# changelog

author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-483.el9]
changelog:
  - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-45149]
  - mm/shmem: disable PMD-sized page cache if needed (Donald Dutile) [RHEL-14441]
  - mm/filemap: skip to create PMD-sized page cache if needed (Donald Dutile) [RHEL-14441]
  - mm/readahead: limit page cache size in page_cache_ra_order() (Donald Dutile) [RHEL-14441]
  - readahead: use ilog2 instead of a while loop in page_cache_ra_order() (Donald Dutile) [RHEL-14441]
  - mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (Donald Dutile) [RHEL-14441]
  - filemap: add helper mapping_max_folio_size() (Donald Dutile) [RHEL-14441]
  - filemap: Allow __filemap_get_folio to allocate large folios (Donald Dutile) [RHEL-14441]
  - filemap: Add fgf_t typedef (Donald Dutile) [RHEL-14441]
  - cpuidle: ACPI/intel: fix MWAIT hint target C-state computation (David Arcari) [RHEL-47255]
  - intel_idle: Add Meteorlake support (David Arcari) [RHEL-47255]
  - x86: Fix CPUIDLE_FLAG_IRQ_ENABLE leaking timer reprogram (David Arcari) [RHEL-47255]
  - coredump: Proactively round up to kmalloc bucket size (Audra Mitchell) [RHEL-44555]
  - efi/unaccepted: touch soft lockup during memory accept (CKI Backport Bot) [RHEL-46580] {CVE-2024-36936}
  - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: mhi: drop driver owner assignment (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: t7xx: Split 64bit accesses to fix alignment issues (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: core: make wwan_class constant (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: hwsim: make wwan_hwsim_class constant (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: t7xx: Prefer struct_size over open coded arithmetic (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: core: constify the struct device_type usage (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: t7xx: Add fastboot WWAN port (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: t7xx: Infrastructure for early port configuration (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: t7xx: Add sysfs attribute for device state machine (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - wwan: core: Add WWAN fastboot port type (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: qcom_bam_dmux: Convert to platform remove callback returning void (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: replace deprecated strncpy with strscpy (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - drivers: net: wwan: iosm: Fixed multiple typos in multiple files (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - Revert "net: wwan: iosm: enable runtime pm support for 7560" (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - drivers: net: wwan: wwan_core.c: resolved spelling mistake (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: t7xx: Add __counted_by for struct t7xx_fsm_event and use struct_size() (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - wwan: core: Use the bitmap API to allocate bitmaps (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: iosm: enable runtime pm support for 7560 (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: iosm: clean up unused struct members (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: iosm: remove unused enum definition (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: iosm: remove unused macro definition (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - selftests: net: bridge: increase IGMP/MLD exclude timeout membership interval (Hangbin Liu) [RHEL-45825]
  - selftests: test_bridge_neigh_suppress.sh: Fix failures due to duplicate MAC (Hangbin Liu) [RHEL-45825]
  - selftests: reuseaddr_conflict: add missing new line at the end of the output (Hangbin Liu) [RHEL-45825]
  - selftests: forwarding: Fix ping failure due to short timeout (Hangbin Liu) [RHEL-45825]
  - selftests: net: more strict check in net_helper (Hangbin Liu) [RHEL-45825]
  - seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (Hangbin Liu) [RHEL-45826]
  - ipv6: prevent possible NULL dereference in rt6_probe() (Hangbin Liu) [RHEL-45826]
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Hangbin Liu) [RHEL-45826]
  - net/ipv6: Fix the RT cache flush via sysctl using a previous delay (Hangbin Liu) [RHEL-45826]
  - ipv6: fix possible race in __fib6_drop_pcpu_from() (Hangbin Liu) [RHEL-45826]
  - net/ipv6: Fix route deleting failure when metric equals 0 (Hangbin Liu) [RHEL-45826]
  - ipv6: prevent NULL dereference in ip6_output() (Hangbin Liu) [RHEL-45826]
  - net: ipv6: fix wrong start position when receive hop-by-hop fragment (Hangbin Liu) [RHEL-45826]
  - ipv6: Fix infinite recursion in fib6_dump_done(). (Hangbin Liu) [RHEL-45826]
  - ACPI: CPPC: Fix access width used for PCC registers (Mark Langsdorf) [RHEL-37532] {CVE-2024-35995}
  - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro (Mark Langsdorf) [RHEL-37532] {CVE-2024-35995}
  - ACPI: CPPC: Use access_width over bit_width for system memory accesses (Mark Langsdorf) [RHEL-37532] {CVE-2024-35995}
  - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - net: usb: ax88179_178a: Add check for usbnet_get_endpoints() (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - net: usb: ax88179_178a: stop lying about skb->truesize (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - net: usb: ax88179_178a: non necessary second random mac address (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - net: usb: ax88179_178a: avoid the interface always configured as random address (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - i2c: designware: Add ACPI ID for Granite Rapids-D I2C controller (David Arcari) [RHEL-29353]
  - prinkt/nbcon: Add a scheduling point to nbcon_kthread_func(). (Derek Barbosa) [RHEL-37526]
  - rhel: add ICE_HWMON cfg (Petr Oros) [RHEL-17486]
  - ice: use proper macro for testing bit (Petr Oros) [RHEL-17486]
  - ice: Reject pin requests with unsupported flags (Petr Oros) [RHEL-17486]
  - ice: Don't process extts if PTP is disabled (Petr Oros) [RHEL-17486]
  - ice: Fix improper extts handling (Petr Oros) [RHEL-17486]
  - ice: Rebuild TC queues on VSI queue reconfiguration (Petr Oros) [RHEL-17486]
  - ice: Fix VSI list rule with ICE_SW_LKUP_LAST type (Petr Oros) [RHEL-17486]
  - ice: fix 200G link speed message log (Petr Oros) [RHEL-17486]
  - ice: avoid IRQ collision to fix init failure on ACPI S3 resume (Petr Oros) [RHEL-17486]
  - ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors() (Petr Oros) [RHEL-17486]
  - ice: add flag to distinguish reset from .ndo_bpf in XDP rings config (Petr Oros) [RHEL-17486]
  - ice: remove af_xdp_zc_qps bitmap (Petr Oros) [RHEL-17486]
  - ice: fix reads from NVM Shadow RAM on E830 and E825-C devices (Petr Oros) [RHEL-17486]
  - ice: fix iteration of TLVs in Preserved Fields Area (Petr Oros) [RHEL-17486]
  - ice: fix 200G PHY types to link speed mapping (Petr Oros) [RHEL-17486]
  - ice: fix accounting if a VLAN already exists (Petr Oros) [RHEL-17486]
  - ice: Interpret .set_channels() input differently (Petr Oros) [RHEL-17486]
  - ice: Fix package download algorithm (Petr Oros) [RHEL-17486]
  - ice: remove correct filters during eswitch release (Petr Oros) [RHEL-17486]
  - ice: refactor struct ice_vsi_cfg_params to be inside of struct ice_vsi (Petr Oros) [RHEL-17486]
  - ice: Deduplicate tc action setup (Petr Oros) [RHEL-17486]
  - ice: update E830 device ids and comments (Petr Oros) [RHEL-17486]
  - ice: add additional E830 device ids (Petr Oros) [RHEL-17486]
  - ice: ensure the copied buf is NUL terminated (Petr Oros) [RHEL-17486]
  - ice: fix LAG and VF lock dependency in ice_reset_vf() (Petr Oros) [RHEL-17486]
  - ice: Fix checking for unsupported keys on non-tunnel device (Petr Oros) [RHEL-17486]
  - ice: tc: allow zero flags in parsing tc flower (Petr Oros) [RHEL-17486]
  - ice: tc: check src_vsi in case of traffic from VF (Petr Oros) [RHEL-17486]
  - ice: store VF relative MSI-X index in q_vector->vf_reg_idx (Petr Oros) [RHEL-17486]
  - ice: set vf->num_msix in ice_initialize_vf_entry() (Petr Oros) [RHEL-17486]
  - ice: Implement 'flow-type ether' rules (Petr Oros) [RHEL-17486]
  - ice: Remove unnecessary argument from ice_fdir_comp_rules() (Petr Oros) [RHEL-17486]
  - ice: Fix freeing uninitialized pointers (Petr Oros) [RHEL-17486]
  - ice: hold devlink lock for whole init/cleanup (Petr Oros) [RHEL-17486]
  - ice: move devlink port code to a separate file (Petr Oros) [RHEL-17486]
  - ice: move ice_devlink.[ch] to devlink folder (Petr Oros) [RHEL-17486]
  - ice: Remove newlines in NL_SET_ERR_MSG_MOD (Petr Oros) [RHEL-17486]
  - ice: Add switch recipe reusing feature (Petr Oros) [RHEL-17486]
  - ice: count representor stats (Petr Oros) [RHEL-17486]
  - ice: do switchdev slow-path Rx using PF VSI (Petr Oros) [RHEL-17486]
  - ice: change repr::id values (Petr Oros) [RHEL-17486]
  - ice: remove switchdev control plane VSI (Petr Oros) [RHEL-17486]
  - ice: control default Tx rule in lag (Petr Oros) [RHEL-17486]
  - ice: default Tx rule instead of to queue (Petr Oros) [RHEL-17486]
  - ice: do Tx through PF netdev in slow-path (Petr Oros) [RHEL-17486]
  - ice: remove eswitch changing queues algorithm (Petr Oros) [RHEL-17486]
  - ice: fix memory corruption bug with suspend and rebuild (Petr Oros) [RHEL-17486]
  - ice: Refactor FW data type and fix bitmap casting issue (Petr Oros) [RHEL-17486]
  - ice: fix stats being updated by way too large values (Petr Oros) [RHEL-17486]
  - ice: fix typo in assignment (Petr Oros) [RHEL-17486]
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Petr Oros) [RHEL-17486]
  - ice: virtchnl: stop pretending to support RSS over AQ or registers (Petr Oros) [RHEL-17486]
  - ice: reconfig host after changing MSI-X on VF (Petr Oros) [RHEL-17486]
  - ice: reorder disabling IRQ and NAPI in ice_qp_dis (Petr Oros) [RHEL-17486]
  - ice: avoid unnecessary devm_ usage (Petr Oros) [RHEL-17486]
  - ice: do not disable Tx queues twice in ice_down() (Petr Oros) [RHEL-17486]
  - ice: cleanup line splitting for context set functions (Petr Oros) [RHEL-17486]
  - ice: use GENMASK instead of BIT(n) - 1 in pack functions (Petr Oros) [RHEL-17486]
  - ice: rename ice_write_* functions to ice_pack_ctx_* (Petr Oros) [RHEL-17486]
  - ice: remove vf->lan_vsi_num field (Petr Oros) [RHEL-17486]
  - ice: use relative VSI index for VFs instead of PF VSI number (Petr Oros) [RHEL-17486]
  - ice: remove unnecessary duplicate checks for VF VSI ID (Petr Oros) [RHEL-17486]
  - ice: pass VSI pointer into ice_vc_isvalid_q_id (Petr Oros) [RHEL-17486]
  - ice: Fix debugfs with devlink reload (Petr Oros) [RHEL-17486]
  - ice: Remove and readd netdev during devlink reload (Petr Oros) [RHEL-17486]
  - ice: add support for 3k signing DDP sections for E825C (Petr Oros) [RHEL-17486]
  - ice: Add helper function ice_is_generic_mac (Petr Oros) [RHEL-17486]
  - ice: introduce new E825C devices family (Petr Oros) [RHEL-17486]
  - ice: remove incorrect comment (Petr Oros) [RHEL-17486]
  - ice: Add a new counter for Rx EIPE errors (Petr Oros) [RHEL-17486]
  - ice: make ice_vsi_cfg_txq() static (Petr Oros) [RHEL-17486]
  - ice: make ice_vsi_cfg_rxq() static (Petr Oros) [RHEL-17486]
  - ice: stop destroying and reinitalizing Tx tracker during reset (Petr Oros) [RHEL-17486]
  - ice: factor out ice_ptp_rebuild_owner() (Petr Oros) [RHEL-17486]
  - ice: rename ice_ptp_tx_cfg_intr (Petr Oros) [RHEL-17486]
  - ice: don't check has_ready_bitmap in E810 functions (Petr Oros) [RHEL-17486]
  - ice: rename verify_cached to has_ready_bitmap (Petr Oros) [RHEL-17486]
  - ice: pass reset type to PTP reset functions (Petr Oros) [RHEL-17486]
  - ice: introduce PTP state machine (Petr Oros) [RHEL-17486]
  - ice: ice_base.c: Add const modifier to params and vars (Petr Oros) [RHEL-17486]
  - ice: remove rx_len_errors statistic (Petr Oros) [RHEL-17486]
  - ice: replace ice_vf_recreate_vsi() with ice_vf_reconfig_vsi() (Petr Oros) [RHEL-17486]
  - ice: Add support for packet mirroring using hardware in switchdev mode (Petr Oros) [RHEL-17486]
  - ice: Enable SW interrupt from FW for LL TS (Petr Oros) [RHEL-17486]
  - ice: Schedule service task in IRQ top half (Petr Oros) [RHEL-17486]
  - ice: cleanup inconsistent code (Petr Oros) [RHEL-17486]
  - ice: field get conversion (Petr Oros) [RHEL-17486]
  - ice: fix pre-shifted bit usage (Petr Oros) [RHEL-17486]
  - ice: field prep conversion (Petr Oros) [RHEL-17486]
  - ice: Fix PF with enabled XDP going no-carrier after reset (Petr Oros) [RHEL-17486]
  - ice: use VLAN proto from ring packet context in skb path (Petr Oros) [RHEL-17486]
  - ice: Implement VLAN tag hint (Petr Oros) [RHEL-17486]
  - ice: Support XDP hints in AF_XDP ZC mode (Petr Oros) [RHEL-17486]
  - ice: Support RX hash XDP hint (Petr Oros) [RHEL-17486]
  - ice: Support HW timestamp hint (Petr Oros) [RHEL-17486]
  - ice: Introduce ice_xdp_buff (Petr Oros) [RHEL-17486]
  - ice: Make ptype internal to descriptor info processing (Petr Oros) [RHEL-17486]
  - ice: make RX HW timestamp reading code more reusable (Petr Oros) [RHEL-17486]
  - ice: make RX hash reading code more reusable (Petr Oros) [RHEL-17486]
  - ice: add ability to read and configure FW log data (Petr Oros) [RHEL-17486]
  - ice: enable FW logging (Petr Oros) [RHEL-17486]
  - ice: configure FW logging (Petr Oros) [RHEL-17486]
  - ice: remove FW logging code (Petr Oros) [RHEL-17486]
  - iavf: enable symmetric-xor RSS for Toeplitz hash function (Petr Oros) [RHEL-17486]
  - ice: enable symmetric-xor RSS for Toeplitz hash function (Petr Oros) [RHEL-17486]
  - ice: refactor the FD and RSS flow ID generation (Petr Oros) [RHEL-17486]
  - ice: refactor RSS configuration (Petr Oros) [RHEL-17486]
  - ice: fix ICE_AQ_VSI_Q_OPT_RSS_* register values (Petr Oros) [RHEL-17486]
  - ice: Rename E822 to E82X (Petr Oros) [RHEL-17486]
  - ice: periodically kick Tx timestamp interrupt (Petr Oros) [RHEL-17486]
  - ice: Re-enable timestamping correctly after reset (Petr Oros) [RHEL-17486]
  - ice: Improve logs for max ntuple errors (Petr Oros) [RHEL-17486]
  - ice: read internal temperature sensor (Petr Oros) [RHEL-17486]
  - ice: fix error code in ice_eswitch_attach() (Petr Oros) [RHEL-17486]
  - ice: reserve number of CP queues (Petr Oros) [RHEL-17486]
  - ice: adjust switchdev rebuild path (Petr Oros) [RHEL-17486]
  - ice: add VF representors one by one (Petr Oros) [RHEL-17486]
  - ice: realloc VSI stats arrays (Petr Oros) [RHEL-17486]
  - ice: set Tx topology every time new repr is added (Petr Oros) [RHEL-17486]
  - ice: allow changing SWITCHDEV_CTRL VSI queues (Petr Oros) [RHEL-17486]
  - ice: return pointer to representor (Petr Oros) [RHEL-17486]
  - ice: make representor code generic (Petr Oros) [RHEL-17486]
  - ice: remove VF pointer reference in eswitch code (Petr Oros) [RHEL-17486]
  - ice: track port representors in xarray (Petr Oros) [RHEL-17486]
  - ice: use repr instead of vf->repr (Petr Oros) [RHEL-17486]
  - ice: track q_id in representor (Petr Oros) [RHEL-17486]
  - ice: remove unused control VSI parameter (Petr Oros) [RHEL-17486]
  - ice: remove redundant max_vsi_num variable (Petr Oros) [RHEL-17486]
  - ice: rename switchdev to eswitch (Petr Oros) [RHEL-17486]
  - ice: make use of DEFINE_FLEX() in ice_switch.c (Petr Oros) [RHEL-17486]
  - ice: make use of DEFINE_FLEX() for struct ice_aqc_dis_txq_item (Petr Oros) [RHEL-17486]
  - ice: make use of DEFINE_FLEX() for struct ice_aqc_add_tx_qgrp (Petr Oros) [RHEL-17486]
  - ice: make use of DEFINE_FLEX() in ice_ddp.c (Petr Oros) [RHEL-17486]
  - ice: drop two params of ice_aq_move_sched_elems() (Petr Oros) [RHEL-17486]
  - ice: ice_sched_remove_elems: replace 1 elem array param by u32 (Petr Oros) [RHEL-17486]
  - ice: Check CRC strip requirement for VLAN strip (Petr Oros) [RHEL-17486]
  - ice: Support FCS/CRC strip disable for VF (Petr Oros) [RHEL-17486]
  - ptp: introduce helpers to adjust by scaled parts per million (Petr Oros) [RHEL-17486]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-484.el9]
changelog:
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46919] {CVE-2024-39487}
  - phy: ti: gmii-sel: Enable SGMII mode for J784S4 (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Fix register offset when parent is not a syscon node (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Allow parent to not be syscon node (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Enable USXGMII mode for J784S4 (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Add support for CPSW9G GMII SEL in J784S4 (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Enable SGMII mode for J721E (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Enable SGMII mode for J7200 (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Add support for SGMII mode (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Add support for CPSW9G GMII SEL in J721e (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Update methods for fetching and using qsgmii main port (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Add support for CPSW5G GMII SEL in J7200 (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: check of_get_address() for failure (Andrew Halaney) [RHEL-44742]
  - clk: keystone: syscon-clk: Fix audio refclk (Andrew Halaney) [RHEL-44742]
  - clk: keystone: syscon-clk: Add support for audio refclk (Andrew Halaney) [RHEL-44742]
  - clk: keystone: syscon-clk: Allow the clock node to not be of type syscon (Andrew Halaney) [RHEL-44742]
  - clk: keystone: syscon-clk: Use dev_err_probe() helper (Andrew Halaney) [RHEL-44742]
  - clk: keystone: syscon-clk: Add support for AM62 epwm-tbclk (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Consolidate serdes0 references (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Assign only lanes 0 and 1 to PCIe1 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-main: Add node for EHRPWMs (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am69-sk: Add PCIe support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Add overlay for PCIe0 and PCIe1 EP Mode (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Enable PCIe0 and PCIe1 in RC Mode (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-main: Add PCIe nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Add TPS62873 node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am69-sk: Add TPS62873 node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Enable USB3 support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-main: Add support for USB (Andrew Halaney) [RHEL-44742]
  - arm64: boot: dts: ti: k3-*: Add memory node to bootloader stage (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4: Add overlay for dual port USXGMII mode (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Add support for multiple CAN instances (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4: Add overlay to enable QSGMII mode with CPSW9G (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Enable Main CPSW2G node and add aliases for it (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-main: Add CPSW2G and CPSW9G nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Add alias for MCU CPSW2G (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Fix csi2-dual-imx219 dtb names (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-beagleplay: Fix Ethernet PHY RESET GPIOs (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-phyboard-lyra-rdk: Add USB-C (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2: Add main esm address range (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2-main: Enable support for SDR104 speed mode (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a: Enable UHS mode support for SD cards (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65-main: Remove unused properties in sdhci nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65-main: Fix sdhci node properties (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j722s-evm: Enable UHS support for MMCSD (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Enable overlays for the am625-phyboard-lyra (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: am64-phyboard-electra: Add overlay to enable a GPIO fan (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a-main: Add Wave5 Video Encoder/Decoder Node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am69-sk: Fix UART pin type and macro type (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62-verdin-dahlia: support sleep-moci (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62-verdin: replace sleep-moci hog with regulator (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a: Disable USB LPM (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62p: add the USB sub-system (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62/a: use sub-node for USB_PHY_CTRL registers (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62*: Add PHY2 region to USB wrapper node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Add icssg-prueth nodes for PG1 devices (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-phyboard-lyra-rdk: Add Audio Codec (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e: Use exact ranges for FSS node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Use exact ranges for FSS node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65: Use exact ranges for FSS node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65: Move SerDes mux nodes under the control node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65: Add full compatible to SerDes control nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j722s-evm: Enable eMMC support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-{am62p,j722s}: Disable ethernet by default (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am642-phyboard-electra-rdk: Increase CAN max bitrate (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-phyboard-lyra-rdk: Increase CAN max bitrate (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-verdin: add PCIe reset gpio hog (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: verdin-am62: mallow: fix GPIOs pinctrl (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2: Remove UART baud rate selection (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e: Remove UART baud rate selection (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Remove UART baud rate selection (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am64: Remove UART baud rate selection (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65: Remove UART baud rate selection (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62-lp-sk: Remove tps65219 power-button (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-beagleplay: Use mmc-pwrseq for wl18xx enable (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: verdin-am62: use SD1 CD as GPIO (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: verdin-am62: Set memory size to 2gb (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: verdin-am62: dahlia: fix audio clock (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62p5-sk: minor whitespace cleanup (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: hummingboard-t: add overlays for m.2 pci-e and usb-3 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: add description for solidrun am642 som and evaluation board (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62p: Add Wave5 Video Encoder/Decoder Node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2-main: Add Wave5 Video Encoder/Decoder Node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am69-sk: Add support for OSPI flash (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am69-sk: Enable CAN interfaces for AM69 SK board (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Enable overlays for SK-AM62P (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62p: Add nodes for CSI-RX (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62p: Add DMASS1 for CSI (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j722s-evm: Enable OSPI NOR support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j722s-evm: Enable CPSW3G RGMII1 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e: Fix mux-reg-masks in hbmc_mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Add common1 register space for AM62A SoC (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Add common1 register space for AM65x SoC (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am642-evm: add overlay for ICSSG1 2nd port (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am642-evm: add ICSSG1 Ethernet support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am64-main: Add ICSSG IEP nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am6*: Add bootph-all property in MMC node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am6*: Fix bus-width property in MMC nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am6*: Fix ti,clkbuf-sel property in MMC nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am6*: Remove DLL properties for soft PHYs (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62p: Add ITAP/OTAP values for MMC (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am64-main: Fix ITAP/OTAP values for MMC (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a7-sk: Enable eMMC support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a-main: Add sdhci2 instance (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a-main: Add sdhci0 instance (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e-sk: Add overlay for IMX219 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2-main: Add CSI2RX capture nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e-main: Add CSI2RX capture nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e-sk: Model CSI2RX connector mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am69-sk: Enable camera peripherals (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am68-sk-base-board: Enable camera peripherals (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2-common-proc-board: Enable camera peripherals (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Add reserved memory for watchdog (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Add support for TI J722S Evaluation Module (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Introduce J722S family of SoCs (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Support IOT2050-SM variant (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Annotate LED nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Factor out DP related bits (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Factor out enabling of USB3 support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Factor out arduino connector bits (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Disable R5 lockstep for all PG2 boards (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: verdin-am62: Set VDD CORE minimum voltage to 0.75V (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62-wakeup: Configure ti-sysc for wkup_uart0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: am62-phyboard-lyra: Add overlay to enable a GPIO fan (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: verdin-am62: add support for Verdin USB1 interface (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Add DT overlay for PCIe + USB3.0 SERDES personality card (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Add DT overlay for PCIe + USB2.0 SERDES personality card (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a: Make the main_conf node a simple-bus (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62: Make the main_conf node a simple-bus (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Make the FSS node a simple-bus (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2: Convert serdes_ln_ctrl node into reg-mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2: Convert usb_serdes_mux node into reg-mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e: Convert usb_serdes_mux node into reg-mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e: Convert serdes_ln_ctrl node into reg-mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Convert usb_serdes_mux node into reg-mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Convert serdes_ln_ctrl node into reg-mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am64: Convert serdes_ln_ctrl node into reg-mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Makefile: Clarify GPL-2.0 as GPL-2.0-only (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050*: Clarify GPL-2.0 as GPL-2.0-only (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: phycore*: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: beagle*: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-serdes: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-pinctrl: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am64: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62p: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a7: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Use https for urls (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: use ti,j7200-padconf compatible (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Makefile: Add HDMI audio check for AM62A7-SK (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a7-sk: Add HDMI support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a-main: Add node for Display SubSystem (DSS) (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: phycore-am64: Add ADC (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Add support for multiple CAN instances (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200-som-p0: Add support for CAN instance 0 in main domain (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Add support for CAN nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: verdin-am62: mallow: add TPM device (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am64: Remove PCIe endpoint node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65: Remove PCIe endpoint nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Remove PCIe endpoint node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Enable PCIe nodes at the board level (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2-som-p0: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e-som-p0: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e-sk: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e-beagleboneai64: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200-som-p0: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am69-sk: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am68-sk-som: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am654-base-board: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am642-sk: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am642-evm: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am642-phyboard-electra: Add TPM support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Disable clock output of the ethernet PHY (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-beagleplay: Use the builtin mdio bus (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-beagleplay: Add boot phase tags for USB0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-sk: Add boot phase tags for USB0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am654-main: Add device tree entry for SGX GPU (Andrew Halaney) [RHEL-44742]
  - openvswitch: get related ct labels from its master if it is not confirmed (Xin Long) [RHEL-44560]
  - block: refine the EOF check in blkdev_iomap_begin (Ming Lei) [RHEL-43906] {CVE-2024-38604}
  - mm/userfaultfd: reset ptes when close() for wr-protected ones (Nico Pache) [RHEL-39639] {CVE-2024-36881}
  - scsi: mpi3mr: Fix printk() format strings (Ewan D. Milne) [RHEL-18205]
  - scsi: mpi3mr: Update driver version to 8.5.1.0.0 (Ewan D. Milne) [RHEL-18205]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-3 (Ewan D. Milne) [RHEL-18205]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-2 (Ewan D. Milne) [RHEL-18205]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-1 (Ewan D. Milne) [RHEL-18205]
  - x86/mce: Dynamically size space for machine check records (Aristeu Rozanski) [RHEL-24864]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-485.el9]
changelog:
  - net/mlx5e: Fix netif state handling (Benjamin Poirier) [RHEL-43870] {CVE-2024-38608}
  - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Benjamin Poirier) [RHEL-43870]
  - net: fix rc7's __skb_datagram_iter() (Paolo Abeni) [RHEL-46610]
  - net: allow skb_datagram_iter to be called from any context (Paolo Abeni) [RHEL-46610]
  - net: do not leave a dangling sk pointer, when socket creation fails (Paolo Abeni) [RHEL-46610]
  - netns: Make get_net_ns() handle zero refcount net (Paolo Abeni) [RHEL-46610]
  - net: fix out-of-bounds access in ops_init (Paolo Abeni) [RHEL-46610]
  - net: ethtool: correct MAX attribute value for stats (Davide Caratti) [RHEL-46358]
  - net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (Davide Caratti) [RHEL-46358 RHEL-47900] {CVE-2024-40928}
  - audit: use KMEM_CACHE() instead of kmem_cache_create() (Ricardo Robaina) [RHEL-35421]
  - audit: remove unnecessary assignment in audit_dupe_lsm_field() (Ricardo Robaina) [RHEL-35421]
  - audit,io_uring: io_uring openat triggers audit reference count underflow (Ricardo Robaina) [RHEL-35421]
  - audit: Annotate struct audit_chunk with __counted_by (Ricardo Robaina) [RHEL-35421]
  - putname(): IS_ERR_OR_NULL() is wrong here (Ricardo Robaina) [RHEL-35421]
  - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44237] {CVE-2024-38555}
  - efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init() (Waiman Long) [RHEL-24125]
  - fbdev/hyperv_fb: Include <linux/screen_info.h> (Waiman Long) [RHEL-24125]
  - drm/hyperv: Fix a compilation issue because of not including screen_info.h (Waiman Long) [RHEL-24125]
  - efi: Do not include <linux/screen_info.h> from EFI header (Waiman Long) [RHEL-24125]
  - PCI: Clear Secondary Status errors after enumeration (Myron Stowe) [RHEL-44851]
  - leds: gpio: Add kernel log if devm_fwnode_gpiod_get() fails (Radu Rendec) [RHEL-43483]
  - leds: gpio: Update headers (Radu Rendec) [RHEL-43483]
  - leds: gpio: Remove unneeded assignment (Radu Rendec) [RHEL-43483]
  - leds: gpio: Move temporary variable for struct device to gpio_led_probe() (Radu Rendec) [RHEL-43483]
  - leds: gpio: Refactor code to use devm_gpiod_get_index_optional() (Radu Rendec) [RHEL-43483]
  - leds: gpio: Utilise PTR_ERR_OR_ZERO() (Radu Rendec) [RHEL-43483]
  - leds: gpio: Keep driver firmware interface agnostic (Radu Rendec) [RHEL-43483]
  - leds: gpio: Annotate struct gpio_leds_priv with __counted_by (Radu Rendec) [RHEL-43483]
  - leds: gpio: Configure per-LED pin control (Radu Rendec) [RHEL-43483]
  - leds: gpio: switch to using devm_fwnode_gpiod_get() (Radu Rendec) [RHEL-43483]
  - leds: move default_state read from fwnode to core (Radu Rendec) [RHEL-43483]
  - PM: sleep: Restore asynchronous device resume optimization (Mark Langsdorf) [RHEL-29018] {CVE-2023-52498}
  - PM: sleep: Fix possible deadlocks in core system-wide PM code (Mark Langsdorf) [RHEL-29018] {CVE-2023-52498}
  - async: Introduce async_schedule_dev_nocall() (Mark Langsdorf) [RHEL-29018] {CVE-2023-52498}
  - pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain (Mark Salter) [RHEL-37329] {CVE-2024-35942}
  - perf: hisi: Fix use-after-free when register pmu fails (Mark Salter) [RHEL-38291] {CVE-2023-52859}
  - Enable tmpfs quota configuration option (Carlos Maiolino) [RHEL-7768]
  - shmem: properly report quota mount options (Carlos Maiolino) [RHEL-7768]
  - shmem: move spinlock into shmem_recalc_inode() to fix quota support (Carlos Maiolino) [RHEL-7768]
  - shmem: fix quota lock nesting in huge hole handling (Carlos Maiolino) [RHEL-7768]
  - tmpfs: fix race on handling dquot rbtree (Carlos Maiolino) [RHEL-7768]
  - shmem: Add default quota limit mount options (Carlos Maiolino) [RHEL-7768]
  - shmem: quota support (Carlos Maiolino) [RHEL-7768]
  - shmem: prepare shmem quota infrastructure (Carlos Maiolino) [RHEL-7768]
  - quota: Check presence of quota operation structures instead of ->quota_read and ->quota_write callbacks (Carlos Maiolino) [RHEL-7768]
  - shmem: make shmem_get_inode() return ERR_PTR instead of NULL (Carlos Maiolino) [RHEL-7768]
  - shmem: make shmem_inode_acct_block() return error (Carlos Maiolino) [RHEL-7768]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-486.el9]
changelog:
  - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47634] {CVE-2024-39502}
  - i2c: lpi2c: Avoid calling clk_get_rate during transfer (David Arcari) [RHEL-48206] {CVE-2024-40965}
  - i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work (David Arcari) [RHEL-48206] {CVE-2024-40965}
  - i2c: smbus: Support DDR5 and LPDDR5 SPD EEPROMs (David Arcari) [RHEL-49526]
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48391] {CVE-2024-40984}
  - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47688] {CVE-2024-39499}
  - drm/fbdev-generic: Fix framebuffer on big endian devices (Thomas Huth) [RHEL-45158]
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31564] {CVE-2024-26686}
  - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31564]
  - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31564]
  - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37072] {CVE-2023-52679}
  - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37072] {CVE-2023-52679}
  - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37072] {CVE-2023-52679}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-487.el9]
changelog:
  - net: ena: Fix redundant device NUMA node override (Kamal Heib) [RHEL-40816]
  - ibmvnic: Free any outstanding tx skbs during scrq reset (Mamatha Inamdar) [RHEL-45045]
  - ibmvnic: Add tx check to prevent skb leak (Mamatha Inamdar) [RHEL-45045]
  - ibmvnic: rename local variable index to bufidx (Mamatha Inamdar) [RHEL-45045]
  - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-35853]
  - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48319] {CVE-2024-40977}
  - wifi: cfg80211: validate HE operation element parsing (CKI Backport Bot) [RHEL-48273] {CVE-2024-40930}
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48026] {CVE-2024-40941}
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47918] {CVE-2024-40929}
  - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47768] {CVE-2024-40911}
  - efi/libstub: arm64: Remap relocated image with strict permissions (Lenny Szubowicz) [RHEL-39186]
  - efi/libstub: zboot: Mark zboot EFI application as NX compatible (Lenny Szubowicz) [RHEL-39186]
  - irqchip/renesas-irqc: Use platform_get_irq_optional() to get the interrupt (Radu Rendec) [RHEL-47248]
  - reset: Fix devm bulk optional exclusive control getter (Radu Rendec) [RHEL-47248]
  - net: rswitch: Avoid use-after-free in rswitch_poll() (Radu Rendec) [RHEL-47248]
  - mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (Aristeu Rozanski) [RHEL-45023] {CVE-2024-39298}
  - net: psample: fix flag being set in wrong skb (Adrian Moreno) [RHEL-31876]
  - net: openvswitch: store sampling probability in cb. (Adrian Moreno) [RHEL-31876]
  - net: openvswitch: add psample action (Adrian Moreno) [RHEL-31876]
  - net: psample: allow using rate as probability (Adrian Moreno) [RHEL-31876]
  - net: psample: skip packet copy if no listeners (Adrian Moreno) [RHEL-31876]
  - net: sched: act_sample: add action cookie to sample (Adrian Moreno) [RHEL-31876]
  - net: psample: add user cookie (Adrian Moreno) [RHEL-31876]
  - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-44136]
  - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-44136]
  - ACPI: APEI: EINJ: Add support for vendor defined error types (Mark Langsdorf) [RHEL-17909]
  - platform/chrome: cros_ec_debugfs: Fix permissions for panicinfo (Mark Langsdorf) [RHEL-17909]
  - fs: debugfs: Add write functionality to debugfs blobs (Mark Langsdorf) [RHEL-17909]
  - ACPI: APEI: EINJ: Refactor available_error_type_show() (Mark Langsdorf) [RHEL-17909]
  - mfd: syscon: Fix null pointer dereference in of_syscon_register() (Mark Langsdorf) [RHEL-26884] {CVE-2023-52467}
  - nvme-multipath: find NUMA path only for online numa-node (Chris Leech) [RHEL-40088]
  - ACPI: arm64: export acpi_arch_thermal_cpufreq_pctg() (Charles Mirabile) [RHEL-1697]
  - ACPI: processor: reduce CPUFREQ thermal reduction pctg for Tegra241 (Charles Mirabile) [RHEL-1697]
  - ACPI: thermal: Add Thermal fast Sampling Period (_TFP) support (Charles Mirabile) [RHEL-1697]
  - scsi: specify .sense_len = SCSI_SENSE_BUFFERSIZE in scsi_execute() scsi_exec_args (Ewan D. Milne) [RHEL-30596]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-488.el9]
changelog:
  - nvme-multipath: implement "queue-depth" iopolicy (John Meneghini) [RHEL-45230]
  - nvme-multipath: prepare for "queue-depth" iopolicy (John Meneghini) [RHEL-45230]
  - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-49548]
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47786] {CVE-2024-40912}
  - tracing: Ensure visibility when inserting an element into tracing_map (Jerome Marchand) [RHEL-30459] {CVE-2024-26645}
  - tracing/trigger: Fix to return error if failed to alloc snapshot (Jerome Marchand) [RHEL-33284] {CVE-2024-26920}
  - block: fix request.queuelist usage in flush (Ming Lei) [RHEL-43552]
  - block: fix that util can be greater than 100% (Ming Lei) [RHEL-42408]
  - block: support to account io_ticks precisely (Ming Lei) [RHEL-42408]
  - scsi: fnic: Move fnic_fnic_flush_tx() to a work queue (John Meneghini) [RHEL-36420]
  - scsi: fnic: Clean up some inconsistent indenting (John Meneghini) [RHEL-36420]
  - scsi: fnic: Convert snprintf() to sysfs_emit() (John Meneghini) [RHEL-36420]
  - scsi: fnic: unlock on error path in fnic_queuecommand() (John Meneghini) [RHEL-36420]
  - scsi: fnic: Increment driver version (John Meneghini) [RHEL-36420]
  - scsi: fnic: Improve logs and add support for multiqueue (MQ) (John Meneghini) [RHEL-36420]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic driver (John Meneghini) [RHEL-36420]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic_main.c (John Meneghini) [RHEL-36420]
  - scsi: fnic: Remove usage of host_lock (John Meneghini) [RHEL-36420]
  - scsi: fnic: Define stats to track multiqueue (MQ) IOs (John Meneghini) [RHEL-36420]
  - scsi: fnic: Modify ISRs to support multiqueue (MQ) (John Meneghini) [RHEL-36420]
  - scsi: fnic: Refactor and redefine fnic.h for multiqueue (John Meneghini) [RHEL-36420]
  - scsi: fnic: Get copy workqueue count and interrupt mode from config (John Meneghini) [RHEL-36420]
  - scsi: fnic: Rename wq_copy to hw_copy_wq (John Meneghini) [RHEL-36420]
  - scsi: fnic: Add and improve log messages (John Meneghini) [RHEL-36420]
  - scsi: fnic: Add and use fnic number (John Meneghini) [RHEL-36420]
  - scsi: fnic: Modify definitions to sync with VIC firmware (John Meneghini) [RHEL-36420]
  - scsi: fnic: Return error if vmalloc() failed (John Meneghini) [RHEL-36420]
  - scsi: fnic: Clean up some inconsistent indenting (John Meneghini) [RHEL-36420]
  - scsi: fnic: Fix sg_reset success path (John Meneghini) [RHEL-36420]
  - scsi: fnic: Remove unused functions fnic_scsi_host_start/end_tag() (John Meneghini) [RHEL-36420]
  - scsi: fnic: Replace sgreset tag with max_tag_id (John Meneghini) [RHEL-36420]
  - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (John Meneghini) [RHEL-36420]
  - scsi: fnic: Use vmalloc_array() and vcalloc() (John Meneghini) [RHEL-36420]
  - scsi: fnic: Use vzalloc() (John Meneghini) [RHEL-36420]
  - scsi: fnic: Switch to use %ptTs (John Meneghini) [RHEL-36420]
  - scsi: fnic: Refactor code in fnic probe to initialize SCSI layer (John Meneghini) [RHEL-36420]
  - scsi: fnic: Replace DMA mask of 64 bits with 47 bits (John Meneghini) [RHEL-36420]
  - scsi: fnic: Remove unneeded flush_workqueue() (John Meneghini) [RHEL-36420]
  - scsi: fnic: Remove redundant NULL check (John Meneghini) [RHEL-36420]
  - scsi: fnic: Stop using the SCSI pointer (John Meneghini) [RHEL-36420]
  - scsi: fnic: Fix a tracing statement (John Meneghini) [RHEL-36420]
  - scsi: fnic: Call scsi_done() directly (John Meneghini) [RHEL-36420]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-489.el9]
changelog:
  - powerpc/pseries: Fix scv instruction crash with kexec (Mamatha Inamdar) [RHEL-14159]
  - powerpc/numa: Online a node if PHB is attached. (Mamatha Inamdar) [RHEL-50147]
  - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-49749]
  - Revert "nvme-tcp: Use sendmsg(MSG_SPLICE_PAGES) rather then sendpage" (Chris Leech) [RHEL-49696]
  - Revert "nvmet-tcp: Use sendmsg(MSG_SPLICE_PAGES) rather then sendpage" (Chris Leech) [RHEL-49696]
  - Revert "nvme-tcp: Fix comma-related oops" (Chris Leech) [RHEL-49696]
  - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-48226]
  - sched: Move psi_account_irqtime() out of update_rq_clock_task() hotpath (Phil Auld) [RHEL-48226]
  - sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write() (Phil Auld) [RHEL-48226]
  - sched/fair: Remove stale FREQUENCY_UTIL comment (Phil Auld) [RHEL-48226]
  - sched/debug: Dump domains' level (Phil Auld) [RHEL-48226]
  - docs: cgroup-v1: Clarify that domain levels are system-specific (Phil Auld) [RHEL-48226]
  - sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level (Phil Auld) [RHEL-48226]
  - delayacct: track delays from IRQ/SOFTIRQ (Phil Auld) [RHEL-48226]
  - delayacct: improve the average delay precision of getdelay tool to microsecond (Phil Auld) [RHEL-48226]
  - nvme: cancel pending I/O if nvme controller is in terminal state (John Meneghini) [RHEL-35807]
  - iommu/amd: Fix GT feature enablement again (Jerry Snitselaar) [RHEL-42766]
  - iommu/amd: Invalidate cache before removing device from domain list (Jerry Snitselaar) [RHEL-44835]
  - dma: fix DMA sync for drivers not calling dma_set_mask*() (Jerry Snitselaar) [RHEL-44835]
  - iommu/dma: avoid expensive indirect calls for sync operations (Jerry Snitselaar) [RHEL-44835]
  - dma: avoid redundant calls for sync operations (Jerry Snitselaar) [RHEL-44835]
  - dma: compile-out DMA sync op calls when not used (Jerry Snitselaar) [RHEL-44835]
  - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Jerry Snitselaar) [RHEL-44835]
  - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Jerry Snitselaar) [RHEL-44835]
  - iommu/amd: Fix Invalid wait context issue (Jerry Snitselaar) [RHEL-44835]
  - iommu/amd: Fix sysfs leak in iommu init (Jerry Snitselaar) [RHEL-44835]
  - iommu/amd: Check EFR[EPHSup] bit before enabling PPR (Jerry Snitselaar) [RHEL-44835]
  - iommu/amd: Fix workqueue name (Jerry Snitselaar) [RHEL-44835]
  - iommu: Return right value in iommu_sva_bind_device() (Jerry Snitselaar) [RHEL-44835]
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44447] {CVE-2024-31076}
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36364] {CVE-2024-27395}
  - mptcp: ensure snd_nxt is properly initialized on connect (cki-backport-bot) [RHEL-39867] {CVE-2024-36889}
  - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29473] {CVE-2023-52619}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-490.el9]
changelog:
  - redhat/dracut-virt.conf: add systemd-veritysetup module (Emanuele Giuseppe Esposito) [RHEL-45168]
  - redhat/uki_addons/virt: add common FIPS addon (Emanuele Giuseppe Esposito) [RHEL-45160]
  - redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons (Emanuele Giuseppe Esposito) [RHEL-45159]
  - gcc-plugins/stackleak: Avoid .head.text section (Bandan Das) [RHEL-39439]
  - x86/sev: Skip ROM range scans and validation for SEV-SNP guests (Bandan Das) [RHEL-39439]
  - x86/sev: Move early startup code into .head.text section (Bandan Das) [RHEL-39439]
  - x86/sme: Move early SME kernel encryption handling into .head.text (Bandan Das) [RHEL-39439]
  - x86/sev: Do the C-bit verification only on the BSP (Bandan Das) [RHEL-39439]
  - x86/sev: Fix kernel crash due to late update to read-only ghcb_version (Bandan Das) [RHEL-39439]
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48140] {CVE-2024-40959}
  - eeprom: at24: fix memory corruption race condition (Mark Salter) [RHEL-37020] {CVE-2024-35848}
  - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case (Mark Salter) [RHEL-37020] {CVE-2024-35848}
  - eeprom: at24: Use dev_err_probe for nvmem register failure (Mark Salter) [RHEL-37020] {CVE-2024-35848}
  - eeprom: at24: Add support for 24c1025 EEPROM (Mark Salter) [RHEL-37020] {CVE-2024-35848}
  - eeprom: at24: remove struct at24_client (Mark Salter) [RHEL-37020] {CVE-2024-35848}
  - at24: Support probing while in non-zero ACPI D state (Mark Salter) [RHEL-37020] {CVE-2024-35848}
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47652] {CVE-2024-39501}
  - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47652] {CVE-2024-39501}
  - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47892] {CVE-2024-40927}
  - PCI: pciehp: Retain Power Indicator bits for userspace indicators (Myron Stowe) [RHEL-41181]
  - sched: act_ct: take care of padding in struct zones_ht_key (Xin Long) [RHEL-50682]
  - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44297] {CVE-2024-38538}
  - hugetlb: force allocating surplus hugepages on mempolicy allowed nodes (Aristeu Rozanski) [RHEL-38605]
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47558] {CVE-2024-40904}
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47535] {CVE-2024-40901}
  - vmxnet3: update to version 9 (Izabela Bakollari) [RHEL-50675]
  - vmxnet3: add command to allow disabling of offloads (Izabela Bakollari) [RHEL-50675]
  - vmxnet3: add latency measurement support in vmxnet3 (Izabela Bakollari) [RHEL-50675]
  - vmxnet3: prepare for version 9 changes (Izabela Bakollari) [RHEL-50675]
  - vmxnet3: disable rx data ring on dma allocation failure (Izabela Bakollari) [RHEL-50675]
  - vmxnet3: Fix missing reserved tailroom (Izabela Bakollari) [RHEL-50675]
  - maple_tree: fix mas_empty_area_rev() null pointer dereference (Aristeu Rozanski) [RHEL-39862] {CVE-2024-36891}
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-50366]
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-50366]
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-50366]
  - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-25193]
  - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-25193]
  - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-25193]
  - scsi: qedf: Use FC rport as argument for qedf_initiate_tmf() (John Meneghini) [RHEL-25193]
  - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41185] {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm (Xin Long) [RHEL-41185]
  - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39719] {CVE-2024-36025}
  - igb: Remove redundant runtime resume for ethtool_ops (Corinna Vinschen) [RHEL-17487]
  - net: intel: implement modern PM ops declarations (Corinna Vinschen) [RHEL-17487]
  - igb: simplify pci ops declaration (Corinna Vinschen) [RHEL-17487]
  - igb: Fix missing time sync events (Corinna Vinschen) [RHEL-17487]
  - intel: make module parameters readable in sys filesystem (Corinna Vinschen) [RHEL-17487 RHEL-25998]
  - net: adopt skb_network_offset() and similar helpers (Corinna Vinschen) [RHEL-17487]
  - igb: extend PTP timestamp adjustments to i211 (Corinna Vinschen) [RHEL-17487]
  - net: intel: igb: Use linkmode helpers for EEE (Corinna Vinschen) [RHEL-17487]
  - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-17487 RHEL-38454] {CVE-2024-36010}
  - intel: legacy: field get conversion (Corinna Vinschen) [RHEL-17487]
  - intel: legacy: field prep conversion (Corinna Vinschen) [RHEL-17487]
  - intel: add bit macro includes where needed (Corinna Vinschen) [RHEL-17487]
  - igb: Use FIELD_GET() to extract Link Width (Corinna Vinschen) [RHEL-17487]
  - netdevsim: fix rtnetlink.sh selftest (CKI Backport Bot) [RHEL-50016]
  - selinux: avoid dereference of garbage after mount failure (Ondrej Mosnacek) [RHEL-37187] {CVE-2024-35904}
  - calipso: fix memory leak in netlbl_calipso_add_pass() (Ondrej Mosnacek) [RHEL-37044] {CVE-2023-52698}
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51242] {CVE-2024-41065}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44414] {CVE-2024-37356}
  - tty: add the option to have a tty reject a new ldisc (John W. Linville) [RHEL-48254] {CVE-2024-40966}
  - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37024] {CVE-2024-35847}
  - usb-storage: alauda: Check whether the media is initialized (CKI Backport Bot) [RHEL-43714] {CVE-2024-38619}
  - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38285] {CVE-2023-52811}
  - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44155] {CVE-2024-38570}
  - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44155] {CVE-2024-38570}
  - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44155] {CVE-2024-38570}
  - openvswitch: Set the skbuff pkt_type for proper pmtud support. (Aaron Conole) [RHEL-37650]
  - scsi: mpi3mr: Driver version update to 8.8.1.0.50 (Ewan D. Milne) [RHEL-30580]
  - scsi: mpi3mr: Update MPI Headers to revision 31 (Ewan D. Milne) [RHEL-30580]
  - scsi: mpi3mr: Debug ability improvements (Ewan D. Milne) [RHEL-30580]
  - scsi: mpi3mr: Set the WriteSame Divert Capability in the IOCInit MPI Request (Ewan D. Milne) [RHEL-30580]
  - scsi: mpi3mr: Clear ioctl blocking flag for an unresponsive controller (Ewan D. Milne) [RHEL-30580]
  - scsi: mpi3mr: Set MPI request flags appropriately (Ewan D. Milne) [RHEL-30580]
  - scsi: mpi3mr: Block devices are not removed even when VDs are offlined (Ewan D. Milne) [RHEL-30580]
  - x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk (Waiman Long) [RHEL-31230]
  - x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO (Waiman Long) [RHEL-31230]
  - x86/bugs: Fix the SRSO mitigation on Zen3/4 (Waiman Long) [RHEL-31230]
  - redhat/configs: Rename x86 CPU mitigations config entries (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_RETHUNK              => CONFIG_MITIGATION_RETHUNK (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_CPU_SRSO             => CONFIG_MITIGATION_SRSO (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_CPU_IBRS_ENTRY       => CONFIG_MITIGATION_IBRS_ENTRY (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_CPU_UNRET_ENTRY      => CONFIG_MITIGATION_UNRET_ENTRY (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_SLS                  => CONFIG_MITIGATION_SLS (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_RETPOLINE            => CONFIG_MITIGATION_RETPOLINE (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_PAGE_TABLE_ISOLATION => CONFIG_MITIGATION_PAGE_TABLE_ISOLATION (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_CALL_DEPTH_TRACKING  => CONFIG_MITIGATION_CALL_DEPTH_TRACKING (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_CPU_IBPB_ENTRY       => CONFIG_MITIGATION_IBPB_ENTRY (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_GDS_FORCE_MITIGATION => CONFIG_MITIGATION_GDS_FORCE (Waiman Long) [RHEL-31230]
  - kbuild: use objtool-args-y to clean up objtool arguments (Waiman Long) [RHEL-31230]
  - kbuild: do not create *.prelink.o for Clang LTO or IBT (Waiman Long) [RHEL-31230]
  - kbuild: replace $(linked-object) with CONFIG options (Waiman Long) [RHEL-31230]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-491.el9]
changelog:
  - net/mlx5: Fix MTMP register capability offset in MCAM register (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Fix peer devlink set for SF representor devlink port (Benjamin Poirier) [RHEL-24466]
  - RDMA/mlx5: Fix port number for counter query in multi-port configuration (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Restore mistakenly dropped parts in register devlink flow (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: RSS, Block XOR hash with over 128 channels (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: HTB, Fix inconsistencies with QoS SQs number (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: RSS, Block changing channels number when RXFH is configured (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Correctly compare pkt reformat ids (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: offset comp irq index in name by one (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Register devlink first under devlink lock (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: E-switch, store eswitch pointer before registering devlink_param (Benjamin Poirier) [RHEL-24466]
  - RDMA/mlx5: Relax DEVX access upon modify commands (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Fix query of sd_group field (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Use the correct lag ports number when creating TISes (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DPLL, Implement fractional frequency offset get pin op (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DPLL, Use struct to get values from mlx5_dpll_synce_status_get() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Use swap() instead of open coding it (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: devcom, Add component size getter (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Decouple CQ from priv (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Statify function mlx5e_monitor_counter_arm (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Move TISes from priv to mdev HW resources (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Remove TLS-specific logic in generic create TIS API (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: fs, Command to control TX flow table root (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: fs, Command to control L2TABLE entry silent mode (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Expose Management PCIe Index Register (MPIR) (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Add mlx5_ifc bits used for supporting single netdev Socket-Direct (Benjamin Poirier) [RHEL-24466]
  - mlx5: implement VLAN tag XDP hint (Benjamin Poirier) [RHEL-24466]
  - RDMA/mlx5: Expose register c0 for RDMA device (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: E-Switch, expose eswitch manager vport (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Manage ICM type of SW encap (Benjamin Poirier) [RHEL-24466]
  - RDMA/mlx5: Support handling of SW encap ICM area (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Introduce indirect-sw-encap ICM properties (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Implement AF_XDP TX timestamp and checksum offload (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Remove early assignment to netdev->features (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Add local loopback counter to vport rep stats (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Query maximum frequency adjustment of the PTP hardware clock (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Convert scaled ppm values outside the s32 range for PHC frequency adjustments (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Initialize clock->ptp_info inside mlx5_init_timer_clock (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Refactor real time clock operation checks for PHC (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Access array with enum values instead of magic numbers (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: simplify mlx5_set_driver_version string assignments (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Annotate struct mlx5_flow_handle with __counted_by (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Annotate struct mlx5_fc_bulk with __counted_by (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Some cleanup in mlx5e_tc_stats_matchall() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Allow sync reset flow when BF MGT interface device is present (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: print change on SW reset semaphore returns busy (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Switch to using _bh variant of of spinlock API in port timestamping NAPI poll context (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Fix MACsec state loss upon state update in offload path (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Change the warning when ignore_flow_level is not supported (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Check capability for fw_reset (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: E-switch, Change flow rule destination checking (Benjamin Poirier) [RHEL-24466]
  - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers (Benjamin Poirier) [RHEL-24466]
  - IB/mlx5: Don't expose debugfs entries for RRoCE general parameters if not supported (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Ignore IPsec replay window values on sender side (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Allow software parsing when IPsec crypto is enabled (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Can't go to uplink vport on RX rule (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Use the right GVMI number for drop action (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Bridge, fix multicast packets sent to uplink (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Fix a WARN upon a callback command failure (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Fix inconsistent hairpin RQT sizes (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Fix a race in command alloc flow (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Allow old devices to use multi destination FTE (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Free used cpus mask when an IRQ is released (Benjamin Poirier) [RHEL-24466]
  - Revert "net/mlx5: DR, Supporting inline WQE when possible" (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Increase max supported channels number to 256 (Benjamin Poirier) [RHEL-24463 RHEL-24466]
  - net/mlx5e: Preparations for supporting larger number of channels (Benjamin Poirier) [RHEL-24463 RHEL-24466]
  - net/mlx5e: Refactor mlx5e_rss_init() and mlx5e_rss_free() API's (Benjamin Poirier) [RHEL-24463 RHEL-24466]
  - net/mlx5e: Refactor mlx5e_rss_set_rxfh() and mlx5e_rss_get_rxfh() (Benjamin Poirier) [RHEL-24463 RHEL-24466]
  - net/mlx5e: Refactor rx_res_init() and rx_res_free() APIs (Benjamin Poirier) [RHEL-24463 RHEL-24466]
  - net/mlx5e: Use PTR_ERR_OR_ZERO() to simplify code (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Use PTR_ERR_OR_ZERO() to simplify code (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: fix config name in Kconfig parameter documentation (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove unused declaration (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Replace global mlx5_intf_lock with HCA devcom component lock (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Refactor LAG peer device lookout bus logic to mlx5 devcom (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Redesign SF active work to remove table_lock (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Parallelize vhca event handling (Benjamin Poirier) [RHEL-24466]
  - mlx5: Fix type of mode parameter in mlx5_dpll_device_mode_get() (Benjamin Poirier) [RHEL-24466]
  - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). (mlx5) (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Introduce ifc bits for migration in a chunk mode (Benjamin Poirier) [RHEL-24466]
  - RDMA/mlx5: Implement mkeys management via LIFO queue (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Enable 4 ports multiport E-switch (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Add a health error syndrome for pci data poisoned (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Handle multi destination action in the right order (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Add check for multi destination FTE (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Bridge, Enable mcast in smfs steering mode (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Check police action rate for matchall filter (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Consider aggregated port speed during rate configuration (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove redundant max_sfs check and field from struct mlx5_sf_dev_table (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove SF table reference counting (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Push common deletion code into mlx5_sf_del() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Rename mlx5_sf_deactivate_all() to mlx5_sf_del_all() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Move state lock taking into mlx5_sf_dealloc() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Convert SF port_indices xarray to function_ids xarray (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Use devlink port pointer to get the pointer of container SF struct (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Call mlx5_sf_id_erase() once in mlx5_sf_dealloc() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Set en auxiliary devlink instance as nested (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: SF, Implement peer devlink set for SF representor devlink port (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Lift reload limitation when SFs are present (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Disable eswitch as the first thing in mlx5_unload() (Benjamin Poirier) [RHEL-24466]
  - mlx5: Implement SyncE support using DPLL infrastructure (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Perform DMA operations in the right locations (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: macsec: use update_pn flag instead of PN comparation (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Supporting inline WQE when possible (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Update dead links in Kconfig documentation (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove health syndrome enum duplication (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Remove unneeded local variable (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: IRQ, consolidate irq and affinity mask allocation (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Fix spelling mistake "Faided" -> "Failed" (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: aRFS, Introduce ethtool stats (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: aRFS, Warn if aRFS table does not exist for aRFS rule (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: aRFS, Prevent repeated kernel rule migrations requests (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove redundant check of mlx5_vhca_event_supported() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Use mlx5_sf_start_function_id() helper instead of directly calling MLX5_CAP_GEN() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove redundant SF supported check from mlx5_sf_hw_table_init() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Use auxiliary_device_uninit() instead of device_put() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: E-switch, Add checking for flow rule destinations (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Check with FW that sync reset completed successfully (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Expose NIC temperature via hardware monitoring kernel API (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Expose port.c/mlx5_query_module_num() function (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Bridge, Only handle registered netdev bridge events (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: E-Switch, Remove redundant arg ignore_flow_lvl (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: remove many unnecessary NULL values (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Allocate completion EQs dynamically (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Handle SF IRQ request in the absence of SF IRQ pool (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Rename mlx5_comp_vectors_count() to mlx5_comp_vectors_max() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Add IRQ vector to CPU lookup function (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Introduce mlx5_cpumask_default_spread (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Implement single completion EQ create/destroy methods (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Use xarray to store and manage completion EQs (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Refactor completion IRQ request/release handlers in EQ layer (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Use xarray to store and manage completion IRQs (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Refactor completion IRQ request/release API (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Track the current number of completion EQs (Benjamin Poirier) [RHEL-24466]
  - IB/mlx5: Add HW counter called rx_dct_connect (Benjamin Poirier) [RHEL-24466]
  - RDMA/mlx: Remove unnecessary variable initializations (mlx5) (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Remove duplicate code for user flow (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Allocate command stats with xarray (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: split mlx5_cmd_init() to probe and reload routines (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove redundant cmdif revision check (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Re-organize mlx5_cmd struct (Benjamin Poirier) [RHEL-24466]
  - RDMA/mlx5: align MR mem allocation size to power-of-two (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Update the driver with the recent thermal changes (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove pointless vport lookup from mlx5_esw_check_port_type() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove redundant check from mlx5_esw_query_vport_vhca_id() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove redundant is_mdev_switchdev_mode() check from is_ib_rep_supported() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove redundant MLX5_ESWITCH_MANAGER() check from is_ib_rep_supported() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Remove redundant comment (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove unused ecpu field from struct mlx5_sf_table (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Add header file for events (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Add local loopback counter to vport stats (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Expose bits for local loopback counter (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Remove mlx5e_dbg() and msglvl support (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: E-Switch, remove redundant else statements (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: simplify condition after napi budget handling change (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: TC, refactor access to hash key (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Remove RX page cache leftovers (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Document previously implemented mlx5 tracepoints (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Update Kconfig parameter documentation (Benjamin Poirier) [RHEL-24466]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-492.el9]
changelog:
  - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50176] {CVE-2024-41012}
  - tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device() (Oleg Nesterov) [RHEL-30589]
  - sched/isolation: Fix boot crash when maxcpus < first housekeeping CPU (Oleg Nesterov) [RHEL-30589]
  - sched/isolation: Prevent boot crash when the boot CPU is nohz_full (Oleg Nesterov) [RHEL-30589]
  - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50203] {CVE-2024-41091}
  - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50265] {CVE-2024-41090}
  - mm: avoid overflows in dirty throttling logic (Chris von Recklinghausen) [RHEL-50004]
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Chris von Recklinghausen) [RHEL-50004]
  - lockdep: config: adjust MAX_LOCKDEP_ENTRIES and MAX_LOCKDEP_CHAINS for RT-debug (Luis Claudio R. Goncalves) [RHEL-49554]
  - rt: lockdep: fix "lockdep bfs error:-1" warning at boot (Luis Claudio R. Goncalves) [RHEL-49554]
  - redhat/configs: enable some RTCs needed on arm64 boards (Luiz Capitulino) [RHEL-21063]
  - redhat/configs: Make CONFIG_RTC_DRV_TEGRA=m (Luiz Capitulino) [RHEL-49511]
  - arm64/io: add constant-argument check (Ivan Vecera) [RHEL-48792]
  - arm64/io: Provide a WC friendly __iowriteXX_copy() (Ivan Vecera) [RHEL-48792]
  - s390: Stop using weak symbols for __iowrite64_copy() (Ivan Vecera) [RHEL-48792]
  - s390: Implement __iowrite32_copy() (Ivan Vecera) [RHEL-48792]
  - x86: Stop using weak symbols for __iowrite32_copy() (Ivan Vecera) [RHEL-48792]
  - nvmem: core: fix device node refcounting (Luiz Capitulino) [RHEL-47030]
  - nvmem: imx-ocotp: add support for post processing (Luiz Capitulino) [RHEL-47030]
  - nvmem: core: add nvmem cell post processing callback (Luiz Capitulino) [RHEL-47030]
  - nvmem: core: rework nvmem cell instance creation (Luiz Capitulino) [RHEL-47030]
  - mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL (CKI Backport Bot) [RHEL-46467] {CVE-2024-39474}
  - redhat/configs: add config item for CONFIG_MFD_TPS65219 (Enric Balletbo i Serra) [RHEL-46714]
  - mfd: tps65219: Add GPIO cell instance (Enric Balletbo i Serra) [RHEL-46714]
  - regulator: tps65219: Fix matching interrupts for their regulators (Enric Balletbo i Serra) [RHEL-46714]
  - mfd: tps65219: Add driver for TI TPS65219 PMIC (Enric Balletbo i Serra) [RHEL-46714]
  - regulator: dt-bindings: Add TI TPS65219 PMIC bindings (Enric Balletbo i Serra) [RHEL-46714]
  - spi: fsl-lpspi: use 'time_left' variable with wait_for_completion_timeout() (Andrew Halaney) [RHEL-33234]
  - spi: spi-fsl-lpspi: remove redundant spi_controller_put call (Andrew Halaney) [RHEL-33234]
  - spi: lpspi: Avoid potential use-after-free in probe() (Andrew Halaney) [RHEL-33234] {CVE-2024-26866}
  - spi: fsl-lpspi: switch to use modern name (Andrew Halaney) [RHEL-33234]
  - spi: spi-fsl-lpspi: Read chip-select amount from hardware for i.MX93 (Andrew Halaney) [RHEL-33234]
  - spi: spi-fsl-lpspi: Move controller initialization further down (Andrew Halaney) [RHEL-33234]
  - spi: spi-fsl-lpspi: Remove num_cs from device struct (Andrew Halaney) [RHEL-33234]
  - spi: spi-fsl-lpspi: downgrade log level for pio mode (Andrew Halaney) [RHEL-33234]
  - spi: lpspi: disable lpspi module irq in DMA mode (Andrew Halaney) [RHEL-33234]
  - spi: lpspi: run transfer speed_hz sanity check (Andrew Halaney) [RHEL-33234]
  - spi: fsl-lpspi: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-33234]
  - spi: spi-fsl-lpspi: support multiple cs for lpspi (Andrew Halaney) [RHEL-33234]
  - spi: introduce new helpers with using modern naming (Andrew Halaney) [RHEL-33234]
  - scsi: mpi3mr: Avoid possible run-time warning with long manufacturer strings (Ewan D. Milne) [RHEL-39925]
  - string.h: Introduce memtostr() and memtostr_pad() (Ewan D. Milne) [RHEL-39925]
  - scsi: mpi3mr: Fix some kernel-doc warnings in scsi_bsg_mpi3mr.h (Ewan D. Milne) [RHEL-39925]
  - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39925]
  - scsi: mpi3mr: Replace deprecated strncpy() with assignments (Ewan D. Milne) [RHEL-39925]
  - scsi: mpi3mr: Reduce stack usage in mpi3mr_refresh_sas_ports() (Ewan D. Milne) [RHEL-39925]
  - scsi: mpi3mr: Use ida to manage mrioc ID (Ewan D. Milne) [RHEL-39925]
  - scsi: mpi3mr: Fix mpi3mr_fw.c kernel-doc warnings (Ewan D. Milne) [RHEL-39925]
  - scsi: mpi3mr: Replace 1-element array with flex-array (Ewan D. Milne) [RHEL-39925]
  - r8169: add missing conditional compiling for call to r8169_remove_leds (Izabela Bakollari) [RHEL-36272]
  - r8169: fix LED-related deadlock on module removal (Izabela Bakollari) [RHEL-36272]
  - r8169: add support for RTL8168M (Izabela Bakollari) [RHEL-36272]
  - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d (Izabela Bakollari) [RHEL-36272]
  - r8169: skip DASH fw status checks when DASH is disabled (Izabela Bakollari) [RHEL-36272]
  - r8169: add MODULE_FIRMWARE entry for RTL8126A (Izabela Bakollari) [RHEL-36272]
  - r8169: add support for returning tx_lpi_timer in ethtool get_eee (Izabela Bakollari) [RHEL-36272]
  - r8169: support setting the EEE tx idle timer on RTL8168h (Izabela Bakollari) [RHEL-36272]
  - r8169: add generic rtl_set_eee_txidle_timer function (Izabela Bakollari) [RHEL-36272]
  - r8169: add LED support for RTL8125/RTL8126 (Izabela Bakollari) [RHEL-36272]
  - r8169: improve checking for valid LED modes (Izabela Bakollari) [RHEL-36272]
  - r8169: add support for RTL8126A (Izabela Bakollari) [RHEL-36272]
  - r8169: simplify EEE handling (Izabela Bakollari) [RHEL-36272]
  - r8169: fix building with CONFIG_LEDS_CLASS=m (Izabela Bakollari) [RHEL-36272]
  - r8169: Fix PCI error on system resume (Izabela Bakollari) [RHEL-36272]
  - r8169: add support for LED's on RTL8168/RTL8101 (Izabela Bakollari) [RHEL-36272]
  - r8169: fix rtl8125b PAUSE frames blasting when suspended (Izabela Bakollari) [RHEL-36272]
  - r8169: improve handling task scheduling (Izabela Bakollari) [RHEL-36272]
  - r8169: remove multicast filter limit (Izabela Bakollari) [RHEL-36272]
  - r8169: remove not needed check in rtl_fw_write_firmware (Izabela Bakollari) [RHEL-36272]
  - r8169: improve RTL8411b phy-down fixup (Izabela Bakollari) [RHEL-36272]
  - mm: disable CONFIG_PER_VMA_LOCK until its fixed (Rafael Aquini) [RHEL-48221]
  - fork: lock VMAs of the parent process when forking (Rafael Aquini) [RHEL-48221]
  - mm: lock newly mapped VMA with corrected ordering (Rafael Aquini) [RHEL-48221]
  - mm: lock newly mapped VMA which can be modified after it becomes visible (Rafael Aquini) [RHEL-48221]
  - mm: lock a vma before stack expansion (Rafael Aquini) [RHEL-48221]
  - fork: lock VMAs of the parent process when forking (Rafael Aquini) [RHEL-48221]
  - shmem: fix smaps BUG sleeping while atomic (Rafael Aquini) [RHEL-48221]
  - arm64: mm: pass original fault address to handle_mm_fault() in PER_VMA_LOCK block (Rafael Aquini) [RHEL-48221]
  - mm: page_table_check: Ensure user pages are not slab pages (Rafael Aquini) [RHEL-48221]
  - mm: page_table_check: Make it dependent on EXCLUSIVE_SYSTEM_RAM (Rafael Aquini) [RHEL-48221]
  - hugetlb: pte_alloc_huge() to replace huge pte_alloc_map() (Rafael Aquini) [RHEL-48221]
  - mm: shrinkers: fix debugfs file permissions (Rafael Aquini) [RHEL-48221]
  - mm: correct arg in reclaim_pages()/reclaim_clean_pages_from_list() (Rafael Aquini) [RHEL-48221]
  - mm/huge_memory: revert "Partly revert "mm/thp: carry over dirty bit when thp splits on pmd"" (Rafael Aquini) [RHEL-48221]
  - mm/migrate: revert "mm/migrate: fix wrongly apply write bit after mkdirty on sparc64" (Rafael Aquini) [RHEL-48221]
  - mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static (Rafael Aquini) [RHEL-48221]
  - userfaultfd: convert mfill_atomic() to use a folio (Rafael Aquini) [RHEL-48221]
  - smaps: fix defined but not used smaps_shmem_walk_ops (Rafael Aquini) [RHEL-48221]
  - mm/smaps: simplify shmem handling of pte holes (Rafael Aquini) [RHEL-48221]
  - mm/smaps: fix shmem pte hole swap calculation (Rafael Aquini) [RHEL-48221]
  - arm64/mm: try VMA lock-based page fault handling first (Rafael Aquini) [RHEL-48221]
  - x86/mm: try VMA lock-based page fault handling first (Rafael Aquini) [RHEL-48221]
  - mm: move mmap_lock assert function definitions (Rafael Aquini) [RHEL-48221]
  - mm: remove vmf_insert_pfn_xxx_prot() for huge page-table entries (Rafael Aquini) [RHEL-48221]
  - mm: remove unused vmf_insert_mixed_prot() (Rafael Aquini) [RHEL-48221]
  - mm/memtest: add results of early memtest to /proc/meminfo (Rafael Aquini) [RHEL-48221]
  - mm/khugepaged: alloc_charge_hpage() take care of mem charge errors (Rafael Aquini) [RHEL-48221]
  - mm: hugetlb_vmemmap: simplify hugetlb_vmemmap_init() a bit (Rafael Aquini) [RHEL-48221]
  - mm: hugetlb: move hugeltb sysctls to its own file (Rafael Aquini) [RHEL-48221]
  - mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE (Rafael Aquini) [RHEL-48221]
  - mm/slab: remove CONFIG_SLOB code from slab common code (Rafael Aquini) [RHEL-48221]
  - mm, page_flags: remove PG_slob_free (Rafael Aquini) [RHEL-48221]
  - mm/slub: fix help comment of SLUB_DEBUG (Rafael Aquini) [RHEL-48221]
  - splice: Export filemap/direct_splice_read() (Rafael Aquini) [RHEL-48221]
  - hugetlb: check for undefined shift on 32 bit architectures (Rafael Aquini) [RHEL-48221]
  - mm: update mmap_sem comments to refer to mmap_lock (Rafael Aquini) [RHEL-48221]
  - include/linux/mm: fix release_pages_arg kernel doc comment (Rafael Aquini) [RHEL-48221]
  - mm: shrinkers: add missing includes for undeclared types (Rafael Aquini) [RHEL-48221]
  - mm: fix typo in struct vm_operations_struct comments (Rafael Aquini) [RHEL-48221]
  - mm, slab: ignore SLAB_RECLAIM_ACCOUNT with CONFIG_SLUB_TINY (Rafael Aquini) [RHEL-48221]
  - slab: Remove special-casing of const 0 size allocations (Rafael Aquini) [RHEL-48221]
  - slab: Clean up SLOB vs kmalloc() definition (Rafael Aquini) [RHEL-48221]
  - slab: Explain why SLAB_TYPESAFE_BY_RCU reference before locking (Rafael Aquini) [RHEL-48221]
  - powerpc: Rely on generic definition of hugepd_t and is_hugepd when unused (Rafael Aquini) [RHEL-48221]
  - powerpc/nohash: Remove pgd_huge() stub (Rafael Aquini) [RHEL-48221]
  - mm: slab: fix comment for __assume_kmalloc_alignment (Rafael Aquini) [RHEL-48221]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-493.el9]
changelog:
  - perf vendor events: Add westmereex counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add westmereep-sp counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add westmereep-dp counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add/update tigerlake events/metrics (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add snowridgex counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add/update skylakex events/metrics (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add/update skylake events/metrics (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add silvermont counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add/update sierraforest events/metrics (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add/update sapphirerapids events/metrics (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update sandybridge metrics add event counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add/update rocketlake events/metrics (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add nehalemex counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add nehalemep counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update meteorlake events and add counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add lunarlake counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add knightslanding counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update jaketown metrics add event counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update ivytown metrics add event counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update ivybridge metrics add event counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add/update icelakex events/metrics (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add/update icelake events/metrics (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update haswellx metrics add event counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add haswell counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update graniterapids events and add counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update/add grandridge events/metrics (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add goldmontplus counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add goldmont counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add/update emeraldrapids events/metrics (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update elkhartlake events (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update cascadelakex events/metrics (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update broadwellx metrics add event counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update broadwellde metrics add event counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update broadwell metrics add event counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Add bonnell counter information (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update alderlaken events/metrics (Michael Petlan) [RHEL-32689]
  - perf vendor events: Update alderlake events/metrics (Michael Petlan) [RHEL-32689]
  - perf vendor events amd: Add Zen 5 mapping (Michael Petlan) [RHEL-32689]
  - perf vendor events amd: Add Zen 5 metrics (Michael Petlan) [RHEL-32689]
  - perf vendor events amd: Add Zen 5 uncore events (Michael Petlan) [RHEL-32689]
  - perf vendor events amd: Add Zen 5 core events (Michael Petlan) [RHEL-32689]
  - perf vendor events intel: Remove info metrics erroneously in TopdownL1 (Michael Petlan) [RHEL-32689]
  - perf vendor events intel: Update snowridgex to 1.22 (Michael Petlan) [RHEL-32689]
  - perf vendor events intel: Update skylake to v58 (Michael Petlan) [RHEL-32689]
  - perf vendor events intel: Update skylakex to 1.33 (Michael Petlan) [RHEL-32689]
  - perf vendor events intel: Update sierraforest to 1.02 (Michael Petlan) [RHEL-32689]
  - perf vendor events intel: Update sapphirerapids to 1.20 (Michael Petlan) [RHEL-32689]
  - perf vendor events intel: Update meteorlake to 1.08 (Michael Petlan) [RHEL-32689]
  - perf vendor events intel: Update lunarlake to 1.01 (Michael Petlan) [RHEL-32689]
  - perf vendor events intel: Update icelakex to 1.24 (Michael Petlan) [RHEL-32689]
  - perf vendor events intel: Update grandridge to 1.02 (Michael Petlan) [RHEL-32689]
  - perf vendor events intel: Update emeraldrapids to 1.06 (Michael Petlan) [RHEL-32689]
  - perf vendor events intel: Update cascadelakex to 1.21 (Michael Petlan) [RHEL-32689]
  - perf list: Escape '\r' in JSON output (Michael Petlan) [RHEL-37153]
  - filelock: Fix fcntl/close race recovery compat path (Pavel Reichl) [RHEL-50898] {CVE-2024-41020}
  - x86: stop playing stack games in profile_pc() (CKI Backport Bot) [RHEL-51649] {CVE-2024-42096}
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51624] {CVE-2024-42090}
  - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51605] {CVE-2024-42084}
  - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51150] {CVE-2024-41056}
  - filelock: fix potential use-after-free in posix_lock_inode (CKI Backport Bot) [RHEL-51103] {CVE-2024-41049}
  - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-51005] {CVE-2024-41039}
  - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50993] {CVE-2024-41038}
  - tools/perf: Handle perftool-testsuite_probe testcases fail when kernel debuginfo is not present (Michael Petlan) [RHEL-50646]
  - perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later (Michael Petlan) [RHEL-44190]
  - perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later (Michael Petlan) [RHEL-44190]
  - net: hns3: fix kernel crash problem in concurrent scenario (Ken Cox) [RHEL-47499] {CVE-2024-39507}
  - powerpc/perf: Set cpumode flags using sample address (Michael Petlan) [RHEL-12231]
  - Input: gpio-keys - filter gpio_keys -EPROBE_DEFER error messages (Luiz Capitulino) [RHEL-50463]
  - Input: gpio-keys - add system suspend support for dedicated wakeirqs (Luiz Capitulino) [RHEL-50463]
  - Input: gpio-keys - convert to dev_err_probe() (Luiz Capitulino) [RHEL-50463]
  - Input: gpio-keys - use input_report_key() (Luiz Capitulino) [RHEL-50463]
  - Input: gpio-keys - add support for linux,input-value DTS property (Luiz Capitulino) [RHEL-50463]
  - Input: gpio-keys - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr() (Luiz Capitulino) [RHEL-50463]
  - Input: gpio-keys - cancel delayed work only in case of GPIO (Luiz Capitulino) [RHEL-50463]
  - redhat/configs: enable CONFIG_KEYBOARD_GPIO (Luiz Capitulino) [RHEL-50463]
  - workqueue: Always queue work items to the newest PWQ for order workqueues (Waiman Long) [RHEL-49500]
  - workqueue: Update cpumasks after only applying it successfully (Waiman Long) [RHEL-49500]
  - workqueue: Cleanup subsys attribute registration (Waiman Long) [RHEL-49500]
  - workqueue: Fix divide error in wq_update_node_max_active() (Waiman Long) [RHEL-49500]
  - workqueue: The default node_nr_active should have its max set to max_active (Waiman Long) [RHEL-49500]
  - workqueue: Fix selection of wake_cpu in kick_pool() (Waiman Long) [RHEL-49500]
  - i40e: Fully suspend and resume IO operations in EEH case (Kamal Heib) [RHEL-32176]
  - i40e: factoring out i40e_suspend/i40e_resume (Kamal Heib) [RHEL-32176]
  - i40e: Add and use helper to reconfigure TC for given VSI (Kamal Heib) [RHEL-32176]
  - i40e: Add helper to access main VEB (Kamal Heib) [RHEL-32176]
  - i40e: Consolidate checks whether given VSI is main (Kamal Heib) [RHEL-32176]
  - i40e: Add helper to access main VSI (Kamal Heib) [RHEL-32176]
  - i40e: Refactor argument of i40e_detect_recover_hung() (Kamal Heib) [RHEL-32176]
  - i40e: Refactor argument of several client notification functions (Kamal Heib) [RHEL-32176]
  - i40e: Remove flags field from i40e_veb (Kamal Heib) [RHEL-32176]
  - i40e: Fix devlink port unregistering (Kamal Heib) [RHEL-32176]
  - i40e: Do not call devlink_port_type_clear() (Kamal Heib) [RHEL-32176]
  - i40e: Align devlink info versions with ice driver and add docs (Kamal Heib) [RHEL-32176]
  - i40e: Add PBA as board id info to devlink .info_get (Kamal Heib) [RHEL-32176]
  - i40e: Add handler for devlink .info_get (Kamal Heib) [RHEL-32176]
  - i40e: Implement ndo_get_devlink_port (Kamal Heib) [RHEL-32176]
  - i40e: Add initial devlink support (Kamal Heib) [RHEL-32176]
  - dmaengine: idxd: Check for driver name match before sva user feature (Jerry Snitselaar) [RHEL-44836 RHEL-46619]
  - dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe() (Jerry Snitselaar) [RHEL-44836]
  - dmaengine: ioatdma: Fix error path in ioat3_dma_probe() (Jerry Snitselaar) [RHEL-44836]
  - dmaengine: ioatdma: Fix leaking on version mismatch (Jerry Snitselaar) [RHEL-44836]
  - dmaengine: idma64: Add check for dma_set_max_seg_size (Jerry Snitselaar) [RHEL-44836]
  - dmaengine: tegra186: Fix residual calculation (Jerry Snitselaar) [RHEL-44836]
  - idma64: Don't try to serve interrupts when device is powered off (Jerry Snitselaar) [RHEL-44836]
  - dmaengine: ti: k3-udma: Report short packet errors (Jerry Snitselaar) [RHEL-44836]
  - dmaengine: tegra210-adma: fix global intr clear (Jerry Snitselaar) [RHEL-44836]
  - dma: gpi: remove spurious unlock in gpi_ch_init (Jerry Snitselaar) [RHEL-44836]
  - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Jerry Snitselaar) [RHEL-37363] {CVE-2024-35989}
  - dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue (Jerry Snitselaar) [RHEL-44836]
  - dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (Jerry Snitselaar) [RHEL-44836]
  - dmaengine: ioatdma: Fix missing kmem_cache_destroy() (Jerry Snitselaar) [RHEL-44836]
  - platform/x86/intel/sdsi: Add attribute to read the current meter state (David Arcari) [RHEL-15562]
  - platform/x86/intel/sdsi: Add in-band BIOS lock support (David Arcari) [RHEL-15562]
  - platform/x86/intel/sdsi: Combine read and write mailbox flows (David Arcari) [RHEL-15562]
  - platform/x86/intel/sdsi: Set message size during writes (David Arcari) [RHEL-15562]
  - cxl/cper: Fix non-ACPI-APEI-GHES build (John Allen) [RHEL-36781]
  - driver core: Add a guard() definition for the device_lock() (John Allen) [RHEL-36781]
  - cxl/cper: Remove duplicated GUID defines (John Allen) [RHEL-36781]
  - cxl/pci: Process CPER events (John Allen) [RHEL-36781]
  - acpi/ghes: Process CXL Component Events (John Allen) [RHEL-36781]
  - acpi/ghes: Remove CXL CPER notifications (John Allen) [RHEL-36781]
  - cxl/region: Allow out of order assembly of autodiscovered regions (John Allen) [RHEL-36781]
  - cxl/region: Handle endpoint decoders in cxl_region_find_decoder() (John Allen) [RHEL-36781]
  - cxl/trace: Remove unnecessary memcpy's (John Allen) [RHEL-36781]
  - cxl/cper: Fix errant CPER prints for CXL events (John Allen) [RHEL-36781]
  - cxl/pci: Register for and process CPER events (John Allen) [RHEL-36781]
  - PCI: Introduce cleanup helpers for device reference counts and locks (John Allen) [RHEL-36781]
  - acpi/ghes: Process CXL Component Events (John Allen) [RHEL-36781]
  - cxl/events: Create a CXL event union (John Allen) [RHEL-36781]
  - cxl/events: Separate UUID from event structures (John Allen) [RHEL-36781]
  - cxl/events: Remove passing a UUID to known event traces (John Allen) [RHEL-36781]
  - cxl/events: Create common event UUID defines (John Allen) [RHEL-36781]
  - cxl/events: Promote CXL event structures to a core header (John Allen) [RHEL-36781]
  - cxl/trace: Pass UUID explicitly to event traces (John Allen) [RHEL-36781]
  - cxl/pci: Change CXL AER support check to use native AER (John Allen) [RHEL-36781]
  - cxl/hdm: Fix && vs || bug (John Allen) [RHEL-36781]
  - cxl/core/regs: Rework cxl_map_pmu_regs() to use map->dev for devm (John Allen) [RHEL-36781]
  - cxl/core/regs: Rename phys_addr in cxl_map_component_regs() (John Allen) [RHEL-36781]
  - cxl/pci: Disable root port interrupts in RCH mode (John Allen) [RHEL-36781]
  - cxl/pci: Skip to handle RAS errors if CXL.mem device is detached (John Allen) [RHEL-36781]
  - cxl/pci: Add RCH downstream port error logging (John Allen) [RHEL-36781]
  - cxl/pci: Map RCH downstream AER registers for logging protocol errors (John Allen) [RHEL-36781]
  - cxl/pci: Update CXL error logging to use RAS register address (John Allen) [RHEL-36781]
  - cxl/pci: Add RCH downstream port AER register discovery (John Allen) [RHEL-36781]
  - cxl/port: Remove Component Register base address from struct cxl_port (John Allen) [RHEL-36781]
  - cxl/pci: Remove Component Register base address from struct cxl_dev_state (John Allen) [RHEL-36781]
  - cxl/hdm: Use stored Component Register mappings to map HDM decoder capability (John Allen) [RHEL-36781]
  - cxl/pci: Store the endpoint's Component Register mappings in struct cxl_dev_state (John Allen) [RHEL-36781]
  - cxl/port: Pre-initialize component register mappings (John Allen) [RHEL-36781]
  - cxl/port: Rename @comp_map to @reg_map in struct cxl_register_map (John Allen) [RHEL-36781]
  - Fix cxl_map_component_regs and cxl_map_device_regs (John Allen) [RHEL-36781]
  - io_uring: only taint the kernel on successful system call (Jeff Moyer) [RHEL-27755]
  - io_uring/net: ensure async prep handlers always initialize ->done_io (Jeff Moyer) [RHEL-27755]
  - io-wq: write next_work before dropping acct_lock (Jeff Moyer) [RHEL-27755]
  - io_uring: use the right type for work_llist empty check (Jeff Moyer) [RHEL-27755]
  - io_uring: clear opcode specific data for an early failure (Jeff Moyer) [RHEL-27755 RHEL-37293] {CVE-2024-35923}
  - io_uring: clean rings on NO_MMAP alloc fail (Jeff Moyer) [RHEL-27755]
  - io_uring/net: correctly handle multishot recvmsg retry setup (Jeff Moyer) [RHEL-27755]
  - io_uring: fix poll_remove stalled req completion (Jeff Moyer) [RHEL-27755]
  - io_uring: Fix release of pinned pages when __io_uaddr_map fails (Jeff Moyer) [RHEL-27755 RHEL-36926] {CVE-2024-35831}
  - io_uring: don't save/restore iowait state (Jeff Moyer) [RHEL-27755]
  - io_uring/net: correct the type of variable (Jeff Moyer) [RHEL-27755]
  - io_uring/net: fix overflow check in io_recvmsg_mshot_prep() (Jeff Moyer) [RHEL-27755 RHEL-36928] {CVE-2024-35827}
  - io_uring/net: move receive multishot out of the generic msghdr path (Jeff Moyer) [RHEL-27755]
  - io_uring/net: unify how recvmsg and sendmsg copy in the msghdr (Jeff Moyer) [RHEL-27755]
  - io_uring: remove unconditional looping in local task_work handling (Jeff Moyer) [RHEL-27755]
  - io_uring: remove looping around handling traditional task_work (Jeff Moyer) [RHEL-27755]
  - io_uring: fail NOP if non-zero op flags is passed in (Jeff Moyer) [RHEL-27755]
  - io_uring/net: restore msg_control on sendzc retry (Jeff Moyer) [RHEL-27755]
  - io_uring: Fix io_cqring_wait() not restoring sigmask on get_timespec64() failure (Jeff Moyer) [RHEL-27755]
  - io_uring/kbuf: hold io_buffer_list reference over mmap (Jeff Moyer) [RHEL-27755 RHEL-37250] {CVE-2024-35880}
  - io_uring/kbuf: protect io_buffer_list teardown with a reference (Jeff Moyer) [RHEL-27755]
  - io_uring/kbuf: get rid of bl->is_ready (Jeff Moyer) [RHEL-27755]
  - io_uring/kbuf: get rid of lower BGID lists (Jeff Moyer) [RHEL-27755]
  - io_uring: use private workqueue for exit work (Jeff Moyer) [RHEL-27755]
  - io_uring: disable io-wq execution of multishot NOWAIT requests (Jeff Moyer) [RHEL-27755]
  - io_uring: refactor DEFER_TASKRUN multishot checks (Jeff Moyer) [RHEL-27755]
  - io_uring/net: move recv/recvmsg flags out of retry loop (Jeff Moyer) [RHEL-27755]
  - io_uring: fix mshot io-wq checks (Jeff Moyer) [RHEL-27755]
  - io_uring/net: fix sendzc lazy wake polling (Jeff Moyer) [RHEL-27755]
  - io_uring/net: remove dependency on REQ_F_PARTIAL_IO for sr->done_io (Jeff Moyer) [RHEL-27755]
  - io_uring/rw: don't allow multishot reads without NOWAIT support (Jeff Moyer) [RHEL-27755]
  - io_uring/waitid: always remove waitid entry for cancel all (Jeff Moyer) [RHEL-27755]
  - io_uring/futex: always remove futex entry for cancel all (Jeff Moyer) [RHEL-27755]
  - io_uring/rw: return IOU_ISSUE_SKIP_COMPLETE for multishot retry (Jeff Moyer) [RHEL-27755]
  - io_uring: fix io_queue_proc modifying req->flags (Jeff Moyer) [RHEL-27755]
  - io_uring: fix mshot read defer taskrun cqe posting (Jeff Moyer) [RHEL-27755]
  - io_uring/net: fix multishot accept overflow handling (Jeff Moyer) [RHEL-27755]
  - io_uring: add io_file_can_poll() helper (Jeff Moyer) [RHEL-27755]
  - io_uring: expand main struct io_kiocb flags to 64-bits (Jeff Moyer) [RHEL-27755]
  - io_uring/net: fix sr->len for IORING_OP_RECV with MSG_WAITALL and buffers (Jeff Moyer) [RHEL-27755]
  - io_uring/net: limit inline multishot retries (Jeff Moyer) [RHEL-27755]
  - io_uring/poll: add requeue return code from poll multishot handling (Jeff Moyer) [RHEL-27755]
  - io_uring/net: un-indent mshot retry path in io_recv_finish() (Jeff Moyer) [RHEL-27755]
  - io_uring/poll: move poll execution helpers higher up (Jeff Moyer) [RHEL-27755]
  - io_uring/rw: ensure poll based multishot read retries appropriately (Jeff Moyer) [RHEL-27755]
  - io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL (Jeff Moyer) [RHEL-27755]
  - io_uring: combine cq_wait_nr checks (Jeff Moyer) [RHEL-27755]
  - io_uring: clean *local_work_add var naming (Jeff Moyer) [RHEL-27755]
  - io_uring: clean up local tw add-wait sync (Jeff Moyer) [RHEL-27755]
  - io_uring: adjust defer tw counting (Jeff Moyer) [RHEL-27755]
  - io_uring/register: guard compat syscall with CONFIG_COMPAT (Jeff Moyer) [RHEL-27755]
  - io_uring/rsrc: improve code generation for fixed file assignment (Jeff Moyer) [RHEL-27755]
  - io_uring/rw: cleanup io_rw_done() (Jeff Moyer) [RHEL-27755]
  - io_uring/kbuf: add method for returning provided buffer ring head (Jeff Moyer) [RHEL-27755]
  - io_uring/register: move io_uring_register(2) related code to register.c (Jeff Moyer) [RHEL-27755]
  - io_uring/openclose: add support for IORING_OP_FIXED_FD_INSTALL (Jeff Moyer) [RHEL-27755]
  - io_uring/cmd: inline io_uring_cmd_get_task (Jeff Moyer) [RHEL-27755]
  - io_uring/cmd: inline io_uring_cmd_do_in_task_lazy (Jeff Moyer) [RHEL-27755]
  - io_uring: split out cmd api into a separate header (Jeff Moyer) [RHEL-27755]
  - io_uring: optimise ltimeout for inline execution (Jeff Moyer) [RHEL-27755]
  - io_uring: don't check iopoll if request completes (Jeff Moyer) [RHEL-27755]
  - file: remove pointless wrapper (Jeff Moyer) [RHEL-27755]
  - io_uring/poll: don't enable lazy wake for POLLEXCLUSIVE (Jeff Moyer) [RHEL-27755]
  - io_uring: do not clamp read length for multishot read (Jeff Moyer) [RHEL-27755]
  - io_uring: do not allow multishot read to set addr or len (Jeff Moyer) [RHEL-27755]
  - io_uring: indicate if io_kbuf_recycle did recycle anything (Jeff Moyer) [RHEL-27755]
  - io_uring/rw: add separate prep handler for fixed read/write (Jeff Moyer) [RHEL-27755]
  - io_uring/rw: add separate prep handler for readv/writev (Jeff Moyer) [RHEL-27755]
  - io_uring/rw: don't attempt to allocate async data if opcode doesn't need it (Jeff Moyer) [RHEL-27755]
  - selftests/bpf/sockopt: Add io_uring support (Jeff Moyer) [RHEL-27755]
  - io_uring/cmd: Introduce SOCKET_URING_OP_SETSOCKOPT (Jeff Moyer) [RHEL-27755]
  - io_uring/cmd: Introduce SOCKET_URING_OP_GETSOCKOPT (Jeff Moyer) [RHEL-27755]
  - io_uring/cmd: return -EOPNOTSUPP if net is disabled (Jeff Moyer) [RHEL-27755]
  - selftests/net: Extract uring helpers to be reusable (Jeff Moyer) [RHEL-27755]
  - tools headers: Grab copy of io_uring.h (Jeff Moyer) [RHEL-27755]
  - io_uring/cmd: Pass compat mode in issue_flags (Jeff Moyer) [RHEL-27755]
  - net/socket: Break down __sys_getsockopt (Jeff Moyer) [RHEL-27755]
  - net/socket: Break down __sys_setsockopt (Jeff Moyer) [RHEL-27755]
  - bpf: Add sockptr support for setsockopt (Jeff Moyer) [RHEL-27755]
  - bpf: Add sockptr support for getsockopt (Jeff Moyer) [RHEL-27755]
  - io_uring/poll: use IOU_F_TWQ_LAZY_WAKE for wakeups (Jeff Moyer) [RHEL-27755]
  - io_uring: use files_lookup_fd_locked() (Jeff Moyer) [RHEL-27755]
  - io_uring: add support for vectored futex waits (Jeff Moyer) [RHEL-27755]
  - io_uring: add support for futex wake and wait (Jeff Moyer) [RHEL-27755]
  - io_uring: cancelable uring_cmd (Jeff Moyer) [RHEL-27755]
  - io_uring: retain top 8bits of uring_cmd flags for kernel internal use (Jeff Moyer) [RHEL-27755]
  - io_uring: add IORING_OP_WAITID support (Jeff Moyer) [RHEL-27755]
  - io_uring/rw: add support for IORING_OP_READ_MULTISHOT (Jeff Moyer) [RHEL-27755]
  - exit: add internal include file with helpers (Jeff Moyer) [RHEL-27755]
  - exit: add kernel_waitid_prepare() helper (Jeff Moyer) [RHEL-27755]
  - exit: move core of do_wait() into helper (Jeff Moyer) [RHEL-27755]
  - exit: abstract out should_wake helper for child_wait_callback() (Jeff Moyer) [RHEL-27755]
  - io_uring/rw: mark readv/writev as vectored in the opcode definition (Jeff Moyer) [RHEL-27755]
  - io_uring/rw: split io_read() into a helper (Jeff Moyer) [RHEL-27755]
  - io_uring/rsrc: Annotate struct io_mapped_ubuf with __counted_by (Jeff Moyer) [RHEL-27755]
  - io_uring: use kiocb_{start,end}_write() helpers (Jeff Moyer) [RHEL-27755]
  - fs: create kiocb_{start,end}_write() helpers (Jeff Moyer) [RHEL-27755]
  - fs: add kerneldoc to file_{start,end}_write() helpers (Jeff Moyer) [RHEL-27755]
  - io_uring: rename kiocb_end_write() local helper (Jeff Moyer) [RHEL-27755]
  - io_uring: use call_rcu_hurry if signaling an eventfd (Jeff Moyer) [RHEL-27755]
  - pipe: check for IOCB_NOWAIT alongside O_NONBLOCK (Jeff Moyer) [RHEL-27755]
  - pipe: set FMODE_NOWAIT on pipes (Jeff Moyer) [RHEL-27755]
  - splice: clear FMODE_NOWAIT on file if splice/vmsplice is used (Jeff Moyer) [RHEL-27755]
  - net: move dev->state into net_device_read_txrx group (Felix Maurer) [RHEL-30902]
  - net-device: move lstats in net_device_read_txrx (Felix Maurer) [RHEL-30902]
  - tcp: move tp->scaling_ratio to tcp_sock_read_txrx group (Felix Maurer) [RHEL-30902]
  - net-device: move xdp_prog to net_device_read_rx (Felix Maurer) [RHEL-30902]
  - net-device: move gso_partial_features to net_device_read_tx (Felix Maurer) [RHEL-30902]
  - Documentations: fix net_cachelines documentation build warning (Felix Maurer) [RHEL-30902]
  - tcp: reorganize tcp_sock fast path variables (Felix Maurer) [RHEL-30902]
  - net-device: reorganize net_device fast path variables (Felix Maurer) [RHEL-30902]
  - netns-ipv4: reorganize netns_ipv4 fast path variables (Felix Maurer) [RHEL-30902]
  - cache: enforce cache groups (Felix Maurer) [RHEL-30902]
  - Documentations: Analyze heavily used Networking related structs (Felix Maurer) [RHEL-30902]
  - net/tcp: refactor tcp_inet6_sk() (Felix Maurer) [RHEL-30902]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-494.el9]
changelog:
  - Revert: Duplicated code of __iowrite32_copy() (Lucas Zampieri)
  - cxl/mem: Fix no cxl_nvd during pmem region auto-assembling (John W. Linville) [RHEL-51364] {CVE-2024-41085}
  - cxl/region: Avoid null pointer dereference in region lookup (John W. Linville) [RHEL-51656] {CVE-2024-41084}
  - PCI/MSI: Fix UAF in msi_capability_init (John W. Linville) [RHEL-51436] {CVE-2024-41096}
  - perf test stat_bpf_counter.sh: Stabilize the test results (Michael Petlan) [RHEL-33020]
  - perf test bpf-counters: Add test for BPF event modifier (Michael Petlan) [RHEL-33020]
  - nvme: avoid double free special payload (CKI Backport Bot) [RHEL-51309] {CVE-2024-41073}
  - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48282] {CVE-2024-40972}
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48282] {CVE-2024-40972}
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48517] {CVE-2024-40998}
  - ext4: turn quotas off if mount failed after enabling quotas (Carlos Maiolino) [RHEL-48517] {CVE-2024-40998}
  - arm64/io: add constant-argument check (Charles Mirabile) [RHEL-43402]
  - IB/mlx5: Use __iowrite64_copy() for write combining stores (Charles Mirabile) [RHEL-43402]
  - arm64/io: Provide a WC friendly __iowriteXX_copy() (Charles Mirabile) [RHEL-43402]
  - s390: Stop using weak symbols for __iowrite64_copy() (Charles Mirabile) [RHEL-43402]
  - s390: use the correct count for __iowrite64_copy() (Charles Mirabile) [RHEL-43402]
  - s390: Implement __iowrite32_copy() (Charles Mirabile) [RHEL-43402]
  - x86: Stop using weak symbols for __iowrite32_copy() (Charles Mirabile) [RHEL-43402]
  - hwmon: (dell-smm) Add Dell Precision 7540 to fan control whitelist (David Arcari) [RHEL-37108]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-495.el9]
changelog:
  - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52031] {CVE-2024-42154}
  - SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (Benjamin Coddington) [RHEL-53004]
  - NFSD: Support write delegations in LAYOUTGET (Benjamin Coddington) [RHEL-53004]
  - nfs: fix undefined behavior in nfs_block_bits() (Benjamin Coddington) [RHEL-53004]
  - knfsd: LOOKUP can return an illegal error value (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: Fixup gss_status tracepoint error output (Benjamin Coddington) [RHEL-53004]
  - nfs: pass explicit offset/count to trace events (Benjamin Coddington) [RHEL-53004]
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Benjamin Coddington) [RHEL-53004]
  - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (Benjamin Coddington) [RHEL-53004]
  - NFSD: Fix nfsdcld warning (Benjamin Coddington) [RHEL-53004]
  - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: avoid soft lockup when transmitting UDP to reachable server. (Benjamin Coddington) [RHEL-53004]
  - xprtrdma: Fix rpcrdma_reqs_reset() (Benjamin Coddington) [RHEL-53004]
  - Revert "nfsd: fix oops when reading pool_stats before server is started" (Benjamin Coddington) [RHEL-53004]
  - nfsd: initialise nfsd_info.mutex early. (Benjamin Coddington) [RHEL-53004]
  - nfs: drop the incorrect assertion in nfs_swap_rw() (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: Fix backchannel reply, again (Benjamin Coddington) [RHEL-53004]
  - NFS: add barriers when testing for NFS_FSDATA_BLOCKED (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: return proper error from gss_wrap_req_priv (Benjamin Coddington) [RHEL-53004]
  - NFSv4.1 enforce rootpath check in fs_location query (Benjamin Coddington) [RHEL-53004]
  - pNFS/filelayout: fixup pNfs allocation modes (Benjamin Coddington) [RHEL-53004]
  - rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL (Benjamin Coddington) [RHEL-53004]
  - NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS (Benjamin Coddington) [RHEL-53004]
  - sunrpc: fix NFSACL RPC retry on soft mount (Benjamin Coddington) [RHEL-53004]
  - nfs: keep server info for remounts (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: Fix gss_free_in_token_pages() (Benjamin Coddington) [RHEL-53004]
  - sunrpc: removed redundant procp check (Benjamin Coddington) [RHEL-53004]
  - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52367] {CVE-2024-42225}
  - ice: xsk: fix txq interrupt mapping (Petr Oros) [RHEL-15670]
  - ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (Petr Oros) [RHEL-15670]
  - ice: improve updating ice_{t,r}x_ring::xsk_pool (Petr Oros) [RHEL-15670]
  - ice: toggle netif_carrier when setting up XSK pool (Petr Oros) [RHEL-15670]
  - ice: modify error handling when setting XSK pool in ndo_bpf (Petr Oros) [RHEL-15670]
  - ice: replace synchronize_rcu with synchronize_net (Petr Oros) [RHEL-15670]
  - ice: don't busy wait for Rx queue disable in ice_qp_dis() (Petr Oros) [RHEL-15670]
  - ice: respect netif readiness in AF_XDP ZC related ndo's (Petr Oros) [RHEL-15670]
  - wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband (CKI Backport Bot) [RHEL-51809] {CVE-2024-42125}
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (CKI Backport Bot) [RHEL-51767] {CVE-2024-42114}
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51033] {CVE-2024-41041}
  - ACPI: fix double INT_SRC_OVR override (Desnes Nunes) [RHEL-45576]
  - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-46609]
  - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-46609]
  - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49371] {CVE-2024-41005}
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46479] {CVE-2024-39472}
  - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35048] {CVE-2024-27013}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-496.el9]
changelog:
  - mptcp: fix possible NULL dereferences (Antoine Tenart) [RHEL-48648]
  - af_packet: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - udp: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - tcp: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - net: raw: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - ping: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - net: introduce sk_skb_reason_drop function (Antoine Tenart) [RHEL-48648]
  - net: add rx_sk to trace_kfree_skb (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: fully support in tcp_check_req() (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: handle timewait cases in the receive path (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: fully support in tcp_rcv_state_process() (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: fully support in tcp_ack() (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: fully support in tcp_rcv_synsent_state_process() (Antoine Tenart) [RHEL-48648]
  - rstreason: make it work in trace world (Antoine Tenart) [RHEL-48648]
  - mptcp: introducing a helper into active reset logic (Antoine Tenart) [RHEL-48648]
  - mptcp: support rstreason for passive reset (Antoine Tenart) [RHEL-48648]
  - tcp: support rstreason for passive reset (Antoine Tenart) [RHEL-48648]
  - rstreason: prepare for active reset (Antoine Tenart) [RHEL-48648]
  - rstreason: prepare for passive reset (Antoine Tenart) [RHEL-48648]
  - net: introduce rstreason to detect why the RST is sent (Antoine Tenart) [RHEL-48648]
  - trace: tcp: fully support trace_tcp_send_reset (Antoine Tenart) [RHEL-48648]
  - trace: adjust TP_STORE_ADDR_PORTS_SKB() parameters (Antoine Tenart) [RHEL-48648]
  - net: udp: add IP/port data to the tracepoint udp/udp_fail_queue_rcv_skb (Antoine Tenart) [RHEL-48648]
  - net: port TP_STORE_ADDR_PORTS_SKB macro to be tcp/udp independent (Antoine Tenart) [RHEL-48648]
  - trace: use TP_STORE_ADDRS() macro in inet_sock_set_state() (Antoine Tenart) [RHEL-48648]
  - trace: use TP_STORE_ADDRS() macro in inet_sk_error_report() (Antoine Tenart) [RHEL-48648]
  - trace: move to TP_STORE_ADDRS related macro to net_probe_common.h (Antoine Tenart) [RHEL-48648]
  - inet: preserve const qualifier in inet_sk() (Antoine Tenart) [RHEL-48648]
  - tcp: make dropreason in tcp_child_process() work (Antoine Tenart) [RHEL-48648]
  - tcp: make the dropreason really work when calling tcp_rcv_state_process() (Antoine Tenart) [RHEL-48648]
  - tcp: add dropreasons in tcp_rcv_state_process() (Antoine Tenart) [RHEL-48648]
  - tcp: add more specific possible drop reasons in tcp_rcv_synsent_state_process() (Antoine Tenart) [RHEL-48648]
  - tcp: introduce dropreasons in receive path (Antoine Tenart) [RHEL-48648]
  - tcp: use drop reasons in cookie check for ipv6 (Antoine Tenart) [RHEL-48648]
  - tcp: directly drop skb in cookie check for ipv6 (Antoine Tenart) [RHEL-48648]
  - tcp: use drop reasons in cookie check for ipv4 (Antoine Tenart) [RHEL-48648]
  - tcp: directly drop skb in cookie check for ipv4 (Antoine Tenart) [RHEL-48648]
  - tcp: add a dropreason definitions and prepare for cookie check (Antoine Tenart) [RHEL-48648]
  - tcp: Clean up goto labels in cookie_v[46]_check(). (Antoine Tenart) [RHEL-48648]
  - net: use %pS for kfree_skb tracing event location (Antoine Tenart) [RHEL-48648]
  - PCI: endpoint: remove bogus return in pci_epf_device_remove() (Brian Masney) [RHEL-47218]
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37006] {CVE-2024-35855}
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37010] {CVE-2024-35854}
  - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37014] {CVE-2024-35853}
  - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37486] {CVE-2024-36006}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-497.el9]
changelog:
  - Add amd-pstate-ut to the mod-internal.list (David Arcari) [RHEL-53955]
  - firmware: cs_dsp: Return error if block header overflows file (David Arcari) [RHEL-53650] {CVE-2024-42238}
  - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51138] {CVE-2024-41055}
  - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51138] {CVE-2024-41055}
  - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51046] {CVE-2024-41042}
  - netfilter: nf_tables: allow loop termination for pending fatal signal (Phil Sutter) [RHEL-51046]
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51522] {CVE-2024-42070}
  - netfilter: nft_inner: validate mandatory meta and payload (Phil Sutter) [RHEL-47486] {CVE-2024-39504}
  - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47616] {CVE-2024-39503}
  - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47616] {CVE-2024-39503}
  - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47616] {CVE-2024-39503}
  - qed/qede: Fix scheduling while atomic (John Meneghini) [RHEL-9751]
  - cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (Pavel Reichl) [RHEL-51157] {CVE-2024-41057}
  - cachefiles: fix slab-use-after-free in fscache_withdraw_volume() (Pavel Reichl) [RHEL-51163] {CVE-2024-41058}
  - netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() (Pavel Reichl) [RHEL-51157 RHEL-51163]
  - nvme-fabrics: use reserved tag for reg read/write command (CKI Backport Bot) [RHEL-51357] {CVE-2024-41082}
  - nvmet: always initialize cqe.result (Maurizio Lombardi) [RHEL-51334 RHEL-51335] {CVE-2024-41079}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52019 RHEL-52020] {CVE-2024-42152}
  - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-52083] {CVE-2024-41076}
  - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50885] {CVE-2024-41013}
  - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50862] {CVE-2024-41014}
  - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48637] {CVE-2024-41007}
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48637]
  - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39906] {CVE-2024-36939}
  - mm/page_table_check: fix crash on ZONE_DEVICE (Chris von Recklinghausen) [RHEL-48052] {CVE-2024-40948}
  - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28110] {CVE-2021-47101}
  - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28110] {CVE-2021-47101}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-498.el9]
changelog:
  - xfs: allow SECURE namespace xattrs to use reserved block pool (Pavel Reichl) [RHEL-49806]
  - firmware: cs_dsp: Validate payload length before processing block (David Arcari) [RHEL-53640] {CVE-2024-42237}
  - selftests: netfilter: test nat source port clash resolution interaction with tcp early demux (Florian Westphal) [RHEL-6151]
  - netfilter: nf_nat: undo erroneous tcp edemux lookup after port clash (Florian Westphal) [RHEL-6151]
  - xfs: allow symlinks with short remote targets (CKI Backport Bot) [RHEL-53164]
  - netfilter: Use flowlabel flow key when re-routing mangled packets (Florian Westphal) [RHEL-40213]
  - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51059] {CVE-2024-41044}
  - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47943 RHEL-47944] {CVE-2024-40931}
  - Bluetooth: ISO: Check socket flag instead of hcon (CKI Backport Bot) [RHEL-51982] {CVE-2024-42141}
  - bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX (CKI Backport Bot) [RHEL-51910] {CVE-2024-42132}
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (CKI Backport Bot) [RHEL-51214] {CVE-2024-41063}
  - mm: vmalloc: check if a hash-index is in cpu_possible_mask (CKI Backport Bot) [RHEL-50955] {CVE-2024-41032}
  - Merge DRM changes from upstream v6.9..v6.9.11 (Dave Airlie) [RHEL-24103]
  - powerpc/mm: Fix false detection of read faults (Chris von Recklinghausen) [RHEL-50040]
  - powerpc/mm: Support execute-only memory on the Radix MMU (Chris von Recklinghausen) [RHEL-50040]
  - io_uring/sqpoll: work around a potential audit memory leak (Jeff Moyer) [RHEL-48561] {CVE-2024-41001}
  - io_uring/rsrc: don't lock while !TASK_RUNNING (Jeff Moyer) [RHEL-47830] {CVE-2024-40922}
  - io_uring/io-wq: Use set_bit() and test_bit() at worker->flags (Jeff Moyer) [RHEL-47505] {CVE-2024-39508}
  - kunit: kasan_test: fix backport error in kasan test (Nico Pache) [RHEL-39303]
  - redhat: add configs for new kunit tests (Nico Pache) [RHEL-39303]
  - kasan: use unchecked __memset internally (Nico Pache) [RHEL-39303]
  - kasan: unify printk prefixes (Nico Pache) [RHEL-39303]
  - net/handshake: Fix handshake_req_destroy_test1 (Nico Pache) [RHEL-39303]
  - kunit: bail out early in __kunit_test_suites_init() if there are no suites to test (Nico Pache) [RHEL-39303]
  - kunit: string-stream-test: use KUNIT_DEFINE_ACTION_WRAPPER (Nico Pache) [RHEL-39303]
  - kunit: test: Move fault tests behind KUNIT_FAULT_TEST Kconfig option (Nico Pache) [RHEL-39303]
  - kunit: unregister the device on error (Nico Pache) [RHEL-39303]
  - kunit: Fix race condition in try-catch completion (Nico Pache) [RHEL-39303]
  - kunit: Add tests for fault (Nico Pache) [RHEL-39303]
  - kunit: Print last test location on fault (Nico Pache) [RHEL-39303]
  - kunit: Handle test faults (Nico Pache) [RHEL-39303]
  - kunit: Fix timeout message (Nico Pache) [RHEL-39303]
  - kunit: Fix kthread reference (Nico Pache) [RHEL-39303]
  - kunit: Handle thread creation error (Nico Pache) [RHEL-39303]
  - lib: checksum: hide unused expected_csum_ipv6_magic[] (Nico Pache) [RHEL-39303]
  - Revert "kunit: memcpy: Split slow memcpy tests into MEMCPY_SLOW_KUNIT_TEST" (Nico Pache) [RHEL-39303]
  - kunit: Fix again checksum tests on big endian CPUs (Nico Pache) [RHEL-39303]
  - kunit: Annotate _MSG assertion variants with gnu printf specifiers (Nico Pache) [RHEL-39303]
  - rtc: test: Fix invalid format specifier. (Nico Pache) [RHEL-39303]
  - lib: memcpy_kunit: Fix an invalid format specifier in an assertion msg (Nico Pache) [RHEL-39303]
  - lib/cmdline: Fix an invalid format specifier in an assertion msg (Nico Pache) [RHEL-39303]
  - kunit: test: Log the correct filter string in executor_test (Nico Pache) [RHEL-39303]
  - kunit: make kunit_bus_type const (Nico Pache) [RHEL-39303]
  - kunit: Mark filter* params as rw (Nico Pache) [RHEL-39303]
  - kunit: tool: Print UML command (Nico Pache) [RHEL-39303]
  - time/kunit: Use correct format specifier (Nico Pache) [RHEL-39303]
  - Documentation: KUnit: Update the instructions on how to test static functions (Nico Pache) [RHEL-39303]
  - kunit: run test suites only after module initialization completes (Nico Pache) [RHEL-39303]
  - MAINTAINERS: kunit: Add Rae Moar as a reviewer (Nico Pache) [RHEL-39303]
  - lib: checksum: Fix build with CONFIG_NET=n (Nico Pache) [RHEL-39303]
  - kunit: Add tests for csum_ipv6_magic and ip_fast_csum (Nico Pache) [RHEL-39303]
  - Documentation: kunit: Add clang UML coverage example (Nico Pache) [RHEL-39303]
  - kunit: Protect string comparisons against NULL (Nico Pache) [RHEL-39303]
  - kunit: Add example of kunit_activate_static_stub() with pointer-to-function (Nico Pache) [RHEL-39303]
  - kunit: Allow passing function pointer to kunit_activate_static_stub() (Nico Pache) [RHEL-39303]
  - kunit: Fix NULL-dereference in kunit_init_suite() if suite->log is NULL (Nico Pache) [RHEL-39303]
  - kunit: Reset test->priv after each param iteration (Nico Pache) [RHEL-39303]
  - kunit: Add example for using test->priv (Nico Pache) [RHEL-39303]
  - Documentation: Add debugfs docs with run after boot (Nico Pache) [RHEL-39303]
  - kunit: add ability to run tests after boot using debugfs (Nico Pache) [RHEL-39303]
  - kunit: add is_init test attribute (Nico Pache) [RHEL-39303]
  - kunit: add example suite to test init suites (Nico Pache) [RHEL-39303]
  - kunit: add KUNIT_INIT_TABLE to init linker section (Nico Pache) [RHEL-39303]
  - kunit: move KUNIT_TABLE out of INIT_DATA (Nico Pache) [RHEL-39303]
  - kunit: tool: add test for parsing attributes (Nico Pache) [RHEL-39303]
  - kunit: tool: fix parsing of test attributes (Nico Pache) [RHEL-39303]
  - kunit: debugfs: Handle errors from alloc_string_stream() (Nico Pache) [RHEL-39303]
  - kunit: debugfs: Fix unchecked dereference in debugfs_print_results() (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Allow ERR_PTR to be passed to string_stream_destroy() (Nico Pache) [RHEL-39303]
  - kunit: string-stream-test: Avoid cast warning when testing gfp_t flags (Nico Pache) [RHEL-39303]
  - mptcp: fill in missing MODULE_DESCRIPTION() (Nico Pache) [RHEL-39303]
  - kunit: test: Avoid cast warning when adding kfree() as an action (Nico Pache) [RHEL-39303]
  - kunit: Reset suite counter right before running tests (Nico Pache) [RHEL-39303]
  - kunit: Warn if tests are slow (Nico Pache) [RHEL-39303]
  - kasan: fix and update KUNIT_EXPECT_KASAN_FAIL comment (Nico Pache) [RHEL-39303]
  - x86/asm: Fix build of UML with KASAN (Nico Pache) [RHEL-39303]
  - kunit: Reset test status on each param iteration (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Test performance of string_stream (Nico Pache) [RHEL-39303]
  - kunit: Use string_stream for test log (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Add tests for freeing resource-managed string_stream (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Decouple string_stream from kunit (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Add kunit_alloc_string_stream() (Nico Pache) [RHEL-39303]
  - kunit: Don't use a managed alloc in is_literal() (Nico Pache) [RHEL-39303]
  - kunit: string-stream-test: Add cases for string_stream newline appending (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Add option to make all lines end with newline (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Improve testing of string_stream (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Don't create a fragment for empty strings (Nico Pache) [RHEL-39303]
  - kunit: Fix wild-memory-access bug in kunit_free_suite_set() (Nico Pache) [RHEL-39303]
  - kunit: tool: Add command line interface to filter and report attributes (Nico Pache) [RHEL-39303]
  - kunit: tool: Enable CONFIG_FORTIFY_SOURCE under UML (Nico Pache) [RHEL-39303]
  - kunit: tool: undo type subscripts for subprocess.Popen (Nico Pache) [RHEL-39303]
  - kunit: tool: Add support for SH under QEMU (Nico Pache) [RHEL-39303]
  - kunit: tool: Add support for overriding the QEMU serial port (Nico Pache) [RHEL-39303]
  - kunit: tool: fix pre-existing `mypy --strict` errors and update run_checks.py (Nico Pache) [RHEL-39303]
  - kunit: tool: remove unused imports and variables (Nico Pache) [RHEL-39303]
  - kunit: tool: add subscripts for type annotations where appropriate (Nico Pache) [RHEL-39303]
  - kunit: tool: Add support for m68k under QEMU (Nico Pache) [RHEL-39303]
  - kunit: kunit.py extract handlers (Nico Pache) [RHEL-39303]
  - kunit: tool: remove redundant file.close() call in unit test (Nico Pache) [RHEL-39303]
  - kunit: tool: unit tests all check parser errors, standardize formatting a bit (Nico Pache) [RHEL-39303]
  - kunit: tool: make TestCounts a dataclass (Nico Pache) [RHEL-39303]
  - kunit: tool: make parser preserve whitespace when printing test log (Nico Pache) [RHEL-39303]
  - kunit: tool: Don't download risc-v opensbi firmware with wget (Nico Pache) [RHEL-39303]
  - kunit: tool: rename all_test_uml.config, use it for --alltests (Nico Pache) [RHEL-39303]
  - Documentation: KUnit: Fix non-uml anchor (Nico Pache) [RHEL-39303]
  - Documentation: Kunit: Fix inconsistent titles (Nico Pache) [RHEL-39303]
  - Documentation: kunit: fix trivial typo (Nico Pache) [RHEL-39303]
  - kunit: tool: make --raw_output=kunit (aka --raw_output) preserve leading spaces (Nico Pache) [RHEL-39303]
  - Documentation: Kunit: Add ref for other kinds of tests (Nico Pache) [RHEL-39303]
  - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (CKI Backport Bot) [RHEL-43727] {CVE-2024-36979}
  - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (CKI Backport Bot) [RHEL-43727] {CVE-2024-36979}
  - net: bridge: mst: fix vlan use-after-free (CKI Backport Bot) [RHEL-43727] {CVE-2024-36979}
  - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44114] {CVE-2024-38579}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-499.el9]
changelog:
  - ARM: dts: renesas: Improve TMU interrupt descriptions (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add interrupt-names to arch timer nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r9a07g044: Add missing hypervisor virtual timer IRQ (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779a0: Add missing hypervisor virtual timer IRQ (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: s4sk: Add aliases for I2C buses (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add Renesas R8A779F4 SoC support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: s4sk: Fix ethernet0 alias (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-ethernet: Enable Ethernet Switch and SERDES (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: rzg2: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: rcar-gen3: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - ARM: dts: rzg1: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - ARM: dts: rcar-gen2: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add missing hypervisor virtual timer IRQ (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Add aliases for I2C buses (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Improve TMU interrupt descriptions (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add R-Car S4 Starter Kit support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: spider: Enable PCIe Host ch0 (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add PCIe Host and Endpoint nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Add GP LEDs (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add INTC-EX node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Revise renesas,ipmmu-main (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Use proper labels for thermal zones (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Drop specifying the GIC_CPU_MASK_SIMPLE() for GICv3 systems (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add iommus to MMC node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Enable UFS device (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add CA55 operating points (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add Ethernet Switch and SERDES nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Switch from SCIF3 to HSCIF0 (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Fix SCIF "brg_int" clock (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Fix HSCIF "brg_int" clock (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Add missing bootargs (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider: Move aliases and chosen (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add MSIOF nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add TMU nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add CMT support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Enable eMMC0 (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add SDHI0 support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Fix scif0/scif3 sort order (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Enable SCIF0 on second connector (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add SCIF nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add HSCIF nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add DMA properties to SCIF3 (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add CPU core clocks (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add CPUIdle support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add secondary CA55 CPU cores (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add L3 cache controller (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add UFS node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add iommus to DMAC nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add IPMMU nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add sys-dmac nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add thermal support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add GPIO nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: rcar-gen4: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider: Add Ethernet sub-board (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Add I2C4 and EEPROMs (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add I2C nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider: Complete SCIF3 description (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add pinctrl device node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Enable watchdog timer (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add RWDT node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add Renesas R8A779F0 SoC support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add Renesas Spider boards support (Steve Dunnagan) [RHEL-53987]
  - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51020] {CVE-2024-41040}
  - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44201 RHEL-44202] {CVE-2024-38559}
  - netfilter: br_netfilter: remove WARN traps (Florian Westphal) [RHEL-36872]
  - netfilter: br_netfilter: skip conntrack input hook for promisc packets (Florian Westphal) [RHEL-36872]
  - netfilter: bridge: confirm multicast packets before passing them up the stack (Florian Westphal) [RHEL-36872] {CVE-2024-27415}
  - netfilter: nf_conntrack_bridge: initialize err to 0 (Florian Westphal) [RHEL-36872]
  - net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: E-switch, Create ingress ACL when needed (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Add check for srq max_sge attribute (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Follow rb_key.ats when creating new mkeys (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Remove extra unlock on error path (Benjamin Poirier) [RHEL-45365]
  - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Always stop health timer during driver removal (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Stop waiting for PCI if pci channel is offline (Benjamin Poirier) [RHEL-45365]
  - net/mlx5e: Fix UDP GSO for encapsulated packets (Benjamin Poirier) [RHEL-45365]
  - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (Benjamin Poirier) [RHEL-45365]
  - net/mlx5e: Fix IPsec tunnel mode offload feature check (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Lag, do bond only if slaves agree on roce state (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Reload only IB representors upon lag disable/enable (Benjamin Poirier) [RHEL-45365]
  - IB/mlx5: Use __iowrite64_copy() for write combining stores (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Adding remote atomic access flag to updatable flags (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Change check for cacheable mkeys (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent (Benjamin Poirier) [RHEL-45365]
  - mlx5: stop warning for 64KB pages (Benjamin Poirier) [RHEL-45365]
  - mlx5: avoid truncating error message (Benjamin Poirier) [RHEL-45365]
  - tools/power/x86/intel-speed-select: v1.19 release (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Display CPU as None for -1 (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: SST BF/TF support per level (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Increase number of CPUs displayed (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Present all TRL levels for turbo-freq (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Fix display for unsupported levels (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Support multiple dies (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Increase die count (David Arcari) [RHEL-20031]
  - platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove() (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Support SST-BF and SST-TF per level (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Add missing MODULE_DESCRIPTION (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Add dev_fmt (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Support partitioned systems (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Shorten the assignments for power_domain_info (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Use local variable for auxdev->dev (David Arcari) [RHEL-20031]
  - platform/x86/intel/tpmi: Add additional TPMI header fields (David Arcari) [RHEL-20031]
  - platform/x86/intel/tpmi: Align comments in kernel-doc (David Arcari) [RHEL-20031]
  - platform/x86/intel/tpmi: Check major version change for TPMI Information (David Arcari) [RHEL-20031]
  - platform/x86/intel/tpmi: Handle error from tpmi_process_info() (David Arcari) [RHEL-20031]
  - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-9096]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-500.el9]
changelog:
  - mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines (Chris von Recklinghausen) [RHEL-54027] {CVE-2024-42258}
  - rtla/osnoise: set the default threshold to 1us (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/osnoise: Better report when histogram is empty (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/osnoise: Use pretty formatting only on interactive tty (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla: Fix -t\--trace[=file] (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Fix histogram report when a cpu count is 0 (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla: Add the --warm-up option (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Add a summary for hist mode (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Add a summary for top mode (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Use pretty formatting only on interactive tty (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/auto-analysis: Replace \t with spaces (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Simplify "no value" printing on top (Luis Claudio R. Goncalves) [RHEL-50869]
  - tools/rtla: Add -U/--user-load option to timerlat (Luis Claudio R. Goncalves) [RHEL-50869]
  - Documentation: Add tools/rtla timerlat -u option documentation (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla: Make doc build optional (Luis Claudio R. Goncalves) [RHEL-50869]
  - kernfs: change kernfs_rename_lock into a read-write lock (Ian Kent) [RHEL-52956]
  - kernfs: Separate kernfs_pr_cont_buf and rename_lock (Ian Kent) [RHEL-52956]
  - kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent) [RHEL-52956]
  - kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info (Ian Kent) [RHEL-52956]
  - kernfs: Introduce separate rwsem to protect inode attributes (Ian Kent) [RHEL-52956]
  - perf/x86/intel: Support Perfmon MSRs aliasing (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Support PERFEVTSEL extension (Michael Petlan) [RHEL-20059]
  - perf/x86: Add config_mask to represent EVENTSEL bitmask (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Support new data source for Lunar Lake (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Rename model-specific pebs_latency_data functions (Michael Petlan) [RHEL-20059]
  - perf/x86: Add Lunar Lake and Arrow Lake support (Michael Petlan) [RHEL-20059]
  - perf/x86: Support counter mask (Michael Petlan) [RHEL-20059]
  - perf/x86/amd: Use try_cmpxchg() in events/amd/{un,}core.c (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Support the PEBS event mask (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/cstate: Add Lunarlake support (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/cstate: Add Arrowlake support (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/msr: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/uncore: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/pt: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/lbr: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/cstate: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h (Michael Petlan) [RHEL-20059]
  - x86/cpu/vfm: Add new macros to work with (vendor/family/model) values (Michael Petlan) [RHEL-20059]
  - x86/cpu/vfm: Add/initialize x86_vfm field to struct cpuinfo_x86 (Michael Petlan) [RHEL-20059]
  - intel_th: pci: Add Lunar Lake support (Michael Petlan) [RHEL-20057]
  - iommufd/iova_bitmap: Remove iterator logic (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Dynamic pinning on iova_bitmap_set() (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Consolidate iova_bitmap_set exit conditionals (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Move initial pinning to iova_bitmap_for_each() (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Cache mapped length in iova_bitmap_map struct (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Check iova_bitmap_done() after set ahead (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Do not record head iova to better match iommu drivers (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Fix tests to use MOCK_PAGE_SIZE based buffer sizes (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Add tests for <= u8 bitmap sizes (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Fix iommufd_test_dirty() to handle <u8 bitmaps (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Fix dirty bitmap tests with u8 bitmaps (Jerry Snitselaar) [RHEL-40162]
  - dax/bus.c: use the right locking mode (read vs write) in size_show (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: don't use down_write_killable for non-user processes (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: fix locking for unregister_dax_dev / unregister_dax_mapping paths (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: replace WARN_ON_ONCE() with lockdep asserts (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: fix memmap_on_memory sysfs value retrieval (Jeff Moyer) [RHEL-23824]
  - nvdimm/pmem: fix leak on dax_add_host() failure (Jeff Moyer) [RHEL-23824]
  - dax: add a sysfs knob to control memmap_on_memory behavior (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: export mhp_supports_memmap_on_memory() (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: split memmap_on_memory requests across memblocks (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: replace an open-coded kmemdup() in add_memory_resource() (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: embed vmem_altmap details in memory block (Jeff Moyer) [RHEL-23824]
  - powerpc/book3s64/memhotplug: enable memmap on memory for radix (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: support memmap_on_memory when memmap is not aligned to pageblocks (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: allow architecture to override memmap on memory support check (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: simplify ARCH_MHP_MEMMAP_ON_MEMORY_ENABLE kconfig (Jeff Moyer) [RHEL-23824]
  - Documentatiion/ABI: add ABI documentation for sys-bus-dax (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: replace several sprintf() with sysfs_emit() (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: replace driver-core lock usage by a local rwsem (Jeff Moyer) [RHEL-23824]
  - device-dax: make dax_bus_type const (Jeff Moyer) [RHEL-23824]
  - nvdimm: make nvdimm_bus_type const (Jeff Moyer) [RHEL-23824]
  - libnvdimm: Fix ACPI_NFIT in BLK_DEV_PMEM help (Jeff Moyer) [RHEL-23824]
  - ACPI: NFIT: Switch to use acpi_evaluate_dsm_typed() (Jeff Moyer) [RHEL-23824]
  - tools/testing/nvdimm: Disable "missing prototypes / declarations" warnings (Jeff Moyer) [RHEL-23824]
  - acpi/nfit: Use sysfs_emit() for all attributes (Jeff Moyer) [RHEL-23824]
  - nvdimm/namespace: fix kernel-doc for function params (Jeff Moyer) [RHEL-23824]
  - nvdimm/dimm_devs: fix kernel-doc for function params (Jeff Moyer) [RHEL-23824]
  - nvdimm/btt: fix btt_blk_cleanup() kernel-doc (Jeff Moyer) [RHEL-23824]
  - nvdimm-btt: simplify code with the scope based resource management (Jeff Moyer) [RHEL-23824]
  - nvdimm: Remove usage of the deprecated ida_simple_xx() API (Jeff Moyer) [RHEL-23824]
  - ACPI: NFIT: Use cleanup.h helpers instead of devm_*() (Jeff Moyer) [RHEL-23824]
  - tools/testing/nvdimm: Add compile-test coverage for ndtest (Jeff Moyer) [RHEL-23824]
  - dax/kmem: allow kmem to add memory with memmap_on_memory (Jeff Moyer) [RHEL-23824]
  - nvdimm/btt: replace deprecated strncpy with strscpy (Jeff Moyer) [RHEL-23824]
  - ndtest: fix typo class_regster -> class_register (Jeff Moyer) [RHEL-23824]
  - fs : Fix warning using plain integer as NULL (Jeff Moyer) [RHEL-23824]
  - libnvdimm: remove kernel-doc warnings: (Jeff Moyer) [RHEL-23824]
  - testing: nvdimm: make struct class structures constant (Jeff Moyer) [RHEL-23824]
  - libnvdimm: Annotate struct nd_region with __counted_by (Jeff Moyer) [RHEL-23824]
  - libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value (Jeff Moyer) [RHEL-23824]
  - dax: refactor deprecated strncpy (Jeff Moyer) [RHEL-23824]
  - nvdimm: Fix dereference after free in register_nvdimm_pmu() (Jeff Moyer) [RHEL-23824]
  - nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() (Jeff Moyer) [RHEL-23824]
  - nvdimm/pfn_dev: Avoid unnecessary endian conversion (Jeff Moyer) [RHEL-23824]
  - nvdimm/pfn_dev: Prevent the creation of zero-sized namespaces (Jeff Moyer) [RHEL-23824]
  - nvdimm: Explicitly include correct DT includes (Jeff Moyer) [RHEL-23824]
  - nvdimm: Use kstrtobool() instead of strtobool() (Jeff Moyer) [RHEL-23824]
  - dax: enable dax fault handler to report VM_FAULT_HWPOISON (Jeff Moyer) [RHEL-23824]
  - nvdimm: make security_show static (Jeff Moyer) [RHEL-23824]
  - nvdimm: make nd_class variable static (Jeff Moyer) [RHEL-23824]
  - dax/kmem: Pass valid argument to memory_group_register_static (Jeff Moyer) [RHEL-23824]
  - fsdax: remove redundant variable 'error' (Jeff Moyer) [RHEL-23824]
  - dax: Cleanup extra dax_region references (Jeff Moyer) [RHEL-23824]
  - dax: Introduce alloc_dev_dax_id() (Jeff Moyer) [RHEL-23824]
  - dax: Use device_unregister() in unregister_dax_mapping() (Jeff Moyer) [RHEL-23824]
  - dax: Fix dax_mapping_release() use after free (Jeff Moyer) [RHEL-23824]
  - tools/testing/nvdimm: Drop empty platform remove function (Jeff Moyer) [RHEL-23824]
  - dax/kmem: Fix leak of memory-hotplug resources (Jeff Moyer) [RHEL-23824]
  - dax: super.c: fix kernel-doc bad line warning (Jeff Moyer) [RHEL-23824]
  - nvdimm/region: Move cache management to the region driver (Jeff Moyer) [RHEL-23824]
  - ACPI: HMAT: Release platform device in case of platform_device_add_data() fails (Jeff Moyer) [RHEL-23824]
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Mark Salter) [RHEL-46931] {CVE-2024-39488}
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (Kamal Heib) [RHEL-44248] {CVE-2024-38544}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-501.el9]
changelog:
  - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53662 RHEL-53665] {CVE-2024-42240}
  - redhat: Fix the ownership of /lib/modules/<kversion> directory (Vitaly Kuznetsov) [RHEL-21034]
  - move ownership of /lib/modules/<ver>/ to kernel-core (Thorsten Leemhuis) [RHEL-21034]
  - KVM: guest_memfd: let kvm_gmem_populate() operate only on private gfns (Paolo Bonzini) [RHEL-32435]
  - KVM: extend kvm_range_has_memory_attributes() to check subset of attributes (Paolo Bonzini) [RHEL-32435]
  - KVM: cleanup and add shortcuts to kvm_range_has_memory_attributes() (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: move check for already-populated page to common code (Paolo Bonzini) [RHEL-32435]
  - KVM: remove kvm_arch_gmem_prepare_needed() (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: make kvm_gmem_prepare_folio() operate on a single struct kvm (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: delay kvm_gmem_prepare_folio() until the memory is passed to the guest (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: return locked folio from __kvm_gmem_get_pfn (Paolo Bonzini) [RHEL-32435]
  - KVM: rename CONFIG_HAVE_KVM_GMEM_* to CONFIG_HAVE_KVM_ARCH_GMEM_* (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: do not go through struct page (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: delay folio_mark_uptodate() until after successful preparation (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: return folio from __kvm_gmem_get_pfn() (Paolo Bonzini) [RHEL-32435]
  - KVM: x86: Eliminate log spam from limited APIC timer periods (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: Use sev_es_host_save_area() helper when initializing tsc_aux (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: Force sev_es_host_save_area() to be inlined (for noinstr usage) (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: Consider NUMA affinity when allocating per-CPU save_area (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: not account memory allocation for per-CPU svm_data (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: remove useless input parameter in snp_safe_alloc_page (Paolo Bonzini) [RHEL-32435]
  - KVM: Validate hva in kvm_gpc_activate_hva() to fix __kvm_gpc_refresh() WARN (Paolo Bonzini) [RHEL-32435]
  - KVM: interrupt kvm_gmem_populate() on signals (Paolo Bonzini) [RHEL-32435]
  - KVM: Stop processing *all* memslots when "null" mmu_notifier handler is found (Paolo Bonzini) [RHEL-32435]
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Paolo Bonzini) [RHEL-32435]
  - KVM: selftests: x86: Prioritize getting max_gfn from GuestPhysBits (Paolo Bonzini) [RHEL-32435]
  - KVM: selftests: Fix shift of 32 bit unsigned int more than 32 bits (Paolo Bonzini) [RHEL-32435]
  - KVM: Discard zero mask with function kvm_dirty_ring_reset (Paolo Bonzini) [RHEL-32435]
  - virt: guest_memfd: fix reference leak on hwpoisoned page (Paolo Bonzini) [RHEL-32435]
  - kvm: do not account temporary allocations to kmem (Paolo Bonzini) [RHEL-32435]
  - KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (Paolo Bonzini) [RHEL-32435]
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (Myron Stowe) [RHEL-51754] {CVE-2024-42110}
  - Disable NVGRACE_GPU_VFIO_PCI CONFIG for now (Donald Dutile) [RHEL-36542]
  - vfio/nvgrace-gpu: Convey kvm to map device memory region as noncached (Donald Dutile) [RHEL-36544]
  - vfio: Convey kvm that the vfio-pci device is wc safe (Donald Dutile) [RHEL-36543]
  - vfio/nvgrace-gpu: Add vfio pci variant module for grace hopper (Donald Dutile) [RHEL-36542]
  - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48649]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for Apacer AS340 (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for AMD Radeon S3 SSD (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for Crucial CT240BX500SSD1 (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Do not apply Intel PCS quirk on Intel Alder Lake (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: Allow command duration limits detection for ACS-4 drives (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Add mask_port_map module parameter (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata-sata: Factor out NCQ Priority configuration helpers (Ewan D. Milne) [RHEL-23829]
  - ahci: asm1064: asm1166: don't limit reported ports (Ewan D. Milne) [RHEL-23829]
  - ahci: print the number of implemented ports (Ewan D. Milne) [RHEL-23829]
  - ahci: asm1064: correct count of reported ports (Ewan D. Milne) [RHEL-23829]
  - ahci: rename board_ahci_nomsi (Ewan D. Milne) [RHEL-23829]
  - ahci: drop unused board_ahci_noncq (Ewan D. Milne) [RHEL-23829]
  - ahci: clean up ahci_broken_devslp quirk (Ewan D. Milne) [RHEL-23829]
  - ahci: rename board_ahci_nosntf (Ewan D. Milne) [RHEL-23829]
  - ahci: clean up intel_pcs_quirk (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Drop low power policy board type (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: do not enable LPM on external ports (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: drop hpriv param from ahci_update_initial_lpm_policy() (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: a hotplug capable port is an external port (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: move marking of external port earlier (Ewan D. Milne) [RHEL-23829]
  - ahci: Extend ASM1061 43-bit DMA address quirk to other ASM106x parts (Ewan D. Milne) [RHEL-23829]
  - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers (Ewan D. Milne) [RHEL-23829]
  - ahci: asm1166: correct count of reported ports (Ewan D. Milne) [RHEL-23829]
  - ata: libata-sata: improve sysfs description for ATA_LPM_UNKNOWN (Ewan D. Milne) [RHEL-23829]
  - scsi: sd: Fix system start for ATA devices (Ewan D. Milne) [RHEL-23829]
  - scsi: Change SCSI device boolean fields to single bit flags (Ewan D. Milne) [RHEL-23829]
  - scsi: sd: Introduce manage_shutdown device flag (Ewan D. Milne) [RHEL-23829]
  - ata: libata-eh: Spinup disk on resume after revalidation (Ewan D. Milne) [RHEL-23829]
  - ata: xgene: Use of_device_get_match_data() (Ewan D. Milne) [RHEL-23829]
  - scsi: Remove scsi device no_start_on_resume flag (Ewan D. Milne) [RHEL-23829]
  - scsi: sd: Do not issue commands to suspended disks on shutdown (Ewan D. Milne) [RHEL-23829]
  - ata: libata: Annotate struct ata_cpr_log with __counted_by (Ewan D. Milne) [RHEL-23829]
  - ata: libata-scsi: Disable scsi device manage_system_start_stop (Ewan D. Milne) [RHEL-23829]
  - scsi: sd: Differentiate system and runtime start/stop management (Ewan D. Milne) [RHEL-23829]
  - ata: libata-scsi: link ata port and scsi device (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: Fix port and device removal (Ewan D. Milne) [RHEL-23829]
  - ata: libata-sata: increase PMP SRST timeout to 10s (Ewan D. Milne) [RHEL-23829]
  - scsi: core: ata: Do no try to probe for CDL on old drives (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: fetch sense data for successful commands iff CDL enabled (Ewan D. Milne) [RHEL-23829]
  - ata: ahci_xgene: fix parameter types of xgene_ahci_poll_reg_val() (Ewan D. Milne) [RHEL-23829]
  - ata: libata: fix parameter type of ata_deadline() (Ewan D. Milne) [RHEL-23829]
  - ata,scsi: do not issue START STOP UNIT on resume (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: fix when to fetch sense data for successful commands (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata-scsi: Fix ata_msense_control kdoc comment (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Handle completion of CDL commands using policy 0xD (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Set read/write commands CDL index (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Add ATA feature control sub-page translation (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata-scsi: Add support for CDL pages mode sense (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata-scsi: Handle CDL bits in ata_scsiop_maint_in() (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Detect support for command duration limits (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Change ata_eh_request_sense() to not set CHECK_CONDITION (Ewan D. Milne) [RHEL-23829]
  - ata: Use of_property_present() for testing DT property presence (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Rename CONFIG_SATA_LPM_POLICY configuration item back (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Rename CONFIG_SATA_LPM_MOBILE_POLICY configuration item (Ewan D. Milne) [RHEL-23829]
  - virt: efi_secret: Convert to platform remove callback returning void (Lenny Szubowicz) [RHEL-30322]
  - efi/libstub: Add get_event_log() support for CC platforms (Lenny Szubowicz) [RHEL-30322]
  - efi/libstub: Measure into CC protocol if TCG2 protocol is absent (Lenny Szubowicz) [RHEL-30322]
  - efi/libstub: Add Confidential Computing (CC) measurement typedefs (Lenny Szubowicz) [RHEL-30322]
  - efi/tpm: Use symbolic GUID name from spec for final events table (Lenny Szubowicz) [RHEL-30322]
  - efi/libstub: Use TPM event typedefs from the TCG PC Client spec (Lenny Szubowicz) [RHEL-30322]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-502.el9]
changelog:
  - net: stmmac: enable HW-accelerated VLAN stripping for gmac4 only (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: fix error array size (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Assign configured channel value to EXTTS event (Andrew Halaney) [RHEL-6297]
  - net: stmmac: No need to calculate speed divider when offload is disabled (Andrew Halaney) [RHEL-6297]
  - net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Configure host DMA width (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move the EST structure to struct stmmac_priv (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move the EST lock to struct stmmac_priv (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add support for RZ/N1 GMAC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-socfpga: use pcs_init/pcs_exit (Andrew Halaney) [RHEL-6297]
  - net: stmmac: introduce pcs_init/pcs_exit stmmac operations (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Make stmmac_xpcs_setup() generic to all PCS devices (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add dedicated XPCS cleanup method (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-ipq806x: account for rgmii-txid/rxid/id phy-mode (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Rename phylink_get_caps() callback to update_caps() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix IP-cores specific MAC capabilities (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix max-speed being ignored on queue re-init (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Apply half-duplex-less constraint for DW QoS Eth only (Andrew Halaney) [RHEL-6297]
  - net: stmmac: mmc_core: Add GMAC mmc tx/rx missing statistics (Andrew Halaney) [RHEL-6297]
  - net: stmmac: mmc_core: Add GMAC LPI statistics (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix rx queue priority assignment (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Support a generic PCS field in mac_device_info (Andrew Halaney) [RHEL-6297]
  - net: stmmac: don't rely on lynx_pcs presence to check for a PHY (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-rk: Remove unused of_gpio.h (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix typo in comment (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Update link clock rate only for RGMII (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Complete meta data only when enabled (Andrew Halaney) [RHEL-6297]
  - net: stmmac: mmc_core: Drop interrupt registers from stats (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Add support for 2.5G SGMII (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix EST offset for dwmac 5.10 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix incorrect dereference in interrupt handlers (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Simplify mtl IRQ status checking (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: use #define for string constants (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add driver support for common safety IRQ (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Enable TBS on all queues but 0 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove eee_enabled/eee_active in stmmac_ethtool_op_get_eee() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: protect updates of 64-bit statistics counters (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: fix a typo of register name in DPP safety handling (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Report taprio offload status (Andrew Halaney) [RHEL-6297]
  - net: stmmac: est: Per Tx-queue error count for HLBF (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Offload queueMaxSDU from tc-taprio (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-starfive: Add support for JH7100 SoC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-imx: set TSO/TBS TX queues default settings (Andrew Halaney) [RHEL-6297]
  - net: stmmac: do not clear TBS enable bit on link up/down (Andrew Halaney) [RHEL-6297]
  - net: fill in MODULE_DESCRIPTION()s for dwmac-socfpga (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Wait a bit for the reset to take effect (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Prevent DSA tags from breaking COE (Andrew Halaney) [RHEL-6297]
  - net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls (Andrew Halaney) [RHEL-6297]
  - Revert "net: stmmac: Enable Per DMA Channel interrupt" (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Use interrupt mode INTM=1 for per channel irq (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add support for TX/RX channel interrupt (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Make MSI interrupt routine generic (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix ethtool per-queue statistics (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: drop useless check for compatible fallback (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: Make sure MDIO is initialized before use (Andrew Halaney) [RHEL-6297]
  - net: stmmac: mmc: Support more counters for XGMAC Core (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add support for EST cycle-time-extension (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Refactor EST implementation (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: EST interrupts handling (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix FPE events losing (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add Tx HWTS support to XDP ZC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: Disable FPE MMC interrupts (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add support for HW-accelerated VLAN stripping (Andrew Halaney) [RHEL-6297]
  - net: stmmac: reduce dma ring display code duplication (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove extra newline from descriptors display (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: Add architecture dependency (Andrew Halaney) [RHEL-6297]
  - net: stmmac: avoid rx queue overrun (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix rx budget limit check (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs (Andrew Halaney) [RHEL-6297]
  - net: stmmac: update MAC capabilities when tx queues are updated (Andrew Halaney) [RHEL-6297]
  - net: stmmac: increase TX coalesce timer to 5ms (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move TX timer arm after DMA enable (Andrew Halaney) [RHEL-6297]
  - net: stmmac: improve TX timer arm logic (Andrew Halaney) [RHEL-6297]
  - net: introduce napi_is_scheduled helper (Andrew Halaney) [RHEL-6297]
  - net: stmmac: do not silently change auxiliary snapshot capture channel (Andrew Halaney) [RHEL-6297]
  - net: stmmac: ptp: stmmac_enable(): move change of plat->flags into mutex (Andrew Halaney) [RHEL-6297]
  - net: stmmac: intel: remove unnecessary field struct plat_stmmacenet_data::ext_snapshot_num (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use correct PPS capture input index (Andrew Halaney) [RHEL-6297]
  - net: stmmac: simplify debug message on stmmac_enable() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Remove redundant checking for rx_coalesce_usecs (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix typo in comment (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-stm32: refactor clock config (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove unneeded stmmac_poll_controller (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-stm32: fix resume on STM32 MCU (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: fix the incorrect parameter (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix incorrect rxq|txq_stats reference (Andrew Halaney) [RHEL-6297]
  - net: stmmac: make stmmac_{probe|remove}_config_dt static (Andrew Halaney) [RHEL-6297]
  - net: stmmac: rename stmmac_pltfr_remove_no_dt to stmmac_pltfr_remove (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-visconti: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-tegra: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sunxi: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sun8i: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-stm32: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sti: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-starfive: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-socfpga: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-rk: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-meson8b: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-meson: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-mediatek: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-lpc18xx: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-ipq806x: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-intel-plat: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-ingenic: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-imx: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use devm_stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-dwc-qos-eth: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-anarion: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Tx coe sw fallback (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add glue layer for Loongson-1 SoC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix handling of zero coalescing tx-usecs (Andrew Halaney) [RHEL-6297]
  - net: stmmac: failure to probe without MAC interface specified (Andrew Halaney) [RHEL-6297]
  - net: stmmac: clarify difference between "interface" and "phy_interface" (Andrew Halaney) [RHEL-6297]
  - net: stmmac: convert half-duplex support to positive logic (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move priv->phylink_config.mac_managed_pm (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move xgmac specific phylink caps to dwxgmac2 core (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move gmac4 specific phylink capabilities to gmac4 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: provide stmmac_mac_phylink_get_caps() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use phylink_limit_mac_speed() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use "mdio_bus_data" local variable (Andrew Halaney) [RHEL-6297]
  - net: stmmac: clean up passing fwnode to phylink (Andrew Halaney) [RHEL-6297]
  - net: stmmac: convert plat->phylink_node to fwnode (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Check more MAC HW features for XGMAC Core 3.20 (Andrew Halaney) [RHEL-6297]
  - stmmac: intel: Enable correction of MAC propagation delay (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: show more MAC HW features in debugfs (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: RX queue routing configuration (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-oxnas: remove obsolete dwmac glue driver (Andrew Halaney) [RHEL-6297]
  - net: stmmac: XGMAC support for mdio C22 addr > 3 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Apply redundant write work around on 4.xx too (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use per-queue 64 bit statistics where necessary (Andrew Halaney) [RHEL-6297]
  - net: stmmac: don't clear network statistics in .ndo_open() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: Fix L3L4 filter count (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Log more errors in probe (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Use dev_err_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Use of_get_phy_mode() over device_get_phy_mode() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: use devm_stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide devm_stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qco-ethqos: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide stmmac_pltfr_remove_no_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use stmmac_pltfr_exit() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide stmmac_pltfr_exit() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use stmmac_pltfr_init() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide stmmac_pltfr_init() (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmicro: stmmac: fix possible memory leak in __stmmac_open (Andrew Halaney) [RHEL-6297]
  - net: dwmac_socfpga: initialize local data for mdio regmap configuration (Andrew Halaney) [RHEL-6297]
  - net: stmmac: make the pcs_lynx cleanup sequence specific to dwmac_socfpga (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sogfpga: use the lynx pcs driver (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use xpcs_create_mdiodev() (Andrew Halaney) [RHEL-6297]
  - net: pcs: xpcs: add xpcs_create_mdiodev() (Andrew Halaney) [RHEL-6297]
  - net: mdio: add mdio_device_get() and mdio_device_put() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: add ethtool per-queue irq statistic support (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-tegra: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sun8i: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-stm32: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sti: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-rk: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-dwc-qos-eth: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-visconti: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-visconti: Make visconti_eth_clock_remove() return void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Make stmmac_pltfr_remove() return void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register (Andrew Halaney) [RHEL-6297]
  - net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-meson8b: Avoid cast to incompatible function type (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmmac: dwmac-sti: remove stih415/stih416/stid127 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-starfive: Add phy interface settings (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add glue layer for StarFive JH7110 SoC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: Add snps,dwmac-5.20 IP compatible string (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add Rx HWTS metadata to XDP ZC receive pkt (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add Rx HWTS metadata to XDP receive pkt (Andrew Halaney) [RHEL-6297]
  - net: stmmac: introduce wrapper for struct xdp_buff (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Remove unnecessary if statement brackets (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmmac: dwmac-rk: rework optional clock handling (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-anarion: Always return struct anarion_gmac * from anarion_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-anarion: Use annotation __iomem for register base (Andrew Halaney) [RHEL-6297]
  - net: stmmac: check fwnode for phy device before scanning for phy (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add queue reset into stmmac_xdp_open() function (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix up RX flow hash indirection table when setting channels (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove redundant fixup to support fixed-link mode (Andrew Halaney) [RHEL-6297]
  - net: stmmac: check if MAC needs to attach to a PHY (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix for mismatched host/device DMA address width (Andrew Halaney) [RHEL-6297]
  - net: stmmac: generic: drop of_match_ptr for ID table (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add to set device wake up flag when stmmac init phy (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Restrict warning on disabling DMA store and fwd mode (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwc-qos: Make struct dwc_eth_dwmac_data::remove return void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Make stmmac_dvr_remove() return void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix invalid call to mdiobus_get_phy() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Separate C22 and C45 transactions for xgmac (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add aux timestamps fifo clearance wait (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-mediatek: remove the dwmac_fix_mac_speed (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix errno when create_singlethread_workqueue() fails (Andrew Halaney) [RHEL-6297]
  - stmmac: fix potential division by 0 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add check for taprio basetime configuration (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix possible memory leak in stmmac_dvr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix "snps,axi-config" node property parsing (Andrew Halaney) [RHEL-6297]
  - Revert "net: stmmac: use sysfs_streq() instead of strncmp()" (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Set MAC's flow control register to reflect current settings (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use sysfs_streq() instead of strncmp() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: ensure tx function is not running in stmmac_xdp_release() (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: fix missing of_node_put() while module exiting (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: fix invalid mdio_node (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove duplicate dma queue channel macros (Andrew Halaney) [RHEL-6297]
  - net: stmmac: rk3588: Allow multiple gmac controller (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add a parse for new property 'snps,clk-csr' (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Minor spell fix related to 'stmmac_clk_csr_set()' (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmicro: stmmac: dwmac-rk: Add rv1126 support (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwc-qos: Switch to use dev_err_probe() helper (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmmac: dwmac-rk: Add gmac support for rk3588 (Andrew Halaney) [RHEL-6297]
  - ceph: force sending a cap update msg back to MDS for revoke op (Xiubo Li) [RHEL-48618]
  - ceph: periodically flush the cap releases (Xiubo Li) [RHEL-48618]
  - eeprom: at24: use of_match_ptr() (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: Use pm_runtime_resume_and_get to simplify the code (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: add ST M24C64-D Additional Write lockable page support (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: add ST M24C32-D Additional Write lockable page support (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: Annotate struct at24_data with __counted_by (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: Drop at24_get_chip_data() (Alessandro Carminati) [RHEL-47160]
  - mm: turn off test_uffdio_wp if CONFIG_PTE_MARKER_UFFD_WP is not configured. (Nico Pache) [RHEL-39306]
  - mm: update uffd-stress to handle EINVAL for unset config features (Nico Pache) [RHEL-39306]
  - selftests/bpf: Fix flaky test btf_map_in_map/lookup_update (Nico Pache) [RHEL-39306]
  - kselftests: mm: add s390 to ARCH list (Nico Pache) [RHEL-39306]
  - selftests/mm: fix powerpc ARCH check (Nico Pache) [RHEL-39306]
  - selftests: bpf: xskxceiver: ksft_print_msg: fix format type error (Nico Pache) [RHEL-39306]
  - hugetlbfs: ensure generic_hugetlb_get_unmapped_area() returns higher address than mmap_min_addr (Nico Pache) [RHEL-39306]
  - selftests/vm: fix inability to build any vm tests (Nico Pache) [RHEL-39306]
  - Makefile: add headers_install to kselftest targets (Nico Pache) [RHEL-39306]
  - selftests: drop KSFT_KHDR_INSTALL make target (Nico Pache) [RHEL-39306]
  - selftests: stop using KSFT_KHDR_INSTALL (Nico Pache) [RHEL-39306]
  - selftests: net: Add the uapi headers include variable (Nico Pache) [RHEL-39306]
  - selftests: landlock: Add the uapi headers include variable (Nico Pache) [RHEL-39306]
  - selftests: futex: Add the uapi headers include variable (Nico Pache) [RHEL-39306]
  - selftests: futex: set DEFAULT_INSTALL_HDR_PATH (Nico Pache) [RHEL-39306]
  - selftests: drop khdr make target (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Make it POSIX-compliant (Nico Pache) [RHEL-39306]
  - selftests: use printf instead of echo -ne (Nico Pache) [RHEL-39306]
  - selftests: find echo binary to use -ne options (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Add a helper to finish the test (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Add a helper to abort the test (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Add helper to pass/fail test based on exit code (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Add helper to print diagnostic messages (Nico Pache) [RHEL-39306]
  - selftests: Move KTAP bash helpers to selftests common folder (Nico Pache) [RHEL-39306]
  - kselftest: dt: Stop relying on dirname to improve performance (Nico Pache) [RHEL-39306]
  - kselftest: Add new test for detecting unprobed Devicetree devices (Nico Pache) [RHEL-39306]
  - selftests:modify the incorrect print format (Nico Pache) [RHEL-39306]
  - selftests/mm: Substitute attribute with a macro (Nico Pache) [RHEL-39306]
  - selftests: Add printf attribute to kselftest prints (Nico Pache) [RHEL-39306]
  - selftests: fix dependency checker script (Nico Pache) [RHEL-39306]
  - kselftest/runner.sh: Propagate SIGTERM to runner child (Nico Pache) [RHEL-39306]
  - selftests/harness: Actually report SKIP for signal tests (Nico Pache) [RHEL-39306]
  - testing: kselftest_harness: add filtering and enumerating tests (Nico Pache) [RHEL-39306]
  - selftests: break the dependency upon local header files (Nico Pache) [RHEL-39306]
  - kselftest: Add a ksft_perror() helper (Nico Pache) [RHEL-39306]
  - selftests: Make the usage formatting consistent in kselftest_deps.sh (Nico Pache) [RHEL-39306]
  - kselftests: Enable the echo command to print newlines in Makefile (Nico Pache) [RHEL-39306]
  - selftest: Taint kernel when test module loaded (Nico Pache) [RHEL-39306]
  - selftests: Fix build when $(O) points to a relative path (Nico Pache) [RHEL-39306]
  - selftests: Use -isystem instead of -I to include headers (Nico Pache) [RHEL-39306]
  - selftests: Correct the headers install path (Nico Pache) [RHEL-39306]
  - selftests: Add and export a kernel uapi headers path (Nico Pache) [RHEL-39306]
  - selftests: set the BUILD variable to absolute path (Nico Pache) [RHEL-39306]
  - kselftest: signal all child processes (Nico Pache) [RHEL-39306]
  - selftests/mm: fix additional build errors for selftests (Nico Pache) [RHEL-39306]
  - selftests: mm: protection_keys: save/restore nr_hugepages value from launch script (Nico Pache) [RHEL-39306]
  - selftests: mm: make map_fixed_noreplace test names stable (Nico Pache) [RHEL-39306]
  - selftests/mm: fix build warnings on ppc64 (Nico Pache) [RHEL-39306]
  - selftests/mm: hugetlb_madv_vs_map: avoid test skipping by querying hugepage size at runtime (Nico Pache) [RHEL-39306]
  - mm/hugetlb: document why hugetlb uses folio_mapcount() for COW reuse decisions (Nico Pache) [RHEL-39306]
  - selftests: mm: cow: flag vmsplice() hugetlb tests as XFAIL (Nico Pache) [RHEL-39306]
  - selftests/mm: soft-dirty should fail if a testcase fails (Nico Pache) [RHEL-39306]
  - selftests/mm: parse VMA range in one go (Nico Pache) [RHEL-39306]
  - selftests/mm: run_vmtests.sh: fix hugetlb mem size calculation (Nico Pache) [RHEL-39306]
  - selftests/mm: confirm VA exhaustion without reliance on correctness of mmap() (Nico Pache) [RHEL-39306]
  - selftests/mm: virtual_address_range: Switch to ksft_exit_fail_msg (Nico Pache) [RHEL-39306]
  - selftests/mm: include strings.h for ffsl (Nico Pache) [RHEL-39306]
  - selftests/mm: fix ARM related issue with fork after pthread_create (Nico Pache) [RHEL-39306]
  - selftests/mm: sigbus-wp test requires UFFD_FEATURE_WP_HUGETLBFS_SHMEM (Nico Pache) [RHEL-39306]
  - selftests: mm: restore settings from only parent process (Nico Pache) [RHEL-39306]
  - selftests/mm: Fix build with _FORTIFY_SOURCE (Nico Pache) [RHEL-39306]
  - selftests/mm: run_vmtests.sh: add missing tests (Nico Pache) [RHEL-39306]
  - selftests/mm: protection_keys: save/restore nr_hugepages settings (Nico Pache) [RHEL-39306]
  - selftests/mm: save and restore nr_hugepages value (Nico Pache) [RHEL-39306]
  - selftests/mm: run_vmtests: remove sudo and conform to tap (Nico Pache) [RHEL-39306]
  - selftests/mm: hugetlb_reparenting_test: do not unmount (Nico Pache) [RHEL-39306]
  - selftests/mm: log a consistent test name for check_compaction (Nico Pache) [RHEL-39306]
  - selftests/mm: log skipped compaction test as a skip (Nico Pache) [RHEL-39306]
  - selftests/mm: virtual_address_range: conform to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: transhuge-stress: conform to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: split_huge_page_test: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: mremap_dontunmap: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: mrelease_test: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: mlock2-tests: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: mlock-random-test: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: map_populate: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: map_hugetlb: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: map_fixed_noreplace: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: skip test if application doesn't has root privileges (Nico Pache) [RHEL-39306]
  - selftests/mm: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests: mm: hugepage-mmap: conform to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: gup_test: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - mm/selftests: hugepage-mremap: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: log run_vmtests.sh results in TAP format (Nico Pache) [RHEL-39306]
  - selftests/mm: skip the hugetlb-madvise tests on unmet hugepage requirements (Nico Pache) [RHEL-39306]
  - selftests/mm: skip uffd hugetlb tests with insufficient hugepages (Nico Pache) [RHEL-39306]
  - selftests/mm: dont fail testsuite due to a lack of hugepages (Nico Pache) [RHEL-39306]
  - selftests/mm: run_vmtests.sh: add hugetlb test category (Nico Pache) [RHEL-39306]
  - selftests/mm: new test that steals pages (Nico Pache) [RHEL-39306]
  - selftests: mm: perform some system cleanup before using hugepages (Nico Pache) [RHEL-39306]
  - selftests: avoid using SKIP(exit()) in harness fixure setup (Nico Pache) [RHEL-39306]
  - selftests/mm: uffd-unit-test check if huge page size is 0 (Nico Pache) [RHEL-39306]
  - selftests/mm: ksm_tests should only MADV_HUGEPAGE valid memory (Nico Pache) [RHEL-39306]
  - selftests/mm: switch to bash from sh (Nico Pache) [RHEL-39306]
  - selftests/mm: restore number of hugepages (Nico Pache) [RHEL-39306]
  - selftests/mm: add a new test for madv and hugetlb (Nico Pache) [RHEL-39306]
  - mm/ksm: test case for prctl fork/exec workflow (Nico Pache) [RHEL-39306]
  - kselftest: vm: add tests for no-inherit memory-deny-write-execute (Nico Pache) [RHEL-39306]
  - kselftest: vm: check errnos in mdwe_test (Nico Pache) [RHEL-39306]
  - kselftest: vm: fix mdwe's mmap_FIXED test case (Nico Pache) [RHEL-39306]
  - kselftest: vm: fix tabs/spaces inconsistency in the mdwe test (Nico Pache) [RHEL-39306]
  - selftests: mm: add a test for mutually aligned moves > PMD size (Nico Pache) [RHEL-39306]
  - selftests: mm: fix failure case when new remap region was not found (Nico Pache) [RHEL-39306]
  - selftests/mm: fix uffd-stress help information (Nico Pache) [RHEL-39306]
  - selftests: mm: ksm: fix incorrect evaluation of parameter (Nico Pache) [RHEL-39306]
  - selftests/mm: mkdirty: fix incorrect position of #endif (Nico Pache) [RHEL-39306]
  - selftests: mm: remove wrong kernel header inclusion (Nico Pache) [RHEL-39306]
  - selftests/mm: move certain uffd*() routines from vm_util.c to uffd-common.c (Nico Pache) [RHEL-39306]
  - selftests/mm: fix two -Wformat-security warnings in uffd builds (Nico Pache) [RHEL-39306]
  - selftests/mm: fix uffd-stress unused function warning (Nico Pache) [RHEL-39306]
  - selftests/mm: factor out detection of hugetlb page sizes into vm_util (Nico Pache) [RHEL-39306]
  - selftests/ksm: ksm_functional_tests: add prctl unmerge test (Nico Pache) [RHEL-39306]
  - selftests/mm: add new selftests for KSM (Nico Pache) [RHEL-39306]
  - selftests/mm: add tests for RO pinning vs fork() (Nico Pache) [RHEL-39306]
  - selftests/mm: rename COW_EXTRA_LIBS to IOURING_EXTRA_LIBS (Nico Pache) [RHEL-39306]
  - selftests/mm: extend and rename uffd pagemap test (Nico Pache) [RHEL-39306]
  - selftests/mm: add a few options for uffd-unit-test (Nico Pache) [RHEL-39306]
  - selftests/mm: add uffdio register ioctls test (Nico Pache) [RHEL-39306]
  - selftests/mm: add shmem-private test to uffd-stress (Nico Pache) [RHEL-39306]
  - selftests/mm: drop sys/dev test in uffd-stress test (Nico Pache) [RHEL-39306]
  - selftests/mm: allow uffd test to skip properly with no privilege (Nico Pache) [RHEL-39306]
  - selftests/mm: workaround no way to detect uffd-minor + wp (Nico Pache) [RHEL-39306]
  - selftests/mm: move zeropage test into uffd unit tests (Nico Pache) [RHEL-39306]
  - selftests/mm: move uffd sig/events tests into uffd unit tests (Nico Pache) [RHEL-39306]
  - selftests/mm: move uffd minor test to unit test (Nico Pache) [RHEL-39306]
  - selftests/mm: move uffd pagemap test to unit test (Nico Pache) [RHEL-39306]
  - selftests/mm: add framework for uffd-unit-test (Nico Pache) [RHEL-39306]
  - selftests/mm: allow allocate_area() to fail properly (Nico Pache) [RHEL-39306]
  - selftests/mm: let uffd_handle_page_fault() take wp parameter (Nico Pache) [RHEL-39306]
  - selftests/mm: rename uffd_stats to uffd_args (Nico Pache) [RHEL-39306]
  - selftests/mm: drop global hpage_size in uffd tests (Nico Pache) [RHEL-39306]
  - selftests/mm: drop global mem_fd in uffd tests (Nico Pache) [RHEL-39306]
  - selftests/mm: UFFDIO_API test (Nico Pache) [RHEL-39306]
  - selftests/mm: uffd_open_{dev|sys}() (Nico Pache) [RHEL-39306]
  - selftests/mm: uffd_[un]register() (Nico Pache) [RHEL-39306]
  - selftests/mm: split uffd tests into uffd-stress and uffd-unit-tests (Nico Pache) [RHEL-39306]
  - selftests/mm: create uffd-common.[ch] (Nico Pache) [RHEL-39306]
  - selftests/mm: drop test_uffdio_zeropage_eexist (Nico Pache) [RHEL-39306]
  - selftests/mm: test UFFDIO_ZEROPAGE only when !hugetlb (Nico Pache) [RHEL-39306]
  - selftests/mm: mkdirty: test behavior of (pte|pmd)_mkdirty on VMAs without write permissions (Nico Pache) [RHEL-39306]
  - selftests/mm: reuse read_pmd_pagesize() in COW selftest (Nico Pache) [RHEL-39306]
  - mm: userfaultfd: add UFFDIO_CONTINUE_MODE_WP to install WP PTEs (Nico Pache) [RHEL-39306]
  - kselftest: vm: fix unused variable warning (Nico Pache) [RHEL-39306]
  - kselftest: vm: add tests for memory-deny-write-execute (Nico Pache) [RHEL-39306]
  - selftests/vm: cow: R/O long-term pinning reliability tests for non-anon pages (Nico Pache) [RHEL-39306]
  - config: enable CONFIG_DP83TG720_PHY (Izabela Bakollari) [RHEL-33716]
  - config: CONFIG_QCA807X_PHY (Izabela Bakollari) [RHEL-33716]
  - config: enable CONFIG_QCA808X_PHY (Izabela Bakollari) [RHEL-33716]
  - config: enable CONFIG_QCA83XX_PHY (Izabela Bakollari) [RHEL-33716]
  - net: linkmode: add linkmode_fill() helper (Izabela Bakollari) [RHEL-33716]
  - net: phy: qca807x: fix compilation when CONFIG_GPIOLIB is not set (Izabela Bakollari) [RHEL-33716]
  - net: phy: qca807x: move interface mode check to .config_init_once (Izabela Bakollari) [RHEL-33716]
  - net: phy: dp83tg720: get master/slave configuration in link down state (Izabela Bakollari) [RHEL-33716]
  - net: phy: dp83tg720: wake up PHYs in managed mode (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: at803x: fix kernel panic with at8031_probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: micrel: use devm_clk_get_optional_enabled for the rmii-ref clock (Izabela Bakollari) [RHEL-33716]
  - net: sfp: update comment for FS SFP-10G-T quirk (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: switch to crc_itu_t() (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: drop wrong endianness conversion for addr and CRC (Izabela Bakollari) [RHEL-33716]
  - net: phy: fix phy_read_poll_timeout argument type in genphy_loopback (Izabela Bakollari) [RHEL-33716]
  - net: sfp: enhance quirk for Fibrestore 2.5G copper SFP module (Izabela Bakollari) [RHEL-33716]
  - net: phy: qca807x: add support for configurable LED (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: generalize some qca808x LED functions (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: move common qca808x LED define to shared header (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: add support for QCA807x PHY Family (Izabela Bakollari) [RHEL-33716]
  - net: phy: provide whether link has changed in c37_read_status (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: move more function to shared library (Izabela Bakollari) [RHEL-33716]
  - net: phy: add devm/of_phy_package_join helper (Izabela Bakollari) [RHEL-33716]
  - net: phy: add support for scanning PHY in PHY packages nodes (Izabela Bakollari) [RHEL-33716]
  - of: mdio: Add of_node_put() when breaking out of for_each_xx (Izabela Bakollari) [RHEL-33716]
  - net: phy: realtek: use generic MDIO helpers to simplify the code (Izabela Bakollari) [RHEL-33716]
  - net: phy: realtek: add 5Gbps support to rtl822x_config_aneg() (Izabela Bakollari) [RHEL-33716]
  - net: phy: realtek: use generic MDIO constants (Izabela Bakollari) [RHEL-33716]
  - net: mdio: add 2.5g and 5g related PMA speed constants (Izabela Bakollari) [RHEL-33716]
  - net: phy: c45 scanning: Don't consider -ENODEV fatal (Izabela Bakollari) [RHEL-33716]
  - net: phy: add helper phy_advertise_eee_all (Izabela Bakollari) [RHEL-33716]
  - net: phy: constify phydev->drv (Izabela Bakollari) [RHEL-33716]
  - net: micrel: Fix the frequency adjustments (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: qca808x: default to LED active High if not set (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: qca808x: fix logic error in LED brightness set (Izabela Bakollari) [RHEL-33716]
  - net: phy: realtek: add support for RTL8126A-integrated 5Gbps PHY (Izabela Bakollari) [RHEL-33716]
  - net: phy: dp83867: Add support for active-low LEDs (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: detach qca808x PHY driver from at803x (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: move additional functions to shared library (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: deatch qca83xx PHY driver from at803x (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: create and move functions to shared library (Izabela Bakollari) [RHEL-33716]
  - net: phy: move at803x PHY driver to dedicated directory (Izabela Bakollari) [RHEL-33716]
  - net: phy: adin1100: Add interrupt support for link change (Izabela Bakollari) [RHEL-33716]
  - net: phy: phy_device: Prevent nullptr exceptions on ISR (Izabela Bakollari) [RHEL-33716]
  - net: phy: c45: change genphy_c45_ethtool_[get|set]_eee to use EEE linkmode bitmaps (Izabela Bakollari) [RHEL-33716]
  - net: micrel: Fix set/get PHC time for lan8814 (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: add LED support for qca808x (Izabela Bakollari) [RHEL-33716]
  - net: phy: add support for PHY LEDs polarity modes (Izabela Bakollari) [RHEL-33716]
  - net: phy: mediatek-ge-soc: sync driver with MediaTek SDK (Izabela Bakollari) [RHEL-33716]
  - net: micrel: Fix PTP frame parsing for lan8814 (Izabela Bakollari) [RHEL-33716]
  - net: sfp-bus: fix SFP mode detect from bitrate (Izabela Bakollari) [RHEL-33716]
  - net: phy: micrel: populate .soft_reset for KSZ9131 (Izabela Bakollari) [RHEL-33716]
  - net: micrel: Fix PTP frame parsing for lan8841 (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: make read_status more generic (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: add support for cdt cross short test for qca808x (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: refactor qca808x cable test get status function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: generalize cdt fault length function (Izabela Bakollari) [RHEL-33716]
  - net: Use of_property_present() for testing DT property presence (Izabela Bakollari) [RHEL-33716]
  - net: phylink: move phylink_pcs_neg_mode() into phylink.c (Izabela Bakollari) [RHEL-33716]
  - net: mdio_bus: add refcounting for fwnodes to mdiobus (Izabela Bakollari) [RHEL-33716]
  - net: phy: linux/phy.h: fix Excess kernel-doc description warning (Izabela Bakollari) [RHEL-33716]
  - net: phy: nxp-c45-tja11xx: implement mdo_insert_tx_tag (Izabela Bakollari) [RHEL-33716]
  - net: phy: nxp-c45-tja11xx: add MACsec statistics (Izabela Bakollari) [RHEL-33716]
  - net: phy: nxp-c45-tja11xx: add MACsec support (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: better align function varibles to open parenthesis (Izabela Bakollari) [RHEL-33716]
  - net: sfp: fix PHY discovery for FS SFP-10G-T module (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: replace msleep(1) with usleep_range (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: remove extra space after cast (Izabela Bakollari) [RHEL-33716]
  - net: phy: add support for PHY package MMD read/write (Izabela Bakollari) [RHEL-33716]
  - net: phy: restructure __phy_write/read_mmd to helper and phydev user (Izabela Bakollari) [RHEL-33716]
  - net: phy: extend PHY package API to support multiple global address (Izabela Bakollari) [RHEL-33716]
  - net: phy: make addr type u8 in phy_package_shared struct (Izabela Bakollari) [RHEL-33716]
  - net: phylink: reimplement population of pl->supported for in-band (Izabela Bakollari) [RHEL-33716]
  - net: phy: skip LED triggers on PHYs on SFP modules (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: make read specific status function more generic (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific qca808x config_aneg to dedicated function (Izabela Bakollari) [RHEL-33716]
  - net: phy: Add support for the DP83TG720S Ethernet PHY (Izabela Bakollari) [RHEL-33716]
  - net: phy: c45: add genphy_c45_pma_read_ext_abilities() function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: drop specific PHY ID check from cable test functions (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move at8035 specific DT parse to dedicated probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move at8031 functions in dedicated section (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: make at8031 related DT functions name more specific (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific at8031 config_intr to dedicated function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific at8031 WOL bits to dedicated function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific at8031 config_init to dedicated function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific at8031 probe mode check to dedicated probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific DT option for at8031 to specific probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move qca83xx specific check in dedicated functions (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: raname hw_stats functions to qca83xx specific name (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move disable WOL to specific at8031 probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: fix passing the wrong reference for config_intr (Izabela Bakollari) [RHEL-33716]
  - net: mdio_bus: replace deprecated strncpy with strscpy (Izabela Bakollari) [RHEL-33716]
  - net: sfp: Convert to platform remove callback returning void (Izabela Bakollari) [RHEL-33716]
  - net: phy: micrel: allow usage of generic ethernet-phy clock (Izabela Bakollari) [RHEL-33716]
  - net: phy: adin: allow control of Fast Link Down (Izabela Bakollari) [RHEL-33716]
  - net: phylink: use the PHY's possible_interfaces if populated (Izabela Bakollari) [RHEL-33716]
  - net: phylink: split out PHY validation from phylink_bringup_phy() (Izabela Bakollari) [RHEL-33716]
  - net: phylink: pass PHY into phylink_validate_mask() (Izabela Bakollari) [RHEL-33716]
  - net: phylink: pass PHY into phylink_validate_one() (Izabela Bakollari) [RHEL-33716]
  - net: phylink: split out per-interface validation (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: fill in possible_interfaces for AQR113C (Izabela Bakollari) [RHEL-33716]
  - net: phy: bcm84881: fill in possible_interfaces (Izabela Bakollari) [RHEL-33716]
  - net: phy: marvell10g: fill in possible_interfaces (Izabela Bakollari) [RHEL-33716]
  - net: phy: marvell10g: table driven mactype decode (Izabela Bakollari) [RHEL-33716]
  - net: phy: add possible interfaces (Izabela Bakollari) [RHEL-33716]
  - net: sfp: rework the RollBall PHY waiting code (Izabela Bakollari) [RHEL-33716]
  - net: phy: correctly check soft_reset ret ONLY if defined for PHY (Izabela Bakollari) [RHEL-33716]
  - net: phylink: use for_each_set_bit() (Izabela Bakollari) [RHEL-33716]
  - net: phy: broadcom: Wire suspend/resume for BCM54612E (Izabela Bakollari) [RHEL-33716]
  - net: sfp: use linkmode_*() rather than open coding (Izabela Bakollari) [RHEL-33716]
  - net: phylink: use linkmode_fill() (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: add firmware load support (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: move MMD_VEND define to header (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: move to separate directory (Izabela Bakollari) [RHEL-33716]
  - net: mdio: fix typo in header (Izabela Bakollari) [RHEL-33716]
  - net: phylink: initialize carrier state at creation (Izabela Bakollari) [RHEL-33716]
  - net: phy: fill in missing MODULE_DESCRIPTION()s (Izabela Bakollari) [RHEL-33716]
  - net: mdio: fill in missing MODULE_DESCRIPTION()s (Izabela Bakollari) [RHEL-33716]
  - net: phy: micrel: Fix forced link mode for KSZ886X switches (Izabela Bakollari) [RHEL-33716]
  - net: dsa: microchip: ksz8: Enable MIIM PHY Control reg access (Izabela Bakollari) [RHEL-33716]
  - net: phy: mscc: macsec: reject PN update requests (Izabela Bakollari) [RHEL-33716]
  - net: phy: dp83867: Add support for hardware blinking LEDs (Izabela Bakollari) [RHEL-33716]
  - net: sfp: improve Nokia GPON sfp fixup (Izabela Bakollari) [RHEL-33716]
  - net: sfp: re-implement ignoring the hardware TX_FAULT signal (Izabela Bakollari) [RHEL-33716]
  - net: sfp: add quirk for FS's 2.5G copper SFP (Izabela Bakollari) [RHEL-33716]
  - net: phy: amd: Support the Altima AMI101L (Izabela Bakollari) [RHEL-33716]
  - net: sfp: add quirk for Fiberstone GPON-ONU-34-20BI (Izabela Bakollari) [RHEL-33716]
  - net: phy: fix regression with AX88772A PHY driver (Izabela Bakollari) [RHEL-33716]
  - net: phy: convert phy_stop() to use split state machine (Izabela Bakollari) [RHEL-33716]
  - net: phy: split locked and unlocked section of phy_state_machine() (Izabela Bakollari) [RHEL-33716]
  - net: phy: move phy_state_machine() (Izabela Bakollari) [RHEL-33716]
  - net: phy: move phy_suspend() to end of phy_state_machine() (Izabela Bakollari) [RHEL-33716]
  - net: phy: move call to start aneg (Izabela Bakollari) [RHEL-33716]
  - net: phy: call phy_error_precise() while holding the lock (Izabela Bakollari) [RHEL-33716]
  - net: phy: always call phy_process_state_change() under lock (Izabela Bakollari) [RHEL-33716]
  - net: phy: marvell: Add support for offloading LED blinking (Izabela Bakollari) [RHEL-33716]
  - net: phy: phy_device: Call into the PHY driver to set LED offload (Izabela Bakollari) [RHEL-33716]
  - net: sfp: Remove unused function declaration sfp_link_configure() (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: add qca8081 fifo reset on the link changed (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: remove qca8081 1G fast retrain and slave seed config (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: support qca8081 1G chip type (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: enable qca8081 slave seed conditionally (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: merge qca8081 slave seed function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: support qca8081 genphy_c45_pma_read_abilities (Izabela Bakollari) [RHEL-33716]
  - net: mdio: Introduce a regmap-based mdio driver (Izabela Bakollari) [RHEL-33716]
  - net: phylib: fix phy_read*_poll_timeout() (Izabela Bakollari) [RHEL-33716]
  - net: mdio: add mdio_device_get() and mdio_device_put() (Izabela Bakollari) [RHEL-33716]
  - net: mdio: add clause 73 to ethtool conversion helper (Izabela Bakollari) [RHEL-33716]
  - mdio_bus: unhide mdio_bus_init prototype (Izabela Bakollari) [RHEL-33716]
  - net: mdio: fix owner field for mdio buses registered using ACPI (Izabela Bakollari) [RHEL-33716]
  - net: phy: improve phy_read_poll_timeout (Izabela Bakollari) [RHEL-33716]
  - net: mdio: add mdiodev_c45_(read|write) (Izabela Bakollari) [RHEL-33716]
  - docs: networking: phy: add missing space (Izabela Bakollari) [RHEL-33716]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.el9]
changelog:
  - Revert "Merge: scsi: fnic: driver update" (John Meneghini) [RHEL-36420]
  - dev/parport: fix the array out-of-bounds risk (CKI Backport Bot) [RHEL-54990] {CVE-2024-42301}
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54835] {CVE-2024-43830}
  - null_blk: fix validation of block size (Ming Lei) [RHEL-51322] {CVE-2024-41077}
  - s390/fpu: Re-add exception handling in load_fpu_state() (Aristeu Rozanski) [RHEL-39346]
  - redhat: spec: add cachestat to kselftest package (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: Fix build warnings on ppc64 (Eric Chanudet) [RHEL-50302]
  - selftests/cachestat: Fix print_cachestat format (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: use proper syscall number macro (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: properly link in librt (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: catch failing fsync test on tmpfs (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: test for cachestat availability (Eric Chanudet) [RHEL-50302]
  - selftests: add selftests for cachestat (Eric Chanudet) [RHEL-50302]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.1.1.el9_5]
changelog:
  - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (Desnes Nunes) [RHEL-52378] {CVE-2024-42226}
  - redhat: set defaults for RHEL 9.5 (Lucas Zampieri)


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.12.1.el9_5]
changelog:
  - net: nexthop: Initialize all fields in dumped nexthops (Antoine Tenart) [RHEL-55080] {CVE-2024-42283}
  - tracing/osnoise: Fix build when timerlat is not enabled (Tomas Glozar) [RHEL-61870 RHEL-39968]
  - tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (Tomas Glozar) [RHEL-61870 RHEL-39968]
  - tracing/timerlat: Only clear timer if a kthread exists (Tomas Glozar) [RHEL-61870 RHEL-39968]
  - tracing/osnoise: Use a cpumask to know what threads are kthreads (Tomas Glozar) [RHEL-61870 RHEL-39968]
  - iommufd: Require drivers to supply the cache_invalidate_user ops (CKI Backport Bot) [RHEL-60681 RHEL-60761] {CVE-2024-46824}
  - Revert "fw loader: Remove the now superfluous sentinel element from ctl_table array" (Eric Chanudet) [RHEL-62925 RHEL-50129]
  - smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61607 RHEL-57983]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.13.1.el9_5]
changelog:
  - efi: libstub: Move screen_info handling to common code (Maxim Levitsky) [RHEL-65344]
  - mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61697]
  - mptcp: pm: Fix uaf in __timer_delete_sync (CKI Backport Bot) [RHEL-64678 RHEL-60737] {CVE-2024-46858}
  - ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62667 RHEL-61459]
  - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann)


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.14.1.el9_5]
changelog:
  - ext4: fix off by one issue in alloc_flex_gd() (Pavel Reichl) [RHEL-65318]
  - ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57564 RHEL-50920]
  - smb: client: stop flooding dmesg in smb2_calc_signature() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: print failed session logoffs with FYI (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: handle lack of FSCTL_GET_REPARSE_POINT support (Paulo Alcantara) [RHEL-36346 RHEL-57983]
  - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-57983]
  - cifs: Fix reacquisition of volume cookie on still-live connection (Paulo Alcantara) [RHEL-36346 RHEL-57983]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.15.1.el9_5]
changelog:
  - USB: serial: mos7840: fix crash on resume (Desnes Nunes) [RHEL-65484 RHEL-59050] {CVE-2024-42244}
  - attr: block mode changes of symlinks (CKI Backport Bot) [RHEL-61231 RHEL-60822]
  - ice: Adjust PTP init for 2x50G E825C devices (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Add NAC Topology device capability parser (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Add support for E825-C TS PLL handling (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Change CGU regs struct to anonymous (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Introduce ETH56G PHY model for E825C products (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Introduce ice_get_base_incval() helper (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Move CGU block (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Add PHY OFFSET_READY register clearing (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Implement Tx interrupt enablement functions (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Introduce helper to get tmr_cmd_reg values (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Introduce ice_ptp_hw struct (Petr Oros) [RHEL-64017 RHEL-29210]
  - wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 (Narpat Mali) [RHEL-61753 RHEL-35542]
  - wifi: rtw89: 885xbx: apply common settings to 8851B, 8852B and 8852BT (Narpat Mali) [RHEL-61753 RHEL-35542]
  - wifi: rtw89: 8852b: fix definition of KIP register number (Narpat Mali) [RHEL-61753 RHEL-35542]
  - wifi: rtw89: 8852b: set AMSDU limit to 5000 (Narpat Mali) [RHEL-61753 RHEL-35542]
  - bpf: Fix overrunning reservations in ringbuf (CKI Backport Bot) [RHEL-62940] {CVE-2024-41009}
  - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-61424 RHEL-60572]
  - cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CKI Backport Bot) [RHEL-66837] {CVE-2024-50226}
  - ethtool: check device is present when getting link settings (Michal Schmidt) [RHEL-60581 RHEL-57750]
  - iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all() (CKI Backport Bot) [RHEL-59982 RHEL-59981]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.16.1.el9_5]
changelog:
  - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-64902 RHEL-55873]
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Steve Best) [RHEL-65436 RHEL-27748] {CVE-2024-26615}
  - gitlab-ci: use zstream builder container image (Michael Hofmann)
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CKI Backport Bot) [RHEL-66856] {CVE-2024-50251}
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CKI Backport Bot) [RHEL-65401] {CVE-2024-49949}
  - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-58761 RHEL-54768] {CVE-2024-43854}
  - proc: fix dentry/inode overinstantiating under /proc/${pid}/net (Joel Savitz) [RHEL-62824 RHEL-57703]
  - iommu: Restore lost return in iommu_report_device_fault() (CKI Backport Bot) [RHEL-67364] {CVE-2024-44994}
  - net: ena: Extend customer metrics reporting support (Kamal Heib) [RHEL-66933 RHEL-59968]
  - net: ena: Add ENA Express metrics support (Kamal Heib) [RHEL-66933 RHEL-59968]
  - xsk: fix batch alloc API on non-coherent systems (Felix Maurer) [RHEL-59884 RHEL-58954]
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66106] {CVE-2024-46695}
  - PCI/AER: Disable AER service on suspend (Lenny Szubowicz) [RHEL-67037 RHEL-22265]
  - ACPI: PM: s2idle: Evaluate all Low-Power S0 Idle _DSM functions (Mark Langsdorf) [RHEL-67037 RHEL-54149]
  - mptcp: fallback when MPTCP opts are dropped after 1st data (CKI Backport Bot) [RHEL-62216 RHEL-62218]
  - cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (David Arcari) [RHEL-61469 RHEL-45016]
  - cpufreq/amd-pstate: Add the missing cpufreq_cpu_put() (David Arcari) [RHEL-61469 RHEL-45016]
  - cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems (David Arcari) [RHEL-61469 RHEL-45016]
  - cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons (David Arcari) [RHEL-61469 RHEL-45016]
  - cpufreq/amd-pstate: fix setting policy current frequency value (David Arcari) [RHEL-61469 RHEL-45016]
  - netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58545] {CVE-2024-45018}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.17.1.el9_5]
changelog:
  - arm64: probes: Remove broken LDR (literal) uprobe support (CKI Backport Bot) [RHEL-66046] {CVE-2024-50099}
  - qed: put cond_resched() in qed_dmae_operation_wait() (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - qed: allow the callee of qed_mcp_nvm_read() to sleep (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - qed: put cond_resched() in qed_grc_dump_ctx_data() (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - qed: make 'ethtool -d' 10 times faster (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - qed: allow sleep in qed_mcp_trace_dump() (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - sched/numa: Fix the potential null pointer dereference in task_numa_work() (CKI Backport Bot) [RHEL-66810] {CVE-2024-50223}
  - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
  - perf/x86/intel/uncore: Support HBM and CXL PMON counters (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Cleanup unused unit structure (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Apply the unit control RB tree to PCI uncore units (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Apply the unit control RB tree to MSR uncore units (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Retrieve the unit ID from the unit control RB tree (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Support per PMU cpumask (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Save the unit control address of all units (Michael Petlan) [RHEL-65856]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.18.1.el9_5]
changelog:
  - bpf: Fix a kernel verifier crash in stacksafe() (CKI Backport Bot) [RHEL-66097 RHEL-66098] {CVE-2024-45020}
  - bpf: Fix a sdiv overflow issue (CKI Backport Bot) [RHEL-64598 RHEL-64597] {CVE-2024-49888}
  - bpf: Fix out-of-bounds write in trie_get_next_key() (CKI Backport Bot) [RHEL-66877] {CVE-2024-50262}
  - bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CKI Backport Bot) [RHEL-63331] {CVE-2024-47675}
  - nfsd: ensure that nfsd4_fattr_args.context is zeroed out (Jay Shin) [RHEL-58884 RHEL-58883] {CVE-2024-46697}
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Jon Maloy) [RHEL-65872] {CVE-2024-50115}
  - net: tighten bad gso csum offset check in virtio_net_hdr (Guillaume Nault) [RHEL-67683]
  - udp: fix receiving fraglist GSO packets (Guillaume Nault) [RHEL-67683]
  - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CKI Backport Bot) [RHEL-66804] {CVE-2024-50255}
  - Bluetooth: ISO: Fix UAF on iso_sock_timeout (Bastien Nocera) [RHEL-66321] {CVE-2024-50124}
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-50125}
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-27398}
  - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CKI Backport Bot) [RHEL-44173] {CVE-2024-38564}
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (CKI Backport Bot) [RHEL-66365] {CVE-2024-50148}
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CKI Backport Bot) [RHEL-57716 RHEL-36374] {CVE-2024-27399}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.19.1.el9_5]
changelog:
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66462 RHEL-66461] {CVE-2024-50142}
  - xfrm: fix one more kernel-infoleak in algo dumping (CKI Backport Bot) [RHEL-65960] {CVE-2024-50110}
  - Revert "Merge: [qed] softlockup triggered by ethtool -d  [rhel-9.5.z]" (Lucas Zampieri) [RHEL-61705]
  - tracing/hwlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468]
  - tracing/timerlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468] {CVE-2024-49866}
  - tracing/timerlat: Drop interface_lock in stop_kthread() (Tomas Glozar) [RHEL-69468]
  - tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (Tomas Glozar) [RHEL-69468]
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61416 RHEL-60255]


author: Luis Claudio R. Goncalves <lgoncalv@redhat.com> [5.14.0-284.11.1.rt14.296.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.11.1.rt14.296.el9_2 [2125474]
  - vfio: Make the group FD disassociate from the iommu_group (Alex Williamson) [2180649]
  - vfio: Hold a reference to the iommu_group in kvm for SPAPR (Alex Williamson) [2180649]
  - vfio: Add vfio_file_is_group() (Alex Williamson) [2180649]
  - vfio: Change vfio_group->group_rwsem to a mutex (Alex Williamson) [2180649]
  - vfio: Remove the vfio_group->users and users_comp (Alex Williamson) [2180649]
  - vfio: Follow a strict lifetime for struct iommu_group (Alex Williamson) [2180649]


author: Derek Barbosa <debarbos@redhat.com> [5.14.0-284.12.1.rt14.297.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.12.1.rt14.297.el9_2 [2188313]
  - [redhat-rt] Update RTBZ for batch#1 (Derek Barbosa)
  - [redhat-rt]: build: make RTCVES=yes replaces RHEL trackers by RT CVE trackers in the changelog (Eder Zulian)
  - [redhat-rt] build: make EDITCLOG=yes to edit changelog during build process (Eder Zulian)
  - blk-mq: directly poll requests (Ming Lei) [2187536 2186507]
  - crypto: drbg - Only fail when jent is unavailable in FIPS mode (Vladis Dronov) [2181727 2175240]
  - crypto: jitter - permanent and intermittent health errors (Vladis Dronov) [2181727 2175240]
  - crypto: jitter - quit sample collection loop upon RCT failure (Vladis Dronov) [2181727 2175240]
  - crypto: jitter - don't limit ->health_failure check to FIPS mode (Vladis Dronov) [2181727 2175240]
  - crypto: jitter - drop kernel-doc notation (Vladis Dronov) [2181727 2175240]
  - KVM: VMX: Fix crash due to uninitialized current_vmcs (Vitaly Kuznetsov) [2186822 2181329]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.13.1.rt14.298.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.13.1.rt14.298.el9_2 [2188313]
  - sched/deadline: Add more reschedule cases to prio_changed_dl() (Valentin Schneider) [2188655 2123590]
  - sched/rt: Fix bad task migration for rt tasks (Valentin Schneider) [2187709 2182900]
  - crypto: qat - add support for 402xx devices (Vladis Dronov) [2176846 2144528]
  - crypto: qat - drop log level of msg in get_instance_node() (Vladis Dronov) [2176846 2144528]
  - crypto: qat - fix out-of-bounds read (Vladis Dronov) [2176846 2144528]
  - Documentation: qat: change kernel version (Vladis Dronov) [2176846 2144528]
  - crypto: qat - add qat_zlib_deflate (Vladis Dronov) [2176846 2144528]
  - crypto: qat - extend buffer list logic interface (Vladis Dronov) [2176846 2144528]
  - crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (Vladis Dronov) [2176846 2144528]
  - crypto: qat - add resubmit logic for decompression (Vladis Dronov) [2176846 2144528]
  - crypto: acomp - define max size for destination (Vladis Dronov) [2176846 2144528]
  - crypto: qat - enable deflate for QAT GEN4 (Vladis Dronov) [2176846 2144528]
  - crypto: qat - expose deflate through acomp api for QAT GEN2 (Vladis Dronov) [2176846 2144528]
  - crypto: qat - rename and relocate GEN2 config function (Vladis Dronov) [2176846 2144528]
  - crypto: qat - relocate qat_algs_alloc_flags() (Vladis Dronov) [2176846 2144528]
  - crypto: qat - relocate backlog related structures (Vladis Dronov) [2176846 2144528]
  - crypto: qat - extend buffer list interface (Vladis Dronov) [2176846 2144528]
  - crypto: qat - generalize crypto request buffers (Vladis Dronov) [2176846 2144528]
  - crypto: qat - change bufferlist logic interface (Vladis Dronov) [2176846 2144528]
  - crypto: qat - rename bufferlist functions (Vladis Dronov) [2176846 2144528]
  - crypto: qat - relocate bufferlist logic (Vladis Dronov) [2176846 2144528]
  - crypto: qat - Use helper to set reqsize (Vladis Dronov) [2176846 2144528]
  - crypto: kpp - Add helper to set reqsize (Vladis Dronov) [2176846 2144528]
  - crypto: qat - fix error return code in adf_probe (Vladis Dronov) [2176846 2144528]
  - crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (Vladis Dronov) [2176846 2144528]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.14.1.rt14.299.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.14.1.rt14.299.el9_2 [2188313]
  - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (David Arcari) [2178857 2155861]
  - cpufreq: intel_pstate: Read all MSRs on the target CPU (David Arcari) [2178857 2155861]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.15.1.rt14.300.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.15.1.rt14.300.el9_2 [2188313]
  - redhat/configs: Fix incorrect configs location and content (Vladis Dronov)
  - wifi: iwlwifi: mvm: protect TXQ list manipulation (Jose Ignacio Tornos Martinez) [2186723 2183490]
  - wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (Jose Ignacio Tornos Martinez) [2186723 2183490]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.16.1.rt14.301.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.16.1.rt14.301.el9_2 [2188313]
  - perf: Fix check before add_event_to_groups() in perf_group_detach() (Michael Petlan) [2192654 2192655] {CVE-2023-2235}
  - sched/core: Fix arch_scale_freq_tick() on tickless systems (Phil Auld) [2203178 1996625]
  - ice: sleep, don't busy-wait, in the SQ send retry loop (Michal Schmidt) [2203154 RHEL-406]
  - ice: remove unused buffer copy code in ice_sq_send_cmd_retry() (Michal Schmidt) [2203154 RHEL-406]
  - ice: sleep, don't busy-wait, for ICE_CTL_Q_SQ_CMD_TIMEOUT (Michal Schmidt) [2203154 RHEL-406]
  - ice: remove ice_ctl_q_info::sq_cmd_timeout (Michal Schmidt) [2203154 RHEL-406]
  - ice: increase the GNSS data polling interval to 20 ms (Michal Schmidt) [2203154 RHEL-406]
  - ice: do not busy-wait to read GNSS data (Michal Schmidt) [2203154 RHEL-406]
  - redhat: set default zstream brew target for 9.2 (Herton R. Krzesinski)


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.17.1.rt14.302.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.17.1.rt14.302.el9_2 [2188313]
  - cifs: fix wrong unlock before return from cifs_tree_connect() (Ronnie Sahlberg) [2209045 2182524]
  - CI: Use GA builder container (Michael Hofmann)
  - Remove the unnecessary unicode character (Tao Liu) [2208242 2187350]
  - workqueue: Fold rebind_worker() within rebind_workers() (Waiman Long) [2203229 2182337]
  - workqueue: Unbind kworkers before sending them to exit() (Waiman Long) [2203229 2182337]
  - workqueue: Don't hold any lock while rcuwait'ing for !POOL_MANAGER_ACTIVE (Waiman Long) [2203229 2182337]
  - workqueue: Convert the idle_timer to a timer + work_struct (Waiman Long) [2203229 2182337]
  - workqueue: Factorize unbind/rebind_workers() logic (Waiman Long) [2203229 2182337]
  - workqueue: Protects wq_unbound_cpumask with wq_pool_attach_mutex (Waiman Long) [2203229 2182337]
  - workqueue: don't skip lockdep work dependency in cancel_work_sync() (Waiman Long) [2203229 2182337]
  - workqueue: Change the comments of the synchronization about the idle_list (Waiman Long) [2203229 2182337]
  - workqueue: Remove the mb() pair between wq_worker_sleeping() and insert_work() (Waiman Long) [2203229 2182337]
  - workqueue: Remove the cacheline_aligned for nr_running (Waiman Long) [2203229 2182337]
  - workqueue: Move the code of waking a worker up in unbind_workers() (Waiman Long) [2203229 2182337]
  - workqueue: Remove the outdated comment before wq_worker_sleeping() (Waiman Long) [2203229 2182337]
  - workqueue: Fix unbind_workers() VS wq_worker_sleeping() race (Waiman Long) [2203229 2182337]
  - NFSD: RHEL-only bug introduced in fix for COMMIT and NFS4ERR_DELAY loop (Benjamin Coddington) [2203335 2196432]
  - NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop (Benjamin Coddington) [2203335 2196432]
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (Sabrina Dubroca) [2184153 2179822] {CVE-2023-28466}
  - netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196139 2196140] {CVE-2023-32233}
  - xfs: verify buffer contents when we skip log replay (Andrey Albershteyn) [2187468 2187469] {CVE-2023-2124}
  - watchdog: wdat_wdt: Avoid unimplemented get_timeleft (David Arcari) [2192585 2189867]
  - watchdog: wdat_wdt: Set the min and max timeout values properly (David Arcari) [2192585 2189867]
  - watchdog: wdat_wdt: Remove #ifdef guards for PM related functions (David Arcari) [2192585 2189867]
  - watchdog: wdat_wdt: Stop watchdog when uninstalling module (David Arcari) [2192585 2189867]
  - watchdog: wdat_wdt: Stop watchdog when rebooting the system (David Arcari) [2192585 2189867]
  - watchdog: wdat_wdt: Using the existing function to check parameter timeout (David Arcari) [2192585 2189867]
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Tony Camuso) [2189487 2188409] {CVE-2023-2194}
  - mm/filemap: fix page end in filemap_get_read_batch (Nico Pache) [2189349 2181263]
  - [redhat-rt] rtcves: cleanup Resolves line even whe there are no CVEs listed (Luis Claudio R. Goncalves)
  - [redhat-rt] rtcves: keep the Jira issues listed in the Resolves line (Luis Claudio R. Goncalves)
  - [redhat-rt] rtcves: remove non-rt entries from the Resolves line (Luis Claudio R. Goncalves)
  - [redhat-rt] rtcves: make the script more informative (Luis Claudio R. Goncalves)


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.18.1.rt14.303.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.18.1.rt14.303.el9_2 [2188313]
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (Baoquan He) [2210614 2116317]
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ricardo Robaina) [2196345 2196346] {CVE-2023-2002}
  - perf vendor events intel: Refresh jaketown metrics and events (Michael Petlan) [2207471 2190010]
  - perf vendor events: Update Intel jaketown (Michael Petlan) [2207471 2190010]
  - perf vendor events intel: Refresh ivytown metrics and events (Michael Petlan) [2207471 2190010]
  - perf vendor events: Update Intel ivytown (Michael Petlan) [2207471 2190010]
  - hugetlbfs: don't delete error page from pagecache (Aristeu Rozanski) [2192348 2184858]


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Dodji Seketeli <dodji@redhat.com> - 2.1-1
changelog:
  - Update to upstream 2.1 release.
  - Remove the now useless text about getting the source from git.
  - Update the license reference.
  - Resolves: rhbz#1944096


author: Dodji Seketeli <dodji@redhat.com> - 2.3-1
changelog:
  - Update to upstream 2.3
  - Remove the dos2unix surgery as it's now useless
  - Update for the soname bump
  - Resolves: RHELPLAN-154803


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4
  - Use SPDX licensing naming
  - Build BTF support
  - Add BuildRequires: libbpf-devel
  - Update for SONAME bump
  - Show details about the check and check-self-targets targets
    separatly.
  - Resolves: RHEL-12491


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16614
  - Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16629
  - Add git as a build requirement as we need git to apply the patches
    aboves that apply binaries.
  - Use %autosetup to handle applying the patches using git.
  - autoreconf after the patches touched at least one Makefile.am file.


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Add BuildRequires: python3-devel
  - Remove BuildRequires: %{_bindir}/python3


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-34564


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Xavier Bachelot <xavier@bachelot.org> - 1.3.2-1
changelog:
  - Update to 1.3.2 (RHBZ#2112605, RHBZ#2113476, RHBZ#2089046)
  - Don't build bdj on i386 (RHBZ#2104068)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-23
changelog:
  - Add 0091-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch
    * Fixes RHEL-6678 (Add support in multipathd for NVMe to listen for FPIN-Li
      events and mark effected paths as marginal)
  - Add 0092-multipath-tools-add-HPE-Alletra-9000-NVMe-to-hardwar.patch
    * Fixes RHEL-1830 (Changes to Arcus NVMeoFC multipath.conf settings for RHEL
      9.x to be included in kernel by default)
  - Resolves: RHEL-6678
  - Resolves: RHEL-1830


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-24
changelog:
  - Add 0093-RH-multipath-add-mpathcleanup-man-page.patch
    * Fixes RHEL-1266 ("There is no man page for mpathcleanup")
  - Resolves: RHEL-1266


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-25
changelog:
  - Add 0094-libmultipath-Add-max_retries-config-option.patch
    * Fixes RHEL-1729 ("Allow multipathd to set the max_retries of the
      scsi_device for paths")
  - Add 0095-libmutipath-Retain-device-size-if-sysfs_get_size-fai.patch
  - Add 0096-multipathd-check-and-update-all-paths-when-in-cli_re.patch
  - Add 0097-multipathd-move-post-reloading-commands-into-resize_.patch
  - Add 0098-multipathd-move-resize_map-to-multipathd-main.c.patch
  - Add 0099-multipathd-Add-auto_resize-config-option.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986
  - Resolves: RHEL-1729


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-26
changelog:
  - Add 0100-libmultipath-avoid-temporarily-enabling-queueing-on-.patch
  - Add 0101-multipathd-Make-sure-to-disable-queueing-if-recovery.patch
    * Fixes RHEL-17234 ("RHEL9 dm-multipath no_path_retry [retry number] is
      undone if paths are later lost for an open map.")
  - Add 0102-multipathd-remove-nopath-flushing-code-from-flush_ma.patch
  - Add 0103-multipathd-make-flush_map-delete-maps-like-the-multi.patch
  - Add 0104-multipathd-disable-queueing-when-removing-unknown-ma.patch
    * Fixes RHEL-4998 ("When remove external lun from host, rescan lun status
      will cause the OS hang and no response")
  - Resolves: RHEL-4998
  - Resolves: RHEL-17234


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-27
changelog:
  - Add 0105-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
  - Add 0106-multipathd-fix-auto-resize-configuration.patch
  - Add 0107-libmultipath-fix-displaying-auto_resize-config-setti.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-28
changelog:
  - Add 0108-libmultipath-actually-truncate-too-large-vpd-page.patch
  - Add 0109-kpartx-fix-theoretical-overflow-in-loop-device-name.patch
    * Fixes RHEL-31793 ("RHEL SAST Automation: address (selected) true positives")
  - Resolves: RHEL-31793


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-29
changelog:
  - Add 0110-libmultipath-keep-track-of-queueing-state-in-feature.patch
  - Add 0111-libmultipath-export-partmap_in_use.patch
  - Add 0112-libmultipath-change-flush_on_last_del-to-fix-a-multi.patch
  - Add 0113-libmultipath-pad-dev_loss_tmo-to-avoid-race-with-no_.patch
    * Fixes RHEL-30272
  - Add 0114-libmultipath-remove-pathgroup-wildcard-options.patch
  - Add 0115-libmultipath-print-all-values-in-snprint_failback.patch
  - Add 0116-multipathd-Stop-double-counting-map-failures-for-no_.patch
  - Add 0117-multipath-tools-man-pages-add-missing-multipathd-com.patch
  - Add 0118-libmultipath-change-the-vend-prod-rev-printing.patch
  - Add 0119-multipath-tools-man-pages-Add-format-wildcard-descri.patch
    * Fixes RHEL-8304
  - Resolves: RHEL-8304
  - Resolves: RHEL-30272


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-30
changelog:
  - Add 0120-multipath-tools-fix-multipath-ll-bug-for-Native-NVME.patch
    * Fixes RHEL-28068
  - Add 0121-multipathd-set-reply-length-to-zero-for-NULL-replies.patch
    * Fixes RHEL-44569
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-31
changelog:
  - Modify multiple tests especially medium_error_scsi_debug and squelch_scsi_id
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-32
changelog:
  - Modify bindings, find_multipaths, and user_friendly_names tests
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Viktor Malik <vmalik@redhat.com> - 1.25-1
changelog:
  - Resolves: rhbz#2190484
  - Build with system libbpf
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1507035 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#1766490 - Use negative cache better and domain checks for lookup by SIDs
  - Resolves: rhbz#1964121 - RFE: Add an option to sssd config to convert home directories to lowercase (or add a new template for the 'override_homedir' option)
  - Resolves: rhbz#2074307 - reduce debug level in case well_known_sid_to_name() fails
  - Resolves: rhbz#2096031 - SSSD: sdap_handle_id_collision_for_incomplete_groups debug message missing a new line
  - Resolves: rhbz#2103325 - Supported AD group types should be explained in the docs
  - Resolves: rhbz#2111388 - authenticating against external IdP services okta (native app) with OAuth client secret failed
  - Resolves: rhbz#2115171 - SSSD: duplicate dns_resolver_* option in man sssd.conf
  - Resolves: rhbz#2127492 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2128840 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2128883 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1608496 - sssd failing to register dynamic DNS addresses against an AD server due to unnecessary DNS search
  - Resolves: rhbz#2110091 - SSSD doesn't handle changes in 'resolv.conf' properly (when started right before network service)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139684 - [sssd] RHEL 9.2 Tier 0 Localization
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142794 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144893 - changing password with ldap_password_policy = shadow does not take effect immediately
  - Resolves: rhbz#2148737 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2160001 - Reference to 'sssd-ldap-attributes' man page is missing in 'sssd-ldap', etc man pages
  - Resolves: rhbz#2143159 - automount killed by SIGSEGV


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys
  - Resolves: rhbz#1913839 - filter_groups doesn't filter GID from 'id' output: AD + 'ldap_id_mapping = True' corner case
  - Resolves: rhbz#2100789 - [Improvement] sssctl config-check command does not show an error when we don't have id_provider in the domain section
  - Resolves: rhbz#2152177 - [RFE] Add support for ldapi:// URLs
  - Resolves: rhbz#2164852 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2166627 - Improvement: sss_client: add 'getsidbyusername()' and 'getsidbygroupname()' and corresponding python bindings
  - Resolves: rhbz#2166943 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2167728 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#2196816 - [RHEL9] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2162552 - sssd client caches old data after removing netgroup member on IDM
  - Resolves: rhbz#2189542 - [sssd] RHEL 9.3 Tier 0 Localization
  - Resolves: rhbz#2133854 - [RHEL9] In some cases when `sdap_add_incomplete_groups()` is called with `ignore_group_members = true`, groups should be treated as complete
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: rhbz#2234829 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working)
  - Resolves: rhbz#2236119 - dbus and crond getting terminated with SIGBUS in sss_client code


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.2
changelog:
  - Resolves: RHEL-66268 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9.5.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.3
changelog:
  - Resolves: RHEL-67673 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9.5.z]


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Eugene Zamriy <ezamriy@msvsphere.ru> - 2.15.2-6.inferit
changelog:
  - Added support for MSVSphere bug tracker
  - Removed libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Tomas Popela <tpopela@redhat.com> - 2.72.0-8.el9_5.1
changelog:
  - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names
  - Resolves: RHEL-67080


author: Tomas Popela <tpopela@redhat.com> - 2.72.0-8.el9_5.2
changelog:
  - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data
  - Resolves: RHEL-67068


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.3.0-1
changelog:
  - Rebased to libvirt-10.3.0 (RHEL-29642)
  - The rebase also fixes the following bugs:
      RHEL-25993, RHEL-7101, RHEL-7461, RHEL-16333, RHEL-7343
      RHEL-28808, RHEL-32880, RHEL-35879, RHEL-34112, RHEL-30373
      RHEL-23416, RHEL-23608, RHEL-26276, RHEL-22728


author: Jiri Denemark <jdenemar@redhat.com> - 10.4.0-1
changelog:
  - Rebased to libvirt-10.4.0 (RHEL-7489)
  - The rebase also fixes the following bugs:
      RHEL-29642, RHEL-30373, RHEL-32182, RHEL-33044, RHEL-33082
      RHEL-34615, RHEL-35948, RHEL-36565, RHEL-36721, RHEL-39271
      RHEL-39400


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-1
changelog:
  - Rebased to libvirt-10.5.0 (RHEL-21381)
  - The rebase also fixes the following bugs:
      RHEL-23833, RHEL-29642, RHEL-37542, RHEL-39969, RHEL-40899
      RHEL-43309


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-2
changelog:
  - vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46099)
  - tests: vhostuser: add virtiofsd json descriptor (RHEL-7108, RHEL-40135)
  - tests: qemuxmlconf: adjust test case to new virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: fill capabilities for virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: do not use deprecated options for new virtiofsd (RHEL-7108)
  - qemu: migration: allow migration for virtiofs (RHEL-40135)
  - virt-host-validate: Drop extra "PASS" (RHEL-46868)
  - qemu: Don't leave beingDestroyed=true on inactive domain (RHEL-43309)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
  - qemu_domain: Strip <acpi/> from s390(x) definitions (RHEL-49516)
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
  - vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)


author: Eduard Abdullin <eabdullin@almalinux.org> - 10.5.0-7.alma.1
changelog:
  - qemu: Use pvpanic by default on aarch64
  - qemu: Refactor default panic model
  - qemu: Sometimes the default panic model doesn't exist
  - udevListInterfaces: Honour array length for zero-length NULL
   arrays (CVE-2024-8235)


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-1
changelog:
  - Rebased to libvirt-8.10.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2128993, rhbz#2143235, rhbz#2143840, rhbz#1874163, rhbz#2000075
      rhbz#2143838, rhbz#2104919, rhbz#2072204, rhbz#2137298


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-2
changelog:
  - qemu_process: Document qemuProcessPrepare{Domain,Host}() order (rhbz#2150760)
  - qemu_extdevice: Init paths in qemuExtDevicesPrepareDomain() (rhbz#2150760)
  - qemu_extdevice: Expose qemuExtDevicesInitPaths() (rhbz#2150760)
  - qemu: Init ext devices paths on reconnect (rhbz#2150760)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-1
changelog:
  - Rebased to libvirt-9.0.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2151064, rhbz#1874163, rhbz#2130192, rhbz#2111948, rhbz#1824722
      rhbz#2150455, rhbz#2063723, rhbz#1717611, rhbz#2160448, rhbz#2151869
      rhbz#2040272, rhbz#2144738, rhbz#2159851, rhbz#2156289, rhbz#2033879
      rhbz#1820437, rhbz#2151202


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-2
changelog:
  - vircgroupv2: fix cpu.weight limits check (rhbz#2037998)
  - domain_validate: drop cpu.shares cgroup check (rhbz#2037998)
  - docs: document correct cpu shares limits with both cgroups v1 and v2 (rhbz#2037998)
  - qemu_interface: Fix managed='no' case when creating an ethernet interface (rhbz#2144738)
  - conf: clarify some external TPM error messages (rhbz#2063723)
  - qemu: hotplug: Remove legacy quirk for 'dimm' address generation (rhbz#2158701)
  - qemu: alias: Remove 'oldAlias' argument of qemuAssignDeviceMemoryAlias (rhbz#2158701)
  - qemu: Remove 'memAliasOrderMismatch' field from VM private data (rhbz#2158701)
  - rpc: Fix error message in virNetServerSetClientLimits (rhbz#2033879)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-3
changelog:
  - src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266)
  - qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266)
  - virsh: Make domif-setlink work more than once (rhbz#2165466)
  - qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272)
  - qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272)
  - qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272)
  - qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272)
  - qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272)
  - qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272)
  - qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-4
changelog:
  - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
  - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
  - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
  - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
  - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
  - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-5
changelog:
  - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
  - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-6
changelog:
  - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
  - rpc: Don't warn about "max_client_requests" in single-threaded daemons (rhbz#2145188)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-7
changelog:
  - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
  - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)


author: Jiri Denemark <jdenemar@redhat.com> - 9.1.0-1
changelog:
  - Rebased to libvirt-9.1.0 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2004850, rhbz#2137346, rhbz#2166235, rhbz#1961326


author: Jiri Denemark <jdenemar@redhat.com> - 9.2.0-1
changelog:
  - Rebased to libvirt-9.2.0 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2178885, rhbz#2000410, rhbz#2175582, rhbz#2154750, rhbz#2175449
      rhbz#2181234, rhbz#2078693, rhbz#2176924, rhbz#2156300, rhbz#2173142
      rhbz#2171973, rhbz#2178866, rhbz#2182961, rhbz#2174397, rhbz#2179030
      rhbz#2161965, rhbz#2035985


author: Jiri Denemark <jdenemar@redhat.com> - 9.3.0-1
changelog:
  - Rebased to libvirt-9.3.0 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2181235, rhbz#2176215, rhbz#2187133, rhbz#2178885, rhbz#2174700
      rhbz#2160435, rhbz#2184966, rhbz#2187278, rhbz#2014030, rhbz#2185184
      rhbz#2156300


author: Jiri Denemark <jdenemar@redhat.com> - 9.4.0-1
changelog:
  - Rebased to libvirt-9.4.0 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2119007, rhbz#2193315, rhbz#2209658, rhbz#2143158, rhbz#2208946
      rhbz#2138150, rhbz#2203657, rhbz#2180679, rhbz#2203709


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-0rc1.1
changelog:
  - Rebased to libvirt-9.5.0-rc1 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2160356, rhbz#2209191, rhbz#2210287, rhbz#2209853, rhbz#2171860
      rhbz#2138150, rhbz#2171384


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-2
changelog:
  - nodedev: transient mdev update on nodeDeviceCreateXML (rhbz#2143158)
  - nodedev: refactor mdevctl thread functions (rhbz#2143158)
  - nodedev: update mdevs from the mdevctl thread (rhbz#2143158)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-3
changelog:
  - tests: remove acpi support from s390x ccw hotplug tests (rhbz#2168499)
  - tests: add capabilities for QEMU 8.1.0 on s390x (rhbz#2168499)
  - qemu: add run-with async-teardown capability (rhbz#2168499)
  - qemu: allow use of async teardown in domain (rhbz#2168499)
  - conf: domcaps: Add 'async-teardown' domain capability (rhbz#2168499)
  - qemu: S390 does not provide physical address size (rhbz#2224016)
  - nodedev: report mdev persistence properly (rhbz#2143158)
  - node_device: Don't leak error message buffer from virMdevctlListDefined|Active (rhbz#2143158)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-4
changelog:
  - storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (CVE-2023-3750, rhbz#2221851)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-5
changelog:
  - Revert "qemu_passt: Actually use @logfd" (rhbz#2209191)
  - Revert "qemu_passt: Precreate passt logfile" (rhbz#2209191)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-6
changelog:
  - tests: Use DO_TEST_CAPS_*_ABI_UPDATE() for ppc64 (rhbz#2196178)
  - tests: Switch to firmware autoselection for hvf (rhbz#2196178)
  - tests: Use virt-4.0 machine type for aarch64 (rhbz#2196178)
  - tests: Consistently use /path/to/guest_VARS.fd (rhbz#2196178)
  - tests: Turn abi-update.xml into a symlink (rhbz#2196178)
  - tests: Rename firmware-auto-efi-nvram-path (rhbz#2196178)
  - qemu: Fix return value for qemuFirmwareFillDomainLegacy() (rhbz#2196178)
  - qemu: Fix lookup against stateless/combined pflash (rhbz#2196178)
  - tests: Add some more DO_TEST*ABI_UPDATE* macros (rhbz#2196178)
  - tests: Add more tests for firmware selection (rhbz#2196178)
  - tests: Update firmware descriptor files (rhbz#2196178)
  - tests: Drop tags from BIOS firmware descriptor (rhbz#2196178)
  - tests: Include microvm in firmwaretest (rhbz#2196178)
  - qemu: Don't overwrite NVRAM template for legacy firmware (rhbz#2196178)
  - qemu: Generate NVRAM path in more cases (rhbz#2196178)
  - qemu: Filter firmware based on loader.readonly (rhbz#2196178)
  - qemu: Match NVRAM template extension for new domains (rhbz#2196178)
  - conf: Don't default to raw format for loader/NVRAM (rhbz#2196178)
  - tests: Rename firmware-auto-efi-format-loader-qcow2-nvram-path (rhbz#2196178)
  - tests: Reintroduce firmware-auto-efi-format-mismatch (rhbz#2196178)
  - rpm: Reorder scriptlets (rhbz#2210058)
  - rpm: Reduce use of with_modular_daemons (rhbz#2210058)
  - rpm: Remove custom libvirtd restart logic (rhbz#2210058)
  - rpm: Introduce new macros for handling of systemd units (rhbz#2210058)
  - rpm: Switch to new macros for handling of systemd units (rhbz#2210058)
  - rpm: Delete unused macros (rhbz#2210058)


author: Jiri Denemark <jdenemar@redhat.com> - 9.9.0-1
changelog:
  - Rebased to libvirt-9.9.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-7525, rhbz#RHEL-7570, rhbz#RHEL-7542, rhbz#RHEL-7568, rhbz#RHEL-7545
      rhbz#RHEL-3231, rhbz#RHEL-7382, rhbz#RHEL-7345, rhbz#RHEL-1717, rhbz#RHEL-7528
      rhbz#RHEL-1833, rhbz#RHEL-7569, rhbz#RHEL-4432, rhbz#RHEL-974, rhbz#RHEL-4994
      rhbz#RHEL-7419


author: Jiri Denemark <jdenemar@redhat.com> - 9.10.0-1
changelog:
  - Rebased to libvirt-9.10.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-16878, rhbz#RHEL-14611, rhbz#RHEL-7384, rhbz#RHEL-16870, rhbz#RHEL-18439
      rhbz#RHEL-16751, rhbz#RHEL-4452, rhbz#RHEL-17841, rhbz#RHEL-15288, rhbz#RHEL-7040


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-1
changelog:
  - Rebased to libvirt-10.0.0 (RHEL-15267)
  - The rebase also fixes the following bugs:
      RHEL-18782, RHEL-735, RHEL-18165, RHEL-4607, RHEL-700
      RHEL-7100, RHEL-15480, RHEL-7416, RHEL-20609, RHEL-7570
      RHEL-20444, RHEL-17596, RHEL-7569


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-2
changelog:
  - tests: Add hostcpudata for machine with CPU clusters (RHEL-7043)
  - conf: Report CPU clusters in capabilities XML (RHEL-7043)
  - conf: Allow specifying CPU clusters (RHEL-7043)
  - qemu: Introduce QEMU_CAPS_SMP_CLUSTERS (RHEL-7043)
  - qemu: Use CPU clusters for guests (RHEL-7043)
  - tests: Add test case for CPU clusters (RHEL-7043)
  - qemu: Make monitor aware of CPU clusters (RHEL-7043)
  - tests: Verify handling of CPU clusters in QMP data (RHEL-7043)
  - build: Make daemons depend on generated *_protocol.[ch] (RHEL-15267)
  - domain_validate: Check for domain address conflicts fully (RHEL-4452)
  - qemu_hotplug: Don't lose 'created' flag in qemuDomainChangeNet() (RHEL-22714)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-3
changelog:
  - remote_driver: Restore special behavior of remoteDomainGetBlockIoTune() (RHEL-22800)
  - conf: Introduce dynamicMemslots attribute for virtio-mem (RHEL-15316)
  - qemu_capabilities: Add QEMU_CAPS_DEVICE_VIRTIO_MEM_PCI_DYNAMIC_MEMSLOTS capability (RHEL-15316)
  - qemu_validate: Check capability for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_command: Generate cmd line for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_snapshot: fix detection if non-leaf snapshot isn't in active chain (RHEL-23212)
  - qemu_snapshot: create: refactor external snapshot detection (RHEL-22797)
  - qemu_snapshot: create: don't require disk-only flag for offline external snapshot (RHEL-22797)
  - remoteDispatchAuthPolkit: Fix lock ordering deadlock if client closes connection during auth (RHEL-20337)
  - util: virtportallocator: Add VIR_DEBUG statements for port allocations and release (RHEL-21543)
  - qemu: migration: Properly handle reservation of manually specified NBD port (RHEL-21543)
  - qemuMigrationDstStartNBDServer: Refactor cleanup (RHEL-21543)
  - virPCIVPDResourceIsValidTextValue: Adjust comment to reflect actual code (RHEL-22314)
  - util: pcivpd: Refactor virPCIVPDResourceIsValidTextValue (RHEL-22314)
  - virNodeDeviceCapVPDFormatCustom*: Escape unsanitized strings (RHEL-22314)
  - virNodeDeviceCapVPDFormat: Properly escape system-originated strings (RHEL-22314)
  - schema: nodedev: Adjust allowed characters in 'vpdFieldValueFormat' (RHEL-22314)
  - tests: Test the previously mishandled PCI VPD characters (RHEL-22314)
  - Don't overwrite error message from 'virXPathNodeSet' (RHEL-22314)
  - tests: virpcivpdtest: Remove 'testVirPCIVPDReadVPDBytes' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDReadVPDBytes' (RHEL-22314)
  - util: pcivpd: Unexport virPCIVPDParseVPDLargeResourceFields (RHEL-22314)
  - tests: virpcivpd: Remove 'testVirPCIVPDParseVPDStringResource' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDParseVPDLargeResourceString' (RHEL-22314)
  - virPCIVPDResourceGetKeywordPrefix: Fix logging (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceCustomUpsertValue (RHEL-22314)
  - conf: virNodeDeviceCapVPDParse*: Remove pointless NULL checks (RHEL-22314)
  - virpcivpdtest: testPCIVPDResourceBasic: Remove tests for uninitialized 'ro'/'rw' section (RHEL-22314)
  - util: virPCIVPDResourceUpdateKeyword: Remove impossible checks (RHEL-22314)
  - conf: node_device: Refactor 'virNodeDeviceCapVPDParseCustomFields' to fix error reporting (RHEL-22314)
  - virNodeDeviceCapVPDParseXML: Fix error reporting (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceUpdateKeyword (RHEL-22314)
  - virPCIDeviceHasVPD: Refactor "debug" messages (RHEL-22314)
  - virPCIDeviceGetVPD: Fix multiple error handling bugs (RHEL-22314)
  - virPCIDeviceGetVPD: Handle errors in callers (RHEL-22314)
  - virPCIVPDReadVPDBytes: Refactor error handling (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceString: Properly report errors (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Merge logic conditions (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Remove impossible 'default' switch case (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor processing of read data (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor return logic (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Report proper errors (RHEL-22314)
  - virPCIVPDParse: Do reasonable error reporting (RHEL-22314)
  - virt-admin: Add warning when connection to default daemon fails (RHEL-23170)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-4
changelog:
  - Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
  - qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
  - qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
  - domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-5
changelog:
  - cpu: x86: Add support for adding features to existing CPU models (RHEL-25995)
  - qemu: domain: Check arch in qemuDomainMakeCPUMigratable (RHEL-25995)
  - conf: cpu: Introduce virCPUDefListFeatures (RHEL-25995)
  - qemu: domain: Drop added features from migratable CPU (RHEL-25995)
  - Add vmx-* features to Broadwell* (RHEL-25995)
  - Add vmx-* features to Cascadelake* (RHEL-25995)
  - Add vmx-* features to Conroe (RHEL-25995)
  - Add vmx-* features to Cooperlake (RHEL-25995)
  - Add vmx-* features to core{,2}duo (RHEL-25995)
  - Add vmx-* features to Haswell* (RHEL-25995)
  - Add vmx-* features to Icelake* (RHEL-25995)
  - Add vmx-* features to IvyBridge* (RHEL-25995)
  - Add vmx-* features to kvm* (RHEL-25995)
  - Add vmx-* features to Nehalem* (RHEL-25995)
  - Add vmx-* features to Penryn (RHEL-25995)
  - Add vmx-* features to SandyBridge* (RHEL-25995)
  - Add vmx-* features to SapphireRapids (RHEL-25995)
  - Add vmx-* features to Skylake* (RHEL-25995)
  - Add vmx-* features to Snowridge (RHEL-25995)
  - Add vmx-* features to Westmere* (RHEL-25995)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-7
changelog:
  - qemu: virtiofs: do not crash if cgroups are missing
  - qemu: virtiofs: set correct label when creating the socket
  - qemu: virtiofs: error out if getting the group or user name fails
  - Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)
  - qemu: Fix migration with custom XML (RHEL-30622)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-6
changelog:
  - udevListInterfaces: Honour array length for zero-length NULL arrays (CVE-2024-8235) (CVE-2024-8235, RHEL-55373)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-7
changelog:
  - qemu: Refactor default panic model (RHEL-56451)
  - qemu: Sometimes the default panic model doesn't exist (RHEL-56451)
  - qemu: Use pvpanic by default on aarch64 (RHEL-56451)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-7.1.el9_5
changelog:
  - qemu: migration: Pre-create QCOW2 images for non-shared storage with 0 allocation (RHEL-61177)
  - virTypedParamsFilter: Adjust return type and docs (RHEL-61177)
  - virTypedParamsGetStringList: Refactor and adjust docs (RHEL-61177)
  - virTypedParamsFilter: Introduce option to filter also by type (RHEL-61177)
  - virTypedParamsGetStringList: Ensure that returned array is NULL if there are no matching fields (RHEL-61177)
  - virTypedParamsGetStringList: Ensure that returned string list is NULL-terminated (RHEL-61177)
  - qemuMigrationSrcBeginPhaseBlockDirtyBitmaps: Use qemuMigrationAnyCopyDisk() (RHEL-61177)
  - qemu: migration: Don't log 'nmigrate_disks' (RHEL-61177)
  - qemu: migration: Avoid use of 'nmigration_disks' (RHEL-61177)
  - qemu: migration: Extract validation of disk target list (RHEL-61177)
  - qemu: migration: Remove 'nmigration_disks' variable from all places (RHEL-61177)
  - qemu: Introduce and wire in 'VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES' (RHEL-61177)
  - virsh: Add support for VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES migration parameter (RHEL-61177)
  - qemu: migration: Fix blockdev config with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES (RHEL-61177)
  - docs: Add warning about using a cleared image with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES_ZEROES (RHEL-61177)
  - util: Look for newer name of cpu wait time statistic (RHEL-61511)
  - vmx: Allow '*' to appear in VMX file keys (RHEL-58677)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-7.2.el9_5
changelog:
  - qemu: Add support for postcopy-recover-setup migration state (RHEL-63877)
  - qemu: Avoid false failure when resuming post-copy migration (RHEL-63877)


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Simone Caronni <negativo17@gmail.com> - 1.18.8-1
changelog:
  - Update to 1.18.8, switch to Meson.
  - Update docs installation.
  - Drop gcc/python-devel build requirements.
  - Avoid exclude directives in the files section so build ids are not duplicated.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.18.8-3
changelog:
  - Remove all symlinks in previous -devel subpackage in %pre_trans
    to ensure update transaction (#2123422)


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 0.42.2-3
changelog:
  - Bump pixman version 0.42.2
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2022-44638
  - Resolves: RHEL-5013


author: Petr Pisar <ppisar@redhat.com> - 2.2.0-2
changelog:
  - Fix an unitialized memory in tinfl_decompress_mem_to_callback() (GH#197)
  - Fix an unaligned memory access
  - Fix setting MZ_ZIP_GENERAL_PURPOSE_BIT_FLAG_UTF8
  - Fix an undefined behaviour in tinfl_decompress() (GH#216)
  - Fix mz_zip_reader_extract_to_heap() to read correct sizes (GH#220)


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


author: Pavel Raiskup <praiskup@redhat.com> 4.0-1
changelog:
  - cleanup the bootstrap image logic so it works if Mock is run in container
  - rebuild: kill orphans when mounted
  - bootstrap: delay the buildroot-in-bootstrap recursive mount
  - use shlex instead of pipes
  - fix bootstrap_* prefixed config_opts options
  - manual page: fix the "how to fill an issue" info
  - support for DNF5 added
  - use -N instead of -n for useradd (msuchy@redhat.com)
  - mock: don't use distutils copy_tree()


author: Pavel Raiskup <praiskup@redhat.com> 4.1-1
changelog:
  - bootstrap: fix certificate copying into the bootstrap chroot
  - don't strictly require any package manager
  - config: properly configure package manager commands
  - unify the fallback-detection for host/bootstrap/bootstrap-image
  - bind_mount plug-in: pre-create dest directory before bind-mounting a file
  - bootstrap: use DNF5 in package manager fallbacks
  - fix --dnf-cmd traceback with the new package_manager logic


author: Pavel Raiskup <praiskup@redhat.com> 5.2-1
changelog:
  - Fix '~' user source expansion for --copyout
  - Compatibility fix with EL 8
  - Log out the command-line arguments
  - Make sure that 'state' is always finished
  - README.md: cleaning up
  - Post-release administrivia


author: Pavel Raiskup <praiskup@redhat.com> 5.3-1
changelog:
  - orphanskill: log command line arguments of the terminated process
  - docs: migrate the community from IRC to Matrix
  - dnf5: don't output to a PTY (mail@evangoo.de)
  - new rpmautospec plugin (sgallagh@redhat.com, nils@redhat.com)
  - fix bash completion with multiple file arguments (orion@nwra.com)
  - only %prep once when running %generate_buildrequires multiple times (miro@hroncok.cz)
  - Dynamic BuildRequires: Prevent generation of unsatisfied dependency (miro@hroncok.cz)
  - Identify buildroot package management earlier (praiskup@redhat.com)
  - Dump also dnf5 info into logs


author: Pavel Raiskup <praiskup@redhat.com> 5.5-1
changelog:
  - allow chroot_scan to create archive instead of directory (tkopecek@redhat.com)
  - handle greedy options in Bash completion
  - fix root_cache invalidation (not) triggered by config changes
  - new '{{ repo_arch }}' Jinja2 template support
  - package_manager: disable %-interpolation in dnf.conf parser
  - only `chown` the in-chroot home files with the --rebuild mode
  - all non-privileged actions performed wiht EGID=135 (mock group)
  - mock newly requires a precise version of mock-filesystem
  - allow shadow-utils to run in buildroot by exception if necessary (martjack@redhat.com)
  - hw_info now reports file system type (vondruch@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 5.6-1
changelog:
  - scm: Open stdout in text mode for Git timestamp subprocesses
    (fedora.dm0@gmail.com)
  - always set ownership of homedir (but not recursively) (msuchy@redhat.com)
  - Do not create temporary Buildroot.tmpdir for disabled nosync
    (praiskup@redhat.com)
  - bash-completion: add mock-parse-buildlog (pastalian46@gmail.com)
  - Rewrites "original_name" method to check if "cls" has a "backmap"
    (nikitych@yandex.ru)
  - Don't use --allowerasing for more DNF commands (frostyx@email.cz)
  - bash-completion: pre-build the list of mock known options
    (praiskup@redhat.com)
  - Avoid Traceback for resultdir ENOSPC (praiskup@redhat.com)
  - Post-release administrivia (praiskup@redhat.com)
  - Fix Version in %changelogs (praiskup@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 5.7-1
changelog:
  - hermetic: new mode to do fully-offline builds
  - new --scrub-all-chroots option
  - make "dnf4" equivalent to "dnf"
  - chroot_scan: create result directory with appropriate permissions
  - chain: No need to re-create resultdir
  - de-duplicate the local-repo mountpoint in bootstrap
  - respect `nspawn_args` whenever `doChroot` is called
  - ensure --addrepo option also affects bootstrap
  - de-duplicate two opinionated doChroot() calls
  - show ccache stats at the end of the build (brian@interlinx.bc.ca)
  - add `debug` option to the ccache plugin (belegdol@fedoraproject.org)
  - add runtime dependency on fuse-overlayfs (frostyx@email.cz)
  - skip the "podman pull" for bootstrap when not needed
  - package_state: the installed_pkgs.log file now covers dynamic builddeps
  - don’t ship rpmautospec plugin with main package (nils@redhat.com)
  - clean up of macros referencing rhel7 (msuchy@redhat.com)
  - enable RPM sysusers integration (j1.kyjovsky@gmail.com)
  - add hashdir option to ccache plugin (belegdol@fedoraproject.org)
  - own /usr/share/doc/mock (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 5.8-1
changelog:
  - chroot_scan: make sure the tarball is owned by non-priv user
  - chroot_scan: use util.do to display command in --verbose
  - chroot_scan: correctly create the result directory


author: Pavel Raiskup <praiskup@redhat.com> 6.0-1
changelog:
  - export_buildroot_image: new plugin for OCI image exports
  - buildroot_image: allow using OCI images as the base for buildroot
  - hermetic: do not install buildroot via DNF
  - podman: typofix in library call error-message
  - use new digest for comparing podman images (tkopecek@redhat.com)
  - hermetic: do "podman pull" instead of "podman load" for bootstrap
  - podman: always tag/untag the images we work with locally
  - podman: generalize the logic so it is not bootstrap-only
  - avoid using the %pre scriptlet if possible
  - hermetic: retry on failed network requests (rbean@redhat.com)
  - hermetic: more robust retry mechanism for downloading rpms (tkopecek@redhat.com)
  - chroot_scan: bugfix - create chroot_scan/ correctly in buildroot.resultdir
  - mock: drop the unused create_default_route_in_container.sh script
  - mock: make --dnf-cmd compatible with DNF5 (frostyx@email.cz)
  - mock: add a real source URL into %Source
  - the dnf_builddep_opts made working again (addisu@openrobotics.org)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com>) - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Eduard Basov <ebasov@msvsphere-os.ru> - 40.9-15.inferit.1
changelog:
  - Added fractional scaling support for X11
    https://gitlab.gnome.org/3v1n0/mutter/commits/xrandr-scaling
    Scaling appears in the user interface ( 100%, 125%, 150%, 175%, 200% )


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
changelog:
  - Rebase to open-vm-tools 12.2.0 [bz#2177086]
  - Resolves: bz#2177086
    ([ESXi][RHEL9]open-vm-tools version 12.2.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-2
changelog:
  - ovt-Use-https-instead-of-http-for-documentation-links.patch [bz#2208160]
  - Resolves: bz#2208160
    ([ESXi][RHEL9] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215566]
  - Resolves: bz#2215566
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-br-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebaer to open-vm-tools 12.2.5
  - Resolves: bz#2214862
    ([ESXi][RHEL9]open-vm-tools version 12.2.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236544]
  - Resolves: bz#2236544
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2446]
  - Resolves: RHEL-2446
    ([RHEL9.3][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5-1 [RHEL-15058]
  - Fixed CVE-2023-34058 [RHEL-14653]
  - Fixed CVE-2023-34059 [RHEL-14687]
  - Resolves: RHEL-15058
    ([ESXi][RHEL9]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14653
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-9.4.0])
  - Resolves: RHEL-14687
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-9.4.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-15346]
  - Resolves: RHEL-15346
    (Add Restart=on-failure to vmtoolsd.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30341
  - Resolves: RHEL-30341
    ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-35543]
  - Resolves: RHEL-35543
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)


author: Sérgio Basto <sergio@serjux.com> - 4.6.0-1
changelog:
  - Update opencv to 4.6.0 (#2094603)
  - Remove hack to keep old so version
  - Adapt spec to new so version ${OPENCV_VERSION_MAJOR}${OPENCV_VERSION_MINOR_2DIGITS}
    and drop OPENCV_VERSION_PATCH


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Adam Williamson <awilliam@redhat.com> - 4.6^20220615git8ea2059-1
changelog:
  - Update to latest git, re-sync spec
  - Backport PR #4710 to fix perl 5.36 warnings on @_ use in signed subs


author: Adam Williamson <awilliam@redhat.com> - 4.6^20220615git8ea2059-3
changelog:
  - Backport PR #4784 to fix a worker startup bug
  - Backport PR #4785 to add pagure.io and GNOME gitlab trackers


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: David Sommerseth <davids@openvpn.net> - 2.5.9-2
changelog:
  - Fix false exit status on pre runtime scriptlet (Elkhan Mammadli <elkhan@almalinux.org>, RHBZ#2239722)


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.5-2
changelog:
  - Fixed a regression causing crash in `pcs resource move` command (broken since pcs-0.11.5)
  - Resolves: rhbz#2210855


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.6-1
changelog:
  - Rebased to the latest upstream sources (see CHANGELOG.md)
  - Updated bundled rubygems: puma, tilt
  - Resolves: rhbz#1465829 rhbz#2163440 rhbz#2168155


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.6-2
changelog:
  - Added BuildRequires: debugedit - for generating MiniDebugInfo - triggered by removing find-debuginfo.sh from rpm
  - Make use of filters when extracting tarballs to enhance security if provided by Python (pcs config restore command)
  - Exporting constraints with rules in form of pcs commands now escapes # and fixes spaces in dates to make the commands valid
  - Constraints containing options unsupported by pcs are not exported and a warning is printed instead
  - Using spaces in dates in location constraint rules is deprecated
  - Resolves: rhbz#2163953 rhbz#2216434 rhbz#2217850 rhbz#2219407


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.6-3
changelog:
  - Refreshing any page in pcs-web-ui no longer causes it to display a blank page
  - Resolves: rhbz#2222788


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.6-6
changelog:
  - Rebased to the latest upstream sources (see CHANGELOG.md)
    Resolves: RHEL-7582, RHEL-7583, RHEL-7669, RHEL-7672, RHEL-7697, RHEL-7698, RHEL-7700, RHEL-7703, RHEL-7719, RHEL-7725, RHEL-7730, RHEL-7738, RHEL-7739, RHEL-7740, RHEL-7744, RHEL-7746
  - TLS cipher setting in pcsd now follows system-wide crypto policies by default
    Resolves: RHEL-7724
  - Tightened permissions of bundled rubygems to be 755 or stricter
    Resolves: RHEL-7716


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.7-2
changelog:
  - Fixed CVE-2024-25126, CVE-2024-26141, CVE-2024-26146 in bundled dependency rack
    Resolves: RHEL-26446, RHEL-26448, RHEL-26450


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-28
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951271 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1:0.9.4-23
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951270 replace apache-commons-logging with java.util.logging


author: Michal Josef Špaček <mspacek@redhat.com> - 1.26-436
changelog:
  - Package tests
  - Update license to SPDX format
  - Use /builddir/build/BUILDROOT/perl-B-Debug-1.26-437.el9.noarch macro


author: Paul Howarth <paul@city-fan.org> - 0.400002-13
changelog:
  - Avoid optional test dependency perl(Moo) for EPEL builds
  - Use author-independent source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 2.27-1
changelog:
  - Update to 2.27
    - Add the option of passing a hashref to the constructor, where it is
      turned into an object of the class (see POD under new([$config]) for
      details)
    - Move test.conf back into t/, where it was years ago, before someone tried
      to remove all uses of File::Spec; since File::Spec is used often now,
      there is no point in keeping test.conf in the root directory of the distro


author: Paul Howarth <paul@city-fan.org> - 4.34-1
changelog:
  - Update to 4.34
    - Fix a security issue, decoding hash keys without ending ':' (GH#208)
    - Check all bare hash keys for utf8 (GH#209)
    - Improve overload warnings (GH#205)
    - Fix a croak leak (GH#206)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.4.0-17
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify Digest::MD5 versioned dependency generation using a patch
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.4.1-1
changelog:
  - Update to 1.41
    - Adopt new repo structure - see:
      http://savage.net.au/Ron/html/My.Workflow.for.Building.Distros.html
    - Reformat Makefile.PL
    - Add t/00.*
    - Update POD to change RT to GitHub
  - Package new LICENSE file


author: Michal Josef Spacek <mspacek@redhat.com> - 1:1.79-1
changelog:
  - Update to 1.79
    - Fix too-strict type checking for time zones: this module now uses the same
      check as DateTime itself, which allows for things that don't subclass
      DateTime::TimeZone as long as they provide the same API (GH#30) (rhbz#1964546)


author: Paul Howarth <paul@city-fan.org> - 0.0011-1
changelog:
  - Update to 0.0011
    - @INC hook should die directly (CPAN RT#120220)
    - Match core error more closely (CPAN RT#120221)
    - Add -quiet option to suppress some notices


author: Paul Howarth <paul@city-fan.org> - 0.0012-1
changelog:
  - Update to 0.0012
    - Add -lexically argument to import() to support hiding modules just during
      the current scope


author: Paul Howarth <paul@city-fan.org> - 0.039-15
changelog:
  - Use author-independent URLs
  - Work around ExtUtils::CBuilder in EL-8 having no dependency on gcc or gcc-c++
    (#1547165)


author: Emmanuel Seyman <emmanuel@seyman.fr> - 1.01-1
changelog:
  - Update to 1.01
  - Replace %{__perl} with /usr/bin/perl
  - Use %{make_build} and %{make_install} where appropriate
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Paul Howarth <paul@city-fan.org> - 0.09-19
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Fix permissions verbosely
    - Make %files list more explicit


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.020-1
changelog:
  - Update to 0.020
    - Correct and optimize the computation of logical column position (the one
      that takes account of tabs)


author: Paul Howarth <paul@city-fan.org> - 0.021-1
changelog:
  - Update to 0.021
    - Recognize postfix deref in '@{[ ... ]}' for determining minimum Perl
      version; this recognizes all forms of postfix dereference, including ->%*,
      ->&*, and ->** (NOTE: for now, this remains a
      PPIx::QuoteLike::Token::Interpolation)
    - Require PPI 1.238 for postfix deref support, and prune code that dealt with
      PPI's old behavior
    - Postfix %*, &*, and ** do not interpolate
    - Correct perl_version_introduced() for interpolated postfix scalar deref


author: Paul Howarth <paul@city-fan.org> - 0.022-1
changelog:
  - Update to 0.022
    - Remove 'postderef' argument to new(); postfix dereference is always
      recognized


author: Paul Howarth <paul@city-fan.org> - 0.023-1
changelog:
  - Update to 0.023 (rhbz#2127475)
    - Update discouragement notice for variables(), and add a TODO in
      t/variables.t for why
    - Correct normalization of ${^FOO} for PPI: if the caret is present the
      braces are not removed


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
  - Update to 0.18
    - Use Sub::Util instead of Sub::Name, which is part of Scalar-List-Utils,
      which itself is already a dependency (GH#3)
  - Use author-independent source URL
  - Use SPDX-format license tag
  - Use %license unconditionally
  - Package CODE_OF_CONDUCT.md
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.37-14
changelog:
  - Switch to ExtUtils::MakeMaker flow
  - Don't try to run author tests during package build
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.142-1
changelog:
  - Update to 1.142 (rhbz#2149154)
    - This is the last version of Perl::Critic that will run on Perl 5.6.1; the
      next release will require Perl 5.10.1
    New Features
    - Add new policy InputOutput::ProhibitBarewordDirHandles, comparable to
      ProhibitBarewordFilehandles (GH#912)
    - References::ProhibitDoubleSigils policy now allows for Perl's postfix
      dereference syntax and does not report a policy violation (GH#578)
    - Added Test::Class::Moose and MooseX::MethodAttributes::Role to the list of
      modules that are equivalent to "use strict" (GH#808, GH#886)
    - Subroutines::RequireArgUnpacking now detects anonymous subroutines with
      attributes, prototypes or signatures (GH#684)
    - ProhibitVoidMap and ProhibitVoidGrep now detect void context inside subs
      (GH#905), such as: sub { map { foo($_) } @list; return }
    - RequireArgUnpacking now allows a closure to be recognized as a way that
      subroutine arguments can be unpacked; this is specified with an optional
      allow_closures configuration option (GH#737)
    - ProhibitTwoArgOpen now disallows one-arg opens as well; also, it no longer
      allows two-arg opening of STDIN/STDOUT/STDERR (GH#652, GH#653)
    Fixes
    - ProhibitLeadingZeros would not handle sysopen and lexical variables
      correctly; this has been fixed (GH#789)
    Documentation
    - We note that the any() function is available in both List::MoreUtils and
      List::SomeUtils
    - Added instructions to perlcritic on how to integrate with Visual Studio
      Code
    Internals
    - Switch to using List::SomeUtils instead of List::MoreUtils
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.144-1
changelog:
  - Update to 1.144 (rhbz#2151095)
    - Perl::Critic now requires Perl 5.10.1
    New features
    - The ProhibitAugmentedAssignmentInDeclaration policy now allows augmented
      assignments to "our" variables, if the allow_our option is enabled (GH#993)
    - ProhibitExplicitISA now recommends "use parent" instead of "use base"
      (GH#987)
    - RequireUseWarnings now recognizes that "use v5.36" implies warnings (GH#984)
    - Subroutines::ProhibitNestedSubs now allows that lexical subroutines can be
      inside other subroutines (GH#946, GH#971, GH#972)
    - RequireUseStrict now knows that Test::Spec enables it (GH#906)
    - ProhibitUnusedCapture now understands @{^CAPTURE} and %{^CAPTURE_ALL} that
      were added in Perl 5.26.0 (GH#778)
    - Allow numeric operators on special number strings 'NaN' and 'inf' (GH#803)
    Fixes
    - Miscellanea::ProhibitUselessNoCritic no longer filters out errors about
      itself, just as Miscellanea::ProhibitUnrestrictedNoCritic cannot (GH#939)
    - Fixed GH#878: bareword filehandle dies on "open(CHECK, '/foo');"
    Internals
    - Updated to using Perl 5.10.1; starting migrating to Perl 5.10-isms like
      defined-or
    Documentation
    - Updated some outdated docs in Perl::Critic::Utils (GH#951)


author: Paul Howarth <paul@city-fan.org> - 1.146-1
changelog:
  - Update to 1.146 (rhbz#2155727)
    New features
    - ProhibitBarewordDirHandles now checks for sysopen as well as open (GH#732)
    - Added a Dockerfile in the extras/ directory for those who want to run P::C
      in a container (GH#832)
    - Subroutines::ProhibitBuiltinHomonyms now can take an "allows" parameter to
      specify subroutines that won't violate the policy (GH#14, GH#932)
    - ProhibitStringyEval now allows package declarations in evals when
      allow_includes = true; this is a common way packages are declared (GH#908)
    Bug Fixes
    - Fixed some problems with how Perl::Critic determined scope (GH#793)
    - Fixed improper violation for lexical subroutines in
      Subroutines::ProhibitBuiltinHomonyms (GH#973, GH#955, GH#546)
    - ValuesAndExpressions::RequireNumberSeparators no longer complains if your
      version numbers do not have number separators in them (GH#856, GH#904)
    - Fixed a false positive with split() in ProhibitUnusedCapture (GH#888)
    Internals
    - We no longer use or need IO::String (GH#997)
    - Removed requirements and mentions of modules no longer used:
      - Fatal
      - IO::String
      - IPC::Open2
      - Pod::Parser
      - Task::Weaken


author: Paul Howarth <paul@city-fan.org> - 1.148-1
changelog:
  - Update to 1.148 (rhbz#2159041)
    Possible breakage
    - Removed Perl::Critic::Utils::DataConversion; any add-on policies that used
      it will need to copy the functions from there into their own code
    Documentation
    - ProhibitCascadingIfElse no longer suggests using given/when
    Internals
    - We no longer require Test::Deep for testing
    - Test::Kwalitee is now only recommended, not required
    - Random micro-optimizations, like using hashes for array contents checking,
      and using any() instead of calling grep as a boolean


author: Paul Howarth <paul@city-fan.org> - 1.150-1
changelog:
  - Update to 1.150 (rhnz#2175475)
    Enhancements
    - Added Test::Builder and Text::Wrap to the list of default exceptions in
      Variables::ProhibitPackageVars (GH#1025)
    Internals
    - We now use PPIx::Utils instead of PPIx::Utilities, which is more recently
      maintained


author: Paul Howarth <paul@city-fan.org> - 4.025-1
changelog:
  - Update to 4.025
    - Changes to the FREEZE/THAW mechanism
      - Remove the part that says that FREEZE cannot return a list; it can, and
        we have supported it for a very long time, although I have not checked
        how far back this support goes
      - If you use the FREEZE/THAW API's you should upgrade to this version
    - Test fixes for t/020_sort_keys.t hanging on some perls that do not come
      bundled with Hash::Util


author: Paul Howarth <paul@city-fan.org> - 5.001-1
changelog:
  - Update to 5.001
    - First official release of protocol 5
      - Better support for non-standard NV types
      - Support for the new Perl 5.36 bools
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 5.002-1
changelog:
  - Update to 5.002 (rhbz#2166280)
    - Test compatibility fixes with version 3 and earlier
    - Test compatibility fixes when no perl is already installed
    - Add t/195_backcompat.t to check if the latest decoder will seamlessly
      handle reading output from older versions
    - Ensure that Encoder depends on the correct version of the Decoder
    - Fix up Decoder tests to run on perl 5.8, which has no defined-or


author: Paul Howarth <paul@city-fan.org> - 5.003-1
changelog:
  - Update to 5.003 (rhbz#2168015)
    - Update Miniz to 3.0.2, Zstd to 1.5.2 and Devel::CheckLib to 1.16
      (note: in this package we use the system versions of these)
    - Assorted build fixes related to these updates
    - OpenBSD build fixes


author: Paul Howarth <paul@city-fan.org> - 4.023-1
changelog:
  - Update to 4.023
    - Make it possible to upgrade with passing tests when using
      Sereal::Decoder 4.015-4.019 on threaded debugging perls


author: Paul Howarth <paul@city-fan.org> - 5.002-1
changelog:
  - Update to 5.002 (rhbz#2166281)
    - Fix up Decoder tests to run on perl 5.8, which has no defined-or
    - Ensure that Encoder depends on the correct version of the Decoder
    - Test compatibility fixes when no perl is already installed
    - Add t/195_backcompat.t to check if the latest decoder will seamlessly
      handle reading output from older versions
    - Test compatibility fixes with version 3 and earlier


author: Paul Howarth <paul@city-fan.org> - 5.003-1
changelog:
  - Update to 5.003 (rhbz#2168016)
    - Update Miniz to 3.0.2, Zstd to 1.5.2 and Devel::CheckLib to 1.16
      (note: this package uses the system versions of these)
    - Assorted build fixes related to these updates
    - OpenBSD build fixes


author: Tom Stellard <tstellar@redhat.com> - 1.8-3
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 2.100-1
changelog:
  - Update to 2.100
    - Declare vars with our instead of use vars (GH#7)
    - Quote $VERSION to preserve formatting (GH#6)
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.25-24
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.16-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.44.4-1
changelog:
  - Update to 1.444
    - Change the file_writeable_ok tests to file_writable_ok, which is the
      correct spelling; the old names work but now warn to use the new name
    - Some updates to refresh the tests
    - Start mirroring Test2::Tools::File so we support the same names
    - Deprecated directories in tests appropriate for only plain files; it's a
      diag() message now but will be a test failure later
    - Merge some test additions from Desmond Daignault (GH#20)
    - Remove Travis, add GitHub actions
    - Add file_is_symlink_not_ok
  - License changed to Artistic 2.0
  - Use author-independent source URL
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.38-1
changelog:
  - Update to 0.38 (rhbz#2129537)
    - Stop permanently altering Test::More's export list (CPAN RT#73299)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.05-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.02-1
changelog:
  - Update to 1.02
    - Fix building on Perl without "." in @INC (CPAN RT#120706)
    - Fix to link to the GitHub repo (GH#3)
  - Use author-independent source URL
  - Fix permissions verbosely
  - Drop redundant use of %{?perl_default_filter}


author: Paul Howarth <paul@city-fan.org> - 0.08-1
changelog:
  - Update to 0.08
    - Use IPC::Run3 instead of Capture::Tiny for all tests, which fixes an issue
      with the 'tap-bug-in-test2.t' on Windows (CPAN RT#129294)


author: Paul Howarth <paul@city-fan.org> - 0.09-1
changelog:
  - Update to 0.09
    - Don't emit a failing test if there is a warning _after_ done_testing() is
      called (based on GH#3)


author: Emmanuel Seyman <emmanuel@seyman.fr> - 1.6.5-23
changelog:
  - Use an absolute path for perl everywhere
  - Use %{make_build} and %{make_install} where appropriate
  - Pass NO_PERLLOCAL to Makefile.PL


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Paul Howarth <paul@city-fan.org> - 20220215-1
changelog:
  - Update to 20220215 (see CHANGES.md for details)
  - Add workaround for bogus dependencies generated on EL-7


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.3.6-1
changelog:
  - pkgset: Report better error when module is missing an arch (lsedlar)
  - osbuild: add support for building ostree artifacts (ondrej)
  - ostree: Add unified core mode for compose in rpm-ostree (tim)
  - createiso: Make ISO level more granular (lsedlar)
  - Create DVDs with xorriso (lsedlar)
  - Fix compatibility with jsonschema >= 4.0.0 (lsedlar)
  - Fix black complaint (lsedlar)
  - doc: fix osbuild's image_types field name (ondrej)
  - Convert _ssh_run output to str for python3 (hlin)
  - Print more logs for git_ls_remote (hlin)
  - Log time taken of each phase (hlin)
  - Avoid crash when loading pickle file failed (hlin)
  - extra_isos: Fix detection of changed packages (lsedlar)


author: Ondřej Nosek <onosek@redhat.com> - 4.3.7-1
changelog:
  - osbuild: test passing of rich repos from configuration (lsedlar)
  - osbuild: support specifying `package_sets` for repos (thozza)
  - osbuild: don't use `util.get_repo_urls()` (thozza)
  - osbuild: update schema and config documentation (thozza)
  - Speed up tests by 30 seconds (lsedlar)
  - Stop sending compose paths to CTS (lsedlar)
  - Report errors from CTS (lsedlar)
  - createiso: Create Joliet tree with xorriso (lsedlar)
  - init: Filter comps for modular variants with tags (lsedlar)
  - Retry failed cts requests (hlin)
  - Ignore existing kerberos ticket for CTS auth (lsedlar)
  - osbuild: support specifying upload_options (thozza)
  - osbuild: accept only a single image type in the configuration (thozza)
  - Add Jenkinsfile for CI (hlin)
  - profiler: Flush stdout before printing (lsedlar)


author: Haibo Lin <hlin@redhat.com> - 4.3.8-1
changelog:
  - createiso: Update possibly changed file on DVD (lsedlar)
  - pkgset: Stop reuse if configuration changed (lsedlar)
  - Allow disabling inheriting ExcludeArch to noarch packages (lsedlar)
  - pkgset: Support extra builds with no tags (lsedlar)
  - buildinstall: Avoid pointlessly tweaking the boot images (lsedlar)
  - Prevent to reuse if unsigned packages are allowed (hlin)
  - Pass parent id/respin id to CTS (lsedlar)
  - Exclude existing files in boot.iso (hlin)
  - image-build/osbuild: Pull ISOs into the compose (lsedlar)
  - Retry 401 error from CTS (lsedlar)
  - gather: Better detection of debuginfo in lookaside (lsedlar)
  - Log versions of all installed packages (hlin)
  - Use authentication for all CTS calls (lsedlar)
  - Fix black complaints (lsedlar)
  - Add vhd.gz extension to compressed VHD images (lsedlar)
  - Add vhd-compressed image type (lsedlar)
  - Update to work with latest mock (lsedlar)
  - Default bztar format for sdist command (onosek)


author: Eugene Zamriy <ezamriy@msvsphere.ru> - 4.3.8-1.inferit
changelog:
  - buildinstall: Added bootloader configs charset detection patch
  - Added python3-chardet requirement


author: Tomas Orsava <torsava@redhat.com> - 1.14.5-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> 0.11.0-4
changelog:
  - Port to pyproject-rpm-macros
  - Add metapackage for coverage_plugin extra
  - Update upstream URL
  - Hardlink identical entry point scripts


author: Benjamin A. Beasley <code@musicinmybrain.net> 0.11.0-5
changelog:
  - Build Sphinx documentation as a PDF
  - Package from the GitHub archive instead of the PyPI sdist
  - Add a -doc subpackage
  - Use tox for running tests


author: Benjamin A. Beasley <code@musicinmybrain.net> 0.11.0-7
changelog:
  - A few dependency fixes
  - Drop versioning on sphinx dependency (matching backported commit fb770f4)
  - Drop spurious sphinx-issues BR
  - Stop generating unwanted BR’s from the “dev” extra via tox


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Steve Traylen <steve.traylen@cern.ch> - 4.10.0-3
changelog:
  - New bcond flag to disable/enable soupsieve dependency
  - New bcond flag to disable/enable testing
  - Test module loading in check section


author: Miro Hrončok <mhroncok@redhat.com> - 1:1.1-8
changelog:
  - Use standard library unittest.mock instead of 3rd party mock
  - Add subpackages with Python extras: lxml genshi chardet all


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.5-7
changelog:
  - Subpackage python2-mock has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.1-4
changelog:
  - Fix nose2-0.12.0 compatibility: do not use the python-versioned entry point
    for nose2, e.g. nose2-3.11


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.1-5
changelog:
  - Update License field to SPDX
  - Drop dependency on deprecated python-nose
  - Port to pyproject-rpm-macros


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-2
changelog:
  - kvm-hw-arm-virt-Fix-spurious-call-to-arm_virt_compat_set.patch [RHEL-34945]
  - kvm-Revert-x86-rhel-9.4.0-machine-type-compat-fix.patch [RHEL-30362]
  - Resolves: RHEL-34945
    ([aarch64, kvm-unit-tests] all tests tagged as FAIL [qemu-kvm: GLib: g_ptr_array_add: assertion 'rarray' failed] )
  - Resolves: RHEL-30362
    (Check/fix machine type compatibility for QEMU 9.0.0 [x86_64][rhel-9.5.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-3
changelog:
  - kvm-nbd-server-do-not-poll-within-a-coroutine-context.patch [RHEL-33440]
  - kvm-nbd-server-Mark-negotiation-functions-as-coroutine_f.patch [RHEL-33440]
  - Resolves: RHEL-33440
    (Qemu hang when quit dst vm after storage migration(nbd+tls))


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-4
changelog:
  - kvm-qio-Inherit-follow_coroutine_ctx-across-TLS.patch [RHEL-33440]
  - kvm-iotests-test-NBD-TLS-iothread.patch [RHEL-33440]
  - kvm-virtio-gpu-fix-v2-migration.patch [RHEL-34621]
  - kvm-rhel-9.4.0-machine-type-compat-for-virtio-gpu-migrat.patch [RHEL-34621]
  - Resolves: RHEL-33440
    (Qemu hang when quit dst vm after storage migration(nbd+tls))
  - Resolves: RHEL-34621
    ([RHEL9.5.0][stable_guest_abi]Failed to migrate VM with (qemu) qemu-kvm: Missing section footer for 0000:00:01.0/virtio-gpu qemu-kvm: load of migration failed: Invalid argument)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-5
changelog:
  - kvm-linux-aio-add-IO_CMD_FDSYNC-command-support.patch [RHEL-42411]
  - kvm-Revert-monitor-use-aio_co_reschedule_self.patch [RHEL-34618 RHEL-38697]
  - kvm-aio-warn-about-iohandler_ctx-special-casing.patch [RHEL-34618 RHEL-38697]
  - kvm-block-crypto-create-ciphers-on-demand.patch [RHEL-36159]
  - kvm-crypto-block-drop-qcrypto_block_open-n_threads-argum.patch [RHEL-36159]
  - Resolves: RHEL-42411
    (qemu-kvm: linux-aio: add support for IO_CMD_FDSYNC command)
  - Resolves: RHEL-34618
    (aio=io_uring: Assertion failure `luringcb->co->ctx == s->aio_context' with block_resize)
  - Resolves: RHEL-38697
    (aio=native: Assertion failure `laiocb->co->ctx == laiocb->ctx->aio_context' with block_resize)
  - Resolves: RHEL-36159
    (qemu crash on Assertion `block->n_free_ciphers > 0' failed in guest installation with luks and iothread-vq-mapping)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-6
changelog:
  - kvm-qcow2-Don-t-open-data_file-with-BDRV_O_NO_IO.patch [RHEL-35611]
  - kvm-iotests-244-Don-t-store-data-file-with-protocol-in-i.patch [RHEL-35611]
  - kvm-iotests-270-Don-t-store-data-file-with-json-prefix-i.patch [RHEL-35611]
  - kvm-block-Parse-filenames-only-when-explicitly-requested.patch [RHEL-35611]
  - Resolves: RHEL-35611
    (CVE-2024-4467 qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-7
changelog:
  - kvm-hw-virtio-Fix-the-de-initialization-of-vhost-user-de.patch [RHEL-40708]
  - kvm-hw-arm-virt-Avoid-unexpected-warning-from-Linux-gues.patch [RHEL-39936]
  - Resolves: RHEL-40708
    ([RHEL9.5.0][virtio_fs][s390x] after hot-unplug the vhost-user-fs-ccw device, the device is failed to hot-plug again )
  - Resolves: RHEL-39936
    (ARCH_DMA_MINALIGN smaller than CTR_EL0.CWG (128 < 256) on FUJITSU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-8
changelog:
  - kvm-introduce-pc_rhel_9_5_compat.patch [RHEL-39544]
  - kvm-target-i386-add-guest-phys-bits-cpu-property.patch [RHEL-39544]
  - kvm-kvm-add-support-for-guest-physical-bits.patch [RHEL-39544]
  - kvm-i386-kvm-Move-architectural-CPUID-leaf-generation-to.patch [RHEL-39544]
  - kvm-target-i386-Introduce-Icelake-Server-v7-to-enable-TS.patch [RHEL-39544]
  - kvm-target-i386-Add-new-CPU-model-SierraForest.patch [RHEL-39544]
  - kvm-target-i386-Export-RFDS-bit-to-guests.patch [RHEL-39544]
  - kvm-pci-host-q35-Move-PAM-initialization-above-SMRAM-ini.patch [RHEL-39544]
  - kvm-q35-Introduce-smm_ranges-property-for-q35-pci-host.patch [RHEL-39544]
  - kvm-hw-i386-acpi-Set-PCAT_COMPAT-bit-only-when-pic-is-no.patch [RHEL-39544]
  - kvm-confidential-guest-support-Add-kvm_init-and-kvm_rese.patch [RHEL-39544]
  - kvm-i386-sev-Switch-to-use-confidential_guest_kvm_init.patch [RHEL-39544]
  - kvm-ppc-pef-switch-to-use-confidential_guest_kvm_init-re.patch [RHEL-39544]
  - kvm-s390-Switch-to-use-confidential_guest_kvm_init.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers-Add-setup_data.h-to-imp.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers-Add-bits.h-to-file-impo.patch [RHEL-39544]
  - kvm-linux-headers-update-to-current-kvm-next.patch [RHEL-39544]
  - kvm-runstate-skip-initial-CPU-reset-if-reset-is-not-actu.patch [RHEL-39544]
  - kvm-KVM-track-whether-guest-state-is-encrypted.patch [RHEL-39544]
  - kvm-KVM-remove-kvm_arch_cpu_check_are_resettable.patch [RHEL-39544]
  - kvm-target-i386-introduce-x86-confidential-guest.patch [RHEL-39544]
  - kvm-target-i386-Implement-mc-kvm_type-to-get-VM-type.patch [RHEL-39544]
  - kvm-target-i386-SEV-use-KVM_SEV_INIT2-if-possible.patch [RHEL-39544]
  - kvm-i386-sev-Add-legacy-vm-type-parameter-for-SEV-guest-.patch [RHEL-39544]
  - kvm-hw-i386-sev-Use-legacy-SEV-VM-types-for-older-machin.patch [RHEL-39544]
  - kvm-trace-kvm-Split-address-space-and-slot-id-in-trace_k.patch [RHEL-39544]
  - kvm-kvm-Introduce-support-for-memory_attributes.patch [RHEL-39544]
  - kvm-RAMBlock-Add-support-of-KVM-private-guest-memfd.patch [RHEL-39544]
  - kvm-kvm-Enable-KVM_SET_USER_MEMORY_REGION2-for-memslot.patch [RHEL-39544]
  - kvm-kvm-memory-Make-memory-type-private-by-default-if-it.patch [RHEL-39544]
  - kvm-HostMem-Add-mechanism-to-opt-in-kvm-guest-memfd-via-.patch [RHEL-39544]
  - kvm-RAMBlock-make-guest_memfd-require-uncoordinated-disc.patch [RHEL-39544]
  - kvm-physmem-Introduce-ram_block_discard_guest_memfd_rang.patch [RHEL-39544]
  - kvm-kvm-handle-KVM_EXIT_MEMORY_FAULT.patch [RHEL-39544]
  - kvm-kvm-tdx-Don-t-complain-when-converting-vMMIO-region-.patch [RHEL-39544]
  - kvm-kvm-tdx-Ignore-memory-conversion-to-shared-of-unassi.patch [RHEL-39544]
  - kvm-hw-i386-x86-Eliminate-two-if-statements-in-x86_bios_.patch [RHEL-39544]
  - kvm-hw-i386-Have-x86_bios_rom_init-take-X86MachineState-.patch [RHEL-39544]
  - kvm-hw-i386-pc_sysfw-Remove-unused-parameter-from-pc_isa.patch [RHEL-39544]
  - kvm-hw-i386-x86-Don-t-leak-isa-bios-memory-regions.patch [RHEL-39544]
  - kvm-hw-i386-x86-Don-t-leak-pc.bios-memory-region.patch [RHEL-39544]
  - kvm-hw-i386-x86-Extract-x86_isa_bios_init-from-x86_bios_.patch [RHEL-39544]
  - kvm-hw-i386-pc_sysfw-Alias-rather-than-copy-isa-bios-reg.patch [RHEL-39544]
  - kvm-i386-correctly-select-code-in-hw-i386-that-depends-o.patch [RHEL-39544]
  - kvm-i386-pc-remove-unnecessary-MachineClass-overrides.patch [RHEL-39544]
  - kvm-hw-i386-split-x86.c-in-multiple-parts.patch [RHEL-39544]
  - kvm-scripts-update-linux-header.sh-be-more-src-tree-frie.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers.sh-Remove-temporary-dir.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers.sh-Fix-the-path-of-setu.patch [RHEL-39544]
  - kvm-update-linux-headers-fix-forwarding-to-asm-generic-h.patch [RHEL-39544]
  - kvm-update-linux-headers-move-pvpanic.h-to-correct-direc.patch [RHEL-39544]
  - kvm-linux-headers-Update-to-current-kvm-next.patch [RHEL-39544]
  - kvm-update-linux-headers-import-linux-kvm_para.h-header.patch [RHEL-39544]
  - kvm-machine-allow-early-use-of-machine_require_guest_mem.patch [RHEL-39544]
  - kvm-i386-sev-Replace-error_report-with-error_setg.patch [RHEL-39544]
  - kvm-i386-sev-Introduce-sev-common-type-to-encapsulate-co.patch [RHEL-39544]
  - kvm-i386-sev-Move-sev_launch_update-to-separate-class-me.patch [RHEL-39544]
  - kvm-i386-sev-Move-sev_launch_finish-to-separate-class-me.patch [RHEL-39544]
  - kvm-i386-sev-Introduce-sev-snp-guest-object.patch [RHEL-39544]
  - kvm-i386-sev-Add-a-sev_snp_enabled-helper.patch [RHEL-39544]
  - kvm-i386-sev-Add-sev_kvm_init-override-for-SEV-class.patch [RHEL-39544]
  - kvm-i386-sev-Add-snp_kvm_init-override-for-SNP-class.patch [RHEL-39544]
  - kvm-i386-cpu-Set-SEV-SNP-CPUID-bit-when-SNP-enabled.patch [RHEL-39544]
  - kvm-i386-sev-Don-t-return-launch-measurements-for-SEV-SN.patch [RHEL-39544]
  - kvm-i386-sev-Add-a-class-method-to-determine-KVM-VM-type.patch [RHEL-39544]
  - kvm-i386-sev-Update-query-sev-QAPI-format-to-handle-SEV-.patch [RHEL-39544]
  - kvm-i386-sev-Add-the-SNP-launch-start-context.patch [RHEL-39544]
  - kvm-i386-sev-Add-handling-to-encrypt-finalize-guest-laun.patch [RHEL-39544]
  - kvm-i386-sev-Set-CPU-state-to-protected-once-SNP-guest-p.patch [RHEL-39544]
  - kvm-hw-i386-sev-Add-function-to-get-SEV-metadata-from-OV.patch [RHEL-39544]
  - kvm-i386-sev-Add-support-for-populating-OVMF-metadata-pa.patch [RHEL-39544]
  - kvm-i386-sev-Add-support-for-SNP-CPUID-validation.patch [RHEL-39544]
  - kvm-hw-i386-sev-Add-support-to-encrypt-BIOS-when-SEV-SNP.patch [RHEL-39544]
  - kvm-i386-sev-Invoke-launch_updata_data-for-SEV-class.patch [RHEL-39544]
  - kvm-i386-sev-Invoke-launch_updata_data-for-SNP-class.patch [RHEL-39544]
  - kvm-i386-kvm-Add-KVM_EXIT_HYPERCALL-handling-for-KVM_HC_.patch [RHEL-39544]
  - kvm-i386-sev-Enable-KVM_HC_MAP_GPA_RANGE-hcall-for-SNP-g.patch [RHEL-39544]
  - kvm-i386-sev-Extract-build_kernel_loader_hashes.patch [RHEL-39544]
  - kvm-i386-sev-Reorder-struct-declarations.patch [RHEL-39544]
  - kvm-i386-sev-Allow-measured-direct-kernel-boot-on-SNP.patch [RHEL-39544]
  - kvm-memory-Introduce-memory_region_init_ram_guest_memfd.patch [RHEL-39544]
  - kvm-hw-i386-sev-Use-guest_memfd-for-legacy-ROMs.patch [RHEL-39544]
  - kvm-hw-i386-Add-support-for-loading-BIOS-using-guest_mem.patch [RHEL-39544]
  - kvm-i386-sev-fix-unreachable-code-coverity-issue.patch [RHEL-39544]
  - kvm-i386-sev-Move-SEV_COMMON-null-check-before-dereferen.patch [RHEL-39544]
  - kvm-i386-sev-Return-when-sev_common-is-null.patch [RHEL-39544]
  - kvm-target-i386-SEV-fix-formatting-of-CPUID-mismatch-mes.patch [RHEL-39544]
  - kvm-i386-sev-Fix-error-message-in-sev_get_capabilities.patch [RHEL-39544]
  - kvm-i386-sev-Fallback-to-the-default-SEV-device-if-none-.patch [RHEL-39544]
  - kvm-i386-sev-Don-t-allow-automatic-fallback-to-legacy-KV.patch [RHEL-39544]
  - kvm-target-i386-SEV-fix-mismatch-in-vcek-disabled-proper.patch [RHEL-39544]
  - kvm-virtio-rng-block-max-bytes-0.patch [RHEL-50336]
  - kvm-scsi-disk-Use-positive-return-value-for-status-in-dm.patch [RHEL-50000]
  - kvm-scsi-block-Don-t-skip-callback-for-sgio-error-status.patch [RHEL-50000]
  - kvm-scsi-disk-Add-warning-comments-that-host_status-erro.patch [RHEL-50000]
  - kvm-scsi-disk-Always-report-RESERVATION_CONFLICT-to-gues.patch [RHEL-50000]
  - kvm-nbd-server-Plumb-in-new-args-to-nbd_client_add.patch [RHEL-52617]
  - kvm-nbd-server-CVE-2024-7409-Cap-default-max-connections.patch [RHEL-52617]
  - kvm-nbd-server-CVE-2024-7409-Drop-non-negotiating-client.patch [RHEL-52617]
  - kvm-nbd-server-CVE-2024-7409-Close-stray-clients-at-serv.patch [RHEL-52617]
  - Resolves: RHEL-39544
    ([QEMU] Add support for AMD SEV-SNP to Qemu)
  - Resolves: RHEL-50336
    (Fail to boot up the guest including vtpm and virtio-rng (max-bytes=0) devices)
  - Resolves: RHEL-50000
    (scsi-block: Cannot setup Windows Failover Cluster, qemu crashes on assert)
  - Resolves: RHEL-52617
    (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-9
changelog:
  - kvm-qemu-guest-agent-Update-the-logfile-path-of-qga-fsfr.patch [RHEL-52250]
  - Resolves: RHEL-52250
    (fsfreeze hooks break on the systems first restorecon)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-10
changelog:
  - kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch [RHEL-52617]
  - Resolves: RHEL-52617
    (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.5])


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Sumit Bose <sbose@redhat.com>
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: jira#RHEL-12112
  - fix ccache handling for leave operation
    Resolves: jira#RHEL-5104


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-42
changelog:
  - Delay: increase stop, status and monitor timeouts to 40s to avoid
    failing with default values

    Resolves: rhbz#2209433


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-43
changelog:
  - Filesystem: improve stop-action and allow setting term/kill signals
    and signal_delay for large filesystems

    Resolves: rhbz#2207567


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-49
changelog:
  - aws-vpc-move-ip/aws-vpc-route53/awseip/awsvip: add auth_type parameter
    and AWS Policy based authentication type

    Resolves: RHEL-16247


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-51
changelog:
  - storage_mon/findif: fix handler out of scope leak, unitialized value
    and check that netmaskbits != EOS

    Resolves: RHEL-17072


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-52.2
changelog:
  - galera: fix issue where joiner promotion fails is the node reports
    being in non-primary state

    Resolves: RHEL-31791


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-52.4
changelog:
  - AWS agents: retry failed metadata requests to avoid instantly
    failing when there is a hiccup in the network or metadata service

    Resolves: RHEL-34146


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2024.3-1
changelog:
  - https://github.com/coreos/rpm-ostree/releases/tag/v2024.3
    Backport https://github.com/coreos/rpm-ostree/commit/fe586621e5014d14f92b913338171a02ed29e6cc
    Resolves: #RHEL-26186


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2024.5-1
changelog:
  - Rebase to 2024.5
    Adds fix for https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6
    Resolves: #RHEL-30415


author: Colin Walters <walters@verbum.org> - 2023.8-2
changelog:
  - https://github.com/coreos/rpm-ostree/releases/tag/v2023.8
    https://issues.redhat.com/browse/RHEL-11294


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-25
changelog:
  - Followup on #2166383
  - Add compat scripts calling external find-debug, sepdebugcrcfix and debugedit
  - Add %__find_debuginfo macro


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-26
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.2.1-8
changelog:
  - Wrap rexml depedency with fedora release
  - Add upstream patch for rouge change
  - Add upstream patch to silence warnings from minitest


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.1-1
changelog:
  - Switch to https://github.com/apjanke/ronn-ng/ upstream fork (#1817168)
  - Regenerate spec file with gem2rpm.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.1-1
changelog:
  - Add BRs for tests, enable tests in %check.
  - Require /usr/bin/groff, not the package in case the file is moved.
  - Keep the license file in the original location.
  - Adjust various macros and invocations.


author: Pavel Valena <pvalena@redhat.com> - 3.10.1-7
changelog:
  - Re-add Requires: rubygem(rake), as it's needed for runtime.
    Resolves: rhbz#1982410
    Resolves: rhbz#1982419


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.3.7-1
changelog:
  - Update to 0.3.7 (fixes: rhbz#2160187)
  - disable ansi and ansi-parser, ansi-parser depends on ufmt that's failing
    tests (fixes: rhbz#2154673)


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 1.0.4-6
changelog:
  - Only declare providing the bundled libbpf if we're vendoring
  - restore deleting the bundled libbpf if defaulting to novendor


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - properly conflict with pacemaker not providing sync-default we need
    Resolves: rhbz#1979961
    Resolves: rhbz#1979573


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - obviously autoconf is defining runstatedir - but with a
    wrong default - directly hand it over to configure
    and skip --with-runstatedir implemented in configure.ac
    for older versions of autoconf

    Resolves: rhbz#2011707


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168579


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.39-1
changelog:
  - Add interfaces for watching and reading ifconfig_var_run_t
  Resolves: RHEL-39408
  - Allow dhcpcd use unix_stream_socket
  Resolves: RHEL-39408
  - Allow dhcpc read /run/netns files
  Resolves: RHEL-39408
  - Allow all domains read and write z90crypt device
  Resolves: RHEL-38833
  - Allow bootupd search efivarfs dirs
  Resolves: RHEL-36289
  - Move unconfined_domain(sap_unconfined_t) to an optional block
  Resolves: RHEL-37663


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.40-1
changelog:
  - Allow systemd-coredump read nsfs files
  Resolves: RHEL-39937
  - Allow login_userdomain execute systemd-tmpfiles in the caller domain
  Resolves: RHEL-40374
  - Allow ptp4l_t request that the kernel load a kernel module
  Resolves: RHEL-38905
  - Allow collectd to trace processes in user namespace
  Resolves: RHEL-36293


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.41-1
changelog:
  - Differentiate between staff and sysadm when executing crontab with sudo
  Resolves: RHEL-31888
  - Label /usr/bin/samba-gpupdate with samba_gpupdate_exec_t
  Resolves: RHEL-25724
  - Allow unconfined_service_t transition to passwd_t
  Resolves: RHEL-17404
  - Allow sbd to trace processes in user namespace
  Resolves: RHEL-44680
  - Allow systemd-coredumpd sys_admin and sys_resource capabilities
  Resolves: RHEL-45245
  - Label /usr/lib/node_modules/npm/bin with bin_t
  Resolves: RHEL-36587
  - Support /var is empty
  Resolves: RHEL-29331
  - Allow timemaster write to sysfs files
  Resolves: RHEL-28777
  - Don't audit crontab_domain write attempts to user home
  Resolves: RHEL-31888
  - Transition from sudodomains to crontab_t when executing crontab_exec_t
  Resolves: RHEL-31888
  - Fix label of pseudoterminals created from sudodomain
  Resolves: RHEL-31888


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.42-1
changelog:
  - Label samba certificates with samba_cert_t
  Resolves: RHEL-25724
  - Allow systemd-coredumpd the sys_chroot capability
  Resolves: RHEL-45245
  - Allow svirt_tcg_t read vm sysctls
  Resolves: RHEL-27141
  - Label /usr/sbin/samba-gpupdate with samba_gpupdate_exec_t
  Resolves: RHEL-25724
  - Label /var/run/coreos-installer-reboot with coreos_installer_var_run_t
  Resolves: RHEL-38614
  - Allow coreos-installer add systemd unit file links
  Resolves: RHEL-38614


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.43-1
changelog:
  - Allow rhsmcertd read/write access to /dev/papr-sysparm
  Resolves: RHEL-49599
  - Label /dev/papr-sysparm and /dev/papr-vpd
  Resolves: RHEL-49599
  - Allow rhsmcertd read, write, and map ica tmpfs files
  Resolves: RHEL-50926
  - Update afterburn file transition policy
  Resolves: RHEL-49735
  - Label /run/metadata with afterburn_runtime_t
  Resolves: RHEL-49735
  - Allow afterburn list ssh home directory
  Resolves: RHEL-49735
  - Support SGX devices
  Resolves: RHEL-50922
  - Allow systemd-pstore send a message to syslogd over a unix domain
  Resolves: RHEL-45528
  - Allow postfix_domain map postfix_etc_t files
  Resolves: RHEL-46332
  - Allow microcode create /sys/devices/system/cpu/microcode/reload
  Resolves: RHEL-26821
  - Allow svirt_tcg_t map svirt_image_t files
  Resolves: RHEL-27141
  - Allow systemd-hostnamed shut down nscd
  Resolves: RHEL-45033
  - Allow postfix_domain connect to postgresql over a unix socket
  Resolves: RHEL-6776


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.44-1
changelog:
  - Allow coreos-installer-generator work with partitions
  Resolves: RHEL-38614
  - Label /etc/mdadm.conf.d with mdadm_conf_t
  Resolves: RHEL-38614
  - Change file context specification to /var/run/metadata
  Resolves: RHEL-49735
  - Allow initrc_t transition to passwd_t
  Resolves: RHEL-17404
  - systemd: allow systemd_notify_t to send data to kernel_t datagram sockets
  Resolves: RHEL-25514
  - systemd: allow sys_admin capability for systemd_notify_t
  Resolves: RHEL-25514
  - Change systemd-network-generator transition to include class file
  Resolves: RHEL-47033
  - Allow sshd_keygen_t connect to userdbd over a unix stream socket
  Resolves: RHEL-47033


author: Jan Friesse <jfriesse@redhat.com> - 20210520-1
changelog:
  - Resolves: rhbz#1962501

  - New upstream release
  - Support for cgroup v2
  - Document cgroup v2 problems


author: Jan Friesse <jfriesse@redhat.com> - 20210719-1
changelog:
  - Related: rhbz#1962501

  - New upstream release
  - Add mode option for moving to root cgroup functionality


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-8
changelog:
  RHEL 9.2.0 ERRATUM
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2115789


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-9
changelog:
  RHEL 9.2.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161225


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-10
changelog:
  RHEL 9.3.0.Z ERRATUM
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21834
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21828
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21821


author: systemd maintenance team <systemd-maint@redhat.com> - 252-41
changelog:
  - timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489) (RHEL-45020)
  - cryptsetup-tokens: fix pin asserts (RHEL-36276)
  - cryptenroll: Use CTAP2.1 credProtect extension (RHEL-36276)
  - kernel-install: check machine ID (RHEL-50672)
  - kernel-install: ignore errors when reading /etc/machine-id (RHEL-50672)
  - hwdb: Add Lenovo G580 (RHEL-5950)
  - Fix key toggle and programmable button for Positivo N14ZP (RHEL-5950)
  - hwdb: Add accel orientation quirk for the Acer Switch V 10 SW5-017 2-in-1 (RHEL-5950)
  - hwdb: fix Compaq N14KP6 key toggle touchpad (#25404) (RHEL-5950)
  - hwdb: remove fuzz and deadzone for Simucube wheel bases. (RHEL-5950)
  - hwdb: Add support for Elgato Stream Pedal (#25550) (RHEL-5950)
  - hwdb: add Clevo touchpad toggle key quirks (RHEL-5950)
  - hwdb: add Dell Inspiron N4010 touchpad corrections (RHEL-5950)
  - hwdb: add Positivo-vaio Pro PW key toggle touchpad (#25669) (RHEL-5950)
  - Add mount matrix for VisionBook 12Wr Tab (RHEL-5950)
  - Update 60-evdev.hwdb (#25704) (RHEL-5950)
  - hwdb: Add additional Dell models that require ACCEL_LOCATION=base (#25724) (RHEL-5950)
  - hwdb: drop trailing space (RHEL-5950)
  - hwdb: add comments about matching entries (RHEL-5950)
  - hwdb: also add a generic entry for DualPoint Stick (RHEL-5950)
  - hwdb: Add mount matrix for CSL Panther Tab HD (RHEL-5950)
  - hwdb: Fix mount matrix for CSL Panther Tab HD (#25752) (RHEL-5950)
  - hwdb: Fn+F5 fix for MSI Bravo 15-B5DX (#25788) (RHEL-5950)
  - hwdb: change definition of PROXIMITY_NEAR_LEVEL for sensors (RHEL-5950)
  - hwdb: Add mic-mute, control-center and screen-rotation mappings for MSI laptops (RHEL-5950)
  - Prevents airplane mode toggle for HP Spectre 16 (RHEL-5950)
  - Update 60-sensor.hwdb (RHEL-5950)
  - Added Tablet Teclast X98 Air 3G (C5J6) (RHEL-5950)
  - hwdb: remove spurious whitespace (RHEL-5950)
  - hwdb: Add Dell models that require ACCEL_LOCATION=base (RHEL-5950)
  - Fix Positivo MASTER-N1110 key toggle touchpad (RHEL-5950)
  - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950)
  - hwdb: Add mount matrix for Linx 1020 (RHEL-5950)
  - hwdb: Add mic mute key mappings for Dell G16 Series (RHEL-5950)
  - hwdb: Add Chuwi Hi10X (N4120 version) iio matrix (RHEL-5950)
  - hwdb: Add touchpad toggle mapping for System76 Pangolin 12 (RHEL-5950)
  - hwdb: Prevent activation of airplane mode on HP ENVY x360 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: update autosuspend db (RHEL-5950)
  - hwdb: ieee1394-unit-function: add MOTU 896 mk3 Hybrid (RHEL-5950)
  - Add hwdb sensor entry for Lenovo IdeaPad Duet 3 10IGL5 (82AT). (RHEL-5950)
  - Fix Positivo-vaio VJPW12F11X key toggle touchpad (RHEL-5950)
  - hwdb: Add HP Envy x360 Convertible 15-cn0xxx to existing entry (RHEL-5950)
  - hwdb: add override for IdeaPad5 insert key (RHEL-5950)
  - hwdb: update database (RHEL-5950)
  - hwdb: Add HP ENVY x360 2-in-1 (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: fix swapped buttons for Logitech Lift left (RHEL-5950)
  - Revert "hwdb: fix swapped buttons for Logitech Lift left" (RHEL-5950)
  - hwdb: update 70-mouse.hwdb (#26782) (RHEL-5950)
  - hwdb: 60-keyboard.hwdb: Fix modalias for Thinkpad X200 Tablet (#26795) (RHEL-5950)
  - Add rebrands of Medion Akoya notebooks/tablets (RHEL-5950)
  - hwdb: fix Wifi toggling for Haier 7G-Series/JWU (#25293) (#26878) (RHEL-5950)
  - hwdb: drop boilerplate about match patterns in two more cases (RHEL-5950)
  - hwdb: Fix incorrect touchpad dimensions on Thinkpad L14 Gen1 (#26937) (RHEL-5950)
  - hwdb: drop redundant entry (RHEL-5950)
  - hwdb: Fixed thumb buttons reversed on CHERRY MW 2310 (#26992) (RHEL-5950)
  - hwdb: Move MSI touchpad-toggle mapping to generic MSI section (RHEL-5950)
  - update 60-sensor.hwdb with toshiba tablet (#27103) (RHEL-5950)
  - hwdb: Add support for "Passion Model P612F" (RHEL-5950)
  - hwdb: fix ambiguous glob pattern for Lenovo machines (RHEL-5950)
  - hwdb: add matrix for Asus BR1100F (#27197) (RHEL-5950)
  - hwdb: add accelerometer mount matrix for Lenovo Yoga Tablet 2 851F/L (RHEL-5950)
  - hwdb: Fix rotation for BMAX Y13 (RHEL-5950)
  - hwdb: disable entry for Logitech USB receiver used by G502 X (RHEL-5950)
  - hwdb: add hardware rfkill key for Dell Latitude E6* models (#27462) (RHEL-5950)
  - hwdb: do not include '#' in modalias (RHEL-5950)
  - hwdb: add landscape IdeaPad Miix 310 sensor orientation (#27555) (RHEL-5950)
  - Fix Positivo CF40CM-V2 key toggle touchpad (RHEL-5950)
  - hwdb: fix keyboard entry for IdeapadFlex5 (#27643) (RHEL-5950)
  - hwdb: fix Positivo CG15D key toggle touchpad and programmable keys (#27689) (RHEL-5950)
  - hwdb: add support for Elgato Stream Deck mini (gen 2) (RHEL-5950)
  - hwdb: fix arrow keys on HP Elite Dragonfly G3 (RHEL-5950)
  - hwdb: add support for Jun Tab2/Dere T11 to 60-sensor.hwdb (#28092) (RHEL-5950)
  - hwdb: fix volume control keys on Lenovo IdeaPad Flex 5 (14ARE05) (RHEL-5950)
  - hwdb: Add override for headset form-factors (RHEL-5950)
  - hwdb : add support for Archos 101 Cesium Educ to 60-sensor.hwdb (RHEL-5950)
  - hwdb: drop trailing white space (RHEL-5950)
  - hwdb: merge multiple keyboard entries with same setting (RHEL-5950)
  - hwdb: make matching modalias for Archos 101 Cesium Educ more strict (RHEL-5950)
  - hwdb update for v246-rc1 (RHEL-5950)
  - update hwdb autosuspend data for v254 (RHEL-5950)
  - hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) (RHEL-5950)
  - Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) (RHEL-5950)
  - hwdb: drop POINTINGSTICK_CONST_ACCEL (RHEL-5950)
  - Add alternate name for MX Ergo as found on some devices (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: run update-hwdb (RHEL-5950)
  - hwdb: run update-hwdb (RHEL-5950)
  - hwdb: Mute SW rfkill keys on MSI Wind U100 (RHEL-5950)
  - Update 60-sensor.hwdb (#28804) (RHEL-5950)
  - hwdb: Added config for RCA W101SA23T1 (#29041) (RHEL-5950)
  - Update 60-input-id.hwdb: add TEX Shinobi (#29068) (RHEL-5950)
  - hwdb: keyboard: D330 FnLk toggle (RHEL-5950)
  - hwdb: Add Logitech G502 X (RHEL-5950)
  - hwdb: ieee1394-unit-function: remove superfluous Weiss Engineering DAC1 entry (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engineering DAC202 (Maya edition) (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engineering INT203 entry with older firmware (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engieering MAN301 (RHEL-5950)
  - hwdb: Add quirk for teclast x3 plus (G4K3) rotation (#29202) (RHEL-5950)
  - hwdb: add mic mute key mappings for Acer Predator Triton 300 SE (RHEL-5950)
  - hwdb: Bush tablet rotation support (#29268) (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Miglia Technology Harmony Audio (HA02) (RHEL-5950)
  - add support for hp pavilion gaming 15 lid switch (#29304) (RHEL-5950)
  - Fix Positivo N14EP6 key toggle touchpad and programmable keys (#29448) (RHEL-5950)
  - add udev rule for micmute (f20) (RHEL-5950)
  - hwdb,rules: mark host-to-host network devices as only requiring link local addressing (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update hwdb autosuspend rules (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: Add accelerometer data for Librem11 (#29974) (RHEL-5950)
  - hwdb: PNP/ACPI lists on uefi.org are now in CSV format (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: rename .html=>.csv (RHEL-5950)
  - hwdb/acpi-update.py: streamline python code (RHEL-5950)
  - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950)
  - hwdb: add Predator PHN16-71 (RHEL-5950)
  - Update 60-autosuspend.hwdb (#30131) (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Sony DVMC-DA1 (RHEL-5950)
  - hwdb: ieee1394-unit-function: arrangement for Sony DVMC-DA1 (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - Adding Trekstor Primebook C13 rotation to 60-sensor.hwdb (#30415) (RHEL-5950)
  - Add three Dell platforms to sensor accel location base (RHEL-5950)
  - Add Bosto BT-12HD series to hwdb (RHEL-5950)
  - hwdb: Add override for headset form-factor for the Corsair Void Elite (RHEL-5950)
  - hwdb: add Teclast X98 Pro sensor info (#30859) (RHEL-5950)
  - hwdb: Correct display rotation on Chuwi Ubook X N4100 (#24248) (RHEL-5950)
  - hwdb: ieee1394-unit-function: adjustment of entries with device attributes available in Linux v6.8 (RHEL-5950)
  - 60-evdev.hwdb: Add support for Huion Inspiroy 2 L (#31241) (RHEL-5950)
  - hwdb: add resolution setting for GAOMON S620 (RHEL-5950)
  - hwdb: Remove version check in CH Pro Pedals rule (RHEL-5950)
  - hwdb: Add support for MetawillBook01 to 60-sensor.hwdb Add accel orientation quirk for the METAPHYUNI MetawillBook01 2-in-1 laptop (RHEL-5950)
  - hwdb: Add headset form-factor override for Xbox Wireless Dongle (RHEL-5950)
  - hwdb: Add support for Elgato Stream Deck Plus (RHEL-5950)
  - Fix: Chuwi UBook X (CWI535) screen rotation matrix (RHEL-5950)
  - hwdb: Add touchpad toggle mapping for Kvadra LE14U/LE15U (RHEL-5950)
  - hwdb: Add touchpad configuration for ThinkPad E495 (RHEL-5950)
  - Fix Positivo N14NPE-N and N15NPE-N key toggle touchpad and search key (RHEL-5950)
  - Update USB ids of hwdb (RHEL-5950)
  - Added resolution for Huion Kamvas Pro 19 (RHEL-5950)
  - hwdb: Add mapping for ACPI quickstart keys on Toshiba Z830 (RHEL-5950)
  - hwdb: fix Asus T300FA rotation matrix (#31973) (RHEL-5950)
  - Fixed resolution for pen and touchpad (RHEL-5950)
  - hwdb: fix missing colon (#32108) (RHEL-5950)
  - hwdb: update for v256 (RHEL-5950)
  - autosuspend: update for v256 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update autosuspend hwdb (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: Add a common Logitech M185/M225 mouse variant (RHEL-5950)
  - hwdb: Add mapping for Samsung GalaxyBook - 550X (#32616) (RHEL-5950)
  - hwdb: Add mapping for Xiaomi Mipad 2 bottom bezel capacitive buttons (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII (RHEL-5950)
  - hwdb: Add a Logitech MX Master 3S (connected via Bolt Receiver) (RHEL-5950)
  - Fix Positivo N14EPE and N15EPE key toggle touchpad and search key (RHEL-5950)
  - hwdb: update Dere N12 / Juno Tablet 3 accelerometer (#32765) (RHEL-5950)
  - hwdb: updated Librem 11 accelerometer (#32772) (RHEL-5950)
  - hwdb: ID_INPUT_XYZ allows an empty string (RHEL-5950)
  - hwdb: ASRock LED Controller classified incorrectly as joystick due to buttons and axis (#32775) (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb.d/60-keyboard.hwdb: enable Clevo quirk for model V5x0TU (RHEL-5950)
  - hwdb: Enable JP-IK LEAP W502's touchpad toggle key (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update autosuspend hwdb (RHEL-5950)
  - hwdb: Lenovo IdeaPad Z500 Touchpad Toggle (#33039) (RHEL-5950)
  - hwdb: add a vmbus id for HyperV Video device (RHEL-5950)
  - hwdb: Add Logitech MX Master 3S Bluetooth ID (RHEL-5950)
  - hwdb: Lenovo 16G6IRL volume keys and friends (#33107) (RHEL-5950)
  - hwdb: added hwdb rules for micmute and power button on Acer Nitro AN 515-58 (#32867) (RHEL-5950)
  - Fix key toggle touchpad and programmable buttom for Positivo N14AP7 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: add keyboard mappings for the Ayaneo Kun face buttons (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: add support for AIPTEK Media Tablet Ultimate (#33371) (RHEL-5950)
  - hwdb: add scancodes for AYANEO devices (#33378) (RHEL-5950)
  - Add OrangePi NEO Scancodes (RHEL-5950)
  - hwdb: Fix Logitech G915 TKL (Bluetooth) appearing as a mouse (RHEL-5950)
  - hwdb: fix keyboard of RedmiBook Pro 15 2022 (#33465) (RHEL-5950)
  - Added mised EVDEV_ABS_35 & EVDEV_ABS_36 for GAOMON s620 (RHEL-5950)
  - hwdb: Add some HP IR cameras (RHEL-5950)
  - hwdb: add more AV controllers (RHEL-5950)
  - Fix key toggle touchpad button for multilaser ul154 (#33630) (RHEL-5950)
  - hwdb: Added StarLabs StarLite position sensor mapping (RHEL-5950)
  - 70-mouse.hwdb: Added Glorious Model O DPI (RHEL-5950)
  - Update 60-sensor.hwdb (RHEL-5950)
  - Add MSI Claw AT Keyboard Scancodes. (RHEL-5950)
  - Add or fix mount matrix for multiple handhelds. (#33586) (RHEL-5950)
  - Revert "hwdb: Added StarLabs StarLite position sensor mapping" (RHEL-5950)
  - hwdb: fix accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950)
  - hwdb: add backslash and touchpad toggle mapping for Aquarius Cmp NS483 (RHEL-5950)
  - hwdb: Add mic mute key mapping for Dell Pro Rugged series (RHEL-5950)
  - hwdb: fix MXC6655 accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950)
  - add udev rules for trezor hw wallet devices (RHEL-5950)
  - hwdb: add axis range corrections for the Lenovo Thinkpad E16 (RHEL-5950)
  - hwdb: fix auto rotate on Asus Q551LB (#33921) (RHEL-5950)
  - udev: add hwdb execution for hidraw subsystem devices (RHEL-5950)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-43
changelog:
  - udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103)
  - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103)
  - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103)
  - Include <threads.h> if possible to get thread_local definition (RHEL-50651)
  - add APIs for detecting confidential virtualization (RHEL-50651)
  - detect-virt: add --cvm option (RHEL-50651)
  - detect-virt: add --list-cvm option (RHEL-50651)
  - unit: add "cvm" option for ConditionSecurity (RHEL-50651)
  - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651)
  - core: log detected confidential virtualization type (RHEL-50651)
  - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651)
  - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-50651)
  - confidential-virt: add detection for s390x target (RHEL-50651)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-44
changelog:
  - Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103)
  - fundamental: share constants for confidential virt detection (RHEL-50651)
  - efi: add helper API for detecting confidential virtualization (RHEL-50651)
  - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-46.2
changelog:
  - add %posttrans scriptlet to make sure our SELinux policy module is actually installed (RHEL-46339)


author: Frank Ch. Eigler <fche@redhat.com> - 5.0-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Martin Cermak <mcermak@redhat.com> - 5.1-4
changelog:
  - RHEL-50107.patch:  Make systemtap compatible with kernel
    commit 68cbd415dd4b .  Related: RHEL-56962 .


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Kalev Lember <klember@redhat.com> - 3.38.2-2
changelog:
  - Use conflicts for totem-video-thumbnailer split instead of self-obsoletes
  - Resolves: rhbz#1949422


author: Miro Hrončok <mhroncok@redhat.com> - 3.24.4-2
changelog:
  - Always BuildRequire runtime dependencies to avoid non-installable builds
  - Remove no longer needed obsoletes of python3-detox


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.21.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2182117
    - plugin_scheduler: fix perf fd leaks
      resolves: rhbz#2173938
    - allow skipping rollback when restarting TuneD or switching profile
      resolves: rhbz#2203142
    - function_calc_isolated_cores: no errors for offline CPUs
      resolves: rhbz#2217015


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-17121
    - print all arguments of failing commands in error messages
      resolves: RHEL-3689
    - plugin_sysctl: added support for sysctl names with slash
      resolves: RHEL-3707
    - tuned-adm: added support for moving devices between plugin instances
      resolves: RHEL-15141
    - api: added methods for retrieval of plugin instances and devices
      resolves: RHEL-15137
    - plugin_cpu: amd-pstate mentioned instead of just intel_pstate
      resolves: RHEL-16469
    - hotplug: do not report ENOENT errors on device remove
      resolves: RHEL-11342
    - plugin_sysctl: expand variables when reporting overrides
      resolves: RHEL-18972
    - plugin_acpi: new plugin which handles ACPI platform_profile
      resolves: RHEL-16966
    - plugin_bootloader: skip calling rpm-ostree kargs in no-op case
      resolves: RHEL-20767
    - plugin_cpu: support cstate settings of pm_qos_resume_latency_us
      resolves: RHEL-21129
    - scheduler: add option for ignoring IRQs affinity
      resolves: RHEL-21923
    - plugin_intel_uncore: new plugin for uncore setting


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50568
    - spec: create /etc/tuned/profiles directory
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
      resolves: RHEL-31757
    - daemon: buffer sighup signal
      resolves: RHEL-31180
    - added an option to configure profile directories
      resolves: RHEL-26157
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
      resolves: RHEL-25613
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
      resolves: RHEL-46560
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.2.rc1
changelog:
  - fixed functions packaging and added explicit conflict with power-profiles-daemon
    related: RHEL-50568


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50568
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2133815
    - systemd: relax polkit requirement
    - sysvinit: fixed path
      resolves: rhbz#2118301
    - plugin_cpu: added support for pm_qos_resume_latency_us
      resolves: rhbz#2118786
    - do not exit on duplicate config lines
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - API: add support for moving devices between instances
      resolves: rhbz#2113925
    - D-Bus: send tracebacks through D-Bus only in debug mode
      resolves: rhbz#2159680
    - Makefile: added fix for python-3.12
    - throughput-performance: set net.core.somaxconn to at least 2048
    - plugin_scheduler: do not leak FDs from the perf
    - plugin_cpu: added support for intel_pstate scaling driver
      resolves: rhbz#2095829
    - added support for the API access through the Unix Domain Socket
      resolves: rhbz#2113900


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20.0-0.2.rc1
changelog:
  - post RC.1 fixes
    related: rhbz#2133815
  - fixed possible traceback on SIGHUP
    resolves: rhbz#2169712


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-2
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66639
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66616


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.17.6-1
changelog:
  - Increase uevent buffer size (#167)
  - Skip /umockdev-testbed-vala/detects_running_outside_testbed during normal
    builds for the time being, as it is brittle on several architectures (#169)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.17.8-1
changelog:
  - Fix some potential crashes spotted by Coverity
  - Enable Fedora builds and bodhi updates via packit


author: Packit <hello@packit.dev> - 0.17.10-1
changelog:
  - Adjust to systemd 251-rc2: Set $SYSTEMD_DEVICE_VERIFY_SYSFS, parse new udevadm format, update tests


author: Packit <hello@packit.dev> - 0.17.13-1
changelog:
  - preload: Wrap fstatfs(), to work with systemd 251 also with Python tests
  - Fix tests in Gentoo sandbox build


author: Radovan Sroka <rsroka@redhat.com> - 1.0.0-7
changelog:
  RHEL 9 BETA
  - starting usbguard service complains about PIDFile= references a path below legacy directory /var/run/
  Resolves: rhbz#1985627
  - file conflict when installing usbguard on rhel
  Resolves: rhbz#1986785


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-10
changelog:
  - fix DSP module definition in spec file
  Resolves: rhbz#2014442
  - fix IPC access control files override
  Resolves: rhbz#2009227
  - validate ACL permission existence
  Resolves: rhbz#2009229
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2009226


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-11
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leak when connection to dbus is broken
  Resolves: rhbz#2059068


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-12
changelog:
  - Set OOMScoreAdjust to -1000 in service file
  Resolves: rhbz#2097419
  - Fix race condition in usbguard-daemon when forking
  Resolves: rhbz#2042345
  - Add missing files to documentation
  Resolves: rhbz#2122107
  - Neither RuleFolder nor RuleFile exists bugfix
  Resolves: rhbz#2122109
  - Remove build for i686 arch
  Resolves: rhbz#2126622


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-15
changelog:
  - Disable logging to console, logging to syslog is still enabled
  Resolves: rhbz#2122109
  - Store permanent rules even if RuleFile is not set but RuleFolder is
  Resolves: rhbz#2155910


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-92.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2164560
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Brian C. Lane <bcl@redhat.com> - 35.12-1
changelog:
  - Copy rhel-9.4.json test repository from osbuild-composer
  - New release: 35.12 (bcl)
    Resolves: RHEL-1035
  - Add support for compose start warning messages (bcl)
  - Update documentation urls for new locations (bcl)
  - weldr: go fmt changes to a couple comments (bcl)
  - weldr: Update ostree test for parentid with no url (bcl)
  - Makefile: Turn off seccomp for build-in-podman (bcl)
  - composer-cli: Update doc links (simon.steinbeiss)
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)
  - spec: Require createrepo_c for weldr-client-tests package (bcl)
  - spec: migrate the license field to SPDX (ondrej)
  - Go: Switch to go 1.19 (bcl)
  - CI: Update terraform hash (bcl)
  - Actions: add workflow for marking and closing stale issues and PRs (thozza)
  - workflows: Stop using golint (bcl)
  - workflows: Add Go 1.21 and 1.22 to test matrix (bcl)
  - workflows: Update to golangci-lint 1.56.2 (bcl)
  - workflow: Ignore govulncheck failures (bcl)
  - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl)
  - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot])
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot])


author: Michal Srb <michal@redhat.com> - 1.51.0-16
changelog:
  - Drop bundled expat and build against libxml2
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25236


author: Neal Gompa <ngompa13@gmail.com> - 1:7.5-49
changelog:
  - Add OrderWithRequires for freetype to ensure freetype is installed first
  - Move license files to license tag on file list


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Vladis Dronov <vdronov@redhat.com> - 0.8.2-1
changelog:
  - Update to version 0.8.2
  - Drop patch 1-fix-man-page-installation.patch
  - Use SPDX license identifiers


author: Ben Woodard <woodard@redhat.com> - 4.3.4-2
changelog:
  - disable building with libunwind to fix C++ exceptions when a C applicaion loads
    a module written in C++ #2175966


