From aff294b5be3b082d5c9f2c0057aa9146959a2132 Mon Sep 17 00:00:00 2001 From: Eduard Abdullin Date: Wed, 21 Jan 2026 09:12:31 +0000 Subject: [PATCH] Debrand for AlmaLinux OS Use AlmaLinux OS secure boot cert Enable Btrfs support for all kernel variants hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 qla4xxx: bring back deprecated PCI ids lpfc: bring back deprecated PCI ids be2iscsi: bring back deprecated PCI ids kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained --- .gitignore | 8 +++++--- Makefile.rhelver | 2 +- kernel.changelog | 4 ++++ kernel.spec | 17 ++++++++++------- sources | 8 +++++--- 5 files changed, 25 insertions(+), 14 deletions(-) diff --git a/.gitignore b/.gitignore index 153853066..6422cfe2b 100644 --- a/.gitignore +++ b/.gitignore @@ -1,8 +1,10 @@ fedoraimaca.x509 -kernel-abi-stablelists-6.12.0-124.27.1.el10_1.tar.xz -kernel-kabi-dw-6.12.0-124.27.1.el10_1.tar.xz -linux-6.12.0-124.27.1.el10_1.tar.xz +kernel-abi-stablelists-6.12.0-124.28.1.el10_1.tar.xz +kernel-kabi-dw-6.12.0-124.28.1.el10_1.tar.xz +linux-6.12.0-124.28.1.el10_1.tar.xz nvidiagpuoot001.x509 +olima1.x509 +olimaca1.x509 redhatsecureboot501.cer redhatsecureboot504.cer redhatsecurebootca5.cer diff --git a/Makefile.rhelver b/Makefile.rhelver index fdb3c98d5..0d558c2f2 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 1 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 124.27.1 +RHEL_RELEASE = 124.28.1 # # RHEL_REBASE_NUM diff --git a/kernel.changelog b/kernel.changelog index 9a34a2734..ec10303f7 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,7 @@ +* Wed Jan 07 2026 CKI KWF Bot [6.12.0-124.28.1.el10_1] +- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285} +Resolves: RHEL-137403 + * Sat Dec 27 2025 CKI KWF Bot [6.12.0-124.27.1.el10_1] - arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684] - arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684] diff --git a/kernel.spec b/kernel.spec index 7abdeea34..d2cafa8c4 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 124.27.1 +%define pkgrelease 124.28.1 %define kversion 6 -%define tarfile_release 6.12.0-124.27.1.el10_1 +%define tarfile_release 6.12.0-124.28.1.el10_1 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 124.27.1%{?buildid}%{?dist} +%define specrelease 124.28.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-124.27.1.el10_1 +%define kabiversion 6.12.0-124.28.1.el10_1 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -4389,14 +4389,14 @@ fi\ # # %changelog -* Tue Jan 13 2026 Eduard Abdullin - 6.12.0-124.27.1 +* Wed Jan 21 2026 Eduard Abdullin - 6.12.0-124.28.1 - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert -* Tue Jan 13 2026 Neal Gompa - 6.12.0-124.27.1 +* Wed Jan 21 2026 Neal Gompa - 6.12.0-124.28.1 - Enable Btrfs support for all kernel variants -* Tue Jan 13 2026 Andrew Lukoshko - 6.12.0-124.27.1 +* Wed Jan 21 2026 Andrew Lukoshko - 6.12.0-124.28.1 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -4407,6 +4407,9 @@ fi\ - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained +* Wed Jan 07 2026 CKI KWF Bot [6.12.0-124.28.1.el10_1] +- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285} + * Sat Dec 27 2025 CKI KWF Bot [6.12.0-124.27.1.el10_1] - arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684] - arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684] diff --git a/sources b/sources index 0f115244c..935e8dde9 100644 --- a/sources +++ b/sources @@ -1,8 +1,10 @@ SHA512 (fedoraimaca.x509) = e04809394f4472c17e86d7024dee34f03fb68e82a85502fd5b00535202c72e57626a8376b2cf991b7e1e46404aa5ab8d189ebf320e0dd37d49e7efbc925c7a2e -SHA512 (kernel-abi-stablelists-6.12.0-124.27.1.el10_1.tar.xz) = 1e21f4dac3a890b799cb7d5e893e0b392be25e64e80b0c10f925a1af527cddd91042e0b5564de3ef1937e8f75ef2c2e9651b229454b04de5c6dad17f110fdc26 -SHA512 (kernel-kabi-dw-6.12.0-124.27.1.el10_1.tar.xz) = 611ffbfcc3f0ba9d89bb19cdc24437419bdd21e0d4654c2685011ca27da5817a897a8a66edbcbb6d9146d5d612cf2f20c46ea1a7b95ee127ee08ebf35f1f4652 -SHA512 (linux-6.12.0-124.27.1.el10_1.tar.xz) = 637ca356263194a3e529e8d3adbd83149b68fa5003058f43547a90b309f5d29f2033dec32f8ecc137149bc74e59547b7630fc2fddd60fa11c6e68047aa66d8e0 +SHA512 (kernel-abi-stablelists-6.12.0-124.28.1.el10_1.tar.xz) = 481509d4d0a41ee5fe10efbdad6925d772bdfa13eca2d3d5a8df5c1fd6e140dd12f9518663a4001cfdac7a9af9dd19b61514bad63c6092a5d7cadc3fcb1758b5 +SHA512 (kernel-kabi-dw-6.12.0-124.28.1.el10_1.tar.xz) = f55fbf7ed995483944ade7c87de94c73b16c808ba35650408cb3db51eb950b5bff4edcdfa01ffdbc8cabef4cbc1f41d9117401059685d0d08ba495ee445dcf8c +SHA512 (linux-6.12.0-124.28.1.el10_1.tar.xz) = 1b5eba397694dd35e5cec4743a50cbddd3ca12f64ba7e66e191ae3e5f410b35bb31692fc19333af07676e144d72b5111a14dbc3ebd030016b595d8a00c8eb145 SHA512 (nvidiagpuoot001.x509) = b42f836e1cfa07890cb6ca13de9c3950e306c9ec7686c4c09f050bb68869f5d82962b2cd5f3aa0eb7a0f3a3ae54e9c480eafbac5df53aa92c295ff511a8c59fe +SHA512 (olima1.x509) = 123c26c1d698cc8523845c6e1103b9c72abf855acd225d37baf1f3388a47f912166d6d786fb367fe46de39e011b586ad7f3963aa2e8923da30a6ea9ae0d76ad3 +SHA512 (olimaca1.x509) = 3a779415fad29d6f7250ec97ab1f0a5eb62c351b724feee06b22e17f065bf74a558f32cc524d3222c4485635ae5b9cd5287855c94010fe743b51a4d954340c4c SHA512 (redhatsecureboot501.cer) = eb2c2d342680d4c3453d3e4f30abdd1f6b0e98292e1be0410d0163afd01552a863b70ffaabeecd6e3981cd4d167198091a837c7d70f96a3a06de2d28b3355308 SHA512 (redhatsecureboot504.cer) = d6e9b54c378769bb934ead996c1003b495bde48a17d02c8880124f36a529ef799f1e3a97202f9536c71c0d2cefe20a3532053ab73ce798ba550934eedce23ff9 SHA512 (redhatsecurebootca5.cer) = 0285fd7cb1755b399cdd2d848d9eba51b72ef2dd8ea5d40d7061c29685a12e15bf8eb083cb2f8c14eb69d248cb3af2c2332e06f80e19ed4cc029070198c0d522