From 6347cbb93b14d8eef0c214f881ea987653de413d Mon Sep 17 00:00:00 2001 From: Eduard Abdullin Date: Tue, 31 Mar 2026 08:43:47 +0000 Subject: [PATCH] Debrand for AlmaLinux OS Use AlmaLinux OS secure boot cert Enable Btrfs support for all kernel variants hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 qla4xxx: bring back deprecated PCI ids lpfc: bring back deprecated PCI ids be2iscsi: bring back deprecated PCI ids kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained --- .gitignore | 6 +++--- Makefile.rhelver | 2 +- kernel.changelog | 11 +++++++++++ kernel.spec | 23 ++++++++++++++++------- sources | 6 +++--- 5 files changed, 34 insertions(+), 14 deletions(-) diff --git a/.gitignore b/.gitignore index bb29b3642..0871fc590 100644 --- a/.gitignore +++ b/.gitignore @@ -1,7 +1,7 @@ fedoraimaca.x509 -kernel-abi-stablelists-6.12.0-124.45.1.el10_1.tar.xz -kernel-kabi-dw-6.12.0-124.45.1.el10_1.tar.xz -linux-6.12.0-124.45.1.el10_1.tar.xz +kernel-abi-stablelists-6.12.0-124.47.1.el10_1.tar.xz +kernel-kabi-dw-6.12.0-124.47.1.el10_1.tar.xz +linux-6.12.0-124.47.1.el10_1.tar.xz nvidiagpuoot001.x509 olima1.x509 olimaca1.x509 diff --git a/Makefile.rhelver b/Makefile.rhelver index 383b0ea52..81d8668a7 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 1 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 124.45.1 +RHEL_RELEASE = 124.47.1 # # RHEL_REBASE_NUM diff --git a/kernel.changelog b/kernel.changelog index af764f1ba..939c8ee06 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,14 @@ +* Sat Mar 21 2026 CKI KWF Bot [6.12.0-124.47.1.el10_1] +- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766] +- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) +- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238} +- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317] +Resolves: RHEL-127317, RHEL-149766, RHEL-153413 + +* Tue Mar 17 2026 CKI KWF Bot [6.12.0-124.46.1.el10_1] +- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231} +Resolves: RHEL-153272 + * Tue Mar 10 2026 CKI KWF Bot [6.12.0-124.45.1.el10_1] - ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010} Resolves: RHEL-144768 diff --git a/kernel.spec b/kernel.spec index 1f7863caa..394ea868c 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 124.45.1 +%define pkgrelease 124.47.1 %define kversion 6 -%define tarfile_release 6.12.0-124.45.1.el10_1 +%define tarfile_release 6.12.0-124.47.1.el10_1 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 124.45.1%{?buildid}%{?dist} +%define specrelease 124.47.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-124.45.1.el10_1 +%define kabiversion 6.12.0-124.47.1.el10_1 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -4377,14 +4377,14 @@ fi\ # # %changelog -* Tue Mar 17 2026 Eduard Abdullin - 6.12.0-124.45.1 +* Tue Mar 31 2026 Eduard Abdullin - 6.12.0-124.47.1 - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert -* Tue Mar 17 2026 Neal Gompa - 6.12.0-124.45.1 +* Tue Mar 31 2026 Neal Gompa - 6.12.0-124.47.1 - Enable Btrfs support for all kernel variants -* Tue Mar 17 2026 Andrew Lukoshko - 6.12.0-124.45.1 +* Tue Mar 31 2026 Andrew Lukoshko - 6.12.0-124.47.1 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -4395,6 +4395,15 @@ fi\ - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained +* Sat Mar 21 2026 CKI KWF Bot [6.12.0-124.47.1.el10_1] +- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766] +- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) +- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238} +- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317] + +* Tue Mar 17 2026 CKI KWF Bot [6.12.0-124.46.1.el10_1] +- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231} + * Tue Mar 10 2026 CKI KWF Bot [6.12.0-124.45.1.el10_1] - ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010} diff --git a/sources b/sources index 303f7fe98..2fae7ca88 100644 --- a/sources +++ b/sources @@ -1,7 +1,7 @@ SHA512 (fedoraimaca.x509) = e04809394f4472c17e86d7024dee34f03fb68e82a85502fd5b00535202c72e57626a8376b2cf991b7e1e46404aa5ab8d189ebf320e0dd37d49e7efbc925c7a2e -SHA512 (kernel-abi-stablelists-6.12.0-124.45.1.el10_1.tar.xz) = c2e0a7ccf3f5625c54599ef1313f4fde1ac5e9d272032aa015ee59f32175711955c649755d2429735defac4043deac2df2fa7e2ebfe9c40dc9f7c0ef22998d0f -SHA512 (kernel-kabi-dw-6.12.0-124.45.1.el10_1.tar.xz) = 8f403b2e65c8dc3d7aad13c9bfb5f268ed72c40be4b6ac9fe88bdfe325642bcd793bf54d2e546d4e09bd73162b3057f35fcedc9e87c6d3e948b8942cff2b27fd -SHA512 (linux-6.12.0-124.45.1.el10_1.tar.xz) = 257f66a1b86ad460663fea59cd9bda9c97d41bc626b3d239ee844c4b9b566513d04e83257e649f703c3dd6d2b7248a254964f94cc2862f29eff48b6fd343918b +SHA512 (kernel-abi-stablelists-6.12.0-124.47.1.el10_1.tar.xz) = bef4cea8399b798ddafff85d31914b6b5084d963659db4c675889fa48e9297463d81edafe1b006ee29566dc24808e36c75a5cf93b181aa112f490ac2bed93885 +SHA512 (kernel-kabi-dw-6.12.0-124.47.1.el10_1.tar.xz) = b8b6208841be83cedc48e94405a90c29da407568ef33115a0a6532955908b19a505dab43273e83e84032f8e179fb6bced2f1c62afd0f85323d9d524697f354f5 +SHA512 (linux-6.12.0-124.47.1.el10_1.tar.xz) = 4940d83e427dfa34928a5c874cd8d535c431f98a6962399ca9f2daf50bbee963d10f594e3ce8677dd79688ab35dade616b418e983a65246ce3137b074c0e89d2 SHA512 (nvidiagpuoot001.x509) = b42f836e1cfa07890cb6ca13de9c3950e306c9ec7686c4c09f050bb68869f5d82962b2cd5f3aa0eb7a0f3a3ae54e9c480eafbac5df53aa92c295ff511a8c59fe SHA512 (olima1.x509) = 123c26c1d698cc8523845c6e1103b9c72abf855acd225d37baf1f3388a47f912166d6d786fb367fe46de39e011b586ad7f3963aa2e8923da30a6ea9ae0d76ad3 SHA512 (olimaca1.x509) = 3a779415fad29d6f7250ec97ab1f0a5eb62c351b724feee06b22e17f065bf74a558f32cc524d3222c4485635ae5b9cd5287855c94010fe743b51a4d954340c4c