diff --git a/Makefile.rhelver b/Makefile.rhelver index 89a9913..c518e18 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 4 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 422 +RHEL_RELEASE = 423 # # ZSTREAM diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config index 8be44ee..06f1d31 100644 --- a/kernel-aarch64-64k-debug-rhel.config +++ b/kernel-aarch64-64k-debug-rhel.config @@ -3430,7 +3430,7 @@ CONFIG_MMC_SDHCI=m # CONFIG_MMC_SDHCI_OF_ARASAN is not set # CONFIG_MMC_SDHCI_OF_ASPEED is not set # CONFIG_MMC_SDHCI_OF_AT91 is not set -# CONFIG_MMC_SDHCI_OF_DWCMSHC is not set +CONFIG_MMC_SDHCI_OF_DWCMSHC=m # CONFIG_MMC_SDHCI_OF_ESDHC is not set # CONFIG_MMC_SDHCI_OMAP is not set CONFIG_MMC_SDHCI_PCI=m diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config index a987836..eb61449 100644 --- a/kernel-aarch64-64k-rhel.config +++ b/kernel-aarch64-64k-rhel.config @@ -3409,7 +3409,7 @@ CONFIG_MMC_SDHCI=m # CONFIG_MMC_SDHCI_OF_ARASAN is not set # CONFIG_MMC_SDHCI_OF_ASPEED is not set # CONFIG_MMC_SDHCI_OF_AT91 is not set -# CONFIG_MMC_SDHCI_OF_DWCMSHC is not set +CONFIG_MMC_SDHCI_OF_DWCMSHC=m # CONFIG_MMC_SDHCI_OF_ESDHC is not set # CONFIG_MMC_SDHCI_OMAP is not set CONFIG_MMC_SDHCI_PCI=m diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config index 7d64fcd..41ee603 100644 --- a/kernel-aarch64-debug-rhel.config +++ b/kernel-aarch64-debug-rhel.config @@ -3427,7 +3427,7 @@ CONFIG_MMC_SDHCI=m # CONFIG_MMC_SDHCI_OF_ARASAN is not set # CONFIG_MMC_SDHCI_OF_ASPEED is not set # CONFIG_MMC_SDHCI_OF_AT91 is not set -# CONFIG_MMC_SDHCI_OF_DWCMSHC is not set +CONFIG_MMC_SDHCI_OF_DWCMSHC=m # CONFIG_MMC_SDHCI_OF_ESDHC is not set # CONFIG_MMC_SDHCI_OMAP is not set CONFIG_MMC_SDHCI_PCI=m diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config index c9021bf..58c392c 100644 --- a/kernel-aarch64-rhel.config +++ b/kernel-aarch64-rhel.config @@ -3406,7 +3406,7 @@ CONFIG_MMC_SDHCI=m # CONFIG_MMC_SDHCI_OF_ARASAN is not set # CONFIG_MMC_SDHCI_OF_ASPEED is not set # CONFIG_MMC_SDHCI_OF_AT91 is not set -# CONFIG_MMC_SDHCI_OF_DWCMSHC is not set +CONFIG_MMC_SDHCI_OF_DWCMSHC=m # CONFIG_MMC_SDHCI_OF_ESDHC is not set # CONFIG_MMC_SDHCI_OMAP is not set CONFIG_MMC_SDHCI_PCI=m diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config index dd35943..786a74a 100644 --- a/kernel-aarch64-rt-debug-rhel.config +++ b/kernel-aarch64-rt-debug-rhel.config @@ -3487,7 +3487,7 @@ CONFIG_MMC_SDHCI=m # CONFIG_MMC_SDHCI_OF_ARASAN is not set # CONFIG_MMC_SDHCI_OF_ASPEED is not set # CONFIG_MMC_SDHCI_OF_AT91 is not set -# CONFIG_MMC_SDHCI_OF_DWCMSHC is not set +CONFIG_MMC_SDHCI_OF_DWCMSHC=m # CONFIG_MMC_SDHCI_OF_ESDHC is not set # CONFIG_MMC_SDHCI_OMAP is not set CONFIG_MMC_SDHCI_PCI=m diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config index 92ba164..aea8385 100644 --- a/kernel-aarch64-rt-rhel.config +++ b/kernel-aarch64-rt-rhel.config @@ -3466,7 +3466,7 @@ CONFIG_MMC_SDHCI=m # CONFIG_MMC_SDHCI_OF_ARASAN is not set # CONFIG_MMC_SDHCI_OF_ASPEED is not set # CONFIG_MMC_SDHCI_OF_AT91 is not set -# CONFIG_MMC_SDHCI_OF_DWCMSHC is not set +CONFIG_MMC_SDHCI_OF_DWCMSHC=m # CONFIG_MMC_SDHCI_OF_ESDHC is not set # CONFIG_MMC_SDHCI_OMAP is not set CONFIG_MMC_SDHCI_PCI=m diff --git a/kernel.spec b/kernel.spec index 6942366..ca0dcd1 100755 --- a/kernel.spec +++ b/kernel.spec @@ -165,15 +165,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 422 +%define pkgrelease 423 %define kversion 5 -%define tarfile_release 5.14.0-422.el9 +%define tarfile_release 5.14.0-423.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 422%{?buildid}%{?dist} +%define specrelease 423%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-422.el9 +%define kabiversion 5.14.0-423.el9 # # End of genspec.sh variables @@ -916,6 +916,7 @@ Source101: rhelkpatch1.x509 Source102: rhelimaca1.x509 Source103: rhelima.x509 Source104: rhelima_centos.x509 +Source105: nvidiagpuoot001.x509 %if 0%{?centos} %define ima_signing_cert %{SOURCE104} @@ -1773,7 +1774,8 @@ done openssl x509 -inform der -in %{SOURCE100} -out rheldup3.pem openssl x509 -inform der -in %{SOURCE101} -out rhelkpatch1.pem openssl x509 -inform der -in %{SOURCE102} -out rhelimaca1.pem -cat rheldup3.pem rhelkpatch1.pem rhelimaca1.pem > ../certs/rhel.pem +openssl x509 -inform der -in %{SOURCE105} -out nvidiagpuoot001.pem +cat rheldup3.pem rhelkpatch1.pem rhelimaca1.pem nvidiagpuoot001.pem > ../certs/rhel.pem %if %{signkernel} %ifarch s390x ppc64le openssl x509 -inform der -in %{secureboot_ca_0} -out secureboot.pem @@ -3727,6 +3729,108 @@ fi # # %changelog +* Fri Feb 16 2024 Scott Weaver [5.14.0-423.el9] +- Bluetooth: Add support for Gale Peak (8087:0036) (Jose Ignacio Tornos Martinez) [RHEL-24999] +- Bluetooth: btintel: Add support for Gale Peak (Jose Ignacio Tornos Martinez) [RHEL-24999] +- mlxbf-bootctl: correctly identify secure boot with development keys (Luiz Capitulino) [RHEL-21120] +- platform/mellanox: mlxbf-bootctl: Convert to platform remove callback returning void (Luiz Capitulino) [RHEL-21120] +- mlxbf-bootctl: Support sysfs entries for MFG fields (Luiz Capitulino) [RHEL-21120] +- mlxbf-bootctl: Support setting the ARM boot state to "OS up" (Luiz Capitulino) [RHEL-21120] +- mlxbf-bootctl: Support the large icmc write/read (Luiz Capitulino) [RHEL-21120] +- mlxbf-bootctl: Add sysfs file for BlueField boot log (Luiz Capitulino) [RHEL-21120] +- mlxbf-bootctl: Add sysfs file for BlueField boot fifo (Luiz Capitulino) [RHEL-21120] +- platform/mellanox: add firmware reset support (Luiz Capitulino) [RHEL-21120] +- tpm: Enable hwrng only for Pluton on AMD CPUs (Štěpán Horáček) [RHEL-18985] +- redhat: hsr: Mark as tech preview (Felix Maurer) [RHEL-24972] +- Bluetooth: Add more enc key size check (Bastien Nocera) [RHEL-19668 RHEL-19669] {CVE-2023-24023} +- netfilter: xt_recent: fix (increase) ipv6 literal buffer length (Florian Westphal) [RHEL-21163] +- netfilter: xt_owner: Fix for unsafe access of sk->sk_socket (Florian Westphal) [RHEL-21163] +- netfilter: xt_u32: validate user space input (Florian Westphal) [RHEL-21163] +- keys, dns: Fix size check of V1 server-list header (Davide Caratti) [RHEL-21582] +- keys, dns: Fix missing size check of V1 server-list header (Davide Caratti) [RHEL-21582] +- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry (Davide Caratti) [RHEL-21582] +- net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() (Davide Caratti) [RHEL-21582] +- psample: Require 'CAP_NET_ADMIN' when joining "packets" group (Davide Caratti) [RHEL-21582] +- llc: verify mac len before reading mac header (Davide Caratti) [RHEL-21582] +- ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Ilya Dryomov) [RHEL-22252] +- ceph: always queue a writeback when revoking the Fb caps (Ilya Dryomov) [RHEL-22252] +- ceph: always check dir caps asynchronously (Ilya Dryomov) [RHEL-22252] +- ice: Add check for lport extraction to LAG init (Petr Oros) [RHEL-21561] +- ice: stop trashing VF VSI aggregator node ID information (Petr Oros) [RHEL-21561] +- pmdomain: xilinx: Move Kconfig option to the pmdomain subsystem (Radu Rendec) [RHEL-25420] +- pmdomain: ti: Move and add Kconfig options to the pmdomain subsystem (Radu Rendec) [RHEL-25420] +- pmdomain: tegra: Move Kconfig option to the pmdomain subsystem (Radu Rendec) [RHEL-25420] +- pmdomain: st: Add a Kconfig option for the ux500 power domain (Radu Rendec) [RHEL-25420] +- pmdomain: samsung: Move Kconfig option to the pmdomain subsystem (Radu Rendec) [RHEL-25420] +- pmdomain: rockchip: Move Kconfig option to the pmdomain subsystem (Radu Rendec) [RHEL-25420] +- pmdomain: renesas: Move Kconfig options to the pmdomain subsystem (Radu Rendec) [RHEL-25420] +- pmdomain: qcom: Move Kconfig options to the pmdomain subsystem (Radu Rendec) [RHEL-25420] +- pmdomain: mediatek: Move Kconfig options to the pmdomain subsystem (Radu Rendec) [RHEL-25420] +- pmdomain: imx: Move Kconfig options to the pmdomain subsystem (Radu Rendec) [RHEL-25420] +- pmdomain: bcm: Move Kconfig options to the pmdomain subsystem (Radu Rendec) [RHEL-25420] +- pmdomain: amlogic: Move Kconfig options to the pmdomain subsystem (Radu Rendec) [RHEL-25420] +- pmdomain: actions: Move Kconfig file to the pmdomain subsystem (Radu Rendec) [RHEL-25420] +- pmdomain: Prepare to move Kconfig files into the pmdomain subsystem (Radu Rendec) [RHEL-25420] +- pmdomain: Rename the genpd subsystem to pmdomain (Radu Rendec) [RHEL-25420] +- genpd: imx: relocate scu-pd under genpd (Radu Rendec) [RHEL-25420] +- genpd: move owl-sps-helper.c from drivers/soc (Radu Rendec) [RHEL-25420] +- genpd: Makefile: build imx (Radu Rendec) [RHEL-25420] +- ARM: ux500: Move power-domain driver to the genpd dir (Radu Rendec) [RHEL-25420] +- ARM: ux500: Convert power-domain code into a regular platform driver (Radu Rendec) [RHEL-25420] +- soc: xilinx: Move power-domain driver to the genpd dir (Radu Rendec) [RHEL-25420] +- soc: ti: Mover power-domain drivers to the genpd dir (Radu Rendec) [RHEL-25420] +- soc: tegra: Move powergate-bpmp driver to the genpd dir (Radu Rendec) [RHEL-25420] +- soc: samsung: Move power-domain driver to the genpd dir (Radu Rendec) [RHEL-25420] +- soc: rockchip: Mover power-domain driver to the genpd dir (Radu Rendec) [RHEL-25420] +- soc: renesas: Move power-domain drivers to the genpd dir (Radu Rendec) [RHEL-25420] +- soc: qcom: Move power-domain drivers to the genpd dir (Radu Rendec) [RHEL-25420] +- soc: mediatek: Move power-domain drivers to the genpd dir (Radu Rendec) [RHEL-25420] +- soc: imx: Move power-domain drivers to the genpd dir (Radu Rendec) [RHEL-25420] +- soc: bcm: Move power-domain drivers to the genpd dir (Radu Rendec) [RHEL-25420] +- soc: amlogic: Move power-domain drivers to the genpd dir (Radu Rendec) [RHEL-25420] +- soc: actions: Move power-domain driver to the genpd dir (Radu Rendec) [RHEL-25420] +- genpd: Create a new subsystem directory to host genpd providers (Radu Rendec) [RHEL-25420] +- soc: mediatek: Let PMIC Wrapper and SCPSYS depend on OF (Radu Rendec) [RHEL-25420] +- ARM: ux500: Drop unused register file (Radu Rendec) [RHEL-25420] +- redhat/confgs: enable sdhci-of-dwcmshc (Luiz Capitulino) [RHEL-21121] +- mmc: sdhci-of-dwcmshc: Add runtime PM operations (Luiz Capitulino) [RHEL-21121] +- mmc: sdhci-of-dwcmshc: Add error handling in dwcmshc_resume (Luiz Capitulino) [RHEL-21121] +- mmc: sdhci-of-dwcmshc: Convert to platform remove callback returning void (Luiz Capitulino) [RHEL-21121] +- mmc: sdhci-of-dwcmshc: Explicitly include correct DT includes (Luiz Capitulino) [RHEL-21121] +- mmc: sdhci-of-dwcmshc: properly determine max clock on Rockchip (Luiz Capitulino) [RHEL-21121] +- mmc: sdhci-of-dwcmshc: add the missing device table IDs for acpi (Luiz Capitulino) [RHEL-21121] +- mmc: sdhci-of-dwcmshc: Update DLL and pre-change delay for rockchip platform (Luiz Capitulino) [RHEL-21121] +- mmc: sdhci-of-dwcmshc: enable host V4 support for BlueField-3 SoC (Luiz Capitulino) [RHEL-21121] +- mmc: sdhci-of-dwcmshc: Re-enable support for the BlueField-3 SoC (Luiz Capitulino) [RHEL-21121] +- mmc: sdhci-of-dwcmshc: add support for rk3588 (Luiz Capitulino) [RHEL-21121] +- mmc: sdhci-of-dwcmshc: rename rk3568 to rk35xx (Luiz Capitulino) [RHEL-21121] +- mmc: sdhci-of-dwcmshc: add reset call back for rockchip Socs (Luiz Capitulino) [RHEL-21121] +- netfilter: nft_set_pipapo: prefer gfp_kernel allocation (Florian Westphal) [RHEL-21443] +- netfilter: nf_tables: mark newset as dead on transaction abort (Florian Westphal) [RHEL-21443] +- netfilter: nft_immediate: drop chain reference counter on error (Florian Westphal) [RHEL-21443] +- netfilter: nf_tables: skip set commit for deleted/destroyed sets (Florian Westphal) [RHEL-21443] +- netfilter: nf_tables: set transport offset from mac header for netdev/egress (Florian Westphal) [RHEL-21443] +- netfilter: nf_tables: validate family when identifying table via handle (Florian Westphal) [RHEL-21443] +- netfilter: nf_tables: fix 'exist' matching on bigendian arches (Florian Westphal) [RHEL-21443] +- netfilter: nf_tables: bogus ENOENT when destroying element which does not exist (Florian Westphal) [RHEL-21443] +- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Florian Westphal) [RHEL-21443] +- netfilter: nft_set_rbtree: .deactivate fails if element has expired (Florian Westphal) [RHEL-21443] +- netfilter: nft_payload: fix wrong mac header matching (Florian Westphal) [RHEL-21443] +- netfilter: nf_tables: do not refresh timeout when resetting element (Florian Westphal) [RHEL-21443] +- netfilter: nf_tables: uapi: Describe NFTA_RULE_CHAIN_ID (Florian Westphal) [RHEL-21443] +- netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [RHEL-21443] +- netfilter: nft_exthdr: Fix non-linear header modification (Florian Westphal) [RHEL-21443] +- redhat: add nvidia oot signing key (David Airlie) [RHEL-18051] +- RDMA/efa: Fix wrong resources deallocation order (Izabela Bakollari) [RHEL-17697] +- RDMA/efa: Add RDMA write HW statistics counters (Izabela Bakollari) [RHEL-17697] +- RDMA/efa: Fix unsupported page sizes in device (Izabela Bakollari) [RHEL-17697] +- RDMA/efa: Add rdma write capability to device caps (Izabela Bakollari) [RHEL-17697] +- RDMA/efa: Add data polling capability feature bit (Izabela Bakollari) [RHEL-17697] +- md: partially revert "md/raid6: use valid sector values to determine if an I/O should wait on the reshape" (Benjamin Marzinski) [RHEL-24489] +- ipvs: fix racy memcpy in proc_do_sync_threshold (Florian Westphal) [RHEL-21166] +- ipvs: align inner_mac_header for encapsulation (Florian Westphal) [RHEL-21166] +- x86/mce: Prevent duplicate error records (Aristeu Rozanski) [RHEL-24447] + * Thu Feb 15 2024 Scott Weaver [5.14.0-422.el9] - sfc: Check firmware supports Ethernet PTP filter (Izabela Bakollari) [RHEL-11017] - sfc: allocate a big enough SKB for loopback selftest packet (Izabela Bakollari) [RHEL-11017] diff --git a/nvidiagpuoot001.x509 b/nvidiagpuoot001.x509 new file mode 100644 index 0000000..de1b601 Binary files /dev/null and b/nvidiagpuoot001.x509 differ diff --git a/sources b/sources index bb1182a..004601a 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-422.el9.tar.xz) = 5bbbc20d1e424621780c5b94bf698b907bc78a1f28b154a4aee18cd3402bf1a53f10d6c852c813d0ad58be6d95e78aaeeccd785f05174583f937ee70d4001f71 -SHA512 (kernel-abi-stablelists-5.14.0-422.el9.tar.bz2) = ff8d6b46ee40996bcf828f89eb7a45112eb604ba01c179d862b7239c383f71de755798e6868e3abb100ec1312dc212bdf0de420d7095170dd5968ef3c0330cb0 -SHA512 (kernel-kabi-dw-5.14.0-422.el9.tar.bz2) = bbdbfe7a82f20336dd662f49536d4c317f56bd17ea9a6f1d44b79f4faf5c9094b8243d502ebaf75e49cc0da77add68ac16c0ae64fe1e9fdbdf166eb3e7c4ab55 +SHA512 (linux-5.14.0-423.el9.tar.xz) = 029e9471f279ecefcb839d357053b27b19163d7374965a64e5e6985f2b0de8b2ee0d15f6f1c6302bdcde34cc4a1d11928224cd161fbf7121cde02d7d5e6cda38 +SHA512 (kernel-abi-stablelists-5.14.0-423.el9.tar.bz2) = 77d341dab02b7143de53964a235cb033f43d049e6b96dee99bd21711a261ca4dfbec299b2911d18eb552234a11ffc2c07957e6d6fc85d19dd186aa81e9f6b8e7 +SHA512 (kernel-kabi-dw-5.14.0-423.el9.tar.bz2) = d4dd283f3d135e35af71789b6bcc88cab3e287718a9be9796b1e313f840e6d4944095c15fb8c91e0e9f78d449ec1630c4f3425a4ca9544e80b31297515fc1572