kernel-5.14.0-558.el9

* Tue Jan 28 2025 Patrick Talbert <ptalbert@redhat.com> [5.14.0-558.el9]
- PCI: Batch BAR sizing operations (Myron Stowe) [RHEL-76025]
- powerpc/pseries/eeh: Fix get PE state translation (Mamatha Inamdar) [RHEL-74250]
- Bluetooth: iso: Fix circular lock in iso_listen_bis (CKI Backport Bot) [RHEL-73661] {CVE-2024-54460}
- CI: Enable pipelines for rt-64k variant (Juri Lelli) [RHEL-70289]
- redhat: Add kernel-rt-64k variant (Juri Lelli) [RHEL-70289]
- Bluetooth: hci_core: Fix sleeping function called from invalid context (CKI Backport Bot) [RHEL-74112] {CVE-2024-57894}
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Bastien Nocera) [RHEL-72279]
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (CKI Backport Bot) [RHEL-72279] {CVE-2024-56605}
- redhat/configs: set new PKEY_UV option on s390 (Mete Durlu) [RHEL-50782]
- s390/crypto: Add hardware acceleration for full AES-XTS mode (Mete Durlu) [RHEL-50783]
- s390/crypto: Postpone the key split to key conversion (Mete Durlu) [RHEL-50783]
- s390/crypto: Introduce function for tokenize clearkeys (Mete Durlu) [RHEL-50783]
- s390/crypto: Generalize parameters for key conversion (Mete Durlu) [RHEL-50783]
- s390/crypto: Use module-local structures for protected keys (Mete Durlu) [RHEL-50783]
- s390/crypto: Convert to reverse x-mas tree, rename ret to rc (Mete Durlu) [RHEL-50783]
- s390/pkey: Tolerate larger key blobs (Mete Durlu) [RHEL-50783]
- s390/pkey: Add new pkey handler module pkey-uv (Mete Durlu) [RHEL-50782]
- s390/pkey: Build module name array selectively based on kernel config options (Mete Durlu) [RHEL-50782]
- s390/pkey: Fix checkpatch findings in pkey header file (Mete Durlu) [RHEL-50782]
- s390/pkey: Rework pkey verify for protected keys (Mete Durlu) [RHEL-50782]
- s390/pkey: Simplify protected key length calculation code (Mete Durlu) [RHEL-50782]
- s390/zcrypt: Cleanup include zcrypt_api.h (Mete Durlu) [RHEL-50782]
- s390/uv: export prot_virt_guest symbol in uv (Mete Durlu) [RHEL-50782]
- cxl/core: Return error when cxl_endpoint_gather_bandwidth() handles a non-PCI device (John W. Linville) [RHEL-67033]
- cxl/pci: Check Mem_info_valid bit for each applicable DVSEC (John W. Linville) [RHEL-67033]
- cxl/pci: Remove duplicated implementation of waiting for memory_info_valid (John W. Linville) [RHEL-67033]
- cxl: Calculate region bandwidth of targets with shared upstream link (John W. Linville) [RHEL-67033]
- cxl: Preserve the CDAT access_coordinate for an endpoint (John W. Linville) [RHEL-67033]
- EINJ, CXL: Fix CXL device SBDF calculation (John W. Linville) [RHEL-67033]
- cxl/port: Prevent out-of-order decoder allocation (John W. Linville) [RHEL-67033]
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return (John W. Linville) [RHEL-67033]
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() (John W. Linville) [RHEL-67033]
- cxl/port: Fix CXL port initialization order when the subsystem is built-in (John W. Linville) [RHEL-67033]
- cxl/events: Fix Trace DRAM Event Record (John W. Linville) [RHEL-67033]
- cxl/pci: Fix to record only non-zero ranges (John W. Linville) [RHEL-67033]
- cxl/test: Skip cxl_setup_parent_dport() for emulated dports (John W. Linville) [RHEL-67033]
- cxl/pci: Get AER capability address from RCRB only for RCH dport (John W. Linville) [RHEL-67033]
- cxl/region: Verify target positions using the ordered target list (John W. Linville) [RHEL-67033]
- cxl: Restore XOR'd position bits during address translation (John W. Linville) [RHEL-67033]
- cxl/core: Fix incorrect vendor debug UUID define (John W. Linville) [RHEL-67033]
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (Tony Camuso) [RHEL-65221]
- hid: intel-ish-hid: Add support for vendor customized firmware loading (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Use CPU generation string in driver_data (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Remove unused declarations (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: fix endian-conversion (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: add MODULE_DESCRIPTION() (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: fix ishtp_wait_resume() kernel-doc (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Fix build error for COMPILE_TEST (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: handler multiple MNG_RESET_NOTIFY messages (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Implement loading firmware from host feature (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Add driver_data for specifying the firmware filename (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: ipc: Add Lunar Lake-M PCI device ID (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Use PCI_VDEVICE() and rename device ID macros (Tony Camuso) [RHEL-65221]
Resolves: RHEL-50782, RHEL-50783, RHEL-65221, RHEL-67033, RHEL-70289, RHEL-72279, RHEL-73661, RHEL-74112, RHEL-74250, RHEL-76025

Signed-off-by: Patrick Talbert <ptalbert@redhat.com>
This commit is contained in:
Patrick Talbert 2025-01-28 11:09:05 -05:00
parent 3d01c5e47d
commit abef2a68c3
9 changed files with 15117 additions and 21 deletions

View File

@ -12,7 +12,7 @@ RHEL_MINOR = 6
#
# Use this spot to avoid future merge conflicts.
# Do not trim this comment.
RHEL_RELEASE = 557
RHEL_RELEASE = 558
#
# ZSTREAM

File diff suppressed because it is too large Load Diff

File diff suppressed because it is too large Load Diff

View File

@ -4064,6 +4064,7 @@ CONFIG_PKEY_CCA=m
CONFIG_PKEY_EP11=m
CONFIG_PKEY=m
CONFIG_PKEY_PCKMO=m
CONFIG_PKEY_UV=m
# CONFIG_PL320_MBOX is not set
# CONFIG_PLATFORM_MHU is not set
CONFIG_PLAYSTATION_FF=y

View File

@ -4044,6 +4044,7 @@ CONFIG_PKEY_CCA=m
CONFIG_PKEY_EP11=m
CONFIG_PKEY=m
CONFIG_PKEY_PCKMO=m
CONFIG_PKEY_UV=m
# CONFIG_PL320_MBOX is not set
# CONFIG_PLATFORM_MHU is not set
CONFIG_PLAYSTATION_FF=y

View File

@ -4057,6 +4057,7 @@ CONFIG_PKCS8_PRIVATE_KEY_PARSER=m
CONFIG_PKEY_CCA=m
CONFIG_PKEY_EP11=m
CONFIG_PKEY_PCKMO=y
CONFIG_PKEY_UV=m
CONFIG_PKEY=y
# CONFIG_PL320_MBOX is not set
# CONFIG_PLATFORM_MHU is not set

View File

@ -1,3 +1,59 @@
* Tue Jan 28 2025 Patrick Talbert <ptalbert@redhat.com> [5.14.0-558.el9]
- PCI: Batch BAR sizing operations (Myron Stowe) [RHEL-76025]
- powerpc/pseries/eeh: Fix get PE state translation (Mamatha Inamdar) [RHEL-74250]
- Bluetooth: iso: Fix circular lock in iso_listen_bis (CKI Backport Bot) [RHEL-73661] {CVE-2024-54460}
- CI: Enable pipelines for rt-64k variant (Juri Lelli) [RHEL-70289]
- redhat: Add kernel-rt-64k variant (Juri Lelli) [RHEL-70289]
- Bluetooth: hci_core: Fix sleeping function called from invalid context (CKI Backport Bot) [RHEL-74112] {CVE-2024-57894}
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Bastien Nocera) [RHEL-72279]
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (CKI Backport Bot) [RHEL-72279] {CVE-2024-56605}
- redhat/configs: set new PKEY_UV option on s390 (Mete Durlu) [RHEL-50782]
- s390/crypto: Add hardware acceleration for full AES-XTS mode (Mete Durlu) [RHEL-50783]
- s390/crypto: Postpone the key split to key conversion (Mete Durlu) [RHEL-50783]
- s390/crypto: Introduce function for tokenize clearkeys (Mete Durlu) [RHEL-50783]
- s390/crypto: Generalize parameters for key conversion (Mete Durlu) [RHEL-50783]
- s390/crypto: Use module-local structures for protected keys (Mete Durlu) [RHEL-50783]
- s390/crypto: Convert to reverse x-mas tree, rename ret to rc (Mete Durlu) [RHEL-50783]
- s390/pkey: Tolerate larger key blobs (Mete Durlu) [RHEL-50783]
- s390/pkey: Add new pkey handler module pkey-uv (Mete Durlu) [RHEL-50782]
- s390/pkey: Build module name array selectively based on kernel config options (Mete Durlu) [RHEL-50782]
- s390/pkey: Fix checkpatch findings in pkey header file (Mete Durlu) [RHEL-50782]
- s390/pkey: Rework pkey verify for protected keys (Mete Durlu) [RHEL-50782]
- s390/pkey: Simplify protected key length calculation code (Mete Durlu) [RHEL-50782]
- s390/zcrypt: Cleanup include zcrypt_api.h (Mete Durlu) [RHEL-50782]
- s390/uv: export prot_virt_guest symbol in uv (Mete Durlu) [RHEL-50782]
- cxl/core: Return error when cxl_endpoint_gather_bandwidth() handles a non-PCI device (John W. Linville) [RHEL-67033]
- cxl/pci: Check Mem_info_valid bit for each applicable DVSEC (John W. Linville) [RHEL-67033]
- cxl/pci: Remove duplicated implementation of waiting for memory_info_valid (John W. Linville) [RHEL-67033]
- cxl: Calculate region bandwidth of targets with shared upstream link (John W. Linville) [RHEL-67033]
- cxl: Preserve the CDAT access_coordinate for an endpoint (John W. Linville) [RHEL-67033]
- EINJ, CXL: Fix CXL device SBDF calculation (John W. Linville) [RHEL-67033]
- cxl/port: Prevent out-of-order decoder allocation (John W. Linville) [RHEL-67033]
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return (John W. Linville) [RHEL-67033]
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() (John W. Linville) [RHEL-67033]
- cxl/port: Fix CXL port initialization order when the subsystem is built-in (John W. Linville) [RHEL-67033]
- cxl/events: Fix Trace DRAM Event Record (John W. Linville) [RHEL-67033]
- cxl/pci: Fix to record only non-zero ranges (John W. Linville) [RHEL-67033]
- cxl/test: Skip cxl_setup_parent_dport() for emulated dports (John W. Linville) [RHEL-67033]
- cxl/pci: Get AER capability address from RCRB only for RCH dport (John W. Linville) [RHEL-67033]
- cxl/region: Verify target positions using the ordered target list (John W. Linville) [RHEL-67033]
- cxl: Restore XOR'd position bits during address translation (John W. Linville) [RHEL-67033]
- cxl/core: Fix incorrect vendor debug UUID define (John W. Linville) [RHEL-67033]
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (Tony Camuso) [RHEL-65221]
- hid: intel-ish-hid: Add support for vendor customized firmware loading (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Use CPU generation string in driver_data (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Remove unused declarations (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: fix endian-conversion (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: add MODULE_DESCRIPTION() (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: fix ishtp_wait_resume() kernel-doc (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Fix build error for COMPILE_TEST (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: handler multiple MNG_RESET_NOTIFY messages (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Implement loading firmware from host feature (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Add driver_data for specifying the firmware filename (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: ipc: Add Lunar Lake-M PCI device ID (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Use PCI_VDEVICE() and rename device ID macros (Tony Camuso) [RHEL-65221]
Resolves: RHEL-50782, RHEL-50783, RHEL-65221, RHEL-67033, RHEL-70289, RHEL-72279, RHEL-73661, RHEL-74112, RHEL-74250, RHEL-76025
* Mon Jan 27 2025 Patrick Talbert <ptalbert@redhat.com> [5.14.0-557.el9]
- ipvlan: Support bonding events (Hangbin Liu) [RHEL-73836]
- ipvlan: handle NETDEV_DOWN event (Hangbin Liu) [RHEL-73836]

View File

@ -165,15 +165,15 @@ Summary: The Linux kernel
# define buildid .local
%define specversion 5.14.0
%define patchversion 5.14
%define pkgrelease 557
%define pkgrelease 558
%define kversion 5
%define tarfile_release 5.14.0-557.el9
%define tarfile_release 5.14.0-558.el9
# This is needed to do merge window version magic
%define patchlevel 14
# This allows pkg_release to have configurable %%{?dist} tag
%define specrelease 557%{?buildid}%{?dist}
%define specrelease 558%{?buildid}%{?dist}
# This defines the kabi tarball version
%define kabiversion 5.14.0-557.el9
%define kabiversion 5.14.0-558.el9
#
# End of genspec.sh variables
@ -201,6 +201,8 @@ Summary: The Linux kernel
%define with_arm64_64k %{?_without_arm64_64k: 0} %{?!_without_arm64_64k: 1}
# kernel-rt (x86_64 and aarch64 only PREEMPT_RT enabled kernel)
%define with_realtime %{?_without_realtime: 0} %{?!_without_realtime: 1}
# kernel-rt-64k (aarch64 RT kernel with 64K page_size)
%define with_realtime_arm64_64k %{?_without_realtime_arm64_64k: 0} %{?!_without_realtime_arm64_64k: 1}
# kernel-doc
%define with_doc %{?_without_doc: 0} %{?!_without_doc: 1}
# kernel-headers
@ -472,6 +474,7 @@ Summary: The Linux kernel
# 64k variant only for aarch64
%ifnarch aarch64
%define with_arm64_64k 0
%define with_realtime_arm64_64k 0
%endif
%if 0%{?fedora}
@ -566,6 +569,7 @@ Summary: The Linux kernel
%define with_zfcpdump 0
%define with_arm64_64k 0
%define with_realtime 0
%define with_realtime_arm64_64k 0
%define with_debuginfo 0
%define with_perf 0
@ -860,6 +864,8 @@ Source44: kernel-x86_64-rt-rhel.config
Source45: kernel-x86_64-rt-debug-rhel.config
Source46: kernel-aarch64-rt-rhel.config
Source47: kernel-aarch64-rt-debug-rhel.config
Source48: kernel-aarch64-rt-64k-rhel.config
Source49: kernel-aarch64-rt-64k-debug-rhel.config
%endif
%if 0%{?include_fedora}
@ -1322,7 +1328,7 @@ AutoProv: yes\
This package provides kernel modules for the %{?2:%{2} }kernel package for Red Hat internal usage.\
%{nil}
%if %{with_realtime}
%if %{with_realtime} || %{with_realtime_arm64_64k}
#
# this macro creates a kernel-<subpackage>-kvm package
# %%kernel_kvm_package <subpackage>
@ -1419,7 +1425,7 @@ summary: kernel meta-package for the %{1} kernel\
Requires: kernel-%{1}-core-uname-r = %{KVERREL}%{uname_suffix %{1}}\
Requires: kernel-%{1}-modules-uname-r = %{KVERREL}%{uname_suffix %{1}}\
Requires: kernel-%{1}-modules-core-uname-r = %{KVERREL}%{uname_suffix %{1}}\
%if "%{1}" == "rt" || "%{1}" == "rt-debug"\
%if "%{1}" == "rt" || "%{1}" == "rt-debug" || "%{1}" == "rt-64k" || "%{1}" == "rt-64k-debug"\
Requires: realtime-setup\
%endif\
Provides: installonlypkg(kernel)\
@ -1458,7 +1464,7 @@ Requires: kernel-%{?1:%{1}-}-modules-core-uname-r = %{KVERREL}%{uname_variant %{
%{expand:%%kernel_debuginfo_package %{?1:%{1}}}\
%endif\
%if %{efiuki}\
%if "%{1}" != "rt" && "%{1}" != "rt-debug"\
%if "%{1}" != "rt" && "%{1}" != "rt-debug" && "%{1}" != "rt-64k" && "%{1}" != "rt-64k-debug"\
%package %{?1:%{1}-}uki-virt\
Summary: %{variant_summary} unified kernel image for virtual machines\
Provides: installonlypkg(kernel)\
@ -1473,7 +1479,7 @@ Requires: kernel%{?1:-%{1}}-uki-virt = %{version}-%{release}\
Requires(pre): systemd >= 252-20\
%endif\
%endif\
%if "%{1}" == "rt" || "%{1}" == "rt-debug"\
%if "%{1}" == "rt" || "%{1}" == "rt-debug" || "%{1}" == "rt-64k" || "%{1}" == "rt-64k-debug"\
%{expand:%%kernel_kvm_package %{?1:%{1}}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}}}\
%endif \
%if %{with_gcov}\
@ -1562,6 +1568,29 @@ It should only be installed when trying to gather additional information
on kernel bugs, as some of these options impact performance noticably.
%endif
%if %{with_realtime_arm64_64k}
%define variant_summary The Linux kernel compiled with PREEMPT_RT enabled and for 64k pagesize usage
%kernel_variant_package rt-64k
%description rt-64k-core
The kernel package contains a variant of the ARM64 Linux kernel with PREEMPT_RT
enabled and using a 64K page size.
%endif
%if %{with_realtime_arm64_64k} && %{with_debug}
%define variant_summary The Linux PREEMPT_RT kernel compiled with extra debugging enabled
%if !%{debugbuildsenabled}
%kernel_variant_package -m rt-64k-debug
%else
%kernel_variant_package rt-64k-debug
%endif
%description rt-64k-debug-core
The debug kernel package contains a variant of the ARM64 Linux PREEMPT_RT
kernel using a 64K page size.
This variant of the kernel has numerous debugging options enabled.
It should only be installed when trying to gather additional information
on kernel bugs, as some of these options impact performance noticably.
%endif
%if !%{debugbuildsenabled}
%kernel_variant_package -m debug
%else
@ -2348,7 +2377,7 @@ BuildKernel() {
# Identify modules in the kernel-modules-partner package
%{SOURCE20} $RPM_BUILD_ROOT lib/modules/$KernelVer %{SOURCE85} partner
%endif
if [ "$Variant" = "rt" ] || [ "$Variant" = "rt-debug" ]; then
if [ "$Variant" = "rt" ] || [ "$Variant" = "rt-debug" ] || [ "$Variant" = "rt-64k" ] || [ "$Variant" = "rt-64k-debug" ]; then
# Identify modules in the kernel-rt-kvm package
%{SOURCE20} $RPM_BUILD_ROOT lib/modules/$KernelVer %{SOURCE86} kvm
fi
@ -2373,7 +2402,7 @@ BuildKernel() {
# don't include anything going int kernel-modules-partner in the file lists
xargs rm -rf < mod-partner.list
%endif
if [ "$Variant" = "rt" ] || [ "$Variant" = "rt-debug" ]; then
if [ "$Variant" = "rt" ] || [ "$Variant" = "rt-debug" ] || [ "$Variant" = "rt-64k" ] || [ "$Variant" = "rt-64k-debug" ]; then
# don't include anything going into kernel-rt-kvm in the file lists
xargs rm -rf < mod-kvm.list
fi
@ -2407,7 +2436,7 @@ BuildKernel() {
fi
%if %{efiuki}
if [ "$Variant" != "rt" ] && [ "$Variant" != "rt-debug" ]; then
if [ "$Variant" != "rt" ] && [ "$Variant" != "rt-debug" ] && [ "$Variant" != "rt-64k" ] && [ "$Variant" != "rt-64k-debug" ]; then
popd
# RHEL/CentOS specific .SBAT entries
@ -2477,7 +2506,7 @@ BuildKernel() {
pushd $RPM_BUILD_ROOT
# Variant != rt && Variant != rt-debug
# Variant != rt && Variant != rt-debug && Variant != rt-64k && Variant != rt-64k-debug
fi
# efiuki
%endif
@ -2517,7 +2546,7 @@ BuildKernel() {
%if 0%{!?fedora:1}
rm -f $RPM_BUILD_ROOT/mod-partner.list
%endif
if [ "$Variant" = "rt" ] || [ "$Variant" = "rt-debug" ]; then
if [ "$Variant" = "rt" ] || [ "$Variant" = "rt-debug" ] || [ "$Variant" = "rt-64k" ] || [ "$Variant" = "rt-64k-debug" ]; then
rm -f $RPM_BUILD_ROOT/mod-kvm.list
fi
@ -2617,6 +2646,9 @@ BuildKernel %make_target %kernel_image %{_use_vdso} 64k-debug
%if %{with_realtime}
BuildKernel %make_target %kernel_image %{_use_vdso} rt-debug
%endif
%if %{with_realtime_arm64_64k}
BuildKernel %make_target %kernel_image %{_use_vdso} rt-64k-debug
%endif
%endif
%if %{with_zfcpdump}
@ -2635,12 +2667,16 @@ BuildKernel %make_target %kernel_image %{use_vdso} lpae
BuildKernel %make_target %kernel_image %{use_vdso} rt
%endif
%if %{with_realtime_arm64_64k}
BuildKernel %make_target %kernel_image %{_use_vdso} rt-64k
%endif
%if %{with_up}
BuildKernel %make_target %kernel_image %{_use_vdso}
%endif
%ifnarch noarch i686
%if !%{with_debug} && !%{with_zfcpdump} && !%{with_pae} && !%{with_up} && !%{with_arm64_64k} && !%{with_realtime}
%if !%{with_debug} && !%{with_zfcpdump} && !%{with_pae} && !%{with_up} && !%{with_arm64_64k} && !%{with_realtime} && !%{with_realtime_arm64_64k}
# If only building the user space tools, then initialize the build environment
# and some variables so that the various userspace tools can be built.
InitBuildVars
@ -2813,6 +2849,12 @@ find Documentation -type d | xargs chmod u+w
if [ "%{with_realtime}" -ne "0" ] && [ "%{with_debug}" -ne "0" ]; then \
%{modsign_cmd} certs/signing_key.pem.sign+rt-debug certs/signing_key.x509.sign+rt-debug $RPM_BUILD_ROOT/lib/modules/%{KVERREL}+rt-debug/ \
fi \
if [ "%{with_realtime_arm64_64k}" -ne "0" ]; then \
%{modsign_cmd} certs/signing_key.pem.sign+rt-64k certs/signing_key.x509.sign+rt-64k $RPM_BUILD_ROOT/lib/modules/%{KVERREL}+rt-64k/ \
fi \
if [ "%{with_realtime_arm64_64k}" -ne "0" ] && [ "%{with_debug}" -ne "0" ]; then \
%{modsign_cmd} certs/signing_key.pem.sign+rt-64k-debug certs/signing_key.x509.sign+rt-64k-debug $RPM_BUILD_ROOT/lib/modules/%{KVERREL}+rt-64k-debug/ \
fi \
if [ "%{with_up}" -ne "0" ]; then \
%{modsign_cmd} certs/signing_key.pem.sign certs/signing_key.x509.sign $RPM_BUILD_ROOT/lib/modules/%{KVERREL}/ \
fi \
@ -3321,7 +3363,7 @@ fi\
%if 0%{!?fedora:1}\
%{expand:%%kernel_modules_partner_post %{?-v*}}\
%endif\
%if "%{-v*}" == "rt" || "%{-v*}" == "rt-debug"\
%if "%{-v*}" == "rt" || "%{-v*}" == "rt-debug" || "%{-v*}" == "rt-64k" || "%{-v*}" == "rt-64k-debug"\
%{expand:%%kernel_kvm_post %{?-v*}}\
%endif\
%{expand:%%kernel_variant_posttrans %{?-v*:-v %{-v*}}}\
@ -3386,6 +3428,16 @@ fi\
%kernel_variant_post -v rt-debug
%endif
%if %{with_realtime_arm64_64k}
%kernel_variant_preun -v rt-64k
%kernel_variant_post -v rt-64k
%endif
%if %{with_debug} && %{with_realtime_arm64_64k}
%kernel_variant_preun -v rt-64k-debug
%kernel_variant_post -v rt-64k-debug
%endif
%if %{with_debug}
%if %{efiuki}
%kernel_variant_posttrans -v debug -u virt
@ -3644,7 +3696,7 @@ fi
%{expand:%%files %{?3:%{3}-}modules-partner}\
/lib/modules/%{KVERREL}%{?3:+%{3}}/partner\
%endif\
%if "%{3}" == "rt" || "%{3}" == "rt-debug"\
%if "%{3}" == "rt" || "%{3}" == "rt-debug" || "%{3}" == "rt-64k" || "%{3}" == "rt-64k-debug"\
%{expand:%%files %{?3:%{3}-}kvm}\
/lib/modules/%{KVERREL}%{?3:+%{3}}/kvm\
%endif\
@ -3654,7 +3706,7 @@ fi
%endif\
%endif\
%if %{efiuki}\
%if "%{3}" != "rt" && "%{3}" != "rt-debug"\
%if "%{3}" != "rt" && "%{3}" != "rt-debug" && "%{3}" != "rt-64k" && "%{3}" != "rt-64k-debug"\
%{expand:%%files %{?3:%{3}-}uki-virt}\
%dir /lib/modules\
%dir /lib/modules/%{KVERREL}%{?3:+%{3}}\
@ -3690,6 +3742,9 @@ fi
%if %{with_realtime}
%kernel_variant_files %{_use_vdso} %{with_debug} rt-debug
%endif
%if %{with_realtime_arm64_64k}
%kernel_variant_files %{_use_vdso} %{with_debug} rt-64k-debug
%endif
%if %{with_debug_meta}
%files debug
%files debug-core
@ -3710,6 +3765,7 @@ fi
%kernel_variant_files %{use_vdso} %{with_pae} lpae
%kernel_variant_files %{_use_vdso} %{with_zfcpdump} zfcpdump
%kernel_variant_files %{_use_vdso} %{with_arm64_64k} 64k
%kernel_variant_files %{_use_vdso} %{with_realtime_arm64_64k} rt-64k
%define kernel_variant_ipaclones(k:) \
%if %{1}\
@ -3729,6 +3785,61 @@ fi
#
#
%changelog
* Tue Jan 28 2025 Patrick Talbert <ptalbert@redhat.com> [5.14.0-558.el9]
- PCI: Batch BAR sizing operations (Myron Stowe) [RHEL-76025]
- powerpc/pseries/eeh: Fix get PE state translation (Mamatha Inamdar) [RHEL-74250]
- Bluetooth: iso: Fix circular lock in iso_listen_bis (CKI Backport Bot) [RHEL-73661] {CVE-2024-54460}
- CI: Enable pipelines for rt-64k variant (Juri Lelli) [RHEL-70289]
- redhat: Add kernel-rt-64k variant (Juri Lelli) [RHEL-70289]
- Bluetooth: hci_core: Fix sleeping function called from invalid context (CKI Backport Bot) [RHEL-74112] {CVE-2024-57894}
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Bastien Nocera) [RHEL-72279]
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (CKI Backport Bot) [RHEL-72279] {CVE-2024-56605}
- redhat/configs: set new PKEY_UV option on s390 (Mete Durlu) [RHEL-50782]
- s390/crypto: Add hardware acceleration for full AES-XTS mode (Mete Durlu) [RHEL-50783]
- s390/crypto: Postpone the key split to key conversion (Mete Durlu) [RHEL-50783]
- s390/crypto: Introduce function for tokenize clearkeys (Mete Durlu) [RHEL-50783]
- s390/crypto: Generalize parameters for key conversion (Mete Durlu) [RHEL-50783]
- s390/crypto: Use module-local structures for protected keys (Mete Durlu) [RHEL-50783]
- s390/crypto: Convert to reverse x-mas tree, rename ret to rc (Mete Durlu) [RHEL-50783]
- s390/pkey: Tolerate larger key blobs (Mete Durlu) [RHEL-50783]
- s390/pkey: Add new pkey handler module pkey-uv (Mete Durlu) [RHEL-50782]
- s390/pkey: Build module name array selectively based on kernel config options (Mete Durlu) [RHEL-50782]
- s390/pkey: Fix checkpatch findings in pkey header file (Mete Durlu) [RHEL-50782]
- s390/pkey: Rework pkey verify for protected keys (Mete Durlu) [RHEL-50782]
- s390/pkey: Simplify protected key length calculation code (Mete Durlu) [RHEL-50782]
- s390/zcrypt: Cleanup include zcrypt_api.h (Mete Durlu) [RHEL-50782]
- s390/uv: export prot_virt_guest symbol in uv (Mete Durlu) [RHEL-50782]
- cxl/core: Return error when cxl_endpoint_gather_bandwidth() handles a non-PCI device (John W. Linville) [RHEL-67033]
- cxl/pci: Check Mem_info_valid bit for each applicable DVSEC (John W. Linville) [RHEL-67033]
- cxl/pci: Remove duplicated implementation of waiting for memory_info_valid (John W. Linville) [RHEL-67033]
- cxl: Calculate region bandwidth of targets with shared upstream link (John W. Linville) [RHEL-67033]
- cxl: Preserve the CDAT access_coordinate for an endpoint (John W. Linville) [RHEL-67033]
- EINJ, CXL: Fix CXL device SBDF calculation (John W. Linville) [RHEL-67033]
- cxl/port: Prevent out-of-order decoder allocation (John W. Linville) [RHEL-67033]
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return (John W. Linville) [RHEL-67033]
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() (John W. Linville) [RHEL-67033]
- cxl/port: Fix CXL port initialization order when the subsystem is built-in (John W. Linville) [RHEL-67033]
- cxl/events: Fix Trace DRAM Event Record (John W. Linville) [RHEL-67033]
- cxl/pci: Fix to record only non-zero ranges (John W. Linville) [RHEL-67033]
- cxl/test: Skip cxl_setup_parent_dport() for emulated dports (John W. Linville) [RHEL-67033]
- cxl/pci: Get AER capability address from RCRB only for RCH dport (John W. Linville) [RHEL-67033]
- cxl/region: Verify target positions using the ordered target list (John W. Linville) [RHEL-67033]
- cxl: Restore XOR'd position bits during address translation (John W. Linville) [RHEL-67033]
- cxl/core: Fix incorrect vendor debug UUID define (John W. Linville) [RHEL-67033]
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (Tony Camuso) [RHEL-65221]
- hid: intel-ish-hid: Add support for vendor customized firmware loading (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Use CPU generation string in driver_data (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Remove unused declarations (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: fix endian-conversion (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: add MODULE_DESCRIPTION() (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: fix ishtp_wait_resume() kernel-doc (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Fix build error for COMPILE_TEST (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: handler multiple MNG_RESET_NOTIFY messages (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Implement loading firmware from host feature (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Add driver_data for specifying the firmware filename (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: ipc: Add Lunar Lake-M PCI device ID (Tony Camuso) [RHEL-65221]
- HID: intel-ish-hid: Use PCI_VDEVICE() and rename device ID macros (Tony Camuso) [RHEL-65221]
* Mon Jan 27 2025 Patrick Talbert <ptalbert@redhat.com> [5.14.0-557.el9]
- ipvlan: Support bonding events (Hangbin Liu) [RHEL-73836]
- ipvlan: handle NETDEV_DOWN event (Hangbin Liu) [RHEL-73836]

View File

@ -1,3 +1,3 @@
SHA512 (linux-5.14.0-557.el9.tar.xz) = b51edf80dbed8e03f660d19887f405d4bf08f1608cd047cc07af9565b899da89e26e65f038a065773d3a660076a22b61b5843dd3b9ab847b581c9d4a81653cae
SHA512 (kernel-abi-stablelists-5.14.0-557.el9.tar.bz2) = 0174a2150634a897f855482bd2bc7d0d4231fb86e568ad6fa56dfaa4a7245556aee465fe4928d87457f0c5fe660dfffec3bceee4c87b92fb3ff60e1708ed1473
SHA512 (kernel-kabi-dw-5.14.0-557.el9.tar.bz2) = ff3357fa5572b2558a6e39245d8ab35a4e1a74a33ca02a85ca20a2b97a93e202078515275dc7d8097291af45ceab78636ed836a43f7fbb987fd91b476265a7f3
SHA512 (linux-5.14.0-558.el9.tar.xz) = 8ebd462e89147ef9533580cb7693d5bf92c960912dd14953a0f9142723e448549e8d31cea4f004572ab3089fd5f70013fe7944d040990dd3b063f7dc0f3f7cf8
SHA512 (kernel-abi-stablelists-5.14.0-558.el9.tar.bz2) = 55fac1ca7876498816b96617925e7f259297447ef9cadfe4d2a87e5593bcbde26937995058aa2f3ada5e839cd3306b4eb66ff6c18d42d7c02211ad65cea1c45e
SHA512 (kernel-kabi-dw-5.14.0-558.el9.tar.bz2) = ff3357fa5572b2558a6e39245d8ab35a4e1a74a33ca02a85ca20a2b97a93e202078515275dc7d8097291af45ceab78636ed836a43f7fbb987fd91b476265a7f3