diff --git a/compress-vmlinux.sh b/compress-vmlinux.sh deleted file mode 100644 index b6a4d5f..0000000 --- a/compress-vmlinux.sh +++ /dev/null @@ -1,15 +0,0 @@ -#!/bin/bash - -set -x - -# Once the brp script is reasonably widespread, we will remove the specfile -# hack and this script -if test -x /usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux; then - exit 0 -fi -vmlinux=$1 -if test -e "$vmlinux" -a -e "$vmlinux.gz"; then - # Deliberately not using gzip -n; the vmlinux image has a predictable - # timestamp (bnc#880848#c20) - gzip -k -9 -f "$vmlinux" -fi diff --git a/dtb-aarch64.changes b/dtb-aarch64.changes index a300cf5..dfe0bf7 100644 --- a/dtb-aarch64.changes +++ b/dtb-aarch64.changes @@ -1,3 +1,146 @@ +------------------------------------------------------------------- +Mon Aug 18 10:55:27 CEST 2025 - tiwai@suse.de + +- sched/psi: Fix psi_seq initialization (bsc#1248155). +- commit 2dd3707 + +------------------------------------------------------------------- +Thu Aug 14 14:34:25 CEST 2025 - msuchanek@suse.de + +- Move pesign-obs-integration requirement from kernel-syms to kernel devel + subpackage (bsc#1248108). +- commit e707e41 + +------------------------------------------------------------------- +Mon Aug 11 18:50:04 CEST 2025 - tbogendoerfer@suse.de + +- ice, irdma: fix an off by one in error handling code + (bsc#1247712). +- irdma: free iwdev->rf after removing MSI-X (bsc#1247712). +- ice: Fix signedness bug in ice_init_interrupt_scheme() + (bsc#1247712). +- ice: init flow director before RDMA (bsc#1247712). +- ice: simplify VF MSI-X managing (bsc#1247712). +- ice: enable_rdma devlink param (bsc#1247712). +- ice: treat dyn_allowed only as suggestion (bsc#1247712). +- ice, irdma: move interrupts code to irdma (bsc#1247712). +- ice: get rid of num_lan_msix field (bsc#1247712). +- ice: remove splitting MSI-X between features (bsc#1247712). +- ice: devlink PF MSI-X max and min parameter (bsc#1247712). +- ice: count combined queues using Rx/Tx count (bsc#1247712). +- commit 5c830c5 + +------------------------------------------------------------------- +Mon Aug 11 16:20:47 CEST 2025 - krisman@suse.de + +- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred + (CVE-2025-38453 bsc#1247234). + Conflicts: + series.conf +- commit 909d7fe + +------------------------------------------------------------------- +Fri Aug 8 20:22:52 CEST 2025 - krisman@suse.de + +- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU + (CVE-2025-38453 bsc#1247234). +- commit 171360a + +------------------------------------------------------------------- +Fri Aug 8 16:07:55 CEST 2025 - pfalcato@suse.de + +- tls: always refresh the queue when reading sock (CVE-2025-38471 + bsc#1247450). +- commit 2bcb640 + +------------------------------------------------------------------- +Fri Aug 8 12:17:14 CEST 2025 - sjaeckel@suse.de + +- smc: Fix various oops due to inet_sock type confusion + (CVE-2025-38475 bsc#1247308). +- commit 05e8074 + +------------------------------------------------------------------- +Thu Aug 7 19:33:31 CEST 2025 - dsterba@suse.com + +- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374) +- commit cb82edb + +------------------------------------------------------------------- +Wed Aug 6 13:45:04 CEST 2025 - pfalcato@suse.de + +- nvme-tcp: fix selinux denied when calling sock_sendmsg + (bsc#1247497). +- commit 6082643 + +------------------------------------------------------------------- +Tue Aug 5 16:46:07 CEST 2025 - heming.zhao@suse.com + +- md/md-cluster: handle REMOVE message earlier (bsc#1247057). +- commit 8e8eaf1 + +------------------------------------------------------------------- +Mon Aug 4 09:17:26 CEST 2025 - msuchanek@suse.de + +- kernel-syms.spec: Drop old rpm release number hack (bsc#1247172). +- commit b4fa2d1 + +------------------------------------------------------------------- +Fri Aug 1 12:33:52 CEST 2025 - tiwai@suse.de + +- Move upstreamed sched, SCSI and ACPI patches into sorted section +- commit 836e139 + +------------------------------------------------------------------- +Wed Jul 30 13:02:30 CEST 2025 - jack@suse.cz + +- fs: export anon_inode_make_secure_inode() and fix secretmem + LSM bypass (CVE-2025-38396 bsc#1247156). + Conflicts: + series.conf +- commit 4bbdefe + +------------------------------------------------------------------- +Fri Jul 25 17:50:40 CEST 2025 - fdmanana@suse.com + +- btrfs: fix use-after-free when COWing tree bock and tracing + is enabled (bsc#1235645 CVE-2024-56759). +- commit bd41b6c + +------------------------------------------------------------------- +Thu Jul 24 10:53:52 CEST 2025 - tiwai@suse.de + +- rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879) + Put the same workaround to avoid file truncation of vmlinux and co in + kernel-default-base package, too. +- commit 2329734 + +------------------------------------------------------------------- +Wed Jul 23 15:22:54 CEST 2025 - petr.pavlu@suse.com + +- rpm/kernel-binary.spec.in: Ignore return code from ksymtypes compare + When using suse-kabi-tools, the RPM build invokes 'ksymvers compare' to + compare the resulting symbol CRCs with the reference data. If the values + differ, it then invokes 'ksymtypes compare' to provide a detailed report + explaining why the symbols differ. The build expects the latter + 'ksymtypes compare' command to always return zero, even if the two + compared kABI corpuses are different. + This is currently the case for 'ksymtypes compare'. However, I plan to + update the command to return a non-zero code when the comparison detects + any differences. This should ensure consistent behavior with 'ksymvers + compare'. + Since the build uses 'ksymtypes compare' only for more detailed + diagnostics, ignore its return code. +- commit 5ac1381 + +------------------------------------------------------------------- +Wed Jul 23 14:27:11 CEST 2025 - sjaeckel@suse.de + +- net: atm: fix /proc/net/atm/lec handling (CVE-2025-38180 + bsc#1245970). +- net: atm: add lec_mutex (CVE-2025-38323 bsc#1246473). +- commit 736dcb9 + ------------------------------------------------------------------- Mon Jul 21 11:16:32 CEST 2025 - tiwai@suse.de @@ -1281,6 +1424,12 @@ Wed Jul 9 16:28:15 CEST 2025 - tiwai@suse.de bsc#1245682). - commit 79e6efd +------------------------------------------------------------------- +Wed Jul 9 14:11:01 CEST 2025 - tiwai@suse.de + +- rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337) +- commit 630f139 + ------------------------------------------------------------------- Wed Jul 9 13:08:41 CEST 2025 - ailiop@suse.com @@ -1997,6 +2146,14 @@ Mon Jun 30 14:29:43 CEST 2025 - ykaukab@suse.de current kABI workaround patches before the update. - commit 0c9b3ad +------------------------------------------------------------------- +Mon Jun 30 13:57:15 CEST 2025 - msuchanek@suse.de + +- kernel-obs-qa: Do not depend on srchash when qemu emulation is used + In this case the dependency is never fulfilled + Fixes: 485ae1da2b88 ("kernel-obs-qa: Use srchash for dependency as well") +- commit a840f87 + ------------------------------------------------------------------- Mon Jun 30 13:52:59 CEST 2025 - jgross@suse.com @@ -3100,6 +3257,31 @@ Mon Jun 23 14:08:20 CEST 2025 - neelx@suse.com btrfs_log_inode_parent() (bsc#1245068). - commit 188ca65 +------------------------------------------------------------------- +Mon Jun 23 14:00:47 CEST 2025 - msuchanek@suse.de + +- Remove host-memcpy-hack.h + This might have been usefult at some point but we have more things that + depend on specific library versions today. +- commit 0396c23 + +------------------------------------------------------------------- +Mon Jun 23 13:58:27 CEST 2025 - msuchanek@suse.de + +- Remove compress-vmlinux.sh + /usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux was added in + pesign-obs-integration during SLE12 RC. This workaround can be removed. +- commit 19caac0 + +------------------------------------------------------------------- +Mon Jun 23 13:53:18 CEST 2025 - msuchanek@suse.de + +- Remove try-disable-staging-driver + The config for linux-next is autogenerated from master config, and + defaults filled for missing options. This is unlikely to enable any + staging driver in the first place. +- commit a6f21ed + ------------------------------------------------------------------- Mon Jun 23 12:27:01 CEST 2025 - wqu@suse.com diff --git a/dtb-aarch64.spec b/dtb-aarch64.spec index 38d074a..9df11f3 100644 --- a/dtb-aarch64.spec +++ b/dtb-aarch64.spec @@ -22,12 +22,12 @@ %include %_sourcedir/kernel-spec-macros -%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) +%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: dtb-aarch64 Version: 6.12.0 %if 0%{?is_kotd} -Release: .gb00eabe +Release: .g1147121 %else Release: 0 %endif @@ -76,11 +76,8 @@ Source62: old-flavors Source63: arch-symbols Source64: package-descriptions Source65: kernel-spec-macros -Source68: host-memcpy-hack.h -Source69: try-disable-staging-driver Source70: kernel-obs-build.spec.in Source71: kernel-obs-qa.spec.in -Source72: compress-vmlinux.sh Source73: dtb.spec.in.in Source74: mkspec-dtb Source75: release-projects @@ -144,11 +141,8 @@ NoSource: 62 NoSource: 63 NoSource: 64 NoSource: 65 -NoSource: 68 -NoSource: 69 NoSource: 70 NoSource: 71 -NoSource: 72 NoSource: 73 NoSource: 74 NoSource: 75 diff --git a/host-memcpy-hack.h b/host-memcpy-hack.h deleted file mode 100644 index fa90a33..0000000 --- a/host-memcpy-hack.h +++ /dev/null @@ -1,7 +0,0 @@ -#ifdef __x86_64__ -/* - * Force the linker to use the older memcpy variant, so that the user programs - * work on older systems - */ -__asm__(".symver memcpy,memcpy@GLIBC_2.2.5"); -#endif diff --git a/kabi.tar.bz2 b/kabi.tar.bz2 index dfcc9f7..987a331 100644 --- a/kabi.tar.bz2 +++ b/kabi.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:70116bcf05c3e608981f2f160536c2232594e29d75c12de0e29f44fbce23dcbc -size 10629009 +oid sha256:2ef2efd0757d1f89ab97a42169ae1068bdb5816c8e268545d1cfdaba2cbbee72 +size 10629438 diff --git a/kernel-64kb.changes b/kernel-64kb.changes index a300cf5..dfe0bf7 100644 --- a/kernel-64kb.changes +++ b/kernel-64kb.changes @@ -1,3 +1,146 @@ +------------------------------------------------------------------- +Mon Aug 18 10:55:27 CEST 2025 - tiwai@suse.de + +- sched/psi: Fix psi_seq initialization (bsc#1248155). +- commit 2dd3707 + +------------------------------------------------------------------- +Thu Aug 14 14:34:25 CEST 2025 - msuchanek@suse.de + +- Move pesign-obs-integration requirement from kernel-syms to kernel devel + subpackage (bsc#1248108). +- commit e707e41 + +------------------------------------------------------------------- +Mon Aug 11 18:50:04 CEST 2025 - tbogendoerfer@suse.de + +- ice, irdma: fix an off by one in error handling code + (bsc#1247712). +- irdma: free iwdev->rf after removing MSI-X (bsc#1247712). +- ice: Fix signedness bug in ice_init_interrupt_scheme() + (bsc#1247712). +- ice: init flow director before RDMA (bsc#1247712). +- ice: simplify VF MSI-X managing (bsc#1247712). +- ice: enable_rdma devlink param (bsc#1247712). +- ice: treat dyn_allowed only as suggestion (bsc#1247712). +- ice, irdma: move interrupts code to irdma (bsc#1247712). +- ice: get rid of num_lan_msix field (bsc#1247712). +- ice: remove splitting MSI-X between features (bsc#1247712). +- ice: devlink PF MSI-X max and min parameter (bsc#1247712). +- ice: count combined queues using Rx/Tx count (bsc#1247712). +- commit 5c830c5 + +------------------------------------------------------------------- +Mon Aug 11 16:20:47 CEST 2025 - krisman@suse.de + +- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred + (CVE-2025-38453 bsc#1247234). + Conflicts: + series.conf +- commit 909d7fe + +------------------------------------------------------------------- +Fri Aug 8 20:22:52 CEST 2025 - krisman@suse.de + +- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU + (CVE-2025-38453 bsc#1247234). +- commit 171360a + +------------------------------------------------------------------- +Fri Aug 8 16:07:55 CEST 2025 - pfalcato@suse.de + +- tls: always refresh the queue when reading sock (CVE-2025-38471 + bsc#1247450). +- commit 2bcb640 + +------------------------------------------------------------------- +Fri Aug 8 12:17:14 CEST 2025 - sjaeckel@suse.de + +- smc: Fix various oops due to inet_sock type confusion + (CVE-2025-38475 bsc#1247308). +- commit 05e8074 + +------------------------------------------------------------------- +Thu Aug 7 19:33:31 CEST 2025 - dsterba@suse.com + +- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374) +- commit cb82edb + +------------------------------------------------------------------- +Wed Aug 6 13:45:04 CEST 2025 - pfalcato@suse.de + +- nvme-tcp: fix selinux denied when calling sock_sendmsg + (bsc#1247497). +- commit 6082643 + +------------------------------------------------------------------- +Tue Aug 5 16:46:07 CEST 2025 - heming.zhao@suse.com + +- md/md-cluster: handle REMOVE message earlier (bsc#1247057). +- commit 8e8eaf1 + +------------------------------------------------------------------- +Mon Aug 4 09:17:26 CEST 2025 - msuchanek@suse.de + +- kernel-syms.spec: Drop old rpm release number hack (bsc#1247172). +- commit b4fa2d1 + +------------------------------------------------------------------- +Fri Aug 1 12:33:52 CEST 2025 - tiwai@suse.de + +- Move upstreamed sched, SCSI and ACPI patches into sorted section +- commit 836e139 + +------------------------------------------------------------------- +Wed Jul 30 13:02:30 CEST 2025 - jack@suse.cz + +- fs: export anon_inode_make_secure_inode() and fix secretmem + LSM bypass (CVE-2025-38396 bsc#1247156). + Conflicts: + series.conf +- commit 4bbdefe + +------------------------------------------------------------------- +Fri Jul 25 17:50:40 CEST 2025 - fdmanana@suse.com + +- btrfs: fix use-after-free when COWing tree bock and tracing + is enabled (bsc#1235645 CVE-2024-56759). +- commit bd41b6c + +------------------------------------------------------------------- +Thu Jul 24 10:53:52 CEST 2025 - tiwai@suse.de + +- rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879) + Put the same workaround to avoid file truncation of vmlinux and co in + kernel-default-base package, too. +- commit 2329734 + +------------------------------------------------------------------- +Wed Jul 23 15:22:54 CEST 2025 - petr.pavlu@suse.com + +- rpm/kernel-binary.spec.in: Ignore return code from ksymtypes compare + When using suse-kabi-tools, the RPM build invokes 'ksymvers compare' to + compare the resulting symbol CRCs with the reference data. If the values + differ, it then invokes 'ksymtypes compare' to provide a detailed report + explaining why the symbols differ. The build expects the latter + 'ksymtypes compare' command to always return zero, even if the two + compared kABI corpuses are different. + This is currently the case for 'ksymtypes compare'. However, I plan to + update the command to return a non-zero code when the comparison detects + any differences. This should ensure consistent behavior with 'ksymvers + compare'. + Since the build uses 'ksymtypes compare' only for more detailed + diagnostics, ignore its return code. +- commit 5ac1381 + +------------------------------------------------------------------- +Wed Jul 23 14:27:11 CEST 2025 - sjaeckel@suse.de + +- net: atm: fix /proc/net/atm/lec handling (CVE-2025-38180 + bsc#1245970). +- net: atm: add lec_mutex (CVE-2025-38323 bsc#1246473). +- commit 736dcb9 + ------------------------------------------------------------------- Mon Jul 21 11:16:32 CEST 2025 - tiwai@suse.de @@ -1281,6 +1424,12 @@ Wed Jul 9 16:28:15 CEST 2025 - tiwai@suse.de bsc#1245682). - commit 79e6efd +------------------------------------------------------------------- +Wed Jul 9 14:11:01 CEST 2025 - tiwai@suse.de + +- rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337) +- commit 630f139 + ------------------------------------------------------------------- Wed Jul 9 13:08:41 CEST 2025 - ailiop@suse.com @@ -1997,6 +2146,14 @@ Mon Jun 30 14:29:43 CEST 2025 - ykaukab@suse.de current kABI workaround patches before the update. - commit 0c9b3ad +------------------------------------------------------------------- +Mon Jun 30 13:57:15 CEST 2025 - msuchanek@suse.de + +- kernel-obs-qa: Do not depend on srchash when qemu emulation is used + In this case the dependency is never fulfilled + Fixes: 485ae1da2b88 ("kernel-obs-qa: Use srchash for dependency as well") +- commit a840f87 + ------------------------------------------------------------------- Mon Jun 30 13:52:59 CEST 2025 - jgross@suse.com @@ -3100,6 +3257,31 @@ Mon Jun 23 14:08:20 CEST 2025 - neelx@suse.com btrfs_log_inode_parent() (bsc#1245068). - commit 188ca65 +------------------------------------------------------------------- +Mon Jun 23 14:00:47 CEST 2025 - msuchanek@suse.de + +- Remove host-memcpy-hack.h + This might have been usefult at some point but we have more things that + depend on specific library versions today. +- commit 0396c23 + +------------------------------------------------------------------- +Mon Jun 23 13:58:27 CEST 2025 - msuchanek@suse.de + +- Remove compress-vmlinux.sh + /usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux was added in + pesign-obs-integration during SLE12 RC. This workaround can be removed. +- commit 19caac0 + +------------------------------------------------------------------- +Mon Jun 23 13:53:18 CEST 2025 - msuchanek@suse.de + +- Remove try-disable-staging-driver + The config for linux-next is autogenerated from master config, and + defaults filled for missing options. This is unlikely to enable any + staging driver in the first place. +- commit a6f21ed + ------------------------------------------------------------------- Mon Jun 23 12:27:01 CEST 2025 - wqu@suse.com diff --git a/kernel-64kb.spec b/kernel-64kb.spec index c3d3352..febf324 100644 --- a/kernel-64kb.spec +++ b/kernel-64kb.spec @@ -19,7 +19,7 @@ %define srcversion 6.12 %define patchversion 6.12.0 -%define git_commit b00eabe67e9bafdd23c53dd65d263cbf6dc806fa +%define git_commit 11471211562ff65b726639c1a6165034d305f95a %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -37,12 +37,12 @@ %include %_sourcedir/kernel-spec-macros -%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) +%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-64kb Version: 6.12.0 %if 0%{?is_kotd} -Release: .gb00eabe +Release: .g1147121 %else Release: 0 %endif @@ -202,11 +202,8 @@ Source62: old-flavors Source63: arch-symbols Source64: package-descriptions Source65: kernel-spec-macros -Source68: host-memcpy-hack.h -Source69: try-disable-staging-driver Source70: kernel-obs-build.spec.in Source71: kernel-obs-qa.spec.in -Source72: compress-vmlinux.sh Source73: dtb.spec.in.in Source74: mkspec-dtb Source75: release-projects @@ -270,11 +267,8 @@ NoSource: 62 NoSource: 63 NoSource: 64 NoSource: 65 -NoSource: 68 -NoSource: 69 NoSource: 70 NoSource: 71 -NoSource: 72 NoSource: 73 NoSource: 74 NoSource: 75 @@ -763,6 +757,7 @@ Provides: %name-devel = %version-%source_rel Provides: multiversion(kernel) %if ! %build_vanilla && ! %vanilla_only Requires: kernel-devel%variant = %version-%source_rel +Requires: pesign-obs-integration Recommends: make Recommends: gcc Recommends: perl @@ -1239,7 +1234,6 @@ export KBUILD_VERBOSE=0 export KBUILD_SYMTYPES=1 export KBUILD_BUILD_USER=geeko export KBUILD_BUILD_HOST=buildhost -export HOST_EXTRACFLAGS="-include %_sourcedir/host-memcpy-hack.h" EOF source .kernel-binary.spec.buildenv @@ -1406,20 +1400,11 @@ source .kernel-binary.spec.buildenv mkdir -p %_topdir/OTHER log=%_topdir/OTHER/make-stderr.log -while true; do - make all $MAKE_ARGS 2> >(tee "$log") - if test "${PIPESTATUS[0]}" -eq 0; then - break - fi - # In the linux-next and vanilla branches, we try harder to build a - # package. - if test 0%vanilla_only -gt 0 && - %_sourcedir/try-disable-staging-driver "$log"; then - echo "Retrying make" - else - exit 1 - fi -done +make all $MAKE_ARGS 2> >(tee "$log") +result="${PIPESTATUS[0]}" +if ! test "$result" -eq 0; then + exit "$result" +fi %if 0%{?klp_ipa_clones} && %generate_compile_commands # Generate compile_commands.json @@ -1455,17 +1440,9 @@ add_vmlinux() # mark the file 0644 again chmod +x %buildroot/$vmlinux if test $1 == "--compressed"; then - # avoid using the gzip -n option to make kdump happy (bnc#880848#c20) ts="$(head -n1 %_sourcedir/source-timestamp)" touch -d "$ts" %buildroot/$vmlinux touch %buildroot/$vmlinux.%{compress_vmlinux} -%if 0%{?__debug_package:1} - # compress the vmlinux image after find-debuginfo.sh has processed it -%global __debug_install_post %__debug_install_post \ -%_sourcedir/compress-vmlinux.sh %buildroot/boot/vmlinux-%kernelrelease-%build_flavor -%else - %_sourcedir/compress-vmlinux.sh %buildroot/$vmlinux -%endif ghost_vmlinux=true else ghost_vmlinux=false @@ -1706,7 +1683,7 @@ if [ %CONFIG_MODULES = y ]; then ksymtypes compare %{?_smp_mflags} \ --filter-symbol-list=%my_builddir/changed-exports \ %my_builddir/kabi/%cpu_arch/symtypes-%build_flavor \ - %my_builddir/symtypes-%build_flavor + %my_builddir/symtypes-%build_flavor || true %endif # %ignore_kabi_badness is defined in the Kernel:* projects in the diff --git a/kernel-binary.spec.in b/kernel-binary.spec.in index da7b782..d9e50e6 100644 --- a/kernel-binary.spec.in +++ b/kernel-binary.spec.in @@ -571,6 +571,7 @@ Provides: %name-devel = %version-%source_rel Provides: multiversion(kernel) %if ! %build_vanilla && ! %vanilla_only Requires: kernel-devel%variant = %version-%source_rel +Requires: pesign-obs-integration Recommends: make Recommends: gcc Recommends: perl @@ -819,7 +820,6 @@ export KBUILD_VERBOSE=0 export KBUILD_SYMTYPES=1 export KBUILD_BUILD_USER=geeko export KBUILD_BUILD_HOST=buildhost -export HOST_EXTRACFLAGS="-include %_sourcedir/host-memcpy-hack.h" EOF source .kernel-binary.spec.buildenv @@ -986,20 +986,11 @@ source .kernel-binary.spec.buildenv mkdir -p %_topdir/OTHER log=%_topdir/OTHER/make-stderr.log -while true; do - make all $MAKE_ARGS 2> >(tee "$log") - if test "${PIPESTATUS[0]}" -eq 0; then - break - fi - # In the linux-next and vanilla branches, we try harder to build a - # package. - if test 0%vanilla_only -gt 0 && - %_sourcedir/try-disable-staging-driver "$log"; then - echo "Retrying make" - else - exit 1 - fi -done +make all $MAKE_ARGS 2> >(tee "$log") +result="${PIPESTATUS[0]}" +if ! test "$result" -eq 0; then + exit "$result" +fi %if 0%{?klp_ipa_clones} && %generate_compile_commands # Generate compile_commands.json @@ -1035,17 +1026,9 @@ add_vmlinux() # mark the file 0644 again chmod +x %buildroot/$vmlinux if test $1 == "--compressed"; then - # avoid using the gzip -n option to make kdump happy (bnc#880848#c20) ts="$(head -n1 %_sourcedir/source-timestamp)" touch -d "$ts" %buildroot/$vmlinux touch %buildroot/$vmlinux.%{compress_vmlinux} -%if 0%{?__debug_package:1} - # compress the vmlinux image after find-debuginfo.sh has processed it -%global __debug_install_post %__debug_install_post \ -%_sourcedir/compress-vmlinux.sh %buildroot/boot/vmlinux-%kernelrelease-%build_flavor -%else - %_sourcedir/compress-vmlinux.sh %buildroot/$vmlinux -%endif ghost_vmlinux=true else ghost_vmlinux=false @@ -1286,7 +1269,7 @@ if [ %CONFIG_MODULES = y ]; then ksymtypes compare %{?_smp_mflags} \ --filter-symbol-list=%my_builddir/changed-exports \ %my_builddir/kabi/%cpu_arch/symtypes-%build_flavor \ - %my_builddir/symtypes-%build_flavor + %my_builddir/symtypes-%build_flavor || true %endif # %ignore_kabi_badness is defined in the Kernel:* projects in the diff --git a/kernel-default.changes b/kernel-default.changes index a300cf5..dfe0bf7 100644 --- a/kernel-default.changes +++ b/kernel-default.changes @@ -1,3 +1,146 @@ +------------------------------------------------------------------- +Mon Aug 18 10:55:27 CEST 2025 - tiwai@suse.de + +- sched/psi: Fix psi_seq initialization (bsc#1248155). +- commit 2dd3707 + +------------------------------------------------------------------- +Thu Aug 14 14:34:25 CEST 2025 - msuchanek@suse.de + +- Move pesign-obs-integration requirement from kernel-syms to kernel devel + subpackage (bsc#1248108). +- commit e707e41 + +------------------------------------------------------------------- +Mon Aug 11 18:50:04 CEST 2025 - tbogendoerfer@suse.de + +- ice, irdma: fix an off by one in error handling code + (bsc#1247712). +- irdma: free iwdev->rf after removing MSI-X (bsc#1247712). +- ice: Fix signedness bug in ice_init_interrupt_scheme() + (bsc#1247712). +- ice: init flow director before RDMA (bsc#1247712). +- ice: simplify VF MSI-X managing (bsc#1247712). +- ice: enable_rdma devlink param (bsc#1247712). +- ice: treat dyn_allowed only as suggestion (bsc#1247712). +- ice, irdma: move interrupts code to irdma (bsc#1247712). +- ice: get rid of num_lan_msix field (bsc#1247712). +- ice: remove splitting MSI-X between features (bsc#1247712). +- ice: devlink PF MSI-X max and min parameter (bsc#1247712). +- ice: count combined queues using Rx/Tx count (bsc#1247712). +- commit 5c830c5 + +------------------------------------------------------------------- +Mon Aug 11 16:20:47 CEST 2025 - krisman@suse.de + +- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred + (CVE-2025-38453 bsc#1247234). + Conflicts: + series.conf +- commit 909d7fe + +------------------------------------------------------------------- +Fri Aug 8 20:22:52 CEST 2025 - krisman@suse.de + +- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU + (CVE-2025-38453 bsc#1247234). +- commit 171360a + +------------------------------------------------------------------- +Fri Aug 8 16:07:55 CEST 2025 - pfalcato@suse.de + +- tls: always refresh the queue when reading sock (CVE-2025-38471 + bsc#1247450). +- commit 2bcb640 + +------------------------------------------------------------------- +Fri Aug 8 12:17:14 CEST 2025 - sjaeckel@suse.de + +- smc: Fix various oops due to inet_sock type confusion + (CVE-2025-38475 bsc#1247308). +- commit 05e8074 + +------------------------------------------------------------------- +Thu Aug 7 19:33:31 CEST 2025 - dsterba@suse.com + +- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374) +- commit cb82edb + +------------------------------------------------------------------- +Wed Aug 6 13:45:04 CEST 2025 - pfalcato@suse.de + +- nvme-tcp: fix selinux denied when calling sock_sendmsg + (bsc#1247497). +- commit 6082643 + +------------------------------------------------------------------- +Tue Aug 5 16:46:07 CEST 2025 - heming.zhao@suse.com + +- md/md-cluster: handle REMOVE message earlier (bsc#1247057). +- commit 8e8eaf1 + +------------------------------------------------------------------- +Mon Aug 4 09:17:26 CEST 2025 - msuchanek@suse.de + +- kernel-syms.spec: Drop old rpm release number hack (bsc#1247172). +- commit b4fa2d1 + +------------------------------------------------------------------- +Fri Aug 1 12:33:52 CEST 2025 - tiwai@suse.de + +- Move upstreamed sched, SCSI and ACPI patches into sorted section +- commit 836e139 + +------------------------------------------------------------------- +Wed Jul 30 13:02:30 CEST 2025 - jack@suse.cz + +- fs: export anon_inode_make_secure_inode() and fix secretmem + LSM bypass (CVE-2025-38396 bsc#1247156). + Conflicts: + series.conf +- commit 4bbdefe + +------------------------------------------------------------------- +Fri Jul 25 17:50:40 CEST 2025 - fdmanana@suse.com + +- btrfs: fix use-after-free when COWing tree bock and tracing + is enabled (bsc#1235645 CVE-2024-56759). +- commit bd41b6c + +------------------------------------------------------------------- +Thu Jul 24 10:53:52 CEST 2025 - tiwai@suse.de + +- rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879) + Put the same workaround to avoid file truncation of vmlinux and co in + kernel-default-base package, too. +- commit 2329734 + +------------------------------------------------------------------- +Wed Jul 23 15:22:54 CEST 2025 - petr.pavlu@suse.com + +- rpm/kernel-binary.spec.in: Ignore return code from ksymtypes compare + When using suse-kabi-tools, the RPM build invokes 'ksymvers compare' to + compare the resulting symbol CRCs with the reference data. If the values + differ, it then invokes 'ksymtypes compare' to provide a detailed report + explaining why the symbols differ. The build expects the latter + 'ksymtypes compare' command to always return zero, even if the two + compared kABI corpuses are different. + This is currently the case for 'ksymtypes compare'. However, I plan to + update the command to return a non-zero code when the comparison detects + any differences. This should ensure consistent behavior with 'ksymvers + compare'. + Since the build uses 'ksymtypes compare' only for more detailed + diagnostics, ignore its return code. +- commit 5ac1381 + +------------------------------------------------------------------- +Wed Jul 23 14:27:11 CEST 2025 - sjaeckel@suse.de + +- net: atm: fix /proc/net/atm/lec handling (CVE-2025-38180 + bsc#1245970). +- net: atm: add lec_mutex (CVE-2025-38323 bsc#1246473). +- commit 736dcb9 + ------------------------------------------------------------------- Mon Jul 21 11:16:32 CEST 2025 - tiwai@suse.de @@ -1281,6 +1424,12 @@ Wed Jul 9 16:28:15 CEST 2025 - tiwai@suse.de bsc#1245682). - commit 79e6efd +------------------------------------------------------------------- +Wed Jul 9 14:11:01 CEST 2025 - tiwai@suse.de + +- rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337) +- commit 630f139 + ------------------------------------------------------------------- Wed Jul 9 13:08:41 CEST 2025 - ailiop@suse.com @@ -1997,6 +2146,14 @@ Mon Jun 30 14:29:43 CEST 2025 - ykaukab@suse.de current kABI workaround patches before the update. - commit 0c9b3ad +------------------------------------------------------------------- +Mon Jun 30 13:57:15 CEST 2025 - msuchanek@suse.de + +- kernel-obs-qa: Do not depend on srchash when qemu emulation is used + In this case the dependency is never fulfilled + Fixes: 485ae1da2b88 ("kernel-obs-qa: Use srchash for dependency as well") +- commit a840f87 + ------------------------------------------------------------------- Mon Jun 30 13:52:59 CEST 2025 - jgross@suse.com @@ -3100,6 +3257,31 @@ Mon Jun 23 14:08:20 CEST 2025 - neelx@suse.com btrfs_log_inode_parent() (bsc#1245068). - commit 188ca65 +------------------------------------------------------------------- +Mon Jun 23 14:00:47 CEST 2025 - msuchanek@suse.de + +- Remove host-memcpy-hack.h + This might have been usefult at some point but we have more things that + depend on specific library versions today. +- commit 0396c23 + +------------------------------------------------------------------- +Mon Jun 23 13:58:27 CEST 2025 - msuchanek@suse.de + +- Remove compress-vmlinux.sh + /usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux was added in + pesign-obs-integration during SLE12 RC. This workaround can be removed. +- commit 19caac0 + +------------------------------------------------------------------- +Mon Jun 23 13:53:18 CEST 2025 - msuchanek@suse.de + +- Remove try-disable-staging-driver + The config for linux-next is autogenerated from master config, and + defaults filled for missing options. This is unlikely to enable any + staging driver in the first place. +- commit a6f21ed + ------------------------------------------------------------------- Mon Jun 23 12:27:01 CEST 2025 - wqu@suse.com diff --git a/kernel-default.spec b/kernel-default.spec index 083dc95..da8278c 100644 --- a/kernel-default.spec +++ b/kernel-default.spec @@ -19,7 +19,7 @@ %define srcversion 6.12 %define patchversion 6.12.0 -%define git_commit b00eabe67e9bafdd23c53dd65d263cbf6dc806fa +%define git_commit 11471211562ff65b726639c1a6165034d305f95a %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -37,12 +37,12 @@ %include %_sourcedir/kernel-spec-macros -%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) +%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-default Version: 6.12.0 %if 0%{?is_kotd} -Release: .gb00eabe +Release: .g1147121 %else Release: 0 %endif @@ -202,11 +202,8 @@ Source62: old-flavors Source63: arch-symbols Source64: package-descriptions Source65: kernel-spec-macros -Source68: host-memcpy-hack.h -Source69: try-disable-staging-driver Source70: kernel-obs-build.spec.in Source71: kernel-obs-qa.spec.in -Source72: compress-vmlinux.sh Source73: dtb.spec.in.in Source74: mkspec-dtb Source75: release-projects @@ -270,11 +267,8 @@ NoSource: 62 NoSource: 63 NoSource: 64 NoSource: 65 -NoSource: 68 -NoSource: 69 NoSource: 70 NoSource: 71 -NoSource: 72 NoSource: 73 NoSource: 74 NoSource: 75 @@ -831,6 +825,7 @@ Provides: %name-devel = %version-%source_rel Provides: multiversion(kernel) %if ! %build_vanilla && ! %vanilla_only Requires: kernel-devel%variant = %version-%source_rel +Requires: pesign-obs-integration Recommends: make Recommends: gcc Recommends: perl @@ -1323,7 +1318,6 @@ export KBUILD_VERBOSE=0 export KBUILD_SYMTYPES=1 export KBUILD_BUILD_USER=geeko export KBUILD_BUILD_HOST=buildhost -export HOST_EXTRACFLAGS="-include %_sourcedir/host-memcpy-hack.h" EOF source .kernel-binary.spec.buildenv @@ -1490,20 +1484,11 @@ source .kernel-binary.spec.buildenv mkdir -p %_topdir/OTHER log=%_topdir/OTHER/make-stderr.log -while true; do - make all $MAKE_ARGS 2> >(tee "$log") - if test "${PIPESTATUS[0]}" -eq 0; then - break - fi - # In the linux-next and vanilla branches, we try harder to build a - # package. - if test 0%vanilla_only -gt 0 && - %_sourcedir/try-disable-staging-driver "$log"; then - echo "Retrying make" - else - exit 1 - fi -done +make all $MAKE_ARGS 2> >(tee "$log") +result="${PIPESTATUS[0]}" +if ! test "$result" -eq 0; then + exit "$result" +fi %if 0%{?klp_ipa_clones} && %generate_compile_commands # Generate compile_commands.json @@ -1539,17 +1524,9 @@ add_vmlinux() # mark the file 0644 again chmod +x %buildroot/$vmlinux if test $1 == "--compressed"; then - # avoid using the gzip -n option to make kdump happy (bnc#880848#c20) ts="$(head -n1 %_sourcedir/source-timestamp)" touch -d "$ts" %buildroot/$vmlinux touch %buildroot/$vmlinux.%{compress_vmlinux} -%if 0%{?__debug_package:1} - # compress the vmlinux image after find-debuginfo.sh has processed it -%global __debug_install_post %__debug_install_post \ -%_sourcedir/compress-vmlinux.sh %buildroot/boot/vmlinux-%kernelrelease-%build_flavor -%else - %_sourcedir/compress-vmlinux.sh %buildroot/$vmlinux -%endif ghost_vmlinux=true else ghost_vmlinux=false @@ -1790,7 +1767,7 @@ if [ %CONFIG_MODULES = y ]; then ksymtypes compare %{?_smp_mflags} \ --filter-symbol-list=%my_builddir/changed-exports \ %my_builddir/kabi/%cpu_arch/symtypes-%build_flavor \ - %my_builddir/symtypes-%build_flavor + %my_builddir/symtypes-%build_flavor || true %endif # %ignore_kabi_badness is defined in the Kernel:* projects in the diff --git a/kernel-docs.changes b/kernel-docs.changes index a300cf5..dfe0bf7 100644 --- a/kernel-docs.changes +++ b/kernel-docs.changes @@ -1,3 +1,146 @@ +------------------------------------------------------------------- +Mon Aug 18 10:55:27 CEST 2025 - tiwai@suse.de + +- sched/psi: Fix psi_seq initialization (bsc#1248155). +- commit 2dd3707 + +------------------------------------------------------------------- +Thu Aug 14 14:34:25 CEST 2025 - msuchanek@suse.de + +- Move pesign-obs-integration requirement from kernel-syms to kernel devel + subpackage (bsc#1248108). +- commit e707e41 + +------------------------------------------------------------------- +Mon Aug 11 18:50:04 CEST 2025 - tbogendoerfer@suse.de + +- ice, irdma: fix an off by one in error handling code + (bsc#1247712). +- irdma: free iwdev->rf after removing MSI-X (bsc#1247712). +- ice: Fix signedness bug in ice_init_interrupt_scheme() + (bsc#1247712). +- ice: init flow director before RDMA (bsc#1247712). +- ice: simplify VF MSI-X managing (bsc#1247712). +- ice: enable_rdma devlink param (bsc#1247712). +- ice: treat dyn_allowed only as suggestion (bsc#1247712). +- ice, irdma: move interrupts code to irdma (bsc#1247712). +- ice: get rid of num_lan_msix field (bsc#1247712). +- ice: remove splitting MSI-X between features (bsc#1247712). +- ice: devlink PF MSI-X max and min parameter (bsc#1247712). +- ice: count combined queues using Rx/Tx count (bsc#1247712). +- commit 5c830c5 + +------------------------------------------------------------------- +Mon Aug 11 16:20:47 CEST 2025 - krisman@suse.de + +- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred + (CVE-2025-38453 bsc#1247234). + Conflicts: + series.conf +- commit 909d7fe + +------------------------------------------------------------------- +Fri Aug 8 20:22:52 CEST 2025 - krisman@suse.de + +- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU + (CVE-2025-38453 bsc#1247234). +- commit 171360a + +------------------------------------------------------------------- +Fri Aug 8 16:07:55 CEST 2025 - pfalcato@suse.de + +- tls: always refresh the queue when reading sock (CVE-2025-38471 + bsc#1247450). +- commit 2bcb640 + +------------------------------------------------------------------- +Fri Aug 8 12:17:14 CEST 2025 - sjaeckel@suse.de + +- smc: Fix various oops due to inet_sock type confusion + (CVE-2025-38475 bsc#1247308). +- commit 05e8074 + +------------------------------------------------------------------- +Thu Aug 7 19:33:31 CEST 2025 - dsterba@suse.com + +- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374) +- commit cb82edb + +------------------------------------------------------------------- +Wed Aug 6 13:45:04 CEST 2025 - pfalcato@suse.de + +- nvme-tcp: fix selinux denied when calling sock_sendmsg + (bsc#1247497). +- commit 6082643 + +------------------------------------------------------------------- +Tue Aug 5 16:46:07 CEST 2025 - heming.zhao@suse.com + +- md/md-cluster: handle REMOVE message earlier (bsc#1247057). +- commit 8e8eaf1 + +------------------------------------------------------------------- +Mon Aug 4 09:17:26 CEST 2025 - msuchanek@suse.de + +- kernel-syms.spec: Drop old rpm release number hack (bsc#1247172). +- commit b4fa2d1 + +------------------------------------------------------------------- +Fri Aug 1 12:33:52 CEST 2025 - tiwai@suse.de + +- Move upstreamed sched, SCSI and ACPI patches into sorted section +- commit 836e139 + +------------------------------------------------------------------- +Wed Jul 30 13:02:30 CEST 2025 - jack@suse.cz + +- fs: export anon_inode_make_secure_inode() and fix secretmem + LSM bypass (CVE-2025-38396 bsc#1247156). + Conflicts: + series.conf +- commit 4bbdefe + +------------------------------------------------------------------- +Fri Jul 25 17:50:40 CEST 2025 - fdmanana@suse.com + +- btrfs: fix use-after-free when COWing tree bock and tracing + is enabled (bsc#1235645 CVE-2024-56759). +- commit bd41b6c + +------------------------------------------------------------------- +Thu Jul 24 10:53:52 CEST 2025 - tiwai@suse.de + +- rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879) + Put the same workaround to avoid file truncation of vmlinux and co in + kernel-default-base package, too. +- commit 2329734 + +------------------------------------------------------------------- +Wed Jul 23 15:22:54 CEST 2025 - petr.pavlu@suse.com + +- rpm/kernel-binary.spec.in: Ignore return code from ksymtypes compare + When using suse-kabi-tools, the RPM build invokes 'ksymvers compare' to + compare the resulting symbol CRCs with the reference data. If the values + differ, it then invokes 'ksymtypes compare' to provide a detailed report + explaining why the symbols differ. The build expects the latter + 'ksymtypes compare' command to always return zero, even if the two + compared kABI corpuses are different. + This is currently the case for 'ksymtypes compare'. However, I plan to + update the command to return a non-zero code when the comparison detects + any differences. This should ensure consistent behavior with 'ksymvers + compare'. + Since the build uses 'ksymtypes compare' only for more detailed + diagnostics, ignore its return code. +- commit 5ac1381 + +------------------------------------------------------------------- +Wed Jul 23 14:27:11 CEST 2025 - sjaeckel@suse.de + +- net: atm: fix /proc/net/atm/lec handling (CVE-2025-38180 + bsc#1245970). +- net: atm: add lec_mutex (CVE-2025-38323 bsc#1246473). +- commit 736dcb9 + ------------------------------------------------------------------- Mon Jul 21 11:16:32 CEST 2025 - tiwai@suse.de @@ -1281,6 +1424,12 @@ Wed Jul 9 16:28:15 CEST 2025 - tiwai@suse.de bsc#1245682). - commit 79e6efd +------------------------------------------------------------------- +Wed Jul 9 14:11:01 CEST 2025 - tiwai@suse.de + +- rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337) +- commit 630f139 + ------------------------------------------------------------------- Wed Jul 9 13:08:41 CEST 2025 - ailiop@suse.com @@ -1997,6 +2146,14 @@ Mon Jun 30 14:29:43 CEST 2025 - ykaukab@suse.de current kABI workaround patches before the update. - commit 0c9b3ad +------------------------------------------------------------------- +Mon Jun 30 13:57:15 CEST 2025 - msuchanek@suse.de + +- kernel-obs-qa: Do not depend on srchash when qemu emulation is used + In this case the dependency is never fulfilled + Fixes: 485ae1da2b88 ("kernel-obs-qa: Use srchash for dependency as well") +- commit a840f87 + ------------------------------------------------------------------- Mon Jun 30 13:52:59 CEST 2025 - jgross@suse.com @@ -3100,6 +3257,31 @@ Mon Jun 23 14:08:20 CEST 2025 - neelx@suse.com btrfs_log_inode_parent() (bsc#1245068). - commit 188ca65 +------------------------------------------------------------------- +Mon Jun 23 14:00:47 CEST 2025 - msuchanek@suse.de + +- Remove host-memcpy-hack.h + This might have been usefult at some point but we have more things that + depend on specific library versions today. +- commit 0396c23 + +------------------------------------------------------------------- +Mon Jun 23 13:58:27 CEST 2025 - msuchanek@suse.de + +- Remove compress-vmlinux.sh + /usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux was added in + pesign-obs-integration during SLE12 RC. This workaround can be removed. +- commit 19caac0 + +------------------------------------------------------------------- +Mon Jun 23 13:53:18 CEST 2025 - msuchanek@suse.de + +- Remove try-disable-staging-driver + The config for linux-next is autogenerated from master config, and + defaults filled for missing options. This is unlikely to enable any + staging driver in the first place. +- commit a6f21ed + ------------------------------------------------------------------- Mon Jun 23 12:27:01 CEST 2025 - wqu@suse.com diff --git a/kernel-docs.spec b/kernel-docs.spec index f195b36..80251be 100644 --- a/kernel-docs.spec +++ b/kernel-docs.spec @@ -18,19 +18,19 @@ %define srcversion 6.12 %define patchversion 6.12.0 -%define git_commit b00eabe67e9bafdd23c53dd65d263cbf6dc806fa +%define git_commit 11471211562ff65b726639c1a6165034d305f95a %define variant %{nil} %define build_html 1 %define build_pdf 0 %include %_sourcedir/kernel-spec-macros -%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) +%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-docs Version: 6.12.0 %if 0%{?is_kotd} -Release: .gb00eabe +Release: .g1147121 %else Release: 0 %endif @@ -119,11 +119,8 @@ Source62: old-flavors Source63: arch-symbols Source64: package-descriptions Source65: kernel-spec-macros -Source68: host-memcpy-hack.h -Source69: try-disable-staging-driver Source70: kernel-obs-build.spec.in Source71: kernel-obs-qa.spec.in -Source72: compress-vmlinux.sh Source73: dtb.spec.in.in Source74: mkspec-dtb Source75: release-projects @@ -187,11 +184,8 @@ NoSource: 62 NoSource: 63 NoSource: 64 NoSource: 65 -NoSource: 68 -NoSource: 69 NoSource: 70 NoSource: 71 -NoSource: 72 NoSource: 73 NoSource: 74 NoSource: 75 diff --git a/kernel-kvmsmall.changes b/kernel-kvmsmall.changes index a300cf5..dfe0bf7 100644 --- a/kernel-kvmsmall.changes +++ b/kernel-kvmsmall.changes @@ -1,3 +1,146 @@ +------------------------------------------------------------------- +Mon Aug 18 10:55:27 CEST 2025 - tiwai@suse.de + +- sched/psi: Fix psi_seq initialization (bsc#1248155). +- commit 2dd3707 + +------------------------------------------------------------------- +Thu Aug 14 14:34:25 CEST 2025 - msuchanek@suse.de + +- Move pesign-obs-integration requirement from kernel-syms to kernel devel + subpackage (bsc#1248108). +- commit e707e41 + +------------------------------------------------------------------- +Mon Aug 11 18:50:04 CEST 2025 - tbogendoerfer@suse.de + +- ice, irdma: fix an off by one in error handling code + (bsc#1247712). +- irdma: free iwdev->rf after removing MSI-X (bsc#1247712). +- ice: Fix signedness bug in ice_init_interrupt_scheme() + (bsc#1247712). +- ice: init flow director before RDMA (bsc#1247712). +- ice: simplify VF MSI-X managing (bsc#1247712). +- ice: enable_rdma devlink param (bsc#1247712). +- ice: treat dyn_allowed only as suggestion (bsc#1247712). +- ice, irdma: move interrupts code to irdma (bsc#1247712). +- ice: get rid of num_lan_msix field (bsc#1247712). +- ice: remove splitting MSI-X between features (bsc#1247712). +- ice: devlink PF MSI-X max and min parameter (bsc#1247712). +- ice: count combined queues using Rx/Tx count (bsc#1247712). +- commit 5c830c5 + +------------------------------------------------------------------- +Mon Aug 11 16:20:47 CEST 2025 - krisman@suse.de + +- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred + (CVE-2025-38453 bsc#1247234). + Conflicts: + series.conf +- commit 909d7fe + +------------------------------------------------------------------- +Fri Aug 8 20:22:52 CEST 2025 - krisman@suse.de + +- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU + (CVE-2025-38453 bsc#1247234). +- commit 171360a + +------------------------------------------------------------------- +Fri Aug 8 16:07:55 CEST 2025 - pfalcato@suse.de + +- tls: always refresh the queue when reading sock (CVE-2025-38471 + bsc#1247450). +- commit 2bcb640 + +------------------------------------------------------------------- +Fri Aug 8 12:17:14 CEST 2025 - sjaeckel@suse.de + +- smc: Fix various oops due to inet_sock type confusion + (CVE-2025-38475 bsc#1247308). +- commit 05e8074 + +------------------------------------------------------------------- +Thu Aug 7 19:33:31 CEST 2025 - dsterba@suse.com + +- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374) +- commit cb82edb + +------------------------------------------------------------------- +Wed Aug 6 13:45:04 CEST 2025 - pfalcato@suse.de + +- nvme-tcp: fix selinux denied when calling sock_sendmsg + (bsc#1247497). +- commit 6082643 + +------------------------------------------------------------------- +Tue Aug 5 16:46:07 CEST 2025 - heming.zhao@suse.com + +- md/md-cluster: handle REMOVE message earlier (bsc#1247057). +- commit 8e8eaf1 + +------------------------------------------------------------------- +Mon Aug 4 09:17:26 CEST 2025 - msuchanek@suse.de + +- kernel-syms.spec: Drop old rpm release number hack (bsc#1247172). +- commit b4fa2d1 + +------------------------------------------------------------------- +Fri Aug 1 12:33:52 CEST 2025 - tiwai@suse.de + +- Move upstreamed sched, SCSI and ACPI patches into sorted section +- commit 836e139 + +------------------------------------------------------------------- +Wed Jul 30 13:02:30 CEST 2025 - jack@suse.cz + +- fs: export anon_inode_make_secure_inode() and fix secretmem + LSM bypass (CVE-2025-38396 bsc#1247156). + Conflicts: + series.conf +- commit 4bbdefe + +------------------------------------------------------------------- +Fri Jul 25 17:50:40 CEST 2025 - fdmanana@suse.com + +- btrfs: fix use-after-free when COWing tree bock and tracing + is enabled (bsc#1235645 CVE-2024-56759). +- commit bd41b6c + +------------------------------------------------------------------- +Thu Jul 24 10:53:52 CEST 2025 - tiwai@suse.de + +- rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879) + Put the same workaround to avoid file truncation of vmlinux and co in + kernel-default-base package, too. +- commit 2329734 + +------------------------------------------------------------------- +Wed Jul 23 15:22:54 CEST 2025 - petr.pavlu@suse.com + +- rpm/kernel-binary.spec.in: Ignore return code from ksymtypes compare + When using suse-kabi-tools, the RPM build invokes 'ksymvers compare' to + compare the resulting symbol CRCs with the reference data. If the values + differ, it then invokes 'ksymtypes compare' to provide a detailed report + explaining why the symbols differ. The build expects the latter + 'ksymtypes compare' command to always return zero, even if the two + compared kABI corpuses are different. + This is currently the case for 'ksymtypes compare'. However, I plan to + update the command to return a non-zero code when the comparison detects + any differences. This should ensure consistent behavior with 'ksymvers + compare'. + Since the build uses 'ksymtypes compare' only for more detailed + diagnostics, ignore its return code. +- commit 5ac1381 + +------------------------------------------------------------------- +Wed Jul 23 14:27:11 CEST 2025 - sjaeckel@suse.de + +- net: atm: fix /proc/net/atm/lec handling (CVE-2025-38180 + bsc#1245970). +- net: atm: add lec_mutex (CVE-2025-38323 bsc#1246473). +- commit 736dcb9 + ------------------------------------------------------------------- Mon Jul 21 11:16:32 CEST 2025 - tiwai@suse.de @@ -1281,6 +1424,12 @@ Wed Jul 9 16:28:15 CEST 2025 - tiwai@suse.de bsc#1245682). - commit 79e6efd +------------------------------------------------------------------- +Wed Jul 9 14:11:01 CEST 2025 - tiwai@suse.de + +- rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337) +- commit 630f139 + ------------------------------------------------------------------- Wed Jul 9 13:08:41 CEST 2025 - ailiop@suse.com @@ -1997,6 +2146,14 @@ Mon Jun 30 14:29:43 CEST 2025 - ykaukab@suse.de current kABI workaround patches before the update. - commit 0c9b3ad +------------------------------------------------------------------- +Mon Jun 30 13:57:15 CEST 2025 - msuchanek@suse.de + +- kernel-obs-qa: Do not depend on srchash when qemu emulation is used + In this case the dependency is never fulfilled + Fixes: 485ae1da2b88 ("kernel-obs-qa: Use srchash for dependency as well") +- commit a840f87 + ------------------------------------------------------------------- Mon Jun 30 13:52:59 CEST 2025 - jgross@suse.com @@ -3100,6 +3257,31 @@ Mon Jun 23 14:08:20 CEST 2025 - neelx@suse.com btrfs_log_inode_parent() (bsc#1245068). - commit 188ca65 +------------------------------------------------------------------- +Mon Jun 23 14:00:47 CEST 2025 - msuchanek@suse.de + +- Remove host-memcpy-hack.h + This might have been usefult at some point but we have more things that + depend on specific library versions today. +- commit 0396c23 + +------------------------------------------------------------------- +Mon Jun 23 13:58:27 CEST 2025 - msuchanek@suse.de + +- Remove compress-vmlinux.sh + /usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux was added in + pesign-obs-integration during SLE12 RC. This workaround can be removed. +- commit 19caac0 + +------------------------------------------------------------------- +Mon Jun 23 13:53:18 CEST 2025 - msuchanek@suse.de + +- Remove try-disable-staging-driver + The config for linux-next is autogenerated from master config, and + defaults filled for missing options. This is unlikely to enable any + staging driver in the first place. +- commit a6f21ed + ------------------------------------------------------------------- Mon Jun 23 12:27:01 CEST 2025 - wqu@suse.com diff --git a/kernel-kvmsmall.spec b/kernel-kvmsmall.spec index d7c5f6d..2630bc2 100644 --- a/kernel-kvmsmall.spec +++ b/kernel-kvmsmall.spec @@ -19,7 +19,7 @@ %define srcversion 6.12 %define patchversion 6.12.0 -%define git_commit b00eabe67e9bafdd23c53dd65d263cbf6dc806fa +%define git_commit 11471211562ff65b726639c1a6165034d305f95a %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -37,12 +37,12 @@ %include %_sourcedir/kernel-spec-macros -%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) +%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-kvmsmall Version: 6.12.0 %if 0%{?is_kotd} -Release: .gb00eabe +Release: .g1147121 %else Release: 0 %endif @@ -202,11 +202,8 @@ Source62: old-flavors Source63: arch-symbols Source64: package-descriptions Source65: kernel-spec-macros -Source68: host-memcpy-hack.h -Source69: try-disable-staging-driver Source70: kernel-obs-build.spec.in Source71: kernel-obs-qa.spec.in -Source72: compress-vmlinux.sh Source73: dtb.spec.in.in Source74: mkspec-dtb Source75: release-projects @@ -270,11 +267,8 @@ NoSource: 62 NoSource: 63 NoSource: 64 NoSource: 65 -NoSource: 68 -NoSource: 69 NoSource: 70 NoSource: 71 -NoSource: 72 NoSource: 73 NoSource: 74 NoSource: 75 @@ -779,6 +773,7 @@ Provides: %name-devel = %version-%source_rel Provides: multiversion(kernel) %if ! %build_vanilla && ! %vanilla_only Requires: kernel-devel%variant = %version-%source_rel +Requires: pesign-obs-integration Recommends: make Recommends: gcc Recommends: perl @@ -1255,7 +1250,6 @@ export KBUILD_VERBOSE=0 export KBUILD_SYMTYPES=1 export KBUILD_BUILD_USER=geeko export KBUILD_BUILD_HOST=buildhost -export HOST_EXTRACFLAGS="-include %_sourcedir/host-memcpy-hack.h" EOF source .kernel-binary.spec.buildenv @@ -1422,20 +1416,11 @@ source .kernel-binary.spec.buildenv mkdir -p %_topdir/OTHER log=%_topdir/OTHER/make-stderr.log -while true; do - make all $MAKE_ARGS 2> >(tee "$log") - if test "${PIPESTATUS[0]}" -eq 0; then - break - fi - # In the linux-next and vanilla branches, we try harder to build a - # package. - if test 0%vanilla_only -gt 0 && - %_sourcedir/try-disable-staging-driver "$log"; then - echo "Retrying make" - else - exit 1 - fi -done +make all $MAKE_ARGS 2> >(tee "$log") +result="${PIPESTATUS[0]}" +if ! test "$result" -eq 0; then + exit "$result" +fi %if 0%{?klp_ipa_clones} && %generate_compile_commands # Generate compile_commands.json @@ -1471,17 +1456,9 @@ add_vmlinux() # mark the file 0644 again chmod +x %buildroot/$vmlinux if test $1 == "--compressed"; then - # avoid using the gzip -n option to make kdump happy (bnc#880848#c20) ts="$(head -n1 %_sourcedir/source-timestamp)" touch -d "$ts" %buildroot/$vmlinux touch %buildroot/$vmlinux.%{compress_vmlinux} -%if 0%{?__debug_package:1} - # compress the vmlinux image after find-debuginfo.sh has processed it -%global __debug_install_post %__debug_install_post \ -%_sourcedir/compress-vmlinux.sh %buildroot/boot/vmlinux-%kernelrelease-%build_flavor -%else - %_sourcedir/compress-vmlinux.sh %buildroot/$vmlinux -%endif ghost_vmlinux=true else ghost_vmlinux=false @@ -1722,7 +1699,7 @@ if [ %CONFIG_MODULES = y ]; then ksymtypes compare %{?_smp_mflags} \ --filter-symbol-list=%my_builddir/changed-exports \ %my_builddir/kabi/%cpu_arch/symtypes-%build_flavor \ - %my_builddir/symtypes-%build_flavor + %my_builddir/symtypes-%build_flavor || true %endif # %ignore_kabi_badness is defined in the Kernel:* projects in the diff --git a/kernel-obs-build.changes b/kernel-obs-build.changes index a300cf5..dfe0bf7 100644 --- a/kernel-obs-build.changes +++ b/kernel-obs-build.changes @@ -1,3 +1,146 @@ +------------------------------------------------------------------- +Mon Aug 18 10:55:27 CEST 2025 - tiwai@suse.de + +- sched/psi: Fix psi_seq initialization (bsc#1248155). +- commit 2dd3707 + +------------------------------------------------------------------- +Thu Aug 14 14:34:25 CEST 2025 - msuchanek@suse.de + +- Move pesign-obs-integration requirement from kernel-syms to kernel devel + subpackage (bsc#1248108). +- commit e707e41 + +------------------------------------------------------------------- +Mon Aug 11 18:50:04 CEST 2025 - tbogendoerfer@suse.de + +- ice, irdma: fix an off by one in error handling code + (bsc#1247712). +- irdma: free iwdev->rf after removing MSI-X (bsc#1247712). +- ice: Fix signedness bug in ice_init_interrupt_scheme() + (bsc#1247712). +- ice: init flow director before RDMA (bsc#1247712). +- ice: simplify VF MSI-X managing (bsc#1247712). +- ice: enable_rdma devlink param (bsc#1247712). +- ice: treat dyn_allowed only as suggestion (bsc#1247712). +- ice, irdma: move interrupts code to irdma (bsc#1247712). +- ice: get rid of num_lan_msix field (bsc#1247712). +- ice: remove splitting MSI-X between features (bsc#1247712). +- ice: devlink PF MSI-X max and min parameter (bsc#1247712). +- ice: count combined queues using Rx/Tx count (bsc#1247712). +- commit 5c830c5 + +------------------------------------------------------------------- +Mon Aug 11 16:20:47 CEST 2025 - krisman@suse.de + +- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred + (CVE-2025-38453 bsc#1247234). + Conflicts: + series.conf +- commit 909d7fe + +------------------------------------------------------------------- +Fri Aug 8 20:22:52 CEST 2025 - krisman@suse.de + +- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU + (CVE-2025-38453 bsc#1247234). +- commit 171360a + +------------------------------------------------------------------- +Fri Aug 8 16:07:55 CEST 2025 - pfalcato@suse.de + +- tls: always refresh the queue when reading sock (CVE-2025-38471 + bsc#1247450). +- commit 2bcb640 + +------------------------------------------------------------------- +Fri Aug 8 12:17:14 CEST 2025 - sjaeckel@suse.de + +- smc: Fix various oops due to inet_sock type confusion + (CVE-2025-38475 bsc#1247308). +- commit 05e8074 + +------------------------------------------------------------------- +Thu Aug 7 19:33:31 CEST 2025 - dsterba@suse.com + +- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374) +- commit cb82edb + +------------------------------------------------------------------- +Wed Aug 6 13:45:04 CEST 2025 - pfalcato@suse.de + +- nvme-tcp: fix selinux denied when calling sock_sendmsg + (bsc#1247497). +- commit 6082643 + +------------------------------------------------------------------- +Tue Aug 5 16:46:07 CEST 2025 - heming.zhao@suse.com + +- md/md-cluster: handle REMOVE message earlier (bsc#1247057). +- commit 8e8eaf1 + +------------------------------------------------------------------- +Mon Aug 4 09:17:26 CEST 2025 - msuchanek@suse.de + +- kernel-syms.spec: Drop old rpm release number hack (bsc#1247172). +- commit b4fa2d1 + +------------------------------------------------------------------- +Fri Aug 1 12:33:52 CEST 2025 - tiwai@suse.de + +- Move upstreamed sched, SCSI and ACPI patches into sorted section +- commit 836e139 + +------------------------------------------------------------------- +Wed Jul 30 13:02:30 CEST 2025 - jack@suse.cz + +- fs: export anon_inode_make_secure_inode() and fix secretmem + LSM bypass (CVE-2025-38396 bsc#1247156). + Conflicts: + series.conf +- commit 4bbdefe + +------------------------------------------------------------------- +Fri Jul 25 17:50:40 CEST 2025 - fdmanana@suse.com + +- btrfs: fix use-after-free when COWing tree bock and tracing + is enabled (bsc#1235645 CVE-2024-56759). +- commit bd41b6c + +------------------------------------------------------------------- +Thu Jul 24 10:53:52 CEST 2025 - tiwai@suse.de + +- rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879) + Put the same workaround to avoid file truncation of vmlinux and co in + kernel-default-base package, too. +- commit 2329734 + +------------------------------------------------------------------- +Wed Jul 23 15:22:54 CEST 2025 - petr.pavlu@suse.com + +- rpm/kernel-binary.spec.in: Ignore return code from ksymtypes compare + When using suse-kabi-tools, the RPM build invokes 'ksymvers compare' to + compare the resulting symbol CRCs with the reference data. If the values + differ, it then invokes 'ksymtypes compare' to provide a detailed report + explaining why the symbols differ. The build expects the latter + 'ksymtypes compare' command to always return zero, even if the two + compared kABI corpuses are different. + This is currently the case for 'ksymtypes compare'. However, I plan to + update the command to return a non-zero code when the comparison detects + any differences. This should ensure consistent behavior with 'ksymvers + compare'. + Since the build uses 'ksymtypes compare' only for more detailed + diagnostics, ignore its return code. +- commit 5ac1381 + +------------------------------------------------------------------- +Wed Jul 23 14:27:11 CEST 2025 - sjaeckel@suse.de + +- net: atm: fix /proc/net/atm/lec handling (CVE-2025-38180 + bsc#1245970). +- net: atm: add lec_mutex (CVE-2025-38323 bsc#1246473). +- commit 736dcb9 + ------------------------------------------------------------------- Mon Jul 21 11:16:32 CEST 2025 - tiwai@suse.de @@ -1281,6 +1424,12 @@ Wed Jul 9 16:28:15 CEST 2025 - tiwai@suse.de bsc#1245682). - commit 79e6efd +------------------------------------------------------------------- +Wed Jul 9 14:11:01 CEST 2025 - tiwai@suse.de + +- rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337) +- commit 630f139 + ------------------------------------------------------------------- Wed Jul 9 13:08:41 CEST 2025 - ailiop@suse.com @@ -1997,6 +2146,14 @@ Mon Jun 30 14:29:43 CEST 2025 - ykaukab@suse.de current kABI workaround patches before the update. - commit 0c9b3ad +------------------------------------------------------------------- +Mon Jun 30 13:57:15 CEST 2025 - msuchanek@suse.de + +- kernel-obs-qa: Do not depend on srchash when qemu emulation is used + In this case the dependency is never fulfilled + Fixes: 485ae1da2b88 ("kernel-obs-qa: Use srchash for dependency as well") +- commit a840f87 + ------------------------------------------------------------------- Mon Jun 30 13:52:59 CEST 2025 - jgross@suse.com @@ -3100,6 +3257,31 @@ Mon Jun 23 14:08:20 CEST 2025 - neelx@suse.com btrfs_log_inode_parent() (bsc#1245068). - commit 188ca65 +------------------------------------------------------------------- +Mon Jun 23 14:00:47 CEST 2025 - msuchanek@suse.de + +- Remove host-memcpy-hack.h + This might have been usefult at some point but we have more things that + depend on specific library versions today. +- commit 0396c23 + +------------------------------------------------------------------- +Mon Jun 23 13:58:27 CEST 2025 - msuchanek@suse.de + +- Remove compress-vmlinux.sh + /usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux was added in + pesign-obs-integration during SLE12 RC. This workaround can be removed. +- commit 19caac0 + +------------------------------------------------------------------- +Mon Jun 23 13:53:18 CEST 2025 - msuchanek@suse.de + +- Remove try-disable-staging-driver + The config for linux-next is autogenerated from master config, and + defaults filled for missing options. This is unlikely to enable any + staging driver in the first place. +- commit a6f21ed + ------------------------------------------------------------------- Mon Jun 23 12:27:01 CEST 2025 - wqu@suse.com diff --git a/kernel-obs-build.spec b/kernel-obs-build.spec index d01f87f..1b45607 100644 --- a/kernel-obs-build.spec +++ b/kernel-obs-build.spec @@ -38,7 +38,7 @@ %endif %endif %endif -%global kernel_package kernel%kernel_flavor-srchash-b00eabe67e9bafdd23c53dd65d263cbf6dc806fa +%global kernel_package kernel%kernel_flavor-srchash-11471211562ff65b726639c1a6165034d305f95a %endif %if 0%{?rhel_version} %global kernel_package kernel @@ -47,14 +47,14 @@ Name: kernel-obs-build Version: 6.12.0 %if 0%{?is_kotd} -Release: .gb00eabe +Release: .g1147121 %else Release: 0 %endif Summary: package kernel and initrd for OBS VM builds License: GPL-2.0-only Group: SLES -Provides: kernel-obs-build-srchash-b00eabe67e9bafdd23c53dd65d263cbf6dc806fa +Provides: kernel-obs-build-srchash-11471211562ff65b726639c1a6165034d305f95a BuildRequires: coreutils BuildRequires: device-mapper BuildRequires: dracut diff --git a/kernel-obs-qa.changes b/kernel-obs-qa.changes index a300cf5..dfe0bf7 100644 --- a/kernel-obs-qa.changes +++ b/kernel-obs-qa.changes @@ -1,3 +1,146 @@ +------------------------------------------------------------------- +Mon Aug 18 10:55:27 CEST 2025 - tiwai@suse.de + +- sched/psi: Fix psi_seq initialization (bsc#1248155). +- commit 2dd3707 + +------------------------------------------------------------------- +Thu Aug 14 14:34:25 CEST 2025 - msuchanek@suse.de + +- Move pesign-obs-integration requirement from kernel-syms to kernel devel + subpackage (bsc#1248108). +- commit e707e41 + +------------------------------------------------------------------- +Mon Aug 11 18:50:04 CEST 2025 - tbogendoerfer@suse.de + +- ice, irdma: fix an off by one in error handling code + (bsc#1247712). +- irdma: free iwdev->rf after removing MSI-X (bsc#1247712). +- ice: Fix signedness bug in ice_init_interrupt_scheme() + (bsc#1247712). +- ice: init flow director before RDMA (bsc#1247712). +- ice: simplify VF MSI-X managing (bsc#1247712). +- ice: enable_rdma devlink param (bsc#1247712). +- ice: treat dyn_allowed only as suggestion (bsc#1247712). +- ice, irdma: move interrupts code to irdma (bsc#1247712). +- ice: get rid of num_lan_msix field (bsc#1247712). +- ice: remove splitting MSI-X between features (bsc#1247712). +- ice: devlink PF MSI-X max and min parameter (bsc#1247712). +- ice: count combined queues using Rx/Tx count (bsc#1247712). +- commit 5c830c5 + +------------------------------------------------------------------- +Mon Aug 11 16:20:47 CEST 2025 - krisman@suse.de + +- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred + (CVE-2025-38453 bsc#1247234). + Conflicts: + series.conf +- commit 909d7fe + +------------------------------------------------------------------- +Fri Aug 8 20:22:52 CEST 2025 - krisman@suse.de + +- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU + (CVE-2025-38453 bsc#1247234). +- commit 171360a + +------------------------------------------------------------------- +Fri Aug 8 16:07:55 CEST 2025 - pfalcato@suse.de + +- tls: always refresh the queue when reading sock (CVE-2025-38471 + bsc#1247450). +- commit 2bcb640 + +------------------------------------------------------------------- +Fri Aug 8 12:17:14 CEST 2025 - sjaeckel@suse.de + +- smc: Fix various oops due to inet_sock type confusion + (CVE-2025-38475 bsc#1247308). +- commit 05e8074 + +------------------------------------------------------------------- +Thu Aug 7 19:33:31 CEST 2025 - dsterba@suse.com + +- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374) +- commit cb82edb + +------------------------------------------------------------------- +Wed Aug 6 13:45:04 CEST 2025 - pfalcato@suse.de + +- nvme-tcp: fix selinux denied when calling sock_sendmsg + (bsc#1247497). +- commit 6082643 + +------------------------------------------------------------------- +Tue Aug 5 16:46:07 CEST 2025 - heming.zhao@suse.com + +- md/md-cluster: handle REMOVE message earlier (bsc#1247057). +- commit 8e8eaf1 + +------------------------------------------------------------------- +Mon Aug 4 09:17:26 CEST 2025 - msuchanek@suse.de + +- kernel-syms.spec: Drop old rpm release number hack (bsc#1247172). +- commit b4fa2d1 + +------------------------------------------------------------------- +Fri Aug 1 12:33:52 CEST 2025 - tiwai@suse.de + +- Move upstreamed sched, SCSI and ACPI patches into sorted section +- commit 836e139 + +------------------------------------------------------------------- +Wed Jul 30 13:02:30 CEST 2025 - jack@suse.cz + +- fs: export anon_inode_make_secure_inode() and fix secretmem + LSM bypass (CVE-2025-38396 bsc#1247156). + Conflicts: + series.conf +- commit 4bbdefe + +------------------------------------------------------------------- +Fri Jul 25 17:50:40 CEST 2025 - fdmanana@suse.com + +- btrfs: fix use-after-free when COWing tree bock and tracing + is enabled (bsc#1235645 CVE-2024-56759). +- commit bd41b6c + +------------------------------------------------------------------- +Thu Jul 24 10:53:52 CEST 2025 - tiwai@suse.de + +- rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879) + Put the same workaround to avoid file truncation of vmlinux and co in + kernel-default-base package, too. +- commit 2329734 + +------------------------------------------------------------------- +Wed Jul 23 15:22:54 CEST 2025 - petr.pavlu@suse.com + +- rpm/kernel-binary.spec.in: Ignore return code from ksymtypes compare + When using suse-kabi-tools, the RPM build invokes 'ksymvers compare' to + compare the resulting symbol CRCs with the reference data. If the values + differ, it then invokes 'ksymtypes compare' to provide a detailed report + explaining why the symbols differ. The build expects the latter + 'ksymtypes compare' command to always return zero, even if the two + compared kABI corpuses are different. + This is currently the case for 'ksymtypes compare'. However, I plan to + update the command to return a non-zero code when the comparison detects + any differences. This should ensure consistent behavior with 'ksymvers + compare'. + Since the build uses 'ksymtypes compare' only for more detailed + diagnostics, ignore its return code. +- commit 5ac1381 + +------------------------------------------------------------------- +Wed Jul 23 14:27:11 CEST 2025 - sjaeckel@suse.de + +- net: atm: fix /proc/net/atm/lec handling (CVE-2025-38180 + bsc#1245970). +- net: atm: add lec_mutex (CVE-2025-38323 bsc#1246473). +- commit 736dcb9 + ------------------------------------------------------------------- Mon Jul 21 11:16:32 CEST 2025 - tiwai@suse.de @@ -1281,6 +1424,12 @@ Wed Jul 9 16:28:15 CEST 2025 - tiwai@suse.de bsc#1245682). - commit 79e6efd +------------------------------------------------------------------- +Wed Jul 9 14:11:01 CEST 2025 - tiwai@suse.de + +- rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337) +- commit 630f139 + ------------------------------------------------------------------- Wed Jul 9 13:08:41 CEST 2025 - ailiop@suse.com @@ -1997,6 +2146,14 @@ Mon Jun 30 14:29:43 CEST 2025 - ykaukab@suse.de current kABI workaround patches before the update. - commit 0c9b3ad +------------------------------------------------------------------- +Mon Jun 30 13:57:15 CEST 2025 - msuchanek@suse.de + +- kernel-obs-qa: Do not depend on srchash when qemu emulation is used + In this case the dependency is never fulfilled + Fixes: 485ae1da2b88 ("kernel-obs-qa: Use srchash for dependency as well") +- commit a840f87 + ------------------------------------------------------------------- Mon Jun 30 13:52:59 CEST 2025 - jgross@suse.com @@ -3100,6 +3257,31 @@ Mon Jun 23 14:08:20 CEST 2025 - neelx@suse.com btrfs_log_inode_parent() (bsc#1245068). - commit 188ca65 +------------------------------------------------------------------- +Mon Jun 23 14:00:47 CEST 2025 - msuchanek@suse.de + +- Remove host-memcpy-hack.h + This might have been usefult at some point but we have more things that + depend on specific library versions today. +- commit 0396c23 + +------------------------------------------------------------------- +Mon Jun 23 13:58:27 CEST 2025 - msuchanek@suse.de + +- Remove compress-vmlinux.sh + /usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux was added in + pesign-obs-integration during SLE12 RC. This workaround can be removed. +- commit 19caac0 + +------------------------------------------------------------------- +Mon Jun 23 13:53:18 CEST 2025 - msuchanek@suse.de + +- Remove try-disable-staging-driver + The config for linux-next is autogenerated from master config, and + defaults filled for missing options. This is unlikely to enable any + staging driver in the first place. +- commit a6f21ed + ------------------------------------------------------------------- Mon Jun 23 12:27:01 CEST 2025 - wqu@suse.com diff --git a/kernel-obs-qa.spec b/kernel-obs-qa.spec index 7dae633..8fac75d 100644 --- a/kernel-obs-qa.spec +++ b/kernel-obs-qa.spec @@ -25,7 +25,7 @@ Name: kernel-obs-qa Version: 6.12.0 %if 0%{?is_kotd} -Release: .gb00eabe +Release: .g1147121 %else Release: 0 %endif @@ -35,7 +35,9 @@ Group: SLES BuildRequires: kernel-default # kernel-obs-build must be also configured as VMinstall, but is required # here as well to avoid that qa and build package build parallel -BuildRequires: kernel-obs-build-srchash-b00eabe67e9bafdd23c53dd65d263cbf6dc806fa +%if ! 0%{?qemu_user_space_build} +BuildRequires: kernel-obs-build-srchash-11471211562ff65b726639c1a6165034d305f95a +%endif BuildRequires: modutils ExclusiveArch: aarch64 ppc64le s390x x86_64 diff --git a/kernel-obs-qa.spec.in b/kernel-obs-qa.spec.in index 9171145..5c8b5e6 100644 --- a/kernel-obs-qa.spec.in +++ b/kernel-obs-qa.spec.in @@ -35,7 +35,9 @@ Group: SLES BuildRequires: kernel-default # kernel-obs-build must be also configured as VMinstall, but is required # here as well to avoid that qa and build package build parallel +%if ! 0%{?qemu_user_space_build} BuildRequires: kernel-obs-build-srchash-@COMMIT_FULL@ +%endif BuildRequires: modutils ExclusiveArch: @ARCHS@ diff --git a/kernel-rt.changes b/kernel-rt.changes index a300cf5..dfe0bf7 100644 --- a/kernel-rt.changes +++ b/kernel-rt.changes @@ -1,3 +1,146 @@ +------------------------------------------------------------------- +Mon Aug 18 10:55:27 CEST 2025 - tiwai@suse.de + +- sched/psi: Fix psi_seq initialization (bsc#1248155). +- commit 2dd3707 + +------------------------------------------------------------------- +Thu Aug 14 14:34:25 CEST 2025 - msuchanek@suse.de + +- Move pesign-obs-integration requirement from kernel-syms to kernel devel + subpackage (bsc#1248108). +- commit e707e41 + +------------------------------------------------------------------- +Mon Aug 11 18:50:04 CEST 2025 - tbogendoerfer@suse.de + +- ice, irdma: fix an off by one in error handling code + (bsc#1247712). +- irdma: free iwdev->rf after removing MSI-X (bsc#1247712). +- ice: Fix signedness bug in ice_init_interrupt_scheme() + (bsc#1247712). +- ice: init flow director before RDMA (bsc#1247712). +- ice: simplify VF MSI-X managing (bsc#1247712). +- ice: enable_rdma devlink param (bsc#1247712). +- ice: treat dyn_allowed only as suggestion (bsc#1247712). +- ice, irdma: move interrupts code to irdma (bsc#1247712). +- ice: get rid of num_lan_msix field (bsc#1247712). +- ice: remove splitting MSI-X between features (bsc#1247712). +- ice: devlink PF MSI-X max and min parameter (bsc#1247712). +- ice: count combined queues using Rx/Tx count (bsc#1247712). +- commit 5c830c5 + +------------------------------------------------------------------- +Mon Aug 11 16:20:47 CEST 2025 - krisman@suse.de + +- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred + (CVE-2025-38453 bsc#1247234). + Conflicts: + series.conf +- commit 909d7fe + +------------------------------------------------------------------- +Fri Aug 8 20:22:52 CEST 2025 - krisman@suse.de + +- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU + (CVE-2025-38453 bsc#1247234). +- commit 171360a + +------------------------------------------------------------------- +Fri Aug 8 16:07:55 CEST 2025 - pfalcato@suse.de + +- tls: always refresh the queue when reading sock (CVE-2025-38471 + bsc#1247450). +- commit 2bcb640 + +------------------------------------------------------------------- +Fri Aug 8 12:17:14 CEST 2025 - sjaeckel@suse.de + +- smc: Fix various oops due to inet_sock type confusion + (CVE-2025-38475 bsc#1247308). +- commit 05e8074 + +------------------------------------------------------------------- +Thu Aug 7 19:33:31 CEST 2025 - dsterba@suse.com + +- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374) +- commit cb82edb + +------------------------------------------------------------------- +Wed Aug 6 13:45:04 CEST 2025 - pfalcato@suse.de + +- nvme-tcp: fix selinux denied when calling sock_sendmsg + (bsc#1247497). +- commit 6082643 + +------------------------------------------------------------------- +Tue Aug 5 16:46:07 CEST 2025 - heming.zhao@suse.com + +- md/md-cluster: handle REMOVE message earlier (bsc#1247057). +- commit 8e8eaf1 + +------------------------------------------------------------------- +Mon Aug 4 09:17:26 CEST 2025 - msuchanek@suse.de + +- kernel-syms.spec: Drop old rpm release number hack (bsc#1247172). +- commit b4fa2d1 + +------------------------------------------------------------------- +Fri Aug 1 12:33:52 CEST 2025 - tiwai@suse.de + +- Move upstreamed sched, SCSI and ACPI patches into sorted section +- commit 836e139 + +------------------------------------------------------------------- +Wed Jul 30 13:02:30 CEST 2025 - jack@suse.cz + +- fs: export anon_inode_make_secure_inode() and fix secretmem + LSM bypass (CVE-2025-38396 bsc#1247156). + Conflicts: + series.conf +- commit 4bbdefe + +------------------------------------------------------------------- +Fri Jul 25 17:50:40 CEST 2025 - fdmanana@suse.com + +- btrfs: fix use-after-free when COWing tree bock and tracing + is enabled (bsc#1235645 CVE-2024-56759). +- commit bd41b6c + +------------------------------------------------------------------- +Thu Jul 24 10:53:52 CEST 2025 - tiwai@suse.de + +- rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879) + Put the same workaround to avoid file truncation of vmlinux and co in + kernel-default-base package, too. +- commit 2329734 + +------------------------------------------------------------------- +Wed Jul 23 15:22:54 CEST 2025 - petr.pavlu@suse.com + +- rpm/kernel-binary.spec.in: Ignore return code from ksymtypes compare + When using suse-kabi-tools, the RPM build invokes 'ksymvers compare' to + compare the resulting symbol CRCs with the reference data. If the values + differ, it then invokes 'ksymtypes compare' to provide a detailed report + explaining why the symbols differ. The build expects the latter + 'ksymtypes compare' command to always return zero, even if the two + compared kABI corpuses are different. + This is currently the case for 'ksymtypes compare'. However, I plan to + update the command to return a non-zero code when the comparison detects + any differences. This should ensure consistent behavior with 'ksymvers + compare'. + Since the build uses 'ksymtypes compare' only for more detailed + diagnostics, ignore its return code. +- commit 5ac1381 + +------------------------------------------------------------------- +Wed Jul 23 14:27:11 CEST 2025 - sjaeckel@suse.de + +- net: atm: fix /proc/net/atm/lec handling (CVE-2025-38180 + bsc#1245970). +- net: atm: add lec_mutex (CVE-2025-38323 bsc#1246473). +- commit 736dcb9 + ------------------------------------------------------------------- Mon Jul 21 11:16:32 CEST 2025 - tiwai@suse.de @@ -1281,6 +1424,12 @@ Wed Jul 9 16:28:15 CEST 2025 - tiwai@suse.de bsc#1245682). - commit 79e6efd +------------------------------------------------------------------- +Wed Jul 9 14:11:01 CEST 2025 - tiwai@suse.de + +- rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337) +- commit 630f139 + ------------------------------------------------------------------- Wed Jul 9 13:08:41 CEST 2025 - ailiop@suse.com @@ -1997,6 +2146,14 @@ Mon Jun 30 14:29:43 CEST 2025 - ykaukab@suse.de current kABI workaround patches before the update. - commit 0c9b3ad +------------------------------------------------------------------- +Mon Jun 30 13:57:15 CEST 2025 - msuchanek@suse.de + +- kernel-obs-qa: Do not depend on srchash when qemu emulation is used + In this case the dependency is never fulfilled + Fixes: 485ae1da2b88 ("kernel-obs-qa: Use srchash for dependency as well") +- commit a840f87 + ------------------------------------------------------------------- Mon Jun 30 13:52:59 CEST 2025 - jgross@suse.com @@ -3100,6 +3257,31 @@ Mon Jun 23 14:08:20 CEST 2025 - neelx@suse.com btrfs_log_inode_parent() (bsc#1245068). - commit 188ca65 +------------------------------------------------------------------- +Mon Jun 23 14:00:47 CEST 2025 - msuchanek@suse.de + +- Remove host-memcpy-hack.h + This might have been usefult at some point but we have more things that + depend on specific library versions today. +- commit 0396c23 + +------------------------------------------------------------------- +Mon Jun 23 13:58:27 CEST 2025 - msuchanek@suse.de + +- Remove compress-vmlinux.sh + /usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux was added in + pesign-obs-integration during SLE12 RC. This workaround can be removed. +- commit 19caac0 + +------------------------------------------------------------------- +Mon Jun 23 13:53:18 CEST 2025 - msuchanek@suse.de + +- Remove try-disable-staging-driver + The config for linux-next is autogenerated from master config, and + defaults filled for missing options. This is unlikely to enable any + staging driver in the first place. +- commit a6f21ed + ------------------------------------------------------------------- Mon Jun 23 12:27:01 CEST 2025 - wqu@suse.com diff --git a/kernel-rt.spec b/kernel-rt.spec index 92c67b7..551a5a5 100644 --- a/kernel-rt.spec +++ b/kernel-rt.spec @@ -19,7 +19,7 @@ %define srcversion 6.12 %define patchversion 6.12.0 -%define git_commit b00eabe67e9bafdd23c53dd65d263cbf6dc806fa +%define git_commit 11471211562ff65b726639c1a6165034d305f95a %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -37,12 +37,12 @@ %include %_sourcedir/kernel-spec-macros -%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) +%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-rt Version: 6.12.0 %if 0%{?is_kotd} -Release: .gb00eabe +Release: .g1147121 %else Release: 0 %endif @@ -202,11 +202,8 @@ Source62: old-flavors Source63: arch-symbols Source64: package-descriptions Source65: kernel-spec-macros -Source68: host-memcpy-hack.h -Source69: try-disable-staging-driver Source70: kernel-obs-build.spec.in Source71: kernel-obs-qa.spec.in -Source72: compress-vmlinux.sh Source73: dtb.spec.in.in Source74: mkspec-dtb Source75: release-projects @@ -270,11 +267,8 @@ NoSource: 62 NoSource: 63 NoSource: 64 NoSource: 65 -NoSource: 68 -NoSource: 69 NoSource: 70 NoSource: 71 -NoSource: 72 NoSource: 73 NoSource: 74 NoSource: 75 @@ -779,6 +773,7 @@ Provides: %name-devel = %version-%source_rel Provides: multiversion(kernel) %if ! %build_vanilla && ! %vanilla_only Requires: kernel-devel%variant = %version-%source_rel +Requires: pesign-obs-integration Recommends: make Recommends: gcc Recommends: perl @@ -1259,7 +1254,6 @@ export KBUILD_VERBOSE=0 export KBUILD_SYMTYPES=1 export KBUILD_BUILD_USER=geeko export KBUILD_BUILD_HOST=buildhost -export HOST_EXTRACFLAGS="-include %_sourcedir/host-memcpy-hack.h" EOF source .kernel-binary.spec.buildenv @@ -1426,20 +1420,11 @@ source .kernel-binary.spec.buildenv mkdir -p %_topdir/OTHER log=%_topdir/OTHER/make-stderr.log -while true; do - make all $MAKE_ARGS 2> >(tee "$log") - if test "${PIPESTATUS[0]}" -eq 0; then - break - fi - # In the linux-next and vanilla branches, we try harder to build a - # package. - if test 0%vanilla_only -gt 0 && - %_sourcedir/try-disable-staging-driver "$log"; then - echo "Retrying make" - else - exit 1 - fi -done +make all $MAKE_ARGS 2> >(tee "$log") +result="${PIPESTATUS[0]}" +if ! test "$result" -eq 0; then + exit "$result" +fi %if 0%{?klp_ipa_clones} && %generate_compile_commands # Generate compile_commands.json @@ -1475,17 +1460,9 @@ add_vmlinux() # mark the file 0644 again chmod +x %buildroot/$vmlinux if test $1 == "--compressed"; then - # avoid using the gzip -n option to make kdump happy (bnc#880848#c20) ts="$(head -n1 %_sourcedir/source-timestamp)" touch -d "$ts" %buildroot/$vmlinux touch %buildroot/$vmlinux.%{compress_vmlinux} -%if 0%{?__debug_package:1} - # compress the vmlinux image after find-debuginfo.sh has processed it -%global __debug_install_post %__debug_install_post \ -%_sourcedir/compress-vmlinux.sh %buildroot/boot/vmlinux-%kernelrelease-%build_flavor -%else - %_sourcedir/compress-vmlinux.sh %buildroot/$vmlinux -%endif ghost_vmlinux=true else ghost_vmlinux=false @@ -1726,7 +1703,7 @@ if [ %CONFIG_MODULES = y ]; then ksymtypes compare %{?_smp_mflags} \ --filter-symbol-list=%my_builddir/changed-exports \ %my_builddir/kabi/%cpu_arch/symtypes-%build_flavor \ - %my_builddir/symtypes-%build_flavor + %my_builddir/symtypes-%build_flavor || true %endif # %ignore_kabi_badness is defined in the Kernel:* projects in the diff --git a/kernel-source.changes b/kernel-source.changes index a300cf5..dfe0bf7 100644 --- a/kernel-source.changes +++ b/kernel-source.changes @@ -1,3 +1,146 @@ +------------------------------------------------------------------- +Mon Aug 18 10:55:27 CEST 2025 - tiwai@suse.de + +- sched/psi: Fix psi_seq initialization (bsc#1248155). +- commit 2dd3707 + +------------------------------------------------------------------- +Thu Aug 14 14:34:25 CEST 2025 - msuchanek@suse.de + +- Move pesign-obs-integration requirement from kernel-syms to kernel devel + subpackage (bsc#1248108). +- commit e707e41 + +------------------------------------------------------------------- +Mon Aug 11 18:50:04 CEST 2025 - tbogendoerfer@suse.de + +- ice, irdma: fix an off by one in error handling code + (bsc#1247712). +- irdma: free iwdev->rf after removing MSI-X (bsc#1247712). +- ice: Fix signedness bug in ice_init_interrupt_scheme() + (bsc#1247712). +- ice: init flow director before RDMA (bsc#1247712). +- ice: simplify VF MSI-X managing (bsc#1247712). +- ice: enable_rdma devlink param (bsc#1247712). +- ice: treat dyn_allowed only as suggestion (bsc#1247712). +- ice, irdma: move interrupts code to irdma (bsc#1247712). +- ice: get rid of num_lan_msix field (bsc#1247712). +- ice: remove splitting MSI-X between features (bsc#1247712). +- ice: devlink PF MSI-X max and min parameter (bsc#1247712). +- ice: count combined queues using Rx/Tx count (bsc#1247712). +- commit 5c830c5 + +------------------------------------------------------------------- +Mon Aug 11 16:20:47 CEST 2025 - krisman@suse.de + +- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred + (CVE-2025-38453 bsc#1247234). + Conflicts: + series.conf +- commit 909d7fe + +------------------------------------------------------------------- +Fri Aug 8 20:22:52 CEST 2025 - krisman@suse.de + +- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU + (CVE-2025-38453 bsc#1247234). +- commit 171360a + +------------------------------------------------------------------- +Fri Aug 8 16:07:55 CEST 2025 - pfalcato@suse.de + +- tls: always refresh the queue when reading sock (CVE-2025-38471 + bsc#1247450). +- commit 2bcb640 + +------------------------------------------------------------------- +Fri Aug 8 12:17:14 CEST 2025 - sjaeckel@suse.de + +- smc: Fix various oops due to inet_sock type confusion + (CVE-2025-38475 bsc#1247308). +- commit 05e8074 + +------------------------------------------------------------------- +Thu Aug 7 19:33:31 CEST 2025 - dsterba@suse.com + +- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374) +- commit cb82edb + +------------------------------------------------------------------- +Wed Aug 6 13:45:04 CEST 2025 - pfalcato@suse.de + +- nvme-tcp: fix selinux denied when calling sock_sendmsg + (bsc#1247497). +- commit 6082643 + +------------------------------------------------------------------- +Tue Aug 5 16:46:07 CEST 2025 - heming.zhao@suse.com + +- md/md-cluster: handle REMOVE message earlier (bsc#1247057). +- commit 8e8eaf1 + +------------------------------------------------------------------- +Mon Aug 4 09:17:26 CEST 2025 - msuchanek@suse.de + +- kernel-syms.spec: Drop old rpm release number hack (bsc#1247172). +- commit b4fa2d1 + +------------------------------------------------------------------- +Fri Aug 1 12:33:52 CEST 2025 - tiwai@suse.de + +- Move upstreamed sched, SCSI and ACPI patches into sorted section +- commit 836e139 + +------------------------------------------------------------------- +Wed Jul 30 13:02:30 CEST 2025 - jack@suse.cz + +- fs: export anon_inode_make_secure_inode() and fix secretmem + LSM bypass (CVE-2025-38396 bsc#1247156). + Conflicts: + series.conf +- commit 4bbdefe + +------------------------------------------------------------------- +Fri Jul 25 17:50:40 CEST 2025 - fdmanana@suse.com + +- btrfs: fix use-after-free when COWing tree bock and tracing + is enabled (bsc#1235645 CVE-2024-56759). +- commit bd41b6c + +------------------------------------------------------------------- +Thu Jul 24 10:53:52 CEST 2025 - tiwai@suse.de + +- rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879) + Put the same workaround to avoid file truncation of vmlinux and co in + kernel-default-base package, too. +- commit 2329734 + +------------------------------------------------------------------- +Wed Jul 23 15:22:54 CEST 2025 - petr.pavlu@suse.com + +- rpm/kernel-binary.spec.in: Ignore return code from ksymtypes compare + When using suse-kabi-tools, the RPM build invokes 'ksymvers compare' to + compare the resulting symbol CRCs with the reference data. If the values + differ, it then invokes 'ksymtypes compare' to provide a detailed report + explaining why the symbols differ. The build expects the latter + 'ksymtypes compare' command to always return zero, even if the two + compared kABI corpuses are different. + This is currently the case for 'ksymtypes compare'. However, I plan to + update the command to return a non-zero code when the comparison detects + any differences. This should ensure consistent behavior with 'ksymvers + compare'. + Since the build uses 'ksymtypes compare' only for more detailed + diagnostics, ignore its return code. +- commit 5ac1381 + +------------------------------------------------------------------- +Wed Jul 23 14:27:11 CEST 2025 - sjaeckel@suse.de + +- net: atm: fix /proc/net/atm/lec handling (CVE-2025-38180 + bsc#1245970). +- net: atm: add lec_mutex (CVE-2025-38323 bsc#1246473). +- commit 736dcb9 + ------------------------------------------------------------------- Mon Jul 21 11:16:32 CEST 2025 - tiwai@suse.de @@ -1281,6 +1424,12 @@ Wed Jul 9 16:28:15 CEST 2025 - tiwai@suse.de bsc#1245682). - commit 79e6efd +------------------------------------------------------------------- +Wed Jul 9 14:11:01 CEST 2025 - tiwai@suse.de + +- rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337) +- commit 630f139 + ------------------------------------------------------------------- Wed Jul 9 13:08:41 CEST 2025 - ailiop@suse.com @@ -1997,6 +2146,14 @@ Mon Jun 30 14:29:43 CEST 2025 - ykaukab@suse.de current kABI workaround patches before the update. - commit 0c9b3ad +------------------------------------------------------------------- +Mon Jun 30 13:57:15 CEST 2025 - msuchanek@suse.de + +- kernel-obs-qa: Do not depend on srchash when qemu emulation is used + In this case the dependency is never fulfilled + Fixes: 485ae1da2b88 ("kernel-obs-qa: Use srchash for dependency as well") +- commit a840f87 + ------------------------------------------------------------------- Mon Jun 30 13:52:59 CEST 2025 - jgross@suse.com @@ -3100,6 +3257,31 @@ Mon Jun 23 14:08:20 CEST 2025 - neelx@suse.com btrfs_log_inode_parent() (bsc#1245068). - commit 188ca65 +------------------------------------------------------------------- +Mon Jun 23 14:00:47 CEST 2025 - msuchanek@suse.de + +- Remove host-memcpy-hack.h + This might have been usefult at some point but we have more things that + depend on specific library versions today. +- commit 0396c23 + +------------------------------------------------------------------- +Mon Jun 23 13:58:27 CEST 2025 - msuchanek@suse.de + +- Remove compress-vmlinux.sh + /usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux was added in + pesign-obs-integration during SLE12 RC. This workaround can be removed. +- commit 19caac0 + +------------------------------------------------------------------- +Mon Jun 23 13:53:18 CEST 2025 - msuchanek@suse.de + +- Remove try-disable-staging-driver + The config for linux-next is autogenerated from master config, and + defaults filled for missing options. This is unlikely to enable any + staging driver in the first place. +- commit a6f21ed + ------------------------------------------------------------------- Mon Jun 23 12:27:01 CEST 2025 - wqu@suse.com diff --git a/kernel-source.spec b/kernel-source.spec index 4702699..aa6f9d5 100644 --- a/kernel-source.spec +++ b/kernel-source.spec @@ -18,19 +18,19 @@ %define srcversion 6.12 %define patchversion 6.12.0 -%define git_commit b00eabe67e9bafdd23c53dd65d263cbf6dc806fa +%define git_commit 11471211562ff65b726639c1a6165034d305f95a %define variant %{nil} %define gcc_package gcc13 %define gcc_compiler gcc-13 %include %_sourcedir/kernel-spec-macros -%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) +%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-source Version: 6.12.0 %if 0%{?is_kotd} -Release: .gb00eabe +Release: .g1147121 %else Release: 0 %endif @@ -93,11 +93,8 @@ Source62: old-flavors Source63: arch-symbols Source64: package-descriptions Source65: kernel-spec-macros -Source68: host-memcpy-hack.h -Source69: try-disable-staging-driver Source70: kernel-obs-build.spec.in Source71: kernel-obs-qa.spec.in -Source72: compress-vmlinux.sh Source73: dtb.spec.in.in Source74: mkspec-dtb Source75: release-projects diff --git a/kernel-source.spec.in b/kernel-source.spec.in index 50f3fc1..704ba40 100644 --- a/kernel-source.spec.in +++ b/kernel-source.spec.in @@ -93,11 +93,8 @@ Source62: old-flavors Source63: arch-symbols Source64: package-descriptions Source65: kernel-spec-macros -Source68: host-memcpy-hack.h -Source69: try-disable-staging-driver Source70: kernel-obs-build.spec.in Source71: kernel-obs-qa.spec.in -Source72: compress-vmlinux.sh Source73: dtb.spec.in.in Source74: mkspec-dtb Source75: release-projects diff --git a/kernel-subpackage-spec b/kernel-subpackage-spec index 60d890f..70dd40e 100644 --- a/kernel-subpackage-spec +++ b/kernel-subpackage-spec @@ -91,6 +91,11 @@ There is no reason to install this package. %install +# get rid of /usr/lib/rpm/brp-strip-debug +# strip removes too much from the vmlinux ELF binary +export NO_BRP_STRIP_DEBUG=true +export STRIP_KEEP_SYMTAB='*/vmlinux*' + echo "%{?modules}" | tr ', ' '\n\n' > request-modules %scriptdir/kernel-subpackage-build %kernel_package_name %rpm_kver-%rpm_krel %package_name-%version-%release diff --git a/kernel-syms.changes b/kernel-syms.changes index a300cf5..dfe0bf7 100644 --- a/kernel-syms.changes +++ b/kernel-syms.changes @@ -1,3 +1,146 @@ +------------------------------------------------------------------- +Mon Aug 18 10:55:27 CEST 2025 - tiwai@suse.de + +- sched/psi: Fix psi_seq initialization (bsc#1248155). +- commit 2dd3707 + +------------------------------------------------------------------- +Thu Aug 14 14:34:25 CEST 2025 - msuchanek@suse.de + +- Move pesign-obs-integration requirement from kernel-syms to kernel devel + subpackage (bsc#1248108). +- commit e707e41 + +------------------------------------------------------------------- +Mon Aug 11 18:50:04 CEST 2025 - tbogendoerfer@suse.de + +- ice, irdma: fix an off by one in error handling code + (bsc#1247712). +- irdma: free iwdev->rf after removing MSI-X (bsc#1247712). +- ice: Fix signedness bug in ice_init_interrupt_scheme() + (bsc#1247712). +- ice: init flow director before RDMA (bsc#1247712). +- ice: simplify VF MSI-X managing (bsc#1247712). +- ice: enable_rdma devlink param (bsc#1247712). +- ice: treat dyn_allowed only as suggestion (bsc#1247712). +- ice, irdma: move interrupts code to irdma (bsc#1247712). +- ice: get rid of num_lan_msix field (bsc#1247712). +- ice: remove splitting MSI-X between features (bsc#1247712). +- ice: devlink PF MSI-X max and min parameter (bsc#1247712). +- ice: count combined queues using Rx/Tx count (bsc#1247712). +- commit 5c830c5 + +------------------------------------------------------------------- +Mon Aug 11 16:20:47 CEST 2025 - krisman@suse.de + +- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred + (CVE-2025-38453 bsc#1247234). + Conflicts: + series.conf +- commit 909d7fe + +------------------------------------------------------------------- +Fri Aug 8 20:22:52 CEST 2025 - krisman@suse.de + +- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU + (CVE-2025-38453 bsc#1247234). +- commit 171360a + +------------------------------------------------------------------- +Fri Aug 8 16:07:55 CEST 2025 - pfalcato@suse.de + +- tls: always refresh the queue when reading sock (CVE-2025-38471 + bsc#1247450). +- commit 2bcb640 + +------------------------------------------------------------------- +Fri Aug 8 12:17:14 CEST 2025 - sjaeckel@suse.de + +- smc: Fix various oops due to inet_sock type confusion + (CVE-2025-38475 bsc#1247308). +- commit 05e8074 + +------------------------------------------------------------------- +Thu Aug 7 19:33:31 CEST 2025 - dsterba@suse.com + +- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374) +- commit cb82edb + +------------------------------------------------------------------- +Wed Aug 6 13:45:04 CEST 2025 - pfalcato@suse.de + +- nvme-tcp: fix selinux denied when calling sock_sendmsg + (bsc#1247497). +- commit 6082643 + +------------------------------------------------------------------- +Tue Aug 5 16:46:07 CEST 2025 - heming.zhao@suse.com + +- md/md-cluster: handle REMOVE message earlier (bsc#1247057). +- commit 8e8eaf1 + +------------------------------------------------------------------- +Mon Aug 4 09:17:26 CEST 2025 - msuchanek@suse.de + +- kernel-syms.spec: Drop old rpm release number hack (bsc#1247172). +- commit b4fa2d1 + +------------------------------------------------------------------- +Fri Aug 1 12:33:52 CEST 2025 - tiwai@suse.de + +- Move upstreamed sched, SCSI and ACPI patches into sorted section +- commit 836e139 + +------------------------------------------------------------------- +Wed Jul 30 13:02:30 CEST 2025 - jack@suse.cz + +- fs: export anon_inode_make_secure_inode() and fix secretmem + LSM bypass (CVE-2025-38396 bsc#1247156). + Conflicts: + series.conf +- commit 4bbdefe + +------------------------------------------------------------------- +Fri Jul 25 17:50:40 CEST 2025 - fdmanana@suse.com + +- btrfs: fix use-after-free when COWing tree bock and tracing + is enabled (bsc#1235645 CVE-2024-56759). +- commit bd41b6c + +------------------------------------------------------------------- +Thu Jul 24 10:53:52 CEST 2025 - tiwai@suse.de + +- rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879) + Put the same workaround to avoid file truncation of vmlinux and co in + kernel-default-base package, too. +- commit 2329734 + +------------------------------------------------------------------- +Wed Jul 23 15:22:54 CEST 2025 - petr.pavlu@suse.com + +- rpm/kernel-binary.spec.in: Ignore return code from ksymtypes compare + When using suse-kabi-tools, the RPM build invokes 'ksymvers compare' to + compare the resulting symbol CRCs with the reference data. If the values + differ, it then invokes 'ksymtypes compare' to provide a detailed report + explaining why the symbols differ. The build expects the latter + 'ksymtypes compare' command to always return zero, even if the two + compared kABI corpuses are different. + This is currently the case for 'ksymtypes compare'. However, I plan to + update the command to return a non-zero code when the comparison detects + any differences. This should ensure consistent behavior with 'ksymvers + compare'. + Since the build uses 'ksymtypes compare' only for more detailed + diagnostics, ignore its return code. +- commit 5ac1381 + +------------------------------------------------------------------- +Wed Jul 23 14:27:11 CEST 2025 - sjaeckel@suse.de + +- net: atm: fix /proc/net/atm/lec handling (CVE-2025-38180 + bsc#1245970). +- net: atm: add lec_mutex (CVE-2025-38323 bsc#1246473). +- commit 736dcb9 + ------------------------------------------------------------------- Mon Jul 21 11:16:32 CEST 2025 - tiwai@suse.de @@ -1281,6 +1424,12 @@ Wed Jul 9 16:28:15 CEST 2025 - tiwai@suse.de bsc#1245682). - commit 79e6efd +------------------------------------------------------------------- +Wed Jul 9 14:11:01 CEST 2025 - tiwai@suse.de + +- rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337) +- commit 630f139 + ------------------------------------------------------------------- Wed Jul 9 13:08:41 CEST 2025 - ailiop@suse.com @@ -1997,6 +2146,14 @@ Mon Jun 30 14:29:43 CEST 2025 - ykaukab@suse.de current kABI workaround patches before the update. - commit 0c9b3ad +------------------------------------------------------------------- +Mon Jun 30 13:57:15 CEST 2025 - msuchanek@suse.de + +- kernel-obs-qa: Do not depend on srchash when qemu emulation is used + In this case the dependency is never fulfilled + Fixes: 485ae1da2b88 ("kernel-obs-qa: Use srchash for dependency as well") +- commit a840f87 + ------------------------------------------------------------------- Mon Jun 30 13:52:59 CEST 2025 - jgross@suse.com @@ -3100,6 +3257,31 @@ Mon Jun 23 14:08:20 CEST 2025 - neelx@suse.com btrfs_log_inode_parent() (bsc#1245068). - commit 188ca65 +------------------------------------------------------------------- +Mon Jun 23 14:00:47 CEST 2025 - msuchanek@suse.de + +- Remove host-memcpy-hack.h + This might have been usefult at some point but we have more things that + depend on specific library versions today. +- commit 0396c23 + +------------------------------------------------------------------- +Mon Jun 23 13:58:27 CEST 2025 - msuchanek@suse.de + +- Remove compress-vmlinux.sh + /usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux was added in + pesign-obs-integration during SLE12 RC. This workaround can be removed. +- commit 19caac0 + +------------------------------------------------------------------- +Mon Jun 23 13:53:18 CEST 2025 - msuchanek@suse.de + +- Remove try-disable-staging-driver + The config for linux-next is autogenerated from master config, and + defaults filled for missing options. This is unlikely to enable any + staging driver in the first place. +- commit a6f21ed + ------------------------------------------------------------------- Mon Jun 23 12:27:01 CEST 2025 - wqu@suse.com diff --git a/kernel-syms.spec b/kernel-syms.spec index 974a507..a733850 100644 --- a/kernel-syms.spec +++ b/kernel-syms.spec @@ -16,23 +16,18 @@ # -%define git_commit b00eabe67e9bafdd23c53dd65d263cbf6dc806fa +%define git_commit 11471211562ff65b726639c1a6165034d305f95a %define variant %{nil} %include %_sourcedir/kernel-spec-macros Name: kernel-syms Version: 6.12.0 -%if %using_buildservice %if 0%{?is_kotd} -Release: .gb00eabe +Release: .g1147121 %else Release: 0 %endif -%else -%define kernel_source_release %(LC_ALL=C rpm -q kernel-devel%variant-%version --qf "%{RELEASE}" | grep -v 'not installed' || echo 0) -Release: %kernel_source_release -%endif Summary: Kernel Symbol Versions (modversions) License: GPL-2.0-only Group: Development/Sources @@ -48,7 +43,6 @@ Requires: kernel-64kb-devel = %version-%source_rel %ifarch aarch64 ppc64le s390x x86_64 Requires: kernel-default-devel = %version-%source_rel %endif -Requires: pesign-obs-integration Requires: kernel-devel%variant = %version-%source_rel Provides: %name = %version-%source_rel Provides: %name-srchash-%git_commit diff --git a/kernel-syms.spec.in b/kernel-syms.spec.in index 0b1d878..eb0514c 100644 --- a/kernel-syms.spec.in +++ b/kernel-syms.spec.in @@ -23,16 +23,11 @@ Name: kernel-syms@VARIANT@ Version: @RPMVERSION@ -%if %using_buildservice %if 0%{?is_kotd} Release: .g@COMMIT@ %else Release: @RELEASE@ %endif -%else -%define kernel_source_release %(LC_ALL=C rpm -q kernel-devel%variant-%version --qf "%{RELEASE}" | grep -v 'not installed' || echo 0) -Release: %kernel_source_release -%endif Summary: Kernel Symbol Versions (modversions) License: GPL-2.0-only Group: Development/Sources @@ -43,7 +38,6 @@ Prefix: /usr/src AutoReqProv: off Source: README.KSYMS @REQUIRES@ -Requires: pesign-obs-integration Requires: kernel-devel%variant = %version-%source_rel Provides: %name = %version-%source_rel Provides: %name-srchash-%git_commit diff --git a/kernel-zfcpdump.changes b/kernel-zfcpdump.changes index a300cf5..dfe0bf7 100644 --- a/kernel-zfcpdump.changes +++ b/kernel-zfcpdump.changes @@ -1,3 +1,146 @@ +------------------------------------------------------------------- +Mon Aug 18 10:55:27 CEST 2025 - tiwai@suse.de + +- sched/psi: Fix psi_seq initialization (bsc#1248155). +- commit 2dd3707 + +------------------------------------------------------------------- +Thu Aug 14 14:34:25 CEST 2025 - msuchanek@suse.de + +- Move pesign-obs-integration requirement from kernel-syms to kernel devel + subpackage (bsc#1248108). +- commit e707e41 + +------------------------------------------------------------------- +Mon Aug 11 18:50:04 CEST 2025 - tbogendoerfer@suse.de + +- ice, irdma: fix an off by one in error handling code + (bsc#1247712). +- irdma: free iwdev->rf after removing MSI-X (bsc#1247712). +- ice: Fix signedness bug in ice_init_interrupt_scheme() + (bsc#1247712). +- ice: init flow director before RDMA (bsc#1247712). +- ice: simplify VF MSI-X managing (bsc#1247712). +- ice: enable_rdma devlink param (bsc#1247712). +- ice: treat dyn_allowed only as suggestion (bsc#1247712). +- ice, irdma: move interrupts code to irdma (bsc#1247712). +- ice: get rid of num_lan_msix field (bsc#1247712). +- ice: remove splitting MSI-X between features (bsc#1247712). +- ice: devlink PF MSI-X max and min parameter (bsc#1247712). +- ice: count combined queues using Rx/Tx count (bsc#1247712). +- commit 5c830c5 + +------------------------------------------------------------------- +Mon Aug 11 16:20:47 CEST 2025 - krisman@suse.de + +- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred + (CVE-2025-38453 bsc#1247234). + Conflicts: + series.conf +- commit 909d7fe + +------------------------------------------------------------------- +Fri Aug 8 20:22:52 CEST 2025 - krisman@suse.de + +- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU + (CVE-2025-38453 bsc#1247234). +- commit 171360a + +------------------------------------------------------------------- +Fri Aug 8 16:07:55 CEST 2025 - pfalcato@suse.de + +- tls: always refresh the queue when reading sock (CVE-2025-38471 + bsc#1247450). +- commit 2bcb640 + +------------------------------------------------------------------- +Fri Aug 8 12:17:14 CEST 2025 - sjaeckel@suse.de + +- smc: Fix various oops due to inet_sock type confusion + (CVE-2025-38475 bsc#1247308). +- commit 05e8074 + +------------------------------------------------------------------- +Thu Aug 7 19:33:31 CEST 2025 - dsterba@suse.com + +- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374) +- commit cb82edb + +------------------------------------------------------------------- +Wed Aug 6 13:45:04 CEST 2025 - pfalcato@suse.de + +- nvme-tcp: fix selinux denied when calling sock_sendmsg + (bsc#1247497). +- commit 6082643 + +------------------------------------------------------------------- +Tue Aug 5 16:46:07 CEST 2025 - heming.zhao@suse.com + +- md/md-cluster: handle REMOVE message earlier (bsc#1247057). +- commit 8e8eaf1 + +------------------------------------------------------------------- +Mon Aug 4 09:17:26 CEST 2025 - msuchanek@suse.de + +- kernel-syms.spec: Drop old rpm release number hack (bsc#1247172). +- commit b4fa2d1 + +------------------------------------------------------------------- +Fri Aug 1 12:33:52 CEST 2025 - tiwai@suse.de + +- Move upstreamed sched, SCSI and ACPI patches into sorted section +- commit 836e139 + +------------------------------------------------------------------- +Wed Jul 30 13:02:30 CEST 2025 - jack@suse.cz + +- fs: export anon_inode_make_secure_inode() and fix secretmem + LSM bypass (CVE-2025-38396 bsc#1247156). + Conflicts: + series.conf +- commit 4bbdefe + +------------------------------------------------------------------- +Fri Jul 25 17:50:40 CEST 2025 - fdmanana@suse.com + +- btrfs: fix use-after-free when COWing tree bock and tracing + is enabled (bsc#1235645 CVE-2024-56759). +- commit bd41b6c + +------------------------------------------------------------------- +Thu Jul 24 10:53:52 CEST 2025 - tiwai@suse.de + +- rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879) + Put the same workaround to avoid file truncation of vmlinux and co in + kernel-default-base package, too. +- commit 2329734 + +------------------------------------------------------------------- +Wed Jul 23 15:22:54 CEST 2025 - petr.pavlu@suse.com + +- rpm/kernel-binary.spec.in: Ignore return code from ksymtypes compare + When using suse-kabi-tools, the RPM build invokes 'ksymvers compare' to + compare the resulting symbol CRCs with the reference data. If the values + differ, it then invokes 'ksymtypes compare' to provide a detailed report + explaining why the symbols differ. The build expects the latter + 'ksymtypes compare' command to always return zero, even if the two + compared kABI corpuses are different. + This is currently the case for 'ksymtypes compare'. However, I plan to + update the command to return a non-zero code when the comparison detects + any differences. This should ensure consistent behavior with 'ksymvers + compare'. + Since the build uses 'ksymtypes compare' only for more detailed + diagnostics, ignore its return code. +- commit 5ac1381 + +------------------------------------------------------------------- +Wed Jul 23 14:27:11 CEST 2025 - sjaeckel@suse.de + +- net: atm: fix /proc/net/atm/lec handling (CVE-2025-38180 + bsc#1245970). +- net: atm: add lec_mutex (CVE-2025-38323 bsc#1246473). +- commit 736dcb9 + ------------------------------------------------------------------- Mon Jul 21 11:16:32 CEST 2025 - tiwai@suse.de @@ -1281,6 +1424,12 @@ Wed Jul 9 16:28:15 CEST 2025 - tiwai@suse.de bsc#1245682). - commit 79e6efd +------------------------------------------------------------------- +Wed Jul 9 14:11:01 CEST 2025 - tiwai@suse.de + +- rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337) +- commit 630f139 + ------------------------------------------------------------------- Wed Jul 9 13:08:41 CEST 2025 - ailiop@suse.com @@ -1997,6 +2146,14 @@ Mon Jun 30 14:29:43 CEST 2025 - ykaukab@suse.de current kABI workaround patches before the update. - commit 0c9b3ad +------------------------------------------------------------------- +Mon Jun 30 13:57:15 CEST 2025 - msuchanek@suse.de + +- kernel-obs-qa: Do not depend on srchash when qemu emulation is used + In this case the dependency is never fulfilled + Fixes: 485ae1da2b88 ("kernel-obs-qa: Use srchash for dependency as well") +- commit a840f87 + ------------------------------------------------------------------- Mon Jun 30 13:52:59 CEST 2025 - jgross@suse.com @@ -3100,6 +3257,31 @@ Mon Jun 23 14:08:20 CEST 2025 - neelx@suse.com btrfs_log_inode_parent() (bsc#1245068). - commit 188ca65 +------------------------------------------------------------------- +Mon Jun 23 14:00:47 CEST 2025 - msuchanek@suse.de + +- Remove host-memcpy-hack.h + This might have been usefult at some point but we have more things that + depend on specific library versions today. +- commit 0396c23 + +------------------------------------------------------------------- +Mon Jun 23 13:58:27 CEST 2025 - msuchanek@suse.de + +- Remove compress-vmlinux.sh + /usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux was added in + pesign-obs-integration during SLE12 RC. This workaround can be removed. +- commit 19caac0 + +------------------------------------------------------------------- +Mon Jun 23 13:53:18 CEST 2025 - msuchanek@suse.de + +- Remove try-disable-staging-driver + The config for linux-next is autogenerated from master config, and + defaults filled for missing options. This is unlikely to enable any + staging driver in the first place. +- commit a6f21ed + ------------------------------------------------------------------- Mon Jun 23 12:27:01 CEST 2025 - wqu@suse.com diff --git a/kernel-zfcpdump.spec b/kernel-zfcpdump.spec index b50e757..6e0cb9f 100644 --- a/kernel-zfcpdump.spec +++ b/kernel-zfcpdump.spec @@ -19,7 +19,7 @@ %define srcversion 6.12 %define patchversion 6.12.0 -%define git_commit b00eabe67e9bafdd23c53dd65d263cbf6dc806fa +%define git_commit 11471211562ff65b726639c1a6165034d305f95a %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -37,12 +37,12 @@ %include %_sourcedir/kernel-spec-macros -%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) +%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,mkspec-dtb,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-zfcpdump Version: 6.12.0 %if 0%{?is_kotd} -Release: .gb00eabe +Release: .g1147121 %else Release: 0 %endif @@ -202,11 +202,8 @@ Source62: old-flavors Source63: arch-symbols Source64: package-descriptions Source65: kernel-spec-macros -Source68: host-memcpy-hack.h -Source69: try-disable-staging-driver Source70: kernel-obs-build.spec.in Source71: kernel-obs-qa.spec.in -Source72: compress-vmlinux.sh Source73: dtb.spec.in.in Source74: mkspec-dtb Source75: release-projects @@ -270,11 +267,8 @@ NoSource: 62 NoSource: 63 NoSource: 64 NoSource: 65 -NoSource: 68 -NoSource: 69 NoSource: 70 NoSource: 71 -NoSource: 72 NoSource: 73 NoSource: 74 NoSource: 75 @@ -763,6 +757,7 @@ Provides: %name-devel = %version-%source_rel Provides: multiversion(kernel) %if ! %build_vanilla && ! %vanilla_only Requires: kernel-devel%variant = %version-%source_rel +Requires: pesign-obs-integration Recommends: make Recommends: gcc Recommends: perl @@ -1239,7 +1234,6 @@ export KBUILD_VERBOSE=0 export KBUILD_SYMTYPES=1 export KBUILD_BUILD_USER=geeko export KBUILD_BUILD_HOST=buildhost -export HOST_EXTRACFLAGS="-include %_sourcedir/host-memcpy-hack.h" EOF source .kernel-binary.spec.buildenv @@ -1406,20 +1400,11 @@ source .kernel-binary.spec.buildenv mkdir -p %_topdir/OTHER log=%_topdir/OTHER/make-stderr.log -while true; do - make all $MAKE_ARGS 2> >(tee "$log") - if test "${PIPESTATUS[0]}" -eq 0; then - break - fi - # In the linux-next and vanilla branches, we try harder to build a - # package. - if test 0%vanilla_only -gt 0 && - %_sourcedir/try-disable-staging-driver "$log"; then - echo "Retrying make" - else - exit 1 - fi -done +make all $MAKE_ARGS 2> >(tee "$log") +result="${PIPESTATUS[0]}" +if ! test "$result" -eq 0; then + exit "$result" +fi %if 0%{?klp_ipa_clones} && %generate_compile_commands # Generate compile_commands.json @@ -1455,17 +1440,9 @@ add_vmlinux() # mark the file 0644 again chmod +x %buildroot/$vmlinux if test $1 == "--compressed"; then - # avoid using the gzip -n option to make kdump happy (bnc#880848#c20) ts="$(head -n1 %_sourcedir/source-timestamp)" touch -d "$ts" %buildroot/$vmlinux touch %buildroot/$vmlinux.%{compress_vmlinux} -%if 0%{?__debug_package:1} - # compress the vmlinux image after find-debuginfo.sh has processed it -%global __debug_install_post %__debug_install_post \ -%_sourcedir/compress-vmlinux.sh %buildroot/boot/vmlinux-%kernelrelease-%build_flavor -%else - %_sourcedir/compress-vmlinux.sh %buildroot/$vmlinux -%endif ghost_vmlinux=true else ghost_vmlinux=false @@ -1706,7 +1683,7 @@ if [ %CONFIG_MODULES = y ]; then ksymtypes compare %{?_smp_mflags} \ --filter-symbol-list=%my_builddir/changed-exports \ %my_builddir/kabi/%cpu_arch/symtypes-%build_flavor \ - %my_builddir/symtypes-%build_flavor + %my_builddir/symtypes-%build_flavor || true %endif # %ignore_kabi_badness is defined in the Kernel:* projects in the diff --git a/linux-6.12.tar.xz b/linux-6.12.tar.xz index 52be1fa..c8b7c0a 100644 --- a/linux-6.12.tar.xz +++ b/linux-6.12.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:b1a2562be56e42afb3f8489d4c2a7ac472ac23098f1ef1c1e40da601f54625eb -size 147906904 +oid sha256:145ba145326ea507873232c8ed7b5ada5797d72e70dc144ef78baf30781ee939 +size 148380116 diff --git a/mkspec b/mkspec index 61b2bf8..aaf821c 100644 --- a/mkspec +++ b/mkspec @@ -223,7 +223,7 @@ if ($variant eq "") { my $syms_archs; for my $flavor (sort keys(%syms_flavor_archs)) { next if $flavor eq "vanilla"; - next if $flavor eq "rt"; + next if $flavor eq "rt" && !$variant; my @archs = arch2rpm(@{$syms_flavor_archs{$flavor}}); $syms_archs{$_} = 1 for @archs; $requires .= "%ifarch @archs\n"; diff --git a/patches.kabi.tar.bz2 b/patches.kabi.tar.bz2 index c951232..5c83d16 100644 --- a/patches.kabi.tar.bz2 +++ b/patches.kabi.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:2b8eb6d1ac7bd46b81bc3171dd2236979200a215a269f3571c2baca377db5802 -size 5006 +oid sha256:dcd04a81e68b518f8b8f8de37b8c46fa1980e67a2ce3b59fb0e24c799443d5d6 +size 5466 diff --git a/patches.suse.tar.bz2 b/patches.suse.tar.bz2 index 5cbdf08..0a49d7d 100644 --- a/patches.suse.tar.bz2 +++ b/patches.suse.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:645e65a988288c04ae37932a68849b17fc4895d362303f6bfad6fd11e58e91c7 -size 8867299 +oid sha256:4b4324e9943cf874f6afe6a7a14a89285075d6b5271e51f751d675ff2b9c33f7 +size 8890368 diff --git a/series.conf b/series.conf index 7b387a4..37ad7ef 100644 --- a/series.conf +++ b/series.conf @@ -3303,6 +3303,7 @@ patches.suse/i2c-microchip-core-actually-use-repeated-sends.patch patches.suse/i2c-microchip-core-fix-ghost-detections.patch patches.suse/btrfs-fix-use-after-free-waiting-for-encoded-read-en.patch + patches.suse/btrfs-fix-use-after-free-when-COWing-tree-bock-and-t.patch patches.suse/btrfs-check-folio-mapping-after-unlock-in-relocate_o.patch patches.suse/btrfs-check-folio-mapping-after-unlock-in-put_file_d.patch patches.suse/btrfs-fix-race-with-memory-mapped-writes-when-activa.patch @@ -7000,6 +7001,7 @@ patches.suse/nvme-pci-remove-stale-comment.patch patches.suse/nvmet-fc-Remove-unused-functions.patch patches.suse/nvmet-pci-epf-Always-configure-BAR0-as-64-bit.patch + patches.suse/nvme-tcp-fix-selinux-denied-when-calling-sock_sendmsg.patch patches.suse/ata-libata-core-Add-external-to-the-libata.force-ker.patch patches.suse/ata-libata-eh-Do-not-use-ATAPI-DMA-for-a-device-limi.patch patches.suse/ahci-add-PCI-ID-for-Marvell-88SE9215-SATA-Controller.patch @@ -7041,12 +7043,22 @@ patches.suse/net-flush_backlog-small-changes.patch patches.suse/ipv4-ip_gre-Fix-set-but-not-used-warning-in-ipgre_er.patch patches.suse/net-page_pool-don-t-cast-mp-param-to-devmem.patch + patches.suse/ice-count-combined-queues-using-Rx-Tx-count.patch + patches.suse/ice-devlink-PF-MSI-X-max-and-min-parameter.patch + patches.suse/ice-remove-splitting-MSI-X-between-features.patch + patches.suse/ice-get-rid-of-num_lan_msix-field.patch + patches.suse/ice-irdma-move-interrupts-code-to-irdma.patch + patches.suse/ice-treat-dyn_allowed-only-as-suggestion.patch + patches.suse/ice-enable_rdma-devlink-param.patch + patches.suse/ice-simplify-VF-MSI-X-managing.patch + patches.suse/ice-init-flow-director-before-RDMA.patch patches.suse/net-usb-qmi_wwan-add-Telit-Cinterion-FN990B-composit.patch patches.suse/net-page_pool-avoid-false-positive-warning-if-NAPI-w.patch patches.suse/r8152-add-vendor-device-ID-pair-for-Dell-Alienware-A.patch patches.suse/ice-Don-t-check-device-type-when-checking-GNSS-prese.patch patches.suse/ice-Remove-unnecessary-ice_is_e8xx-functions.patch patches.suse/net-usb-asix_devices-add-FiberGecko-DeviceID.patch + patches.suse/ice-Fix-signedness-bug-in-ice_init_interrupt_scheme.patch patches.suse/bnxt_en-Set-NPAR-1.2-support-when-registering-with-f.patch patches.suse/bnxt_en-Refactor-completion-ring-allocation-logic-fo.patch patches.suse/bnxt_en-Refactor-TX-ring-allocation-logic.patch @@ -8702,6 +8714,8 @@ patches.suse/HID-quirks-Add-ADATA-XPG-alpha-wireless-mouse-suppor.patch patches.suse/HID-bpf-abort-dispatch-if-device-destroyed.patch patches.suse/RDMA-rxe-Fix-slab-use-after-free-Read-in-rxe_queue_c.patch + patches.suse/irdma-free-iwdev-rf-after-removing-MSI-X.patch + patches.suse/ice-irdma-fix-an-off-by-one-in-error-handling-code.patch patches.suse/RDMA-core-Fix-KASAN-slab-use-after-free-Read-in-ib_r.patch patches.suse/ALSA-seq-Fix-delivery-of-UMP-events-to-group-ports.patch patches.suse/ALSA-ump-Fix-a-typo-of-snd_ump_stream_msg_device_inf.patch @@ -9741,6 +9755,7 @@ patches.suse/ASoC-Intel-avs-Fix-deadlock-when-the-failing-IPC-is-.patch patches.suse/ASoC-Intel-avs-Verify-content-returned-by-parse_int_.patch patches.suse/genksyms-Fix-enum-consts-from-a-reference-affecting-new-va.patch + patches.suse/do_change_type-refuse-to-operate-on-unmounted-not-ou.patch patches.suse/PCI-MSI-Size-device-MSI-domain-with-the-maximum-numb.patch patches.suse/x86-iopl-Cure-TIF_IO_BITMAP-inconsistencies.patch patches.suse/tools-power-turbostat-Fix-AMD-package-energy-reporting.patch @@ -9836,6 +9851,8 @@ patches.suse/net-lan743x-fix-potential-out-of-bounds-write-in-lan743x_p.patch patches.suse/calipso-Fix-null-ptr-deref-in-calipso_req_-set-del-a.patch patches.suse/NFC-nci-uart-Set-tty-disc_data-only-in-success-path.patch + patches.suse/net-atm-add-lec_mutex.patch + patches.suse/net-atm-fix-proc-net-atm-lec-handling.patch patches.suse/wifi-mac80211-drop-invalid-source-address-OCB-frames.patch patches.suse/wifi-ath6kl-remove-WARN-on-bad-firmware-input.patch patches.suse/wifi-carl9170-do-not-ping-device-which-has-failed-to.patch @@ -9977,6 +9994,7 @@ patches.suse/scsi-qla4xxx-Fix-missing-DMA-mapping-error-in-qla4xxx_allo.patch patches.suse/scsi-sd-Fix-VPD-page-0xb7-length-check.patch patches.suse/scsi-core-Enforce-unlimited-max_segment_size-when-virt_bou.patch + patches.suse/fs-export-anon_inode_make_secure_inode-and-fix-secre.patch patches.suse/nvme-Fix-incorrect-cdw15-value-in-passthru-error-log.patch patches.suse/nvmet-fix-memory-leak-of-bio-integrity.patch patches.suse/nvme-pci-refresh-visible-attrs-after-being-checked.patch @@ -10080,6 +10098,7 @@ patches.suse/net-phy-microchip-Use-genphy_soft_reset-to-purge-sta.patch patches.suse/net-phy-microchip-limit-100M-workaround-to-link-down.patch patches.suse/can-m_can-m_can_handle_lost_msg-downgrade-msg-lost-i.patch + patches.suse/io_uring-msg_ring-ensure-io_kiocb-freeing-is-deferre.patch patches.suse/nbd-fix-uaf-in-nbd_genl_connect-error-path.patch patches.suse/drm-xe-pf-Clear-all-LMTT-pages-on-alloc.patch patches.suse/drm-xe-Allocate-PF-queue-size-on-pow2-boundary.patch @@ -10101,6 +10120,7 @@ patches.suse/net-sched-sch_qfq-Fix-race-condition-on-qfq_aggregat.patch patches.suse/af_packet-fix-the-SO_SNDTIMEO-constraint-not-effecti.patch patches.suse/rpl-Fix-use-after-free-in-rpl_do_srh_inline.patch + patches.suse/smc-Fix-various-oops-due-to-inet_sock-type-confusion.patch patches.suse/net-phy-Don-t-register-LEDs-for-genphy.patch patches.suse/usb-net-sierra-check-for-no-status-endpoint.patch patches.suse/can-tcan4x5x-fix-reset-gpio-usage-during-probe.patch @@ -10109,6 +10129,7 @@ patches.suse/wifi-cfg80211-remove-scan-request-n_channels-counted.patch patches.suse/msft-hv-3301-hv_netvsc-Set-VF-priv_flags-to-IFF_NO_ADDRCONF-befor.patch patches.suse/virtio-net-fix-recursived-rtnl_lock-during-probe.patch + patches.suse/tls-always-refresh-the-queue-when-reading-sock.patch patches.suse/net-sched-Return-NULL-when-htb_lookup_leaf-encounter.patch patches.suse/Bluetooth-Fix-null-ptr-deref-in-l2cap_sock_resume_cb.patch patches.suse/Bluetooth-hci_sync-fix-connectable-extended-advertis.patch @@ -10173,8 +10194,7 @@ patches.suse/msft-hv-3300-tools-hv-fcopy-Fix-irregularities-with-size-of-ring-.patch patches.suse/i2c-stm32-fix-the-device-used-for-the-DMA-map.patch patches.suse/i2c-stm32f7-unmap-DMA-mapped-buffer.patch - - # tip/tip + patches.suse/ACPI-PRM-Reduce-unnecessary-printing-to-avoid-user-c.patch patches.suse/sched-eevdf-Correct-the-comment-in-place_entity.patch patches.suse/sched-fair-Bump-sd-max_newidle_lb_cost-when-newidle-balance-fails.patch patches.suse/sched-psi-Optimize-psi_group_change-cpu_clock-usage.patch @@ -10185,8 +10205,6 @@ patches.suse/sched-fair-Limit-run-to-parity-to-the-min-slice-of-enqueued-entities.patch patches.suse/sched-fair-Fix-entity-s-lag-with-run-to-parity.patch patches.suse/sched-fair-Always-trigger-resched-at-the-end-of-a-protected-period.patch - - # mkp/scsi queue patches.suse/scsi-lpfc-Revise-logging-format-for-failed-CT-MIB-re.patch patches.suse/scsi-lpfc-Update-debugfs-trace-ring-initialization-m.patch patches.suse/scsi-lpfc-Check-for-hdwq-null-ptr-when-cleaning-up-l.patch @@ -10200,6 +10218,7 @@ patches.suse/scsi-lpfc-Modify-end-of-life-adapters-model-descript.patch patches.suse/scsi-lpfc-Update-lpfc-version-to-14.4.0.10.patch patches.suse/scsi-lpfc-Copyright-updates-for-14.4.0.10-patches.patch + patches.suse/sched-psi-Fix-psi_seq-initialization.patch # out-of-tree patches patches.suse/powerpc-pseries-dlpar-Search-DRC-index-from-ibm-drc-.patch @@ -10229,7 +10248,6 @@ patches.suse/kdump-wait-for-dma-to-time-out-when-using-cma.patch +hare patches.suse/net-dcb-check-for-detached-device-before-executing-c.patch patches.suse/s390-boot-Use-D__DISABLE_EXPORTS.patch - patches.suse/ACPI-PRM-Reduce-unnecessary-printing-to-avoid-user-c.patch ######################################################## # kbuild/module infrastructure fixes @@ -10355,6 +10373,7 @@ # Block layer ######################################################## patches.suse/md-display-timeout-error.patch + patches.suse/md-md-cluster-handle-REMOVE-message-earlier.patch ######################################################## # Networking core @@ -10647,6 +10666,7 @@ patches.kabi/bpf-Do-not-include-stack-ptr-register-in-precision-b.patch patches.kabi/drm_framebuffer-kabi-workaround.patch patches.kabi/bluetooth-hci_dev-kabi-workaround.patch + patches.kabi/kabi-io_uring-msg_ring-ensure-io_kiocb-freeing-is-deferre.patch ######################################################## # preempt-rt backport converged diff --git a/source-timestamp b/source-timestamp index 3f69af2..2a58eef 100644 --- a/source-timestamp +++ b/source-timestamp @@ -1,3 +1,3 @@ -2025-07-21 10:20:07 +0000 -GIT Revision: b00eabe67e9bafdd23c53dd65d263cbf6dc806fa -GIT Branch: SL-16.0 +2025-08-20 16:45:35 +0000 +GIT Revision: 11471211562ff65b726639c1a6165034d305f95a +GIT Branch: users/vkarasulli/SL-16.0-GA/for-next diff --git a/try-disable-staging-driver b/try-disable-staging-driver deleted file mode 100644 index d315f2a..0000000 --- a/try-disable-staging-driver +++ /dev/null @@ -1,83 +0,0 @@ -#!/bin/bash - -############################################################################# -# Copyright (c) 2011 Novell, Inc. -# Copyright (c) 2012-2022 SUSE LLC -# -# This program is free software; you can redistribute it and/or -# modify it under the terms of version 2 of the GNU General Public License as -# published by the Free Software Foundation. -# -# This program is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -# GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with this program; if not, contact https://www.suse.com/source-code/ -# -############################################################################# - - -# If make fails, check if it happened due to a staging driver and disable it. -# That way, staging does not spoil automatic package building and we also -# do not need to worry about forgetting to reenable manually disabled drivers. - -if test -L source; then - source="source" -else - source="." -fi -if test -f ${source}/scripts/kconfig/Makefile && \ - grep -q syncconfig ${source}/scripts/kconfig/Makefile; then - syncconfig="syncconfig" -else - syncconfig="silentoldconfig" -fi -makefile="$source/drivers/staging/Makefile" -skipped_options=staging-skipped-options -logfile=$1 - -if test -z "$logfile"; then - echo "Usage: $0 logfile" >&2 - exit 1 -fi -if ! test -f "$logfile"; then - echo "$logfile not found" >&2 - exit 1 -fi - -# safety precaution -if test "0$(wc -l "$skipped_options" 2>/dev/null)" -gt 20; then - echo "Possible loop detected in $0, exiting after 20 attempts" >&2 - exit 1 -fi - -# find out if the error happened in drivers/staging -dir=$(sed -rn 's@.*/drivers/staging/([^/]*)/.*: error: .*@\1@p; T; q' "$logfile") -if test -z "$dir"; then - exit 1 -else - echo "Build failed due to drivers/staging/$dir" -fi - -option=$(sed -n 's/obj-\$(\(.*\))[[:space:]]*+=[[:space:]]*'"$dir"'\//\1/p' "$makefile") -if test -z "$option"; then - echo "Cannot determine config option to skip drivers/staging/$dir" >&2 - exit 1 -fi -# we need to be carefull not to loop endlessly -if grep -qsFx "$option" "$skipped_options"; then - echo "$option has already been disabled, but drivers/staging/$dir is still failing" >&2 - exit 1 -fi - -echo "Trying to disable $option" -"$source/scripts/config" --disable "$option" -if ! make $syncconfig $MAKE_ARGS || grep "^$option" .config; then - echo "Could not disable $option" >&2 - exit 1 -fi -echo "$option" >>"$skipped_options" - -exit 0