diff --git a/SonicDE/sonic-interface-libraries.spec b/SonicDE/sonic-interface-libraries.spec new file mode 100644 index 0000000..0c1954e --- /dev/null +++ b/SonicDE/sonic-interface-libraries.spec @@ -0,0 +1,135 @@ +%define _disable_source_fetch 0 +%define debug_package %{nil} + +Name: sonic-interface-libraries +Version: 6.4.5 +Release: 7%{?dist} +Summary: Foundation of the SonicDE user interface (fork of libplasma) + +License: LGPL-2.0-or-later +URL: https://github.com/Sonic-DE/sonic-interface-libraries +Source0: %{url}/archive/refs/tags/v%{version}.tar.gz + +%global plasma_version %(echo %{version} | cut -d. -f1-3) + +BuildRequires: extra-cmake-modules +BuildRequires: gcc-c++ +BuildRequires: cmake(KF6Archive) +BuildRequires: cmake(KF6Declarative) +BuildRequires: cmake(KF6Su) +BuildRequires: cmake(KF6GlobalAccel) +BuildRequires: cmake(KF6Kirigami2) +BuildRequires: cmake(KF6Package) +BuildRequires: cmake(KF6Parts) +BuildRequires: cmake(KF6ConfigWidgets) +BuildRequires: cmake(KF6ColorScheme) +BuildRequires: kf6-rpm-macros +BuildRequires: cmake(KF6Solid) +BuildRequires: openssl-devel +BuildRequires: qt6-qtbase-devel +BuildRequires: qt6-qtbase-private-devel +BuildRequires: qt6-qtdeclarative-devel +BuildRequires: qt6-qtsvg-devel + +# KDE Frameworks +BuildRequires: cmake(KF6Config) +BuildRequires: cmake(KF6CoreAddons) +BuildRequires: cmake(KF6DBusAddons) +BuildRequires: cmake(KF6DocTools) +BuildRequires: cmake(KF6GuiAddons) +BuildRequires: cmake(KF6I18n) +BuildRequires: cmake(KF6IconThemes) +BuildRequires: cmake(KF6KCMUtils) +BuildRequires: cmake(KF6KIO) +BuildRequires: cmake(KF6Notifications) +BuildRequires: cmake(KF6Service) +BuildRequires: cmake(KF6Svg) +BuildRequires: cmake(KF6WidgetsAddons) +BuildRequires: cmake(KF6WindowSystem) +BuildRequires: cmake(KF6XmlGui) +BuildRequires: cmake(PlasmaWaylandProtocols) + +# Qt +BuildRequires: cmake(Qt6WaylandClient) + +# Plasma +BuildRequires: cmake(PlasmaActivities) + +BuildRequires: wayland-devel +BuildRequires: kwayland-devel + +# X11 Support +BuildRequires: libX11-devel +BuildRequires: libxcb-devel +BuildRequires: xcb-util-devel +BuildRequires: libXcursor-devel +BuildRequires: libXrender-devel +BuildRequires: libXext-devel +BuildRequires: libXfixes-devel +BuildRequires: libXi-devel + +Provides: libplasma%{?_isa} >= %{plasma_version} +Provides: libplasma >= %{plasma_version} +Obsoletes: libplasma <= %{plasma_version} + +# Renamed from kf6-plasma +Obsoletes: kf6-plasma < 1:%{version}-%{release} +Provides: kf6-plasma = 1:%{version}-%{release} + +%description +Sonic Interface Libraries is a fork of libplasma, providing the foundational +libraries for themes, applets, and widgets in SonicDE. + +%package devel +Summary: Development files for %{name} +Requires: %{name}%{?_isa} = %{version}-%{release} +Requires: cmake(KF6Package) +Requires: qt6-qtbase-devel +Requires: cmake(KF6Service) +Requires: cmake(KF6WindowSystem) +Provides: libplasma-devel%{?_isa} >= %{plasma_version} +Provides: libplasma-devel >= %{plasma_version} +Obsoletes: libplasma-devel <= %{plasma_version} + +Obsoletes: kf6-plasma-devel < 1:%{version}-%{release} +Provides: kf6-plasma-devel = 1:%{version}-%{release} + +%description devel +Development files for sonic-interface-libraries. + +%prep +%autosetup -p1 + +%build +%cmake_kf6 +%cmake_build + +%install +%cmake_install +%find_lang %{name} --all-name + +%files -f %{name}.lang +%license LICENSES/* +%{_libdir}/libPlasma.so.* +%{_libdir}/libPlasmaQuick.so.* +%{_qt6_plugindir}/kf6/ +%{_qt6_qmldir}/org/kde/plasma/ +%{_qt6_qmldir}/org/kde/kirigami/styles/Plasma/ +%{_datadir}/plasma/ +%{_datadir}/qlogging-categories6/*.categories +%{_datadir}/qlogging-categories6/*.renamecategories + +%files devel +%{_includedir}/Plasma/ +%{_includedir}/PlasmaQuick/ +%{_libdir}/libPlasma.so +%{_libdir}/libPlasmaQuick.so +%{_libdir}/cmake/Plasma/ +%{_libdir}/cmake/PlasmaQuick/ +%{_datadir}/doc/qt6/Plasma.qch +%{_datadir}/doc/qt6/Plasma.tags +%{_datadir}/kdevappwizard/templates/*.tar.bz2 + +%changelog +* Wed Mar 21 2026 Anders da Silva Rytter Hansen - 6.4.5-7 +- Initial release of SonicDE/KDE Plasma X11 for EL10 (Downgraded to 6.4.5 for EL 10.1 compatibility) diff --git a/SonicDE/sonic-win.spec b/SonicDE/sonic-win.spec new file mode 100644 index 0000000..a0b2679 --- /dev/null +++ b/SonicDE/sonic-win.spec @@ -0,0 +1,205 @@ +%define _disable_source_fetch 0 +%define debug_package %{nil} + +Name: sonic-win +Version: 6.4.5 +Release: 8%{?dist} +Summary: KWin window manager for SonicDE (fork of kwin) + +%global plasma_version %{version} + +License: GPL-2.0-or-later +URL: https://github.com/Sonic-DE/sonic-win +Source0: %{url}/archive/refs/tags/%{version}.tar.gz#/%{name}-%{version}.tar.gz + +BuildRequires: extra-cmake-modules +BuildRequires: kf6-rpm-macros +BuildRequires: systemd-rpm-macros + +# Qt +BuildRequires: cmake(QAccessibilityClient6) +BuildRequires: qt6-qtbase-devel +BuildRequires: qt6-qtbase-private-devel +BuildRequires: qt6-qtsensors-devel +BuildRequires: qt6-qttools-devel +BuildRequires: qt6-qtwayland-devel +BuildRequires: cmake(Qt6Core5Compat) +BuildRequires: cmake(Qt6Svg) +BuildRequires: cmake(Qt6Multimedia) + +# X11/OpenGL +BuildRequires: pkgconfig(libxcvt) +BuildRequires: mesa-libGL-devel +BuildRequires: mesa-libEGL-devel +BuildRequires: mesa-libgbm-devel +BuildRequires: libxkbcommon-devel +BuildRequires: libxkbcommon-x11-devel +BuildRequires: libX11-devel +BuildRequires: libXi-devel +BuildRequires: libxcb-devel +BuildRequires: libICE-devel +BuildRequires: libSM-devel +BuildRequires: libXcursor-devel +BuildRequires: xcb-util-wm-devel +BuildRequires: xcb-util-image-devel +BuildRequires: xcb-util-keysyms-devel +BuildRequires: xcb-util-cursor-devel +BuildRequires: xcb-util-devel +BuildRequires: libepoxy-devel +BuildRequires: libcap-devel + +BuildRequires: lcms2-devel +BuildRequires: glib2-devel +BuildRequires: pipewire-devel + +# Wayland +BuildRequires: wayland-devel >= 1.22.0 +BuildRequires: wayland-protocols-devel +BuildRequires: pkgconfig(libinput) >= 0.10 +BuildRequires: pkgconfig(libudev) + +%if 0%{?rhel} == 10 +# Integrate with Xlibre on EL10 +BuildRequires: xlibre-xserver-devel +Requires: xlibre-xserver-Xorg +Requires: xlibre-xf86-input-libinput +%else +BuildRequires: pkgconfig(xwayland) +%endif + +# KF6 +BuildRequires: cmake(KF6Completion) +BuildRequires: cmake(KF6Config) +BuildRequires: cmake(KF6ConfigWidgets) +BuildRequires: cmake(KF6CoreAddons) +BuildRequires: cmake(KF6Crash) +BuildRequires: cmake(KF6DBusAddons) +BuildRequires: cmake(KF6GlobalAccel) +BuildRequires: cmake(KF6GuiAddons) +BuildRequires: cmake(KF6I18n) +BuildRequires: cmake(KF6KIO) +BuildRequires: cmake(KF6Notifications) +BuildRequires: cmake(KF6Service) +BuildRequires: cmake(KF6WidgetsAddons) +BuildRequires: cmake(KF6WindowSystem) +BuildRequires: cmake(KF6DocTools) +BuildRequires: cmake(KF6KCMUtils) +BuildRequires: cmake(KF6NewStuff) +BuildRequires: cmake(KF6Declarative) +BuildRequires: cmake(KF6IconThemes) +BuildRequires: cmake(KF6IdleTime) +BuildRequires: cmake(KF6TextWidgets) +BuildRequires: cmake(KF6Kirigami2) +BuildRequires: cmake(KF6Runner) +BuildRequires: cmake(KF6Svg) + +# Workspace components +BuildRequires: cmake(KDecoration3) +BuildRequires: kscreenlocker-devel +BuildRequires: plasma-breeze-devel +BuildRequires: plasma-wayland-protocols-devel +BuildRequires: cmake(KGlobalAccelD) +BuildRequires: libdisplay-info-devel + +BuildRequires: cmake(KWayland) +BuildRequires: cmake(Plasma) +BuildRequires: cmake(PlasmaActivities) + +BuildRequires: libeis-devel +BuildRequires: pkgconfig(libcanberra) + +# Conflicts with kwin-x11 +Conflicts: kwin-x11 + +Requires: sonic-interface-libraries%{?_isa} >= %{plasma_version} +Requires: kscreenlocker%{?_isa} +Requires: kf6-kirigami2%{?_isa} +Requires: kf6-kdeclarative%{?_isa} +Requires: qt6-qtmultimedia%{?_isa} +Requires: qt6-qtdeclarative%{?_isa} + +%description +Sonic Win is a fork of KWin, the window manager and compositor for SonicDE, +focusing on an optimized X11 experience. + +%package libs +Summary: KWin libraries for SonicDE +Conflicts: kwin-x11-libs + +%description libs +Shared libraries for sonic-win. + +%package devel +Summary: Development files for %{name} +Requires: %{name}-libs%{?_isa} = %{version}-%{release} +Requires: %{name}%{?_isa} = %{version}-%{release} +Conflicts: kwin-x11-devel + +%description devel +Development files for sonic-win. +Provides: kwin-devel = %{version}-%{release} +Provides: kwin-x11-devel = %{version}-%{release} +Provides: cmake(KWinDBusInterface) = %{version} + +%prep +%autosetup -p1 + +%build +%cmake_kf6 +%cmake_build + +%install +%cmake_install +# Create compatibility CMake files for sonic-workspace +mkdir -p %{buildroot}%{_libdir}/cmake/KWinDBusInterface +cat < %{buildroot}%{_libdir}/cmake/KWinDBusInterface/KWinDBusInterfaceConfig.cmake +find_package(KWinX11DBusInterface REQUIRED) +include(\${KWinX11DBusInterface_DIR}/KWinX11DBusInterfaceConfig.cmake) +EOF + +# Create compatibility symlinks for DBus interfaces +pushd %{buildroot}%{_datadir}/dbus-1/interfaces/ +for f in kwin_x11_*.xml; do + newname=$(echo $f | sed 's/kwin_x11_//') + ln -s "$f" "$newname" +done +popd + +# The translation domain in the source is likely still 'kwin' +%find_lang kwin --all-name --with-html + +%files -f kwin.lang +%license LICENSES/* +# Binares and specialized folders +%{_bindir}/kwin_x11 +%{_libdir}/kconf_update_bin/kwin* +%{_libexecdir}/kwin* +%{_userunitdir}/plasma-kwin_x11.service + +# Database and plugins +%{_libdir}/qt6/plugins/ +%{_qt6_qmldir}/org/kde/*/ + +# Data and Assets +%{_datadir}/kwin-x11/ +%{_datadir}/applications/*.desktop +%{_datadir}/dbus-1/interfaces/*.xml +%{_datadir}/icons/hicolor/*/apps/kwin-x11.* +%{_datadir}/kconf_update/kwin-x11.upd +%{_datadir}/knotifications6/kwin-x11.notifyrc +%{_datadir}/knsrcfiles/*.knsrc +%{_datadir}/krunner/dbusplugins/*.desktop +%{_datadir}/qlogging-categories6/*.categories + +%files libs +# Libraries +%{_libdir}/lib*.so.* + +%files devel +%{_includedir}/ +%{_libdir}/lib*.so +%{_libdir}/cmake/ + +%changelog +* Wed Mar 21 2026 Anders da Silva Rytter Hansen - 6.4.5-8 +- Initial release of SonicDE/KDE Plasma X11 for EL10 (Downgraded to 6.4.5 for EL 10.1 compatibility) diff --git a/SonicDE/sonic-workspace.spec b/SonicDE/sonic-workspace.spec new file mode 100644 index 0000000..2d701aa --- /dev/null +++ b/SonicDE/sonic-workspace.spec @@ -0,0 +1,268 @@ +%define _disable_source_fetch 0 +%define debug_package %{nil} + +Name: sonic-workspace +Version: 6.4.5 +Release: 5%{?dist} +Summary: Core workspace components for SonicDE (fork of plasma-workspace) + +License: GPL-2.0-or-later +URL: https://github.com/Sonic-DE/sonic-workspace +Source0: %{url}/archive/refs/tags/v%{version}.tar.gz + +%global plasma_version %(echo %{version} | cut -d. -f1-3) + +BuildRequires: extra-cmake-modules +BuildRequires: kf6-rpm-macros +BuildRequires: qt6-qtbase-devel +BuildRequires: qt6-qtbase-private-devel +BuildRequires: qt6-qtdeclarative-devel +BuildRequires: qt6-qtdeclarative-private-devel +BuildRequires: qt6-qtsvg-devel +BuildRequires: qt6-qtwayland-devel +BuildRequires: qt6-qtlocation-devel +BuildRequires: qt6-qtshadertools-devel +BuildRequires: qcoro-qt6-devel +BuildRequires: phonon-qt6-devel +BuildRequires: wayland-devel +BuildRequires: wayland-protocols-devel +BuildRequires: plasma-wayland-protocols-devel +BuildRequires: cmake(Qt6Core5Compat) + +BuildRequires: cmake(KF6Config) +BuildRequires: cmake(KF6Archive) +BuildRequires: cmake(KF6Declarative) +BuildRequires: cmake(KF6ConfigWidgets) +BuildRequires: cmake(KF6CoreAddons) +BuildRequires: cmake(KF6Crash) +BuildRequires: cmake(KF6DBusAddons) +BuildRequires: cmake(KF6GlobalAccel) +BuildRequires: cmake(KF6GuiAddons) +BuildRequires: cmake(KF6I18n) +BuildRequires: cmake(KF6IdleTime) +BuildRequires: cmake(KF6KIO) +BuildRequires: cmake(KF6Notifications) +BuildRequires: cmake(KF6NotifyConfig) +BuildRequires: cmake(KF6Runner) +BuildRequires: cmake(KF6Service) +BuildRequires: cmake(KF6Solid) +BuildRequires: cmake(KF6WidgetsAddons) +BuildRequires: cmake(KF6WindowSystem) +BuildRequires: cmake(KF6XmlGui) +BuildRequires: cmake(KF6DocTools) +BuildRequires: cmake(KF6ItemModels) +BuildRequires: cmake(KF6KDED) +BuildRequires: cmake(KF6StatusNotifierItem) +BuildRequires: cmake(KF6UnitConversion) +BuildRequires: cmake(KF6Wallet) +BuildRequires: cmake(KF6KCMUtils) +BuildRequires: cmake(KF6NewStuff) +BuildRequires: cmake(KF6Package) +BuildRequires: cmake(KF6Parts) +BuildRequires: cmake(KF6Prison) +BuildRequires: cmake(KF6Sonnet) +BuildRequires: cmake(KF6TextEditor) +BuildRequires: cmake(KF6TextWidgets) +BuildRequires: cmake(KF6Svg) +BuildRequires: cmake(KF6Kirigami2) +BuildRequires: cmake(KF6KirigamiAddons) +BuildRequires: cmake(KF6NetworkManagerQt) +BuildRequires: cmake(KF6QuickCharts) +BuildRequires: cmake(KF6UserFeedback) +BuildRequires: cmake(KF6Baloo) +BuildRequires: cmake(KF6Holidays) +BuildRequires: kf6-kdesu-devel +BuildRequires: pkgconfig(libqalculate) +BuildRequires: sonic-win-devel +BuildRequires: sonic-interface-libraries-devel +BuildRequires: kdecoration-devel +BuildRequires: libkscreen-devel +BuildRequires: libksysguard-devel +BuildRequires: plasma-activities-devel +BuildRequires: cmake(KSysGuard) +BuildRequires: cmake(Plasma5Support) +BuildRequires: cmake(KScreenLocker) +BuildRequires: cmake(Breeze) +BuildRequires: cmake(KExiv2Qt6) +BuildRequires: cmake(KPipeWire) +BuildRequires: cmake(PlasmaActivities) +BuildRequires: cmake(PlasmaActivitiesStats) +BuildRequires: cmake(KF6Screen) +BuildRequires: cmake(KWayland) +BuildRequires: cmake(Plasma) +BuildRequires: cmake(PlasmaQuick) +BuildRequires: cmake(LayerShellQt) + +BuildRequires: pkgconfig(x11) +BuildRequires: pkgconfig(xau) +BuildRequires: pkgconfig(xcb) +BuildRequires: pkgconfig(xcomposite) +BuildRequires: pkgconfig(xcursor) +BuildRequires: pkgconfig(xdamage) +BuildRequires: pkgconfig(xext) +BuildRequires: pkgconfig(xfixes) +BuildRequires: pkgconfig(xft) +BuildRequires: pkgconfig(xi) +BuildRequires: pkgconfig(xinerama) +BuildRequires: pkgconfig(xres) +BuildRequires: pkgconfig(xkbcommon) +BuildRequires: pkgconfig(xkbfile) +BuildRequires: pkgconfig(xpm) +BuildRequires: pkgconfig(xrender) +BuildRequires: pkgconfig(xtst) +BuildRequires: pkgconfig(xxf86vm) +BuildRequires: pkgconfig(ice) +BuildRequires: pkgconfig(sm) +BuildRequires: pkgconfig(xcb-aux) +BuildRequires: pkgconfig(xcb-cursor) +BuildRequires: pkgconfig(xcb-image) +BuildRequires: pkgconfig(xcb-event) +BuildRequires: pkgconfig(xcb-util) +BuildRequires: pkgconfig(xcb-keysyms) +BuildRequires: pkgconfig(xcb-icccm) +BuildRequires: pkgconfig(xcb-renderutil) +BuildRequires: pkgconfig(xcb-atom) +BuildRequires: pkgconfig(xcb-ewmh) +BuildRequires: systemd-devel +BuildRequires: NetworkManager-libnm-devel +BuildRequires: glib2-devel +BuildRequires: polkit-qt6-1-devel +BuildRequires: PackageKit-Qt6-devel +BuildRequires: appstream-qt-devel +BuildRequires: iso-codes-devel +BuildRequires: libcanberra-devel +BuildRequires: fontconfig-devel +BuildRequires: zlib-devel +BuildRequires: libicu-devel + +Requires: sonic-win +Requires: xmessage +Requires: xprop +Requires: xrdb +Requires: xsetroot + +Conflicts: plasma-workspace-x11 + +Provides: plasma-workspace%{?_isa} >= %{plasma_version} +Provides: plasma-workspace >= %{plasma_version} +Obsoletes: plasma-workspace <= %{plasma_version} + +Provides: plasma-workspace-libs%{?_isa} >= %{plasma_version} +Provides: plasma-workspace-libs >= %{plasma_version} +Obsoletes: plasma-workspace-libs <= %{plasma_version} + +Provides: libkworkspace6%{?_isa} >= %{plasma_version} +Provides: libkworkspace6 >= %{plasma_version} +Obsoletes: libkworkspace6 <= %{plasma_version} + +Provides: desktop-notification-daemon + +%description +Core workspace components for SonicDE, fork of plasma-workspace. + +%package devel +Summary: Development files for %{name} +Requires: %{name}%{?_isa} = %{version}-%{release} +Conflicts: plasma-workspace-devel + +%description devel +Development files for sonic-workspace. + +%package x11 +Summary: SonicDE X11 session +#Requires: %{name}%{?_isa} = %{version}-%{release} +Requires: xlibre-xserver-Xorg +Conflicts: plasma-workspace-x11 + +%description x11 +SonicDE X11 session. + +%prep +%autosetup -p1 + +%build +%cmake_kf6 +%cmake_build + +%install +%cmake_install +# Many translation files have different names than the package +%find_lang plasmanetworkmanagement --all-name || : +%find_lang plasmashell --all-name || : + +%files +%license LICENSES/* +%{_bindir}/plasma* +%{_bindir}/krunner +%{_bindir}/ksmserver +%{_bindir}/ksplashqml +%{_bindir}/kcminit* +%{_bindir}/kde-systemd-start-condition +%{_bindir}/lookandfeeltool +%{_bindir}/kcolorschemeeditor +%{_bindir}/kfontinst +%{_bindir}/kfontview +%{_bindir}/xembedsniproxy +%{_bindir}/gmenudbusmenuproxy +%{_bindir}/startplasma-wayland +%{_libdir}/lib*.so.* +%{_libdir}/kconf_update_bin/ +%{_libexecdir}/ksmserver-logout-greeter +%{_libexecdir}/plasma* +%{_libexecdir}/kf6/kauth/ +%{_libexecdir}/kfontprint +%{_libexecdir}/baloorunner +%{_qt6_plugindir}/plasma/ +%{_qt6_plugindir}/kf6/ +%{_qt6_plugindir}/phonon_platform/ +%{_qt6_plugindir}/plasma5support/ +%{_qt6_plugindir}/plasmacalendarplugins/ +%{_qt6_qmldir}/org/kde/ +%{_userunitdir}/plasma* +%{_datadir}/plasma/ +%{_datadir}/plasma5support/ +%{_datadir}/applications/*.desktop +%{_datadir}/desktop-directories/ +%{_datadir}/config.kcfg/ +%{_datadir}/dbus-1/ +%{_datadir}/doc/ +%{_datadir}/icons/ +%{_datadir}/kconf_update/ +%{_datadir}/kfontinst/ +%{_datadir}/kglobalaccel/ +%{_datadir}/kio*/ +%{_datadir}/knotifications6/ +%{_datadir}/knsrcfiles/ +%{_datadir}/konqsidebartng/ +%{_datadir}/krunner/ +%{_datadir}/kstyle/ +%{_datadir}/kxmlgui5/ +%{_datadir}/polkit-1/ +%{_datadir}/qlogging-categories6/ +%{_datadir}/solid/ +%{_datadir}/timezonefiles/ +%{_datadir}/wayland-sessions/ +%{_datadir}/xdg-desktop-portal/ +%{_datadir}/zsh/ +%{_datadir}/locale/*/LC_MESSAGES/*.mo +%{_sysconfdir}/xdg/* + +%files devel +%defattr(-,root,root,-) +%{_includedir}/kworkspace6/ +%{_includedir}/taskmanager/ +%{_includedir}/notificationmanager/ +%{_includedir}/colorcorrect/ +%{_includedir}/krdb/ +%{_includedir}/plasma5support/ +%{_libdir}/lib*.so +%{_libdir}/cmake/*/ + +%files x11 +%defattr(-,root,root,-) +%{_datadir}/xsessions/plasmax11.desktop +%{_bindir}/startplasma-x11 + +%changelog +* Wed Mar 21 2026 Anders da Silva Rytter Hansen - 6.4.5-5 +- Initial release of SonicDE/KDE Plasma X11 for EL10 (Downgraded to 6.4.5 for EL 10.1 compatibility) diff --git a/my-ostree-os/kernel/Makefile.rhelver b/my-ostree-os/kernel/Makefile.rhelver index e442779..69a8a50 100644 --- a/my-ostree-os/kernel/Makefile.rhelver +++ b/my-ostree-os/kernel/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 1 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 124.31.1 +RHEL_RELEASE = 124.38.1 # # RHEL_REBASE_NUM diff --git a/my-ostree-os/kernel/kernel-aarch64-64k-debug-rhel.config b/my-ostree-os/kernel/kernel-aarch64-64k-debug-rhel.config index 09c9efa..2dc7949 100644 --- a/my-ostree-os/kernel/kernel-aarch64-64k-debug-rhel.config +++ b/my-ostree-os/kernel/kernel-aarch64-64k-debug-rhel.config @@ -1287,7 +1287,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-aarch64-64k-rhel.config b/my-ostree-os/kernel/kernel-aarch64-64k-rhel.config index b46b33f..f23025e 100644 --- a/my-ostree-os/kernel/kernel-aarch64-64k-rhel.config +++ b/my-ostree-os/kernel/kernel-aarch64-64k-rhel.config @@ -1287,7 +1287,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-aarch64-debug-rhel.config b/my-ostree-os/kernel/kernel-aarch64-debug-rhel.config index 62d74be..2c569aa 100644 --- a/my-ostree-os/kernel/kernel-aarch64-debug-rhel.config +++ b/my-ostree-os/kernel/kernel-aarch64-debug-rhel.config @@ -1285,7 +1285,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-aarch64-rhel.config b/my-ostree-os/kernel/kernel-aarch64-rhel.config index a8a47cb..4f43730 100644 --- a/my-ostree-os/kernel/kernel-aarch64-rhel.config +++ b/my-ostree-os/kernel/kernel-aarch64-rhel.config @@ -1285,7 +1285,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-aarch64-rt-64k-debug-rhel.config b/my-ostree-os/kernel/kernel-aarch64-rt-64k-debug-rhel.config index 15290da..729dc99 100644 --- a/my-ostree-os/kernel/kernel-aarch64-rt-64k-debug-rhel.config +++ b/my-ostree-os/kernel/kernel-aarch64-rt-64k-debug-rhel.config @@ -1288,7 +1288,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-aarch64-rt-64k-rhel.config b/my-ostree-os/kernel/kernel-aarch64-rt-64k-rhel.config index 6b7ec37..057797a 100644 --- a/my-ostree-os/kernel/kernel-aarch64-rt-64k-rhel.config +++ b/my-ostree-os/kernel/kernel-aarch64-rt-64k-rhel.config @@ -1288,7 +1288,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-aarch64-rt-debug-rhel.config b/my-ostree-os/kernel/kernel-aarch64-rt-debug-rhel.config index 3b03266..20714bd 100644 --- a/my-ostree-os/kernel/kernel-aarch64-rt-debug-rhel.config +++ b/my-ostree-os/kernel/kernel-aarch64-rt-debug-rhel.config @@ -1286,7 +1286,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-aarch64-rt-rhel.config b/my-ostree-os/kernel/kernel-aarch64-rt-rhel.config index a22d804..f69642c 100644 --- a/my-ostree-os/kernel/kernel-aarch64-rt-rhel.config +++ b/my-ostree-os/kernel/kernel-aarch64-rt-rhel.config @@ -1286,7 +1286,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-ppc64le-debug-rhel.config b/my-ostree-os/kernel/kernel-ppc64le-debug-rhel.config index 856778a..a61e73a 100644 --- a/my-ostree-os/kernel/kernel-ppc64le-debug-rhel.config +++ b/my-ostree-os/kernel/kernel-ppc64le-debug-rhel.config @@ -1050,7 +1050,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-ppc64le-rhel.config b/my-ostree-os/kernel/kernel-ppc64le-rhel.config index ed1e8f4..b661bd2 100644 --- a/my-ostree-os/kernel/kernel-ppc64le-rhel.config +++ b/my-ostree-os/kernel/kernel-ppc64le-rhel.config @@ -1050,7 +1050,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-s390x-debug-rhel.config b/my-ostree-os/kernel/kernel-s390x-debug-rhel.config index 0abd32f..401dbca 100644 --- a/my-ostree-os/kernel/kernel-s390x-debug-rhel.config +++ b/my-ostree-os/kernel/kernel-s390x-debug-rhel.config @@ -1046,7 +1046,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-s390x-rhel.config b/my-ostree-os/kernel/kernel-s390x-rhel.config index 149ddef..0603e0c 100644 --- a/my-ostree-os/kernel/kernel-s390x-rhel.config +++ b/my-ostree-os/kernel/kernel-s390x-rhel.config @@ -1046,7 +1046,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-s390x-zfcpdump-rhel.config b/my-ostree-os/kernel/kernel-s390x-zfcpdump-rhel.config index 7fb44a7..02c7cfe 100644 --- a/my-ostree-os/kernel/kernel-s390x-zfcpdump-rhel.config +++ b/my-ostree-os/kernel/kernel-s390x-zfcpdump-rhel.config @@ -1047,7 +1047,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-x86_64-debug-rhel.config b/my-ostree-os/kernel/kernel-x86_64-debug-rhel.config index a5b8780..adcdc80 100644 --- a/my-ostree-os/kernel/kernel-x86_64-debug-rhel.config +++ b/my-ostree-os/kernel/kernel-x86_64-debug-rhel.config @@ -1104,7 +1104,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-x86_64-rhel.config b/my-ostree-os/kernel/kernel-x86_64-rhel.config index 4f435d1..ea5f9f0 100644 --- a/my-ostree-os/kernel/kernel-x86_64-rhel.config +++ b/my-ostree-os/kernel/kernel-x86_64-rhel.config @@ -1104,7 +1104,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-x86_64-rt-debug-rhel.config b/my-ostree-os/kernel/kernel-x86_64-rt-debug-rhel.config index 41b1744..184526f 100644 --- a/my-ostree-os/kernel/kernel-x86_64-rt-debug-rhel.config +++ b/my-ostree-os/kernel/kernel-x86_64-rt-debug-rhel.config @@ -1105,7 +1105,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-x86_64-rt-rhel.config b/my-ostree-os/kernel/kernel-x86_64-rt-rhel.config index 444660e..739c8d4 100644 --- a/my-ostree-os/kernel/kernel-x86_64-rt-rhel.config +++ b/my-ostree-os/kernel/kernel-x86_64-rt-rhel.config @@ -1105,7 +1105,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-x86_64_v2-debug-rhel.config b/my-ostree-os/kernel/kernel-x86_64_v2-debug-rhel.config index a5b8780..adcdc80 100644 --- a/my-ostree-os/kernel/kernel-x86_64_v2-debug-rhel.config +++ b/my-ostree-os/kernel/kernel-x86_64_v2-debug-rhel.config @@ -1104,7 +1104,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-x86_64_v2-rhel.config b/my-ostree-os/kernel/kernel-x86_64_v2-rhel.config index 4f435d1..ea5f9f0 100644 --- a/my-ostree-os/kernel/kernel-x86_64_v2-rhel.config +++ b/my-ostree-os/kernel/kernel-x86_64_v2-rhel.config @@ -1104,7 +1104,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-x86_64_v2-rt-debug-rhel.config b/my-ostree-os/kernel/kernel-x86_64_v2-rt-debug-rhel.config index 41b1744..184526f 100644 --- a/my-ostree-os/kernel/kernel-x86_64_v2-rt-debug-rhel.config +++ b/my-ostree-os/kernel/kernel-x86_64_v2-rt-debug-rhel.config @@ -1105,7 +1105,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel-x86_64_v2-rt-rhel.config b/my-ostree-os/kernel/kernel-x86_64_v2-rt-rhel.config index 444660e..739c8d4 100644 --- a/my-ostree-os/kernel/kernel-x86_64_v2-rt-rhel.config +++ b/my-ostree-os/kernel/kernel-x86_64_v2-rt-rhel.config @@ -1105,7 +1105,7 @@ CONFIG_CRYPTO_HW=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set -CONFIG_CRYPTO_JITTERENTROPY_OSR=1 +CONFIG_CRYPTO_JITTERENTROPY_OSR=3 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set # CONFIG_CRYPTO_KEYWRAP is not set CONFIG_CRYPTO_LIB_AESCFB=y diff --git a/my-ostree-os/kernel/kernel.changelog b/my-ostree-os/kernel/kernel.changelog index 96d77ee..b6b67d1 100644 --- a/my-ostree-os/kernel/kernel.changelog +++ b/my-ostree-os/kernel/kernel.changelog @@ -1,3 +1,51 @@ +* Sat Feb 07 2026 CKI KWF Bot [6.12.0-124.38.1.el10_1] +- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288] +- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998} +Resolves: RHEL-144335, RHEL-147288 + +* Thu Feb 05 2026 CKI KWF Bot [6.12.0-124.37.1.el10_1] +- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876] +- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138] +- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064} +Resolves: RHEL-126896, RHEL-135138, RHEL-140874, RHEL-141876 + +* Tue Feb 03 2026 CKI KWF Bot [6.12.0-124.36.1.el10_1] +- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349} +- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034} +- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172} +- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269} +- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141} +Resolves: RHEL-128899, RHEL-132908, RHEL-136912, RHEL-137977, RHEL-140263 + +* Sat Jan 31 2026 CKI KWF Bot [6.12.0-124.35.1.el10_1] +- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734] +- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133} +- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] +- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403} +Resolves: RHEL-129044, RHEL-137703, RHEL-139734 + +* Thu Jan 29 2026 CKI KWF Bot [6.12.0-124.34.1.el10_1] +- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255] +- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811} +- exec: Make sure task->comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711] +- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229] +- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325] +- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325] +- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325] +Resolves: RHEL-138325, RHEL-141229, RHEL-141711, RHEL-142793, RHEL-143255 + +* Tue Jan 27 2026 Julio Faracco [6.12.0-124.33.1.el10_1] +- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730} +- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933} +Resolves: RHEL-131394, RHEL-137333 + +* Sat Jan 24 2026 CKI KWF Bot [6.12.0-124.32.1.el10_1] +- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415} +- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415} +- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304} +- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322} +Resolves: RHEL-136945, RHEL-137686, RHEL-138024 + * Thu Jan 22 2026 CKI KWF Bot [6.12.0-124.31.1.el10_1] - i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647] - devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647] @@ -19,6 +67,7 @@ - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022} - uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456] - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154} +- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759] Resolves: RHEL-121647, RHEL-122759, RHEL-126599, RHEL-129115, RHEL-129452, RHEL-133336, RHEL-133456, RHEL-134363, RHEL-134763, RHEL-136289 * Wed Jan 21 2026 CKI KWF Bot [6.12.0-124.30.1.el10_1] diff --git a/my-ostree-os/kernel/kernel.spec b/my-ostree-os/kernel/kernel.spec index 81d527b..18385fd 100644 --- a/my-ostree-os/kernel/kernel.spec +++ b/my-ostree-os/kernel/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 124.31.1 +%define pkgrelease 124.38.1 %define kversion 6 -%define tarfile_release 6.12.0-124.31.1.el10_1 +%define tarfile_release 6.12.0-124.38.1.el10_1 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 124.31.1%{?buildid}%{?dist} +%define specrelease 124.38.1%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-124.31.1.el10_1 +%define kabiversion 6.12.0-124.38.1.el10_1 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -4403,14 +4403,14 @@ fi\ # # %changelog -* Wed Feb 04 2026 Eduard Abdullin - 6.12.0-124.31.1 +* Tue Feb 17 2026 Eduard Abdullin - 6.12.0-124.38.1 - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert -* Wed Feb 04 2026 Neal Gompa - 6.12.0-124.31.1 +* Tue Feb 17 2026 Neal Gompa - 6.12.0-124.38.1 - Enable Btrfs support for all kernel variants -* Wed Feb 04 2026 Andrew Lukoshko - 6.12.0-124.31.1 +* Tue Feb 17 2026 Andrew Lukoshko - 6.12.0-124.38.1 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 @@ -4421,6 +4421,47 @@ fi\ - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained +* Sat Feb 07 2026 CKI KWF Bot [6.12.0-124.38.1.el10_1] +- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288] +- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998} + +* Thu Feb 05 2026 CKI KWF Bot [6.12.0-124.37.1.el10_1] +- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876] +- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138] +- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064} + +* Tue Feb 03 2026 CKI KWF Bot [6.12.0-124.36.1.el10_1] +- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349} +- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034} +- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172} +- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269} +- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141} + +* Sat Jan 31 2026 CKI KWF Bot [6.12.0-124.35.1.el10_1] +- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734] +- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133} +- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] +- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403} + +* Thu Jan 29 2026 CKI KWF Bot [6.12.0-124.34.1.el10_1] +- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255] +- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811} +- exec: Make sure task->comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711] +- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229] +- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325] +- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325] +- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325] + +* Tue Jan 27 2026 Julio Faracco [6.12.0-124.33.1.el10_1] +- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730} +- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933} + +* Sat Jan 24 2026 CKI KWF Bot [6.12.0-124.32.1.el10_1] +- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415} +- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415} +- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304} +- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322} + * Thu Jan 22 2026 CKI KWF Bot [6.12.0-124.31.1.el10_1] - i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647] - devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647] @@ -4442,6 +4483,7 @@ fi\ - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022} - uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456] - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154} +- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759] * Wed Jan 21 2026 CKI KWF Bot [6.12.0-124.30.1.el10_1] - io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}