From 89494f1123eeea4ad14df49d66cffbdb79a80d68 Mon Sep 17 00:00:00 2001 From: "Justin M. Forbes" Date: Thu, 2 May 2024 08:49:45 -0500 Subject: [PATCH] kernel-6.9.0-0.rc6.20240502git0106679839f7.55 * Thu May 02 2024 Fedora Kernel Team [6.9.0-0.rc6.0106679839f7.55] - redhat: Use redhatsecureboot701 for ppc64le (Jan Stancek) - redhat: switch the kernel package to use certs from system-sb-certs (Jan Stancek) - redhat: replace redhatsecureboot303 signing key with redhatsecureboot601 (Jan Stancek) - redhat: drop certificates that were deprecated after GRUB's BootHole flaw (Jan Stancek) - redhat: correct file name of redhatsecurebootca1 (Jan Stancek) - redhat: align file names with names of signing keys for ppc and s390 (Jan Stancek) Resolves: Signed-off-by: Justin M. Forbes --- Makefile.rhelver | 2 +- kernel.changelog | 13 ++++ kernel.spec | 127 ++++++++++++++++++++-------------------- redhatsecureboot003.cer | Bin 829 -> 0 bytes redhatsecureboot401.cer | Bin 978 -> 0 bytes redhatsecureboot501.cer | Bin 0 -> 964 bytes redhatsecurebootca2.cer | Bin 872 -> 0 bytes redhatsecurebootca4.cer | Bin 934 -> 0 bytes redhatsecurebootca5.cer | Bin 0 -> 920 bytes sources | 6 +- 10 files changed, 79 insertions(+), 69 deletions(-) delete mode 100644 redhatsecureboot003.cer delete mode 100644 redhatsecureboot401.cer create mode 100644 redhatsecureboot501.cer delete mode 100644 redhatsecurebootca2.cer delete mode 100644 redhatsecurebootca4.cer create mode 100644 redhatsecurebootca5.cer diff --git a/Makefile.rhelver b/Makefile.rhelver index 045195d74..913f12fc1 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 99 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 53 +RHEL_RELEASE = 55 # # RHEL_REBASE_NUM diff --git a/kernel.changelog b/kernel.changelog index 25dc9b441..3d49edfaa 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,16 @@ +* Thu May 02 2024 Fedora Kernel Team [6.9.0-0.rc6.0106679839f7.55] +- redhat: Use redhatsecureboot701 for ppc64le (Jan Stancek) +- redhat: switch the kernel package to use certs from system-sb-certs (Jan Stancek) +- redhat: replace redhatsecureboot303 signing key with redhatsecureboot601 (Jan Stancek) +- redhat: drop certificates that were deprecated after GRUB's BootHole flaw (Jan Stancek) +- redhat: correct file name of redhatsecurebootca1 (Jan Stancek) +- redhat: align file names with names of signing keys for ppc and s390 (Jan Stancek) +Resolves: + +* Thu May 02 2024 Fedora Kernel Team [6.9.0-0.rc6.0106679839f7.54] +- Linux v6.9.0-0.rc6.0106679839f7 +Resolves: + * Wed May 01 2024 Fedora Kernel Team [6.9.0-0.rc6.18daea77cca6.53] - redhat/configs: Enable CONFIG_DM_VDO in RHEL (Benjamin Marzinski) - redhat/configs: Enable DRM_NOUVEAU_GSP_DEFAULT everywhere (Neal Gompa) diff --git a/kernel.spec b/kernel.spec index 8b5e54c50..e62f6a266 100644 --- a/kernel.spec +++ b/kernel.spec @@ -163,13 +163,13 @@ Summary: The Linux kernel %define specrpmversion 6.9.0 %define specversion 6.9.0 %define patchversion 6.9 -%define pkgrelease 0.rc6.20240501git18daea77cca6.53 +%define pkgrelease 0.rc6.20240502git0106679839f7.55 %define kversion 6 -%define tarfile_release 6.9-rc6-46-g18daea77cca6 +%define tarfile_release 6.9-rc6-53-g0106679839f7 # This is needed to do merge window version magic %define patchlevel 9 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 0.rc6.20240501git18daea77cca6.53%{?buildid}%{?dist} +%define specrelease 0.rc6.20240502git0106679839f7.55%{?buildid}%{?dist} # This defines the kabi tarball version %define kabiversion 6.9.0 @@ -810,6 +810,10 @@ Source0: linux-%{tarfile_release}.tar.xz Source1: Makefile.rhelver Source2: kernel.changelog +Source10: redhatsecurebootca5.cer +Source13: redhatsecureboot501.cer + +%if %{signkernel} # Name of the packaged file containing signing key %ifarch ppc64le %define signing_key_filename kernel-signing-ppc.cer @@ -818,48 +822,36 @@ Source2: kernel.changelog %define signing_key_filename kernel-signing-s390.cer %endif -%if %{?released_kernel} +# Fedora/ELN pesign macro expects to see these cert file names, see: +# https://github.com/rhboot/pesign/blob/main/src/pesign-rpmbuild-helper.in#L216 +%if 0%{?fedora}%{?eln} +%define pesign_name_0 redhatsecureboot501 +%define secureboot_ca_0 %{SOURCE10} +%define secureboot_key_0 %{SOURCE13} +%endif -Source10: redhatsecurebootca5.cer -Source11: redhatsecurebootca1.cer -Source12: redhatsecureboot501.cer -Source13: redhatsecureboot301.cer -Source14: secureboot_s390.cer -Source15: secureboot_ppc.cer +# RHEL/centos certs come from system-sb-certs +%if 0%{?rhel} && !0%{?eln} +%define secureboot_ca_0 %{_datadir}/pki/sb-certs/secureboot-ca-%{_arch}.cer +%define secureboot_key_0 %{_datadir}/pki/sb-certs/secureboot-kernel-%{_arch}.cer -%define secureboot_ca_0 %{SOURCE10} -%define secureboot_ca_1 %{SOURCE11} +%if 0%{?centos} +%define pesign_name_0 centossecureboot201 +%else %ifarch x86_64 aarch64 -%define secureboot_key_0 %{SOURCE12} %define pesign_name_0 redhatsecureboot501 -%define secureboot_key_1 %{SOURCE13} -%define pesign_name_1 redhatsecureboot301 %endif %ifarch s390x -%define secureboot_key_0 %{SOURCE14} %define pesign_name_0 redhatsecureboot302 %endif %ifarch ppc64le -%define secureboot_key_0 %{SOURCE15} -%define pesign_name_0 redhatsecureboot303 +%define pesign_name_0 redhatsecureboot701 +%endif +%endif +# rhel && !eln %endif -# released_kernel -%else - -Source10: redhatsecurebootca4.cer -Source11: redhatsecurebootca2.cer -Source12: redhatsecureboot401.cer -Source13: redhatsecureboot003.cer - -%define secureboot_ca_0 %{SOURCE10} -%define secureboot_ca_1 %{SOURCE11} -%define secureboot_key_0 %{SOURCE12} -%define pesign_name_0 redhatsecureboot401 -%define secureboot_key_1 %{SOURCE13} -%define pesign_name_1 redhatsecureboot003 - -# released_kernel +# signkernel %endif Source20: mod-denylist.sh @@ -1902,10 +1894,12 @@ openssl x509 -inform der -in %{SOURCE100} -out rheldup3.pem openssl x509 -inform der -in %{SOURCE101} -out rhelkpatch1.pem openssl x509 -inform der -in %{SOURCE102} -out nvidiagpuoot001.pem cat rheldup3.pem rhelkpatch1.pem nvidiagpuoot001.pem > ../certs/rhel.pem +%if %{signkernel} %ifarch s390x ppc64le openssl x509 -inform der -in %{secureboot_ca_0} -out secureboot.pem cat secureboot.pem >> ../certs/rhel.pem %endif +%endif for i in *.config; do sed -i 's@CONFIG_SYSTEM_TRUSTED_KEYS=""@CONFIG_SYSTEM_TRUSTED_KEYS="certs/rhel.pem"@' $i done @@ -2149,14 +2143,12 @@ BuildKernel() { %ifarch x86_64 aarch64 %{log_msg "Sign kernel image"} - %pesign -s -i $SignImage -o vmlinuz.tmp -a %{secureboot_ca_0} -c %{secureboot_key_0} -n %{pesign_name_0} - %pesign -s -i vmlinuz.tmp -o vmlinuz.signed -a %{secureboot_ca_1} -c %{secureboot_key_1} -n %{pesign_name_1} - rm vmlinuz.tmp + %pesign -s -i $SignImage -o vmlinuz.signed -a %{secureboot_ca_0} -c %{secureboot_key_0} -n %{pesign_name_0} %endif %ifarch s390x ppc64le if [ -x /usr/bin/rpm-sign ]; then rpm-sign --key "%{pesign_name_0}" --lkmsign $SignImage --output vmlinuz.signed - elif [ $DoModules -eq 1 ]; then + elif [ "$DoModules" == "1" -a "%{signmodules}" == "1" ]; then chmod +x scripts/sign-file ./scripts/sign-file -p sha256 certs/signing_key.pem certs/signing_key.x509 $SignImage vmlinuz.signed else @@ -2557,9 +2549,7 @@ BuildKernel() { %if %{signkernel} %{log_msg "Sign the EFI UKI kernel"} - %pesign -s -i $KernelUnifiedImage -o $KernelUnifiedImage.tmp -a %{secureboot_ca_0} -c %{secureboot_key_0} -n %{pesign_name_0} - %pesign -s -i $KernelUnifiedImage.tmp -o $KernelUnifiedImage.signed -a %{secureboot_ca_1} -c %{secureboot_key_1} -n %{pesign_name_1} - rm -f $KernelUnifiedImage.tmp + %pesign -s -i $KernelUnifiedImage -o $KernelUnifiedImage.signed -a %{secureboot_ca_0} -c %{secureboot_key_0} -n %{pesign_name_0} if [ ! -s $KernelUnifiedImage.signed ]; then %{log_msg "pesigning failed"} @@ -2681,15 +2671,6 @@ BuildKernel() { %{log_msg "Remove depmod files"} remove_depmod_files -%if %{signmodules} - if [ $DoModules -eq 1 ]; then - %{log_msg "Save the signing keys for modules"} - # Save the signing keys so we can sign the modules in __modsign_install_post - cp certs/signing_key.pem certs/signing_key.pem.sign${Variant:++${Variant}} - cp certs/signing_key.x509 certs/signing_key.x509.sign${Variant:++${Variant}} - fi -%endif - # Move the devel headers out of the root file system %{log_msg "Move the devel headers to RPM_BUILD_ROOT"} mkdir -p $RPM_BUILD_ROOT/usr/src/kernels @@ -2722,24 +2703,29 @@ BuildKernel() { # Red Hat UEFI Secure Boot CA cert, which can be used to authenticate the kernel %{log_msg "Install certs"} mkdir -p $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer - %ifarch x86_64 aarch64 - install -m 0644 %{secureboot_ca_0} $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/kernel-signing-ca-20200609.cer - install -m 0644 %{secureboot_ca_1} $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/kernel-signing-ca-20140212.cer - ln -s kernel-signing-ca-20200609.cer $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/kernel-signing-ca.cer - %else - install -m 0644 %{secureboot_ca_0} $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/kernel-signing-ca.cer - %endif +%if %{signkernel} + install -m 0644 %{secureboot_ca_0} $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/kernel-signing-ca.cer %ifarch s390x ppc64le - if [ $DoModules -eq 1 ]; then - if [ -x /usr/bin/rpm-sign ]; then - install -m 0644 %{secureboot_key_0} $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/%{signing_key_filename} - else - install -m 0644 certs/signing_key.x509.sign${Variant:++${Variant}} $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/kernel-signing-ca.cer - openssl x509 -in certs/signing_key.pem.sign${Variant:++${Variant}} -outform der -out $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/%{signing_key_filename} - chmod 0644 $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/%{signing_key_filename} - fi + if [ -x /usr/bin/rpm-sign ]; then + install -m 0644 %{secureboot_key_0} $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/%{signing_key_filename} fi %endif +%endif + +%if %{signmodules} + if [ $DoModules -eq 1 ]; then + # Save the signing keys so we can sign the modules in __modsign_install_post + cp certs/signing_key.pem certs/signing_key.pem.sign${Variant:++${Variant}} + cp certs/signing_key.x509 certs/signing_key.x509.sign${Variant:++${Variant}} + %ifarch s390x ppc64le + if [ ! -x /usr/bin/rpm-sign ]; then + install -m 0644 certs/signing_key.x509.sign${Variant:++${Variant}} $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/kernel-signing-ca.cer + openssl x509 -in certs/signing_key.pem.sign${Variant:++${Variant}} -outform der -out $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/%{signing_key_filename} + chmod 0644 $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/%{signing_key_filename} + fi + %endif + fi +%endif %if %{with_ipaclones} %{log_msg "install IPA clones"} @@ -3950,6 +3936,17 @@ fi\ # # %changelog +* Thu May 02 2024 Fedora Kernel Team [6.9.0-0.rc6.0106679839f7.55] +- redhat: Use redhatsecureboot701 for ppc64le (Jan Stancek) +- redhat: switch the kernel package to use certs from system-sb-certs (Jan Stancek) +- redhat: replace redhatsecureboot303 signing key with redhatsecureboot601 (Jan Stancek) +- redhat: drop certificates that were deprecated after GRUB's BootHole flaw (Jan Stancek) +- redhat: correct file name of redhatsecurebootca1 (Jan Stancek) +- redhat: align file names with names of signing keys for ppc and s390 (Jan Stancek) + +* Thu May 02 2024 Fedora Kernel Team [6.9.0-0.rc6.0106679839f7.54] +- Linux v6.9.0-0.rc6.0106679839f7 + * Wed May 01 2024 Fedora Kernel Team [6.9.0-0.rc6.18daea77cca6.53] - redhat/configs: Enable CONFIG_DM_VDO in RHEL (Benjamin Marzinski) - redhat/configs: Enable DRM_NOUVEAU_GSP_DEFAULT everywhere (Neal Gompa) diff --git a/redhatsecureboot003.cer b/redhatsecureboot003.cer deleted file mode 100644 index 439b75bf3ae770d62b82116e68f58758e21f2444..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 829 zcmXqLVzxABVp3ed%*4pV#K~~)o6?a_AKRD=c-c6$+C196^D;7WvoaWH8EP1)u`!3T zFbm5ErKTu&B$g-yrzV#cr7Ae(=a(orJ1Q6{Xe6bUBx)MSiSrto7#bKG8k!hd8W~54 z^BS8Q8W@>Exd!@%x(3=1vsAE|6`Yx#mzkHYU<@;`iBSpJJ&ddj%uS5^38Id!^c(kLT-{T5|9AJiUptUCmFl{(tOP z@bBt-z9uD(?ba@KccSZe?SB?AmnpAwf54mb_Dd&nJ&M#h{G65f#ix8NmW)}3M*S?N zXXQ=K_*X{F?429)m5G^=fpKxHL9_u68*`|vFeBrC7A6A*18xwHpM`~)iM_!<7R2FW z5n~ZaJ-YAIv&gK!IfX}-&p4*qTb<5&!9X4)t;`}}Al4w#_~V^>jNRMc=a#nYyT0!B z<=T|ZTF4Q=4UPathBP@_*A*R?U6;C*HNni_@)7=gwp1-;-H9|H@MS{2!}*%`QH85Ub!k;Ye!Y zcHYV?_4gTwul)^n@#X7-1 zdA-S3L_?4Hlzfd}uv15OR#ki6hd9-@e{LKxF*aJuc*WZ@@DO|bgxptOeH;r@UdwAP bmQPtE$Ctk_eP-_rnH|A%4P@6DgV=Ai&7Pw^7Bg+oE;TR6f}}jOA<8= zl?)W%hH^5B2^Xg(C+4IUl{gforeq|R=q2ap8pw(B8W|Xv8CV)vnphf`Mv3zpTNoG` zT0pr5xj5aSZ=efthZ;6_1ZSq_W#*+Tm>3w6;+!T%CFGD`WMyD(V&rEqXkz4IYGPz$ zxOt*a|83fydKaaIGdS`br5@fAZP+Qzhyhu3D3pAj_6ey;znb{1R6v4^w+YXL^=W*1wx;c%gl2n z1FI|#IrMK@dh+)3Dy_pm4PSCc-c336;PO0|bXSpc@wT}&yhZEe7doGJIluRemQY-9 z>E+g+U6&MhD5wO+U$`n1=jY89x6d-@+KLkPxuzSYG+ba}OM5Z%&o9=)K~BwwzgNf@ z?|XA@5|7W9YXQG)ztu6hNUoStUgPrO!NOjPf_>YfwIX+Yp4-s>Y6hRL>nC>Ihc{eL zNJV`YIy|vh?I{y8BLm~&3WG8O9yaDsSz$)T|13-f3AZcY52?MbP zk)VmEbC1qA7J6yvuh*>2w+@$YXjegw8*XsiFfvGSe{l&3etya^J;JKTegRjxL{oLg z%kS?47&XjNJ~V4Dd&I8P^g90Bc@D!3Klo+}bJ#DIvG^vD8lS&ev+Dr=$KAWj`|rPu zQQui}$Ezc|;=DmX(wFaM&PoN_W=f~XL|*sU>dSrQoP+YxpA%|d$z`_PoI5l3yL74E zO>Z}kY(ohiy&3;buQg7(z_w57tjM3sum8M_+Zw-XDZj4H{XKl@TastY3+&sqc$1-1 z%*4gvCs=Mj-&h{BtvM#Hd1!|uI6Eqs8Y&qmz)j<1 z6ca8^O-{^7Eh=#+N=?Z~EYVBO&oz(}=QT1gFf*_;ur#$aF^m%DHMTG?G_-(n4bpHr zK*K-{;sAMU4hYUn&&$k9S1>g&B+4C4j7rFUXJlnyZerwTFlb`rVrpV!WLSSbW=2%q*K_5Lp+g5I)^H z#`Dnk-%mbwR!=QjlT=qTCH}c?^d0uoA&WUyAN(!c_b={K-UFj(qX3D*`h8W$XRhW< zzQXk9WQ_LFh10(My1M`N=QU{owQ`py$L*cP@XEaT+@A%Us!MLo+pTlLQz@$1bgIg0 z$2z~;Ow5c7jEgG_$_#kem_ucS85#exFc~ly@PT;zARY@d6MKV!7>KV5;`11Av2kd# zF|x9i^jcvX2lT$I%+|})J!D&fWnMJ}ttU=^V{?g|f z8M{3FCePlR!9CHXY}WjK&WDz2>HO9LjVpW;e%%uGTfdku`0bgLCdur& zGco`6fB*D3`oM>!v1N|Jo$p?-gl_qiFYG^K+5-NnA15WqKd$IkCTY?ZwWISGhkN4&81j`a@j6 m@wR^$WBhUT_y2m*Z!4~R^Z4ejJyEaw^#519)lPU~6aWA(kap4l literal 0 HcmV?d00001 diff --git a/redhatsecurebootca2.cer b/redhatsecurebootca2.cer deleted file mode 100644 index 43502d6bce455d637e4008d57ac0a46136ed4393..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 872 zcmXqLVoot=V)9wQ%*4pV#L3V;Yf^YfR(_WOFB_*;n@8JsUPeZ4Rt5ttLk$BpHs(+k zW?}iD)D#7e#1e(z)a25lR0XH}{1OFcM+GAVjil6)L`?%Zab81X0}De-14~0ALxU)B zUSo3u3qxZlmn5^A7?qHn!pO?N+{DPwV9>KATxNAgj@GQy<`rmcQSu;_bx1{9qnWiak)~m=Be~!^u-_Gl&)z3O z@2|%*+g2{#eS;_J#i{nKkM4a@)p+=Mw{_vvBY}!cvy76s1-#b=X1BKWNIx-I3LvQD5|rY4e`O-LeG@ zTfW%v1W(@jAiOC!?&vbUI)hy`&#h-a*wZ>eGx%rBshxK?XPxiwUi^$%?7i&CEl&;G z7Tx|M`_A>K%GrE3!`M_Cu4JLufX>MtR<&hmHvU}c{Krz-zx^u{J#bF-@s6syelIso z@D%)zqc67q^OqHWI7~#+o)jE;bR+8eoMy3_-#2rnZ&=;o9=_Ivm*uj(*EEkia=+T9 oAKhtG&%Gx2Fo#=Zz`+N;_m`C1ue{sPaANY}Z}o+(XF2`?0PKunc>n+a diff --git a/redhatsecurebootca4.cer b/redhatsecurebootca4.cer deleted file mode 100644 index 8cb32e68cb5e279e06ed153d983a12a48ee83e69..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 934 zcmXqLVqRp>#MHHbnTe5!iIZWneUz&}74u&MUN%mxHjlRNyo`+8tPBQehGGUHY|No7 zTs*u%sVNE`i6uG;o_Wc7h8hNHAaQ0Md8oKTaB6aCQL2JdetwC9v!jBEf<{tmNus8q zl7Rx;P)4E1mup%v~LqI?UCcc=F1xU9(Qz*dH3< z;xHxUlIxTQ{ygpVd=rH~FFnQb>+-oruP@!dBke7{vF-ZPlZB2e=dUgcxmJJ2;N4?8 z-4nZd($*cB6K~mXozc)fJJ!w-XH*toh{boDbz&qrFC*iJ6gsadEIgpn)tK zbEqsIix`VY(8SZZM`s)hy|nb#Yu4slhs!s#s~E_Gq?K7D48$6+E8qty5N2fj&%$cJ z%*gm3IoP?u!OqAauDg}#=8f#_$E2qmetO&M_TSTcL)9ZQyYyW>0=-tWu+>VG`z(9- z<&^mv>kZfUxKEsLwO^;yzwng!^s{}hC-`-(Dp;i3zq{M7D&t-iquifsDZg8M)?`gC z>Uy+REvUL>>&|-dAHB~H3O>3J&N8tn zo)5fJ?+E)UjXtVaBctq diff --git a/redhatsecurebootca5.cer b/redhatsecurebootca5.cer new file mode 100644 index 0000000000000000000000000000000000000000..dfb0284954861282d1a0ce16c8c5cdc71c27659f GIT binary patch literal 920 zcmXqLVxD5q#8k6@nTe5!iIbtZm{+@~;bN2lFB_*;n@8JsUPeZ4RtAH3LoovpHs(+k zE*{>X)D#7e#1b6^&%9(kLq!95kT^4s1XNrhI5oMnC{@8JKfgr5*-^pNP{}|6ZW6NxP$#b?ru1p1aqn$3D)YB{Qqo zjCvjz?|=HkE#3AN-xTZpws*U~)f@DZ{t~uwMZy8<;F%jD%$u6!n#qYzp^Sryh{C;x9qf@!N=T4ui@b#({ zSD&^p3kNZ=9lAQ9%xdfP9doNToV+k2^LHOF$k^rSH+lBn4DN|8WwYk@gOh`-GK++PSOazi{2=|pjEw(TSPhsN8UG^(J2yDk z85v}s$2n!Cohh=L9dmO1;!`1dZ&Owu*eSkGeWhH)#z-4q!IF#9rGi*nSi5e1Xg%@u zP5+#i&pC2;Tb=%uZ)5zd!nbtq{R2~r<}(LeD%Gml()ge~X-drd^Vzqo9`DbSC@~2Q z;86)aH_^v%Ml4SCh+H~oT z=3=#}vW#p`f-)=EE*rSGY$z>16SDS6o|4l4*#DE+cz({Xnq#@0r}4t)AMDFHyYuIC zJzV?8aYn$hct+5l_p(Lm&CA>W#qO|FNt)`EuGsyG+k|J&PybPO$4TCY?`}tN QZO_yT_T>jB>`3_t0O~_xk^lez literal 0 HcmV?d00001 diff --git a/sources b/sources index 865571442..53e51ee9f 100644 --- a/sources +++ b/sources @@ -1,5 +1,5 @@ SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6 -SHA512 (linux-6.9-rc6-46-g18daea77cca6.tar.xz) = 28182f5751197bd8c4f8864ef23751192c87ab74aeb67ce27a9ff46d18c5c44356dbcb18a96b1718a86bb81e5b75a01c7a231fc4110d28b4ef7255417dbc0de5 -SHA512 (kernel-abi-stablelists-6.9.0.tar.xz) = d946eea829385d66d7b7d230b9e10fd58f3c64c114bde938f6dd8c2c75162f9381ae34dd63e3f0c8ef54362a339943f5a980da8f6af995a8a766a40b4384886f -SHA512 (kernel-kabi-dw-6.9.0.tar.xz) = 6c5c5a2476ebb9bd97901ec8d00c3dba574add657b7b8ad674cb78864e59ec03559ac44efd5c2c90bb710030b6f3768d4619429528730d52385279fbd95d57a3 +SHA512 (linux-6.9-rc6-53-g0106679839f7.tar.xz) = 0798fdc7320c948bc46d8643672e0eb5b5a80265732275df9c357f8f5e3d58a39f12a301f93012ddf8899278e489408cbe43745fd9c8505a29b8290c946eb633 +SHA512 (kernel-abi-stablelists-6.9.0.tar.xz) = eaa72b7a4ac8f73ffac589f68e52ba70c57adc9ba67ae03a7596c5d368d1143f40398e940fdd5d0e5e5ff64d89e4b2bbb5957e2def2a9cf6a8a8f54c577b19a8 +SHA512 (kernel-kabi-dw-6.9.0.tar.xz) = 1efc24c0f85efa363308ae6c1ca76cc58686478386a73f31df7c08b6c1a7caa067e0afc1d0fedd52d8764c6115d0b4c4f54ea16550bba77da69fdcae3671b097