The kernel rpms
da482b38ea* Tue Jul 12 2022 Justin M. Forbes <jforbes@fedoraproject.org> [5.18.11-0]
- x86/static_call: Serialize __static_call_fixup() properly (Thomas Gleixner)
- x86/speculation: Disable RRSBA behavior (Pawan Gupta)
- x86/kexec: Disable RET on kexec (Konrad Rzeszutek Wilk)
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Thadeu Lima de Souza Cascardo)
- x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry (Peter Zijlstra)
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Pawan Gupta)
- x86/retbleed: Add fine grained Kconfig knobs (Peter Zijlstra)
- x86/cpu/amd: Enumerate BTC_NO (Andrew Cooper)
- x86/common: Stamp out the stepping madness (Peter Zijlstra)
- KVM: VMX: Prevent RSB underflow before vmenter (Josh Poimboeuf)
- x86/speculation: Fill RSB on vmexit for IBRS (Josh Poimboeuf)
- KVM: VMX: Fix IBRS handling after vmexit (Josh Poimboeuf)
- KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS (Josh Poimboeuf)
- KVM: VMX: Convert launched argument to flags (Josh Poimboeuf)
- KVM: VMX: Flatten __vmx_vcpu_run() (Josh Poimboeuf)
- objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} (Josh Poimboeuf)
- x86/speculation: Remove x86_spec_ctrl_mask (Josh Poimboeuf)
- x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit (Josh Poimboeuf)
- x86/speculation: Fix SPEC_CTRL write on SMT state change (Josh Poimboeuf)
- x86/speculation: Fix firmware entry SPEC_CTRL handling (Josh Poimboeuf)
- x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n (Josh Poimboeuf)
- x86/cpu/amd: Add Spectral Chicken (Peter Zijlstra)
- objtool: Add entry UNRET validation (Thadeu Lima de Souza Cascardo)
- x86/bugs: Do IBPB fallback check only once (Josh Poimboeuf)
- x86/bugs: Add retbleed=ibpb (Peter Zijlstra)
- x86/xen: Add UNTRAIN_RET (Peter Zijlstra)
- x86/xen: Rename SYS* entry points (Peter Zijlstra)
- objtool: Update Retpoline validation (Peter Zijlstra)
- intel_idle: Disable IBRS during long idle (Peter Zijlstra)
- x86/bugs: Report Intel retbleed vulnerability (Peter Zijlstra)
- x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() (Peter Zijlstra)
- x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS (Pawan Gupta)
- x86/bugs: Optimize SPEC_CTRL MSR writes (Peter Zijlstra)
- x86/entry: Add kernel IBRS implementation (Thadeu Lima de Souza Cascardo)
- x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value (Peter Zijlstra)
- x86/bugs: Enable STIBP for JMP2RET (Kim Phillips)
- x86/bugs: Add AMD retbleed= boot parameter (Alexandre Chartre)
- x86/bugs: Report AMD retbleed vulnerability (Alexandre Chartre)
- x86: Add magic AMD return-thunk (Thadeu Lima de Souza Cascardo)
- objtool: Treat .text.__x86.* as noinstr (Peter Zijlstra)
- x86/entry: Avoid very early RET (Peter Zijlstra)
- x86: Use return-thunk in asm code (Peter Zijlstra)
- x86/sev: Avoid using __x86_return_thunk (Kim Phillips)
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Peter Zijlstra)
- x86/kvm: Fix SETcc emulation for return thunks (Peter Zijlstra)
- x86/bpf: Use alternative RET encoding (Peter Zijlstra)
- x86/ftrace: Use alternative RET encoding (Peter Zijlstra)
- x86,static_call: Use alternative RET encoding (Peter Zijlstra)
- objtool: skip non-text sections when adding return-thunk sites (Thadeu Lima de Souza Cascardo)
- x86,objtool: Create .return_sites (Peter Zijlstra)
- x86: Undo return-thunk damage (Peter Zijlstra)
- x86/retpoline: Use -mfunction-return (Peter Zijlstra)
- x86/retpoline: Swizzle retpoline thunk (Peter Zijlstra)
- x86/retpoline: Cleanup some #ifdefery (Peter Zijlstra)
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Peter Zijlstra)
- x86/kvm/vmx: Make noinstr clean (Peter Zijlstra)
- x86/entry: Remove skip_r11rcx (Peter Zijlstra)
- x86/entry: Don't call error_entry() for XENPV (Lai Jiangshan)
- x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (Lai Jiangshan)
- x86/entry: Switch the stack after error_entry() returns (Lai Jiangshan)
- x86/traps: Use pt_regs directly in fixup_bad_iret() (Lai Jiangshan)
Resolves:
Signed-off-by: Justin M. Forbes <jforbes@fedoraproject.org>
|
||
|---|---|---|
| .gitignore | ||
| check-kabi | ||
| cpupower.config | ||
| cpupower.service | ||
| filter-aarch64.sh.fedora | ||
| filter-aarch64.sh.rhel | ||
| filter-armv7hl.sh.fedora | ||
| filter-armv7hl.sh.rhel | ||
| filter-modules.sh.fedora | ||
| filter-modules.sh.rhel | ||
| filter-ppc64le.sh.fedora | ||
| filter-ppc64le.sh.rhel | ||
| filter-s390x.sh.fedora | ||
| filter-s390x.sh.rhel | ||
| filter-x86_64.sh.fedora | ||
| filter-x86_64.sh.rhel | ||
| gating.yaml | ||
| generate_all_configs.sh | ||
| kernel-aarch64-debug-fedora.config | ||
| kernel-aarch64-debug-rhel.config | ||
| kernel-aarch64-fedora.config | ||
| kernel-aarch64-rhel.config | ||
| kernel-armv7hl-debug-fedora.config | ||
| kernel-armv7hl-fedora.config | ||
| kernel-armv7hl-lpae-debug-fedora.config | ||
| kernel-armv7hl-lpae-fedora.config | ||
| kernel-local | ||
| kernel-ppc64le-debug-fedora.config | ||
| kernel-ppc64le-debug-rhel.config | ||
| kernel-ppc64le-fedora.config | ||
| kernel-ppc64le-rhel.config | ||
| kernel-s390x-debug-fedora.config | ||
| kernel-s390x-debug-rhel.config | ||
| kernel-s390x-fedora.config | ||
| kernel-s390x-rhel.config | ||
| kernel-s390x-zfcpdump-rhel.config | ||
| kernel-x86_64-debug-fedora.config | ||
| kernel-x86_64-debug-rhel.config | ||
| kernel-x86_64-fedora.config | ||
| kernel-x86_64-rhel.config | ||
| kernel.spec | ||
| kvm_stat.logrotate | ||
| linux-kernel-test.patch | ||
| Makefile.rhelver | ||
| merge.pl | ||
| mod-denylist.sh | ||
| mod-extra.list.fedora | ||
| mod-extra.list.rhel | ||
| mod-internal.list | ||
| mod-sign.sh | ||
| Module.kabi_aarch64 | ||
| Module.kabi_dup_aarch64 | ||
| Module.kabi_dup_ppc64le | ||
| Module.kabi_dup_s390x | ||
| Module.kabi_dup_x86_64 | ||
| Module.kabi_ppc64le | ||
| Module.kabi_s390x | ||
| Module.kabi_x86_64 | ||
| parallel_xz.sh | ||
| partial-kgcov-snip.config | ||
| patch-5.18-redhat.patch | ||
| Patchlist.changelog | ||
| process_configs.sh | ||
| README.rst | ||
| redhatsecureboot301.cer | ||
| redhatsecureboot501.cer | ||
| redhatsecurebootca1.cer | ||
| redhatsecurebootca5.cer | ||
| rheldup3.x509 | ||
| rhelkpatch1.x509 | ||
| rpminspect.yaml | ||
| secureboot_ppc.cer | ||
| secureboot_s390.cer | ||
| sources | ||
| update_scripts.sh | ||
| x509.genkey.centos | ||
| x509.genkey.fedora | ||
| x509.genkey.rhel | ||
=================== The Kernel dist-git =================== The kernel is maintained in a `source tree`_ rather than directly in dist-git. The specfile is maintained as a `template`_ in the source tree along with a set of build scripts to generate configurations, (S)RPMs, and to populate the dist-git repository. The `documentation`_ for the source tree covers how to contribute and maintain the tree. If you're looking for the downstream patch set it's available in the source tree with "git log master..ark-patches" or `online`_. Each release in dist-git is tagged in the source repository so you can easily check out the source tree for a build. The tags are in the format name-version-release, but note release doesn't contain the dist tag since the source can be built in different build roots (Fedora, CentOS, etc.) .. _source tree: https://gitlab.com/cki-project/kernel-ark.git .. _template: https://gitlab.com/cki-project/kernel-ark/-/blob/os-build/redhat/kernel.spec.template .. _documentation: https://gitlab.com/cki-project/kernel-ark/-/wikis/home .. _online: https://gitlab.com/cki-project/kernel-ark/-/commits/ark-patches