 +4369,125 @@ fi\
- kernel/rh_messages.h: enable all disabled pci devices by moving to
unmaintained
* Thu Feb 13 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-53
* Sat Feb 15 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-54
- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
* Fri Feb 14 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-54.el10]
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (CKI Backport Bot) [RHEL-76120] {CVE-2024-56611}
- Revert "redhat: gating.yaml: drop unstable test" (Jan Stancek)
- nvme: remove multipath module parameter (Bryan Gurney) [RHEL-78133]
- NFSD: Fix CB_GETATTR status fix (Olga Kornievskaia) [RHEL-56888]
- irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() (CKI Backport Bot) [RHEL-78517] {CVE-2024-57949}
- erofs: promote to full support (Ian Kent) [RHEL-78322]
- rxrpc, afs: Fix peer hash locking vs RCU callback (Marc Dionne) [RHEL-78388]
- afs: Fix cleanup of immediately failed async calls (Marc Dionne) [RHEL-78388]
- afs: Fix directory format encoding struct (Marc Dionne) [RHEL-78388]
- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (Marc Dionne) [RHEL-78388]
- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (Marc Dionne) [RHEL-78388]
- rxrpc: Improve setsockopt() handling of malformed user input (Marc Dionne) [RHEL-78388]
- afs: Fix merge preference rule failure condition (Marc Dionne) [RHEL-78388]
- afs: Fix the maximum cell name length (Marc Dionne) [RHEL-78388]
- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-78152]
- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-78152]
- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-78152]
- smb: client: handle lack of EA support in smb2_query_path_info() (Paulo Alcantara) [RHEL-78152]
- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-78152]
- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-78152]
- cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c (Paulo Alcantara) [RHEL-78152]
- smb3: add missing tracepoint for querying wsl EAs (Paulo Alcantara) [RHEL-78152]
- smb: client: fix order of arguments of tracepoints (Paulo Alcantara) [RHEL-78152]
- smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-78152]
- smb: client: correctly handle ErrorContextData as a flexible array (Paulo Alcantara) [RHEL-78152]
- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-78152]
- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-78152]
- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-78152]
- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-78152]
- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-78152]
- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-78152]
- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-78152]
- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-78152]
- cifs: support reconnect with alternate password for SMB1 (Paulo Alcantara) [RHEL-78152]
- smb: client: sync the root session and superblock context passwords before automounting (Paulo Alcantara) [RHEL-78152]
- cifs: Remove unused is_server_using_iface() (Paulo Alcantara) [RHEL-78152]
- smb: enable reuse of deferred file handles for write operations (Paulo Alcantara) [RHEL-78152]
- smb: fix bytes written value in /proc/fs/cifs/Stats (Paulo Alcantara) [RHEL-78152]
- smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-78152] {CVE-2024-54680}
- smb: client: Deduplicate "select NETFS_SUPPORT" in Kconfig (Paulo Alcantara) [RHEL-78152]
- smb: use macros instead of constants for leasekey size and default cifsattrs value (Paulo Alcantara) [RHEL-78152]
- smb: client: destroy cfid_put_wq on module exit (Paulo Alcantara) [RHEL-78152]
- cifs: Use str_yes_no() helper in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-78152]
- cifs: Fix rmdir failure due to ongoing I/O on deleted file (Paulo Alcantara) [RHEL-78152]
- smb3: fix compiler warning in reparse code (Paulo Alcantara) [RHEL-78152]
- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-78152]
- smb3.1.1: fix posix mounts to older servers (Paulo Alcantara) [RHEL-78152]
- fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points (Paulo Alcantara) [RHEL-78152]
- fs/smb/client: Implement new SMB3 POSIX type (Paulo Alcantara) [RHEL-78152]
- fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX (Paulo Alcantara) [RHEL-78152]
- cifs: unlock on error in smb3_reconfigure() (Paulo Alcantara) [RHEL-78152]
- cifs: during remount, make sure passwords are in sync (Paulo Alcantara) [RHEL-78152]
- cifs: support mounting with alternate password to allow password rotation (Paulo Alcantara) [RHEL-78152]
- smb: Initialize cfid->tcon before performing network ops (Paulo Alcantara) [RHEL-78152] {CVE-2024-56729}
- smb: During unmount, ensure all cached dir instances drop their dentry (Paulo Alcantara) [RHEL-78152] {CVE-2024-53176}
- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-78152]
- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-78152]
- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-78152]
- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-78152]
- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-78152]
- cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session (Paulo Alcantara) [RHEL-78152]
- cifs: Validate content of WSL reparse point buffers (Paulo Alcantara) [RHEL-78152]
- cifs: Improve guard for excluding $LXDEV xattr (Paulo Alcantara) [RHEL-78152]
- cifs: Add support for parsing WSL-style symlinks (Paulo Alcantara) [RHEL-78152]
- cifs: Validate content of native symlink (Paulo Alcantara) [RHEL-78152]
- cifs: Fix parsing native symlinks relative to the export (Paulo Alcantara) [RHEL-78152]
- Update misleading comment in cifs_chan_update_iface (Paulo Alcantara) [RHEL-78152]
- smb: client: change return value in open_cached_dir_by_dentry() if !cfids (Paulo Alcantara) [RHEL-78152]
- smb: client: disable directory caching when dir_cache_timeout is zero (Paulo Alcantara) [RHEL-78152]
- smb: client: remove unnecessary checks in open_cached_dir() (Paulo Alcantara) [RHEL-78152]
- smb: prevent use-after-free due to open_cached_dir error paths (Paulo Alcantara) [RHEL-78152] {CVE-2024-53177}
- smb: Don't leak cfid when reconnect races with open_cached_dir (Paulo Alcantara) [RHEL-78152] {CVE-2024-53178}
- smb: client: handle max length for SMB symlinks (Paulo Alcantara) [RHEL-78152]
- smb: client: get rid of bounds check in SMB2_ioctl_init() (Paulo Alcantara) [RHEL-78152]
- smb: client: improve compound padding in encryption (Paulo Alcantara) [RHEL-78152]
- smb3: request handle caching when caching directories (Paulo Alcantara) [RHEL-78152]
- cifs: Recognize SFU char/block devices created by Windows NFS server on Windows Server <<2012 (Paulo Alcantara) [RHEL-78152]
- CIFS: New mount option for cifs.upcall namespace resolution (Paulo Alcantara) [RHEL-78152]
- smb/client: Prevent error pointer dereference (Paulo Alcantara) [RHEL-78152]
- fs/smb/client: implement chmod() for SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-78152]
- smb: cached directories can be more than root file handle (Paulo Alcantara) [RHEL-78152]
- smb: client: Use str_yes_no() helper function (Paulo Alcantara) [RHEL-78152]
- smb: client: memcpy() with surrounding object base address (Paulo Alcantara) [RHEL-78152]
- cifs: Remove pre-historic unused CIFSSMBCopy (Paulo Alcantara) [RHEL-78152]
- bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write (Viktor Malik) [RHEL-78209]
- clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (Waiman Long) [RHEL-77959]
- clocksource: Use pr_info() for "Checking clocksource synchronization" message (Waiman Long) [RHEL-77959]
- kasan: make kasan_record_aux_stack_noalloc() the default behaviour (Waiman Long) [RHEL-71050]
- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (Waiman Long) [RHEL-74109] {CVE-2024-57888}
- smb: client: fix double free of TCP_Server_Info::hostname (CKI Backport Bot) [RHEL-77236] {CVE-2025-21673}
- arm64: Force CONFIG_ARCH_FORCE_MAX_ORDER of 4k kernel to 12 (Waiman Long) [RHEL-67530]
- Enable CONFIG_INTEL_MEI_PXP and CONFIG_DRM_I915_PXP on rhel (David Arcari) [RHEL-77048]
- KVM: nVMX: fix canonical check of vmcs12 HOST_RIP (Maxim Levitsky) [RHEL-44575]
- KVM: x86: model canonical checks more precisely (Maxim Levitsky) [RHEL-44575]
- KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks (Maxim Levitsky) [RHEL-44575]
- KVM: x86: Route non-canonical checks in emulator through emulate_ops (Maxim Levitsky) [RHEL-44575]
- KVM: x86: drop x86.h include from cpuid.h (Maxim Levitsky) [RHEL-44575]
- ext4: force disable fscrypt feature (Brian Foster) [RHEL-64637]
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest (Paolo Bonzini) [RHEL-45114]
- iommufd: Fix struct iommu_hwpt_pgfault init and padding (Eder Zulian) [RHEL-75944]
- iommufd/fault: Use a separate spinlock to protect fault->deliver list (Eder Zulian) [RHEL-75944]
- iommufd/fault: Destroy response and mutex in iommufd_fault_destroy() (Eder Zulian) [RHEL-75944]
- iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (Eder Zulian) [RHEL-75944]
- iommu: iommufd: fix WARNING in iommufd_device_unbind (Eder Zulian) [RHEL-75944]
- smb: client: fix use-after-free of signing key (CKI Backport Bot) [RHEL-76126] {CVE-2024-53179}
- smb: client: fix NULL ptr deref in crypto_aead_setkey() (CKI Backport Bot) [RHEL-76124] {CVE-2024-53185}
- redhat: kernel.spec: add ynl to kernel-tools (Jan Stancek) [RHEL-63081]
- tools/net/ynl: ethtool: support spec load from install location (Jan Stancek) [RHEL-63081]
- tools/net/ynl: add support for --family and --list-families (Jan Stancek) [RHEL-63081]
- tools: ynl: add main install target (Jan Stancek) [RHEL-63081]
- tools: ynl: add install target for generated content (Jan Stancek) [RHEL-63081]
- tools: ynl: add initial pyproject.toml for packaging (Jan Stancek) [RHEL-63081]
- tools: ynl: move python code to separate sub-directory (Jan Stancek) [RHEL-63081]
* Tue Feb 11 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-53.el10]
- libperf cpumap: Grow array of read CPUs in smaller increments (Michael Petlan) [RHEL-73893]
- libperf cpumap: Remove perf_cpu_map__read() (Michael Petlan) [RHEL-73893]

View File

@ -1,5 +1,5 @@
SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd
SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6
SHA512 (linux-6.12.0-53.el10.tar.xz) = f9cbf228ce7f96cf0372bdde3277397a8299aec297e7aecb0671bc2b02910b027fec6fd70a980d59d032342ce94d6d09c401e5d013d5b678c91559c8217f4da2
SHA512 (kernel-abi-stablelists-6.12.0-53.el10.tar.xz) = e81621b157fdbe034a07a6c1989bc972054a0dc23513e0fbf61e11dcaf2079ff4b2fcf0eacd26a7f0d9e89b2efb45dbfcb4291b609163412831de0707116e8d7
SHA512 (kernel-kabi-dw-6.12.0-53.el10.tar.xz) = 7550a1ab641ce3f1c086092ae10cce3d017b3fa20cdf40a00c643de3d62fcfda576931a81e872ddf35c01d2c60d8e92fe525621eb429c04aa0ff7cc83b71d763
SHA512 (linux-6.12.0-54.el10.tar.xz) = a3751e387ea8aa562b81e3e0e31b2ad757142ffc1a32740083887f120f1c1fbf43c3f64c9e4c8016052412f906756729bb04aafd942c4a025bdda9b938048518
SHA512 (kernel-abi-stablelists-6.12.0-54.el10.tar.xz) = ebf1cfe226689763fae392d86d14dba246a534d892c57b6665228cb65be3fc5ef2e1df3674c7bfb69aaa93abae817e5c67b2a5b07b1cfaeeeb8e231455fe84ac
SHA512 (kernel-kabi-dw-6.12.0-54.el10.tar.xz) = 0818d13d53225c079a7140fd45d4a1a6566bbc68700cdfc6bee1a02b6bee079fcc1317ae945d975e63aceee592a1072a957d806205def3f730539854a932dcc3