From 4842b282dd3cf768efc837798c541f7daf9222b9 Mon Sep 17 00:00:00 2001 From: Anders Rytter Hansen Date: Tue, 11 Nov 2025 10:11:40 -0300 Subject: [PATCH] kernel 6.12.0-55.42.1.el10_0 --- my-ostree-os/kernel/Makefile.rhelver | 2 +- my-ostree-os/kernel/kernel.changelog | 33 ++++++++++++++++++ my-ostree-os/kernel/kernel.spec | 50 ++++++++++++++++++++++------ my-ostree-os/kernel/rpminspect.yaml | 14 +++++++- 4 files changed, 86 insertions(+), 13 deletions(-) diff --git a/my-ostree-os/kernel/Makefile.rhelver b/my-ostree-os/kernel/Makefile.rhelver index b4d7dcd..b1ab65e 100644 --- a/my-ostree-os/kernel/Makefile.rhelver +++ b/my-ostree-os/kernel/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 0 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 55.40.1 +RHEL_RELEASE = 55.42.1 # # RHEL_REBASE_NUM diff --git a/my-ostree-os/kernel/kernel.changelog b/my-ostree-os/kernel/kernel.changelog index 9b3c41c..ee7bdeb 100644 --- a/my-ostree-os/kernel/kernel.changelog +++ b/my-ostree-os/kernel/kernel.changelog @@ -1,3 +1,36 @@ +* Sat Oct 25 2025 CKI KWF Bot [6.12.0-55.42.1.el10_0] +- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288] +- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690] +- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690] +- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková) +- cgroup/psi: Set of->priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881} +- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881} +- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702} +Resolves: RHEL-116388, RHEL-119147, RHEL-121690, RHEL-123288 + +* Mon Oct 20 2025 Jan Stancek [6.12.0-55.41.1.el10_0] +- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751} +- erofs: fix blksize < PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750} +- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499] +- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730} +- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997] +- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997] +- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997] +- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997] +- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997] +- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997] +- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997] +- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997] +- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997] +- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997] +- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997] +- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997] +- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697} +- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718} +- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727} +- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849} +Resolves: RHEL-101997, RHEL-113614, RHEL-113859, RHEL-114304, RHEL-114499, RHEL-114853, RHEL-114863, RHEL-117583, RHEL-83885 + * Sat Oct 11 2025 CKI KWF Bot [6.12.0-55.40.1.el10_0] - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817} diff --git a/my-ostree-os/kernel/kernel.spec b/my-ostree-os/kernel/kernel.spec index 00e154f..f7bf1db 100644 --- a/my-ostree-os/kernel/kernel.spec +++ b/my-ostree-os/kernel/kernel.spec @@ -158,19 +158,19 @@ Summary: The Linux kernel # to build the base kernel using the debug configuration. (Specifying # the --with-release option overrides this setting.) %define debugbuildsenabled 1 -%define buildid .andersdsrhcustom9 +%define buildid .andersdsrhcustom1 %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 55.40.1 +%define pkgrelease 55.42.1 %define kversion 6 -%define tarfile_release 6.12.0-55.40.1.el10_0 +%define tarfile_release 6.12.0-55.42.1.el10_0 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 55.40.1%{?buildid}%{?dist} +%define specrelease 55.42.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-55.40.1.el10_0 +%define kabiversion 6.12.0-55.42.1.el10_0 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -2172,10 +2172,6 @@ update_scripts $update_target %endif -# Først definerer vi basisstien til det udpakkede kildetræ. -# I RHEL-lignende builds bruges ofte et langt navn: -%define kernel_source_tree linux-%{version}-%{release}.%{_arch} - %{log_msg "End of kernel config"} cd .. # # End of Configs stuff @@ -2187,6 +2183,7 @@ find . \( -name "*.orig" -o -name "*~" \) -delete >/dev/null find . -name .gitignore -delete >/dev/null cd .. + ### ### build ### @@ -4378,7 +4375,7 @@ fi\ # # %changelog -* Tue Oct 21 2025 Andrei Lukoshko - 6.12.0-55.40.1 +* Thu Nov 06 2025 Andrei Lukoshko - 6.12.0-55.42.1 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -4389,10 +4386,41 @@ fi\ - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained -* Tue Oct 21 2025 Eduard Abdullin - 6.12.0-55.40.1 +* Thu Nov 06 2025 Eduard Abdullin - 6.12.0-55.42.1 - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS +* Sat Oct 25 2025 CKI KWF Bot [6.12.0-55.42.1.el10_0] +- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288] +- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690] +- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690] +- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková) +- cgroup/psi: Set of->priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881} +- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881} +- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702} + +* Mon Oct 20 2025 Jan Stancek [6.12.0-55.41.1.el10_0] +- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751} +- erofs: fix blksize < PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750} +- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499] +- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730} +- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997] +- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997] +- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997] +- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997] +- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997] +- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997] +- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997] +- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997] +- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997] +- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997] +- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997] +- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997] +- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697} +- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718} +- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727} +- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849} + * Sat Oct 11 2025 CKI KWF Bot [6.12.0-55.40.1.el10_0] - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817} diff --git a/my-ostree-os/kernel/rpminspect.yaml b/my-ostree-os/kernel/rpminspect.yaml index bac9ba6..1be56d7 100644 --- a/my-ostree-os/kernel/rpminspect.yaml +++ b/my-ostree-os/kernel/rpminspect.yaml @@ -21,10 +21,22 @@ emptyrpm: - kernel-debug - kernel-debug-devel-matched - kernel-devel-matched - - kernel-lpae - kernel-zfcpdump - kernel-zfcpdump-devel-matched - kernel-zfcpdump-modules + - kernel-zfcpdump-modules-partner + - kernel-rt + - kernel-rt-debug + - kernel-rt-debug-devel-matched + - kernel-rt-devel-matched + - kernel-64k + - kernel-64k-debug + - kernel-64k-debug-devel-matched + - kernel-64k-devel-matched + - kernel-rt-64k + - kernel-rt-64k-debug + - kernel-rt-64k-debug-devel-matched + - kernel-rt-64k-devel-matched patches: ignore_list: