Compare commits

...

3 commits

Author SHA1 Message Date
Anders da Silva Rytter Hansen
52fe05d0fd Change changelog text 2026-03-23 21:01:56 -03:00
Anders da Silva Rytter Hansen
0a82a4fc35 Add SonicDE spec files 2026-03-21 20:32:20 -03:00
Anders da Silva Rytter Hansen
7894e05f61 kernel 6.12.0-124.38.1.el10_1 2026-02-18 23:02:53 -03:00
27 changed files with 728 additions and 29 deletions

View file

@ -0,0 +1,135 @@
%define _disable_source_fetch 0
%define debug_package %{nil}
Name: sonic-interface-libraries
Version: 6.4.5
Release: 7%{?dist}
Summary: Foundation of the SonicDE user interface (fork of libplasma)
License: LGPL-2.0-or-later
URL: https://github.com/Sonic-DE/sonic-interface-libraries
Source0: %{url}/archive/refs/tags/v%{version}.tar.gz
%global plasma_version %(echo %{version} | cut -d. -f1-3)
BuildRequires: extra-cmake-modules
BuildRequires: gcc-c++
BuildRequires: cmake(KF6Archive)
BuildRequires: cmake(KF6Declarative)
BuildRequires: cmake(KF6Su)
BuildRequires: cmake(KF6GlobalAccel)
BuildRequires: cmake(KF6Kirigami2)
BuildRequires: cmake(KF6Package)
BuildRequires: cmake(KF6Parts)
BuildRequires: cmake(KF6ConfigWidgets)
BuildRequires: cmake(KF6ColorScheme)
BuildRequires: kf6-rpm-macros
BuildRequires: cmake(KF6Solid)
BuildRequires: openssl-devel
BuildRequires: qt6-qtbase-devel
BuildRequires: qt6-qtbase-private-devel
BuildRequires: qt6-qtdeclarative-devel
BuildRequires: qt6-qtsvg-devel
# KDE Frameworks
BuildRequires: cmake(KF6Config)
BuildRequires: cmake(KF6CoreAddons)
BuildRequires: cmake(KF6DBusAddons)
BuildRequires: cmake(KF6DocTools)
BuildRequires: cmake(KF6GuiAddons)
BuildRequires: cmake(KF6I18n)
BuildRequires: cmake(KF6IconThemes)
BuildRequires: cmake(KF6KCMUtils)
BuildRequires: cmake(KF6KIO)
BuildRequires: cmake(KF6Notifications)
BuildRequires: cmake(KF6Service)
BuildRequires: cmake(KF6Svg)
BuildRequires: cmake(KF6WidgetsAddons)
BuildRequires: cmake(KF6WindowSystem)
BuildRequires: cmake(KF6XmlGui)
BuildRequires: cmake(PlasmaWaylandProtocols)
# Qt
BuildRequires: cmake(Qt6WaylandClient)
# Plasma
BuildRequires: cmake(PlasmaActivities)
BuildRequires: wayland-devel
BuildRequires: kwayland-devel
# X11 Support
BuildRequires: libX11-devel
BuildRequires: libxcb-devel
BuildRequires: xcb-util-devel
BuildRequires: libXcursor-devel
BuildRequires: libXrender-devel
BuildRequires: libXext-devel
BuildRequires: libXfixes-devel
BuildRequires: libXi-devel
Provides: libplasma%{?_isa} >= %{plasma_version}
Provides: libplasma >= %{plasma_version}
Obsoletes: libplasma <= %{plasma_version}
# Renamed from kf6-plasma
Obsoletes: kf6-plasma < 1:%{version}-%{release}
Provides: kf6-plasma = 1:%{version}-%{release}
%description
Sonic Interface Libraries is a fork of libplasma, providing the foundational
libraries for themes, applets, and widgets in SonicDE.
%package devel
Summary: Development files for %{name}
Requires: %{name}%{?_isa} = %{version}-%{release}
Requires: cmake(KF6Package)
Requires: qt6-qtbase-devel
Requires: cmake(KF6Service)
Requires: cmake(KF6WindowSystem)
Provides: libplasma-devel%{?_isa} >= %{plasma_version}
Provides: libplasma-devel >= %{plasma_version}
Obsoletes: libplasma-devel <= %{plasma_version}
Obsoletes: kf6-plasma-devel < 1:%{version}-%{release}
Provides: kf6-plasma-devel = 1:%{version}-%{release}
%description devel
Development files for sonic-interface-libraries.
%prep
%autosetup -p1
%build
%cmake_kf6
%cmake_build
%install
%cmake_install
%find_lang %{name} --all-name
%files -f %{name}.lang
%license LICENSES/*
%{_libdir}/libPlasma.so.*
%{_libdir}/libPlasmaQuick.so.*
%{_qt6_plugindir}/kf6/
%{_qt6_qmldir}/org/kde/plasma/
%{_qt6_qmldir}/org/kde/kirigami/styles/Plasma/
%{_datadir}/plasma/
%{_datadir}/qlogging-categories6/*.categories
%{_datadir}/qlogging-categories6/*.renamecategories
%files devel
%{_includedir}/Plasma/
%{_includedir}/PlasmaQuick/
%{_libdir}/libPlasma.so
%{_libdir}/libPlasmaQuick.so
%{_libdir}/cmake/Plasma/
%{_libdir}/cmake/PlasmaQuick/
%{_datadir}/doc/qt6/Plasma.qch
%{_datadir}/doc/qt6/Plasma.tags
%{_datadir}/kdevappwizard/templates/*.tar.bz2
%changelog
* Wed Mar 21 2026 Anders da Silva Rytter Hansen <andersrh@users.noreply.github.com> - 6.4.5-7
- Initial release of SonicDE/KDE Plasma X11 for EL10 (Downgraded to 6.4.5 for EL 10.1 compatibility)

205
SonicDE/sonic-win.spec Normal file
View file

@ -0,0 +1,205 @@
%define _disable_source_fetch 0
%define debug_package %{nil}
Name: sonic-win
Version: 6.4.5
Release: 8%{?dist}
Summary: KWin window manager for SonicDE (fork of kwin)
%global plasma_version %{version}
License: GPL-2.0-or-later
URL: https://github.com/Sonic-DE/sonic-win
Source0: %{url}/archive/refs/tags/%{version}.tar.gz#/%{name}-%{version}.tar.gz
BuildRequires: extra-cmake-modules
BuildRequires: kf6-rpm-macros
BuildRequires: systemd-rpm-macros
# Qt
BuildRequires: cmake(QAccessibilityClient6)
BuildRequires: qt6-qtbase-devel
BuildRequires: qt6-qtbase-private-devel
BuildRequires: qt6-qtsensors-devel
BuildRequires: qt6-qttools-devel
BuildRequires: qt6-qtwayland-devel
BuildRequires: cmake(Qt6Core5Compat)
BuildRequires: cmake(Qt6Svg)
BuildRequires: cmake(Qt6Multimedia)
# X11/OpenGL
BuildRequires: pkgconfig(libxcvt)
BuildRequires: mesa-libGL-devel
BuildRequires: mesa-libEGL-devel
BuildRequires: mesa-libgbm-devel
BuildRequires: libxkbcommon-devel
BuildRequires: libxkbcommon-x11-devel
BuildRequires: libX11-devel
BuildRequires: libXi-devel
BuildRequires: libxcb-devel
BuildRequires: libICE-devel
BuildRequires: libSM-devel
BuildRequires: libXcursor-devel
BuildRequires: xcb-util-wm-devel
BuildRequires: xcb-util-image-devel
BuildRequires: xcb-util-keysyms-devel
BuildRequires: xcb-util-cursor-devel
BuildRequires: xcb-util-devel
BuildRequires: libepoxy-devel
BuildRequires: libcap-devel
BuildRequires: lcms2-devel
BuildRequires: glib2-devel
BuildRequires: pipewire-devel
# Wayland
BuildRequires: wayland-devel >= 1.22.0
BuildRequires: wayland-protocols-devel
BuildRequires: pkgconfig(libinput) >= 0.10
BuildRequires: pkgconfig(libudev)
%if 0%{?rhel} == 10
# Integrate with Xlibre on EL10
BuildRequires: xlibre-xserver-devel
Requires: xlibre-xserver-Xorg
Requires: xlibre-xf86-input-libinput
%else
BuildRequires: pkgconfig(xwayland)
%endif
# KF6
BuildRequires: cmake(KF6Completion)
BuildRequires: cmake(KF6Config)
BuildRequires: cmake(KF6ConfigWidgets)
BuildRequires: cmake(KF6CoreAddons)
BuildRequires: cmake(KF6Crash)
BuildRequires: cmake(KF6DBusAddons)
BuildRequires: cmake(KF6GlobalAccel)
BuildRequires: cmake(KF6GuiAddons)
BuildRequires: cmake(KF6I18n)
BuildRequires: cmake(KF6KIO)
BuildRequires: cmake(KF6Notifications)
BuildRequires: cmake(KF6Service)
BuildRequires: cmake(KF6WidgetsAddons)
BuildRequires: cmake(KF6WindowSystem)
BuildRequires: cmake(KF6DocTools)
BuildRequires: cmake(KF6KCMUtils)
BuildRequires: cmake(KF6NewStuff)
BuildRequires: cmake(KF6Declarative)
BuildRequires: cmake(KF6IconThemes)
BuildRequires: cmake(KF6IdleTime)
BuildRequires: cmake(KF6TextWidgets)
BuildRequires: cmake(KF6Kirigami2)
BuildRequires: cmake(KF6Runner)
BuildRequires: cmake(KF6Svg)
# Workspace components
BuildRequires: cmake(KDecoration3)
BuildRequires: kscreenlocker-devel
BuildRequires: plasma-breeze-devel
BuildRequires: plasma-wayland-protocols-devel
BuildRequires: cmake(KGlobalAccelD)
BuildRequires: libdisplay-info-devel
BuildRequires: cmake(KWayland)
BuildRequires: cmake(Plasma)
BuildRequires: cmake(PlasmaActivities)
BuildRequires: libeis-devel
BuildRequires: pkgconfig(libcanberra)
# Conflicts with kwin-x11
Conflicts: kwin-x11
Requires: sonic-interface-libraries%{?_isa} >= %{plasma_version}
Requires: kscreenlocker%{?_isa}
Requires: kf6-kirigami2%{?_isa}
Requires: kf6-kdeclarative%{?_isa}
Requires: qt6-qtmultimedia%{?_isa}
Requires: qt6-qtdeclarative%{?_isa}
%description
Sonic Win is a fork of KWin, the window manager and compositor for SonicDE,
focusing on an optimized X11 experience.
%package libs
Summary: KWin libraries for SonicDE
Conflicts: kwin-x11-libs
%description libs
Shared libraries for sonic-win.
%package devel
Summary: Development files for %{name}
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
Requires: %{name}%{?_isa} = %{version}-%{release}
Conflicts: kwin-x11-devel
%description devel
Development files for sonic-win.
Provides: kwin-devel = %{version}-%{release}
Provides: kwin-x11-devel = %{version}-%{release}
Provides: cmake(KWinDBusInterface) = %{version}
%prep
%autosetup -p1
%build
%cmake_kf6
%cmake_build
%install
%cmake_install
# Create compatibility CMake files for sonic-workspace
mkdir -p %{buildroot}%{_libdir}/cmake/KWinDBusInterface
cat <<EOF > %{buildroot}%{_libdir}/cmake/KWinDBusInterface/KWinDBusInterfaceConfig.cmake
find_package(KWinX11DBusInterface REQUIRED)
include(\${KWinX11DBusInterface_DIR}/KWinX11DBusInterfaceConfig.cmake)
EOF
# Create compatibility symlinks for DBus interfaces
pushd %{buildroot}%{_datadir}/dbus-1/interfaces/
for f in kwin_x11_*.xml; do
newname=$(echo $f | sed 's/kwin_x11_//')
ln -s "$f" "$newname"
done
popd
# The translation domain in the source is likely still 'kwin'
%find_lang kwin --all-name --with-html
%files -f kwin.lang
%license LICENSES/*
# Binares and specialized folders
%{_bindir}/kwin_x11
%{_libdir}/kconf_update_bin/kwin*
%{_libexecdir}/kwin*
%{_userunitdir}/plasma-kwin_x11.service
# Database and plugins
%{_libdir}/qt6/plugins/
%{_qt6_qmldir}/org/kde/*/
# Data and Assets
%{_datadir}/kwin-x11/
%{_datadir}/applications/*.desktop
%{_datadir}/dbus-1/interfaces/*.xml
%{_datadir}/icons/hicolor/*/apps/kwin-x11.*
%{_datadir}/kconf_update/kwin-x11.upd
%{_datadir}/knotifications6/kwin-x11.notifyrc
%{_datadir}/knsrcfiles/*.knsrc
%{_datadir}/krunner/dbusplugins/*.desktop
%{_datadir}/qlogging-categories6/*.categories
%files libs
# Libraries
%{_libdir}/lib*.so.*
%files devel
%{_includedir}/
%{_libdir}/lib*.so
%{_libdir}/cmake/
%changelog
* Wed Mar 21 2026 Anders da Silva Rytter Hansen <andersrh@users.noreply.github.com> - 6.4.5-8
- Initial release of SonicDE/KDE Plasma X11 for EL10 (Downgraded to 6.4.5 for EL 10.1 compatibility)

View file

@ -0,0 +1,268 @@
%define _disable_source_fetch 0
%define debug_package %{nil}
Name: sonic-workspace
Version: 6.4.5
Release: 5%{?dist}
Summary: Core workspace components for SonicDE (fork of plasma-workspace)
License: GPL-2.0-or-later
URL: https://github.com/Sonic-DE/sonic-workspace
Source0: %{url}/archive/refs/tags/v%{version}.tar.gz
%global plasma_version %(echo %{version} | cut -d. -f1-3)
BuildRequires: extra-cmake-modules
BuildRequires: kf6-rpm-macros
BuildRequires: qt6-qtbase-devel
BuildRequires: qt6-qtbase-private-devel
BuildRequires: qt6-qtdeclarative-devel
BuildRequires: qt6-qtdeclarative-private-devel
BuildRequires: qt6-qtsvg-devel
BuildRequires: qt6-qtwayland-devel
BuildRequires: qt6-qtlocation-devel
BuildRequires: qt6-qtshadertools-devel
BuildRequires: qcoro-qt6-devel
BuildRequires: phonon-qt6-devel
BuildRequires: wayland-devel
BuildRequires: wayland-protocols-devel
BuildRequires: plasma-wayland-protocols-devel
BuildRequires: cmake(Qt6Core5Compat)
BuildRequires: cmake(KF6Config)
BuildRequires: cmake(KF6Archive)
BuildRequires: cmake(KF6Declarative)
BuildRequires: cmake(KF6ConfigWidgets)
BuildRequires: cmake(KF6CoreAddons)
BuildRequires: cmake(KF6Crash)
BuildRequires: cmake(KF6DBusAddons)
BuildRequires: cmake(KF6GlobalAccel)
BuildRequires: cmake(KF6GuiAddons)
BuildRequires: cmake(KF6I18n)
BuildRequires: cmake(KF6IdleTime)
BuildRequires: cmake(KF6KIO)
BuildRequires: cmake(KF6Notifications)
BuildRequires: cmake(KF6NotifyConfig)
BuildRequires: cmake(KF6Runner)
BuildRequires: cmake(KF6Service)
BuildRequires: cmake(KF6Solid)
BuildRequires: cmake(KF6WidgetsAddons)
BuildRequires: cmake(KF6WindowSystem)
BuildRequires: cmake(KF6XmlGui)
BuildRequires: cmake(KF6DocTools)
BuildRequires: cmake(KF6ItemModels)
BuildRequires: cmake(KF6KDED)
BuildRequires: cmake(KF6StatusNotifierItem)
BuildRequires: cmake(KF6UnitConversion)
BuildRequires: cmake(KF6Wallet)
BuildRequires: cmake(KF6KCMUtils)
BuildRequires: cmake(KF6NewStuff)
BuildRequires: cmake(KF6Package)
BuildRequires: cmake(KF6Parts)
BuildRequires: cmake(KF6Prison)
BuildRequires: cmake(KF6Sonnet)
BuildRequires: cmake(KF6TextEditor)
BuildRequires: cmake(KF6TextWidgets)
BuildRequires: cmake(KF6Svg)
BuildRequires: cmake(KF6Kirigami2)
BuildRequires: cmake(KF6KirigamiAddons)
BuildRequires: cmake(KF6NetworkManagerQt)
BuildRequires: cmake(KF6QuickCharts)
BuildRequires: cmake(KF6UserFeedback)
BuildRequires: cmake(KF6Baloo)
BuildRequires: cmake(KF6Holidays)
BuildRequires: kf6-kdesu-devel
BuildRequires: pkgconfig(libqalculate)
BuildRequires: sonic-win-devel
BuildRequires: sonic-interface-libraries-devel
BuildRequires: kdecoration-devel
BuildRequires: libkscreen-devel
BuildRequires: libksysguard-devel
BuildRequires: plasma-activities-devel
BuildRequires: cmake(KSysGuard)
BuildRequires: cmake(Plasma5Support)
BuildRequires: cmake(KScreenLocker)
BuildRequires: cmake(Breeze)
BuildRequires: cmake(KExiv2Qt6)
BuildRequires: cmake(KPipeWire)
BuildRequires: cmake(PlasmaActivities)
BuildRequires: cmake(PlasmaActivitiesStats)
BuildRequires: cmake(KF6Screen)
BuildRequires: cmake(KWayland)
BuildRequires: cmake(Plasma)
BuildRequires: cmake(PlasmaQuick)
BuildRequires: cmake(LayerShellQt)
BuildRequires: pkgconfig(x11)
BuildRequires: pkgconfig(xau)
BuildRequires: pkgconfig(xcb)
BuildRequires: pkgconfig(xcomposite)
BuildRequires: pkgconfig(xcursor)
BuildRequires: pkgconfig(xdamage)
BuildRequires: pkgconfig(xext)
BuildRequires: pkgconfig(xfixes)
BuildRequires: pkgconfig(xft)
BuildRequires: pkgconfig(xi)
BuildRequires: pkgconfig(xinerama)
BuildRequires: pkgconfig(xres)
BuildRequires: pkgconfig(xkbcommon)
BuildRequires: pkgconfig(xkbfile)
BuildRequires: pkgconfig(xpm)
BuildRequires: pkgconfig(xrender)
BuildRequires: pkgconfig(xtst)
BuildRequires: pkgconfig(xxf86vm)
BuildRequires: pkgconfig(ice)
BuildRequires: pkgconfig(sm)
BuildRequires: pkgconfig(xcb-aux)
BuildRequires: pkgconfig(xcb-cursor)
BuildRequires: pkgconfig(xcb-image)
BuildRequires: pkgconfig(xcb-event)
BuildRequires: pkgconfig(xcb-util)
BuildRequires: pkgconfig(xcb-keysyms)
BuildRequires: pkgconfig(xcb-icccm)
BuildRequires: pkgconfig(xcb-renderutil)
BuildRequires: pkgconfig(xcb-atom)
BuildRequires: pkgconfig(xcb-ewmh)
BuildRequires: systemd-devel
BuildRequires: NetworkManager-libnm-devel
BuildRequires: glib2-devel
BuildRequires: polkit-qt6-1-devel
BuildRequires: PackageKit-Qt6-devel
BuildRequires: appstream-qt-devel
BuildRequires: iso-codes-devel
BuildRequires: libcanberra-devel
BuildRequires: fontconfig-devel
BuildRequires: zlib-devel
BuildRequires: libicu-devel
Requires: sonic-win
Requires: xmessage
Requires: xprop
Requires: xrdb
Requires: xsetroot
Conflicts: plasma-workspace-x11
Provides: plasma-workspace%{?_isa} >= %{plasma_version}
Provides: plasma-workspace >= %{plasma_version}
Obsoletes: plasma-workspace <= %{plasma_version}
Provides: plasma-workspace-libs%{?_isa} >= %{plasma_version}
Provides: plasma-workspace-libs >= %{plasma_version}
Obsoletes: plasma-workspace-libs <= %{plasma_version}
Provides: libkworkspace6%{?_isa} >= %{plasma_version}
Provides: libkworkspace6 >= %{plasma_version}
Obsoletes: libkworkspace6 <= %{plasma_version}
Provides: desktop-notification-daemon
%description
Core workspace components for SonicDE, fork of plasma-workspace.
%package devel
Summary: Development files for %{name}
Requires: %{name}%{?_isa} = %{version}-%{release}
Conflicts: plasma-workspace-devel
%description devel
Development files for sonic-workspace.
%package x11
Summary: SonicDE X11 session
#Requires: %{name}%{?_isa} = %{version}-%{release}
Requires: xlibre-xserver-Xorg
Conflicts: plasma-workspace-x11
%description x11
SonicDE X11 session.
%prep
%autosetup -p1
%build
%cmake_kf6
%cmake_build
%install
%cmake_install
# Many translation files have different names than the package
%find_lang plasmanetworkmanagement --all-name || :
%find_lang plasmashell --all-name || :
%files
%license LICENSES/*
%{_bindir}/plasma*
%{_bindir}/krunner
%{_bindir}/ksmserver
%{_bindir}/ksplashqml
%{_bindir}/kcminit*
%{_bindir}/kde-systemd-start-condition
%{_bindir}/lookandfeeltool
%{_bindir}/kcolorschemeeditor
%{_bindir}/kfontinst
%{_bindir}/kfontview
%{_bindir}/xembedsniproxy
%{_bindir}/gmenudbusmenuproxy
%{_bindir}/startplasma-wayland
%{_libdir}/lib*.so.*
%{_libdir}/kconf_update_bin/
%{_libexecdir}/ksmserver-logout-greeter
%{_libexecdir}/plasma*
%{_libexecdir}/kf6/kauth/
%{_libexecdir}/kfontprint
%{_libexecdir}/baloorunner
%{_qt6_plugindir}/plasma/
%{_qt6_plugindir}/kf6/
%{_qt6_plugindir}/phonon_platform/
%{_qt6_plugindir}/plasma5support/
%{_qt6_plugindir}/plasmacalendarplugins/
%{_qt6_qmldir}/org/kde/
%{_userunitdir}/plasma*
%{_datadir}/plasma/
%{_datadir}/plasma5support/
%{_datadir}/applications/*.desktop
%{_datadir}/desktop-directories/
%{_datadir}/config.kcfg/
%{_datadir}/dbus-1/
%{_datadir}/doc/
%{_datadir}/icons/
%{_datadir}/kconf_update/
%{_datadir}/kfontinst/
%{_datadir}/kglobalaccel/
%{_datadir}/kio*/
%{_datadir}/knotifications6/
%{_datadir}/knsrcfiles/
%{_datadir}/konqsidebartng/
%{_datadir}/krunner/
%{_datadir}/kstyle/
%{_datadir}/kxmlgui5/
%{_datadir}/polkit-1/
%{_datadir}/qlogging-categories6/
%{_datadir}/solid/
%{_datadir}/timezonefiles/
%{_datadir}/wayland-sessions/
%{_datadir}/xdg-desktop-portal/
%{_datadir}/zsh/
%{_datadir}/locale/*/LC_MESSAGES/*.mo
%{_sysconfdir}/xdg/*
%files devel
%defattr(-,root,root,-)
%{_includedir}/kworkspace6/
%{_includedir}/taskmanager/
%{_includedir}/notificationmanager/
%{_includedir}/colorcorrect/
%{_includedir}/krdb/
%{_includedir}/plasma5support/
%{_libdir}/lib*.so
%{_libdir}/cmake/*/
%files x11
%defattr(-,root,root,-)
%{_datadir}/xsessions/plasmax11.desktop
%{_bindir}/startplasma-x11
%changelog
* Wed Mar 21 2026 Anders da Silva Rytter Hansen <andersrh@users.noreply.github.com> - 6.4.5-5
- Initial release of SonicDE/KDE Plasma X11 for EL10 (Downgraded to 6.4.5 for EL 10.1 compatibility)

View file

@ -12,7 +12,7 @@ RHEL_MINOR = 1
#
# Use this spot to avoid future merge conflicts.
# Do not trim this comment.
RHEL_RELEASE = 124.31.1
RHEL_RELEASE = 124.38.1
#
# RHEL_REBASE_NUM

View file

@ -1287,7 +1287,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1287,7 +1287,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1285,7 +1285,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1285,7 +1285,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1288,7 +1288,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1288,7 +1288,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1286,7 +1286,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1286,7 +1286,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1050,7 +1050,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1050,7 +1050,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1046,7 +1046,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1046,7 +1046,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1047,7 +1047,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1104,7 +1104,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1104,7 +1104,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1105,7 +1105,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1105,7 +1105,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1104,7 +1104,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1104,7 +1104,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1105,7 +1105,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1105,7 +1105,7 @@ CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_JITTERENTROPY_OSR=3
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
# CONFIG_CRYPTO_KEYWRAP is not set
CONFIG_CRYPTO_LIB_AESCFB=y

View file

@ -1,3 +1,51 @@
* Sat Feb 07 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.38.1.el10_1]
- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}
Resolves: RHEL-144335, RHEL-147288
* Thu Feb 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.37.1.el10_1]
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}
Resolves: RHEL-126896, RHEL-135138, RHEL-140874, RHEL-141876
* Tue Feb 03 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.36.1.el10_1]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}
Resolves: RHEL-128899, RHEL-132908, RHEL-136912, RHEL-137977, RHEL-140263
* Sat Jan 31 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.35.1.el10_1]
- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}
Resolves: RHEL-129044, RHEL-137703, RHEL-139734
* Thu Jan 29 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.34.1.el10_1]
- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task->comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]
Resolves: RHEL-138325, RHEL-141229, RHEL-141711, RHEL-142793, RHEL-143255
* Tue Jan 27 2026 Julio Faracco <jfaracco@redhat.com> [6.12.0-124.33.1.el10_1]
- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}
Resolves: RHEL-131394, RHEL-137333
* Sat Jan 24 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.32.1.el10_1]
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}
Resolves: RHEL-136945, RHEL-137686, RHEL-138024
* Thu Jan 22 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.31.1.el10_1]
- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
@ -19,6 +67,7 @@
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]
Resolves: RHEL-121647, RHEL-122759, RHEL-126599, RHEL-129115, RHEL-129452, RHEL-133336, RHEL-133456, RHEL-134363, RHEL-134763, RHEL-136289
* Wed Jan 21 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.30.1.el10_1]

View file

@ -176,15 +176,15 @@ Summary: The Linux kernel
%define specrpmversion 6.12.0
%define specversion 6.12.0
%define patchversion 6.12
%define pkgrelease 124.31.1
%define pkgrelease 124.38.1
%define kversion 6
%define tarfile_release 6.12.0-124.31.1.el10_1
%define tarfile_release 6.12.0-124.38.1.el10_1
# This is needed to do merge window version magic
%define patchlevel 12
# This allows pkg_release to have configurable %%{?dist} tag
%define specrelease 124.31.1%{?buildid}%{?dist}
%define specrelease 124.38.1%{?buildid}%{?dist}
# This defines the kabi tarball version
%define kabiversion 6.12.0-124.31.1.el10_1
%define kabiversion 6.12.0-124.38.1.el10_1
# If this variable is set to 1, a bpf selftests build failure will cause a
# fatal kernel package build error
@ -4403,14 +4403,14 @@ fi\
#
#
%changelog
* Wed Feb 04 2026 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-124.31.1
* Tue Feb 17 2026 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-124.38.1
- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert
* Wed Feb 04 2026 Neal Gompa <ngompa@almalinux.org> - 6.12.0-124.31.1
* Tue Feb 17 2026 Neal Gompa <ngompa@almalinux.org> - 6.12.0-124.38.1
- Enable Btrfs support for all kernel variants
* Wed Feb 04 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-124.31.1
* Tue Feb 17 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-124.38.1
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
@ -4421,6 +4421,47 @@ fi\
- kernel/rh_messages.h: enable all disabled pci devices by moving to
unmaintained
* Sat Feb 07 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.38.1.el10_1]
- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}
* Thu Feb 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.37.1.el10_1]
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}
* Tue Feb 03 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.36.1.el10_1]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}
* Sat Jan 31 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.35.1.el10_1]
- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}
* Thu Jan 29 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.34.1.el10_1]
- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task->comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]
* Tue Jan 27 2026 Julio Faracco <jfaracco@redhat.com> [6.12.0-124.33.1.el10_1]
- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}
* Sat Jan 24 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.32.1.el10_1]
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}
* Thu Jan 22 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.31.1.el10_1]
- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
@ -4442,6 +4483,7 @@ fi\
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]
* Wed Jan 21 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.30.1.el10_1]
- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}