# changelog

author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-451.el9]
changelog:
  - Revert "Merge: cgroup: Backport upstream cgroup commits up to v6.8" (Lucas Zampieri)
  - arm64: dts: qcom: sa8775p: fix USB wakeup interrupt types (Steve Dunnagan) [RHEL-31258]
  - arm64: dts: qcom: sa8775p-ride: enable pmm8654au_0_pon_resin (Steve Dunnagan) [RHEL-31258]
  - arm64: dts: qcom: sa8775p: Make watchdog bark interrupt edge triggered (Steve Dunnagan) [RHEL-31258]
  - arm64: dts: qcom: Enable tsens and thermal for sa8775p SoC (Steve Dunnagan) [RHEL-31258]
  - arm64: dts: qcom: sa8775p: Add RPMh sleep stats (Steve Dunnagan) [RHEL-31258]
  - arm64: dts: qcom: sa8775p: add TRNG node (Steve Dunnagan) [RHEL-31258]
  - arm64: dts: qcom: sa8775p: enable the inline crypto engine (Steve Dunnagan) [RHEL-31258]
  - net: ethtool: reject unsupported RSS input xfrm values (Ivan Vecera) [RHEL-31889]
  - net: ethtool: Fix symmetric-xor RSS RX flow hash check (Ivan Vecera) [RHEL-31889]
  - net: ethtool: add a NO_CHANGE uAPI for new RXFH's input_xfrm (Ivan Vecera) [RHEL-31889]
  - net: ethtool: copy input_xfrm to user-space in ethtool_get_rxfh (Ivan Vecera) [RHEL-31889]
  - net: ethtool: add support for symmetric-xor RSS hash (Ivan Vecera) [RHEL-31889]
  - net: ethtool: get rid of get/set_rxfh_context functions (Ivan Vecera) [RHEL-31889]
  - net: ethtool: pass a pointer to parameters to get/set_rxfh ethtool ops (Ivan Vecera) [RHEL-31889]
  - net/mlx5e: Make flow classification filters static (Ivan Vecera) [RHEL-31889]
  - redhat: kernel.spec: add dependency for the python3-pyyaml package (Petr Oros) [RHEL-30145]
  - Documentation: add pyyaml to requirements.txt (Petr Oros) [RHEL-30145]
  - netlink: use kvmalloc() in netlink_alloc_large_skb() (Petr Oros) [RHEL-30145]
  - devlink: Fix devlink parallel commands processing (Petr Oros) [RHEL-30145]
  - Fix NULL pointer dereference in cn_filter() (Petr Oros) [RHEL-30145]
  - devlink: Fix length of eswitch inline-mode (Petr Oros) [RHEL-30145]
  - net/mlx5: Fix fw reporter diagnose output (Petr Oros) [RHEL-30145]
  - net/mlx5: fix uninit value use (Petr Oros) [RHEL-30145]
  - netdevsim: Block until all devices are released (Petr Oros) [RHEL-30145]
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Petr Oros) [RHEL-30145]
  - devlink: fix port dump cmd type (Petr Oros) [RHEL-30145]
  - devlink: fix possible use-after-free and memory leaks in devlink_init() (Petr Oros) [RHEL-30145]
  - net: add rcu safety to rtnl_prop_list_size() (Petr Oros) [RHEL-30145]
  - devlink: Fix command annotation documentation (Petr Oros) [RHEL-30145]
  - devlink: avoid potential loop in devlink_rel_nested_in_notify_work() (Petr Oros) [RHEL-30145]
  - doc/netlink/specs: Add missing attr in rt_link spec (Petr Oros) [RHEL-30145]
  - devlink: Fix referring to hw_addr attribute during state validation (Petr Oros) [RHEL-30145]
  - netlink: fix potential sleeping issue in mqueue_flush_file (Petr Oros) [RHEL-30145]
  - genetlink: Use internal flags for multicast groups (Petr Oros) [RHEL-30145]
  - rtnetlink: bridge: Enable MDB bulk deletion (Petr Oros) [RHEL-30145]
  - rtnetlink: bridge: Invoke MDB bulk deletion when needed (Petr Oros) [RHEL-30145]
  - net: Add MDB bulk deletion device operation (Petr Oros) [RHEL-30145]
  - rtnetlink: bridge: Use a different policy for MDB bulk delete (Petr Oros) [RHEL-30145]
  - devlink: extend multicast filtering by port index (Petr Oros) [RHEL-30145]
  - devlink: add a command to set notification filter and use it for multicasts (Petr Oros) [RHEL-30145]
  - genetlink: introduce helpers to do filtered multicast (Petr Oros) [RHEL-30145]
  - netlink: introduce typedef for filter function (Petr Oros) [RHEL-30145]
  - genetlink: introduce per-sock family private storage (Petr Oros) [RHEL-30145]
  - devlink: introduce a helper for netlink multicast send (Petr Oros) [RHEL-30145]
  - devlink: send notifications only if there are listeners (Petr Oros) [RHEL-30145]
  - devlink: introduce __devl_is_registered() helper and use it instead of xa_get_mark() (Petr Oros) [RHEL-30145]
  - devlink: use devl_is_registered() helper instead xa_get_mark() (Petr Oros) [RHEL-30145]
  - connector/cn_proc: Performance improvements (Petr Oros) [RHEL-30145]
  - connector/cn_proc: Add filtering to fix some bugs (Petr Oros) [RHEL-30145]
  - tools/net/ynl-gen-rst: Remove extra indentation from generated docs (Petr Oros) [RHEL-30145]
  - tools/net/ynl-gen-rst: Remove bold from attribute-set headings (Petr Oros) [RHEL-30145]
  - tools/net/ynl-gen-rst: Sort the index of generated netlink specs (Petr Oros) [RHEL-30145]
  - tools/net/ynl-gen-rst: Add sub-messages to generated docs (Petr Oros) [RHEL-30145]
  - doc/netlink: Regenerate netlink .rst files if ynl-gen-rst changes (Petr Oros) [RHEL-30145]
  - doc/netlink/specs: Add a spec for tc (Petr Oros) [RHEL-30145]
  - doc/netlink/specs: use pad in structs in rt_link (Petr Oros) [RHEL-30145]
  - doc/netlink/specs: Add sub-message type to rt_link family (Petr Oros) [RHEL-30145]
  - tools/net/ynl: Add binary and pad support to structs for tc (Petr Oros) [RHEL-30145]
  - tools/net/ynl: Add 'sub-message' attribute decoding to ynl (Petr Oros) [RHEL-30145]
  - doc/netlink: Document the sub-message format for netlink-raw (Petr Oros) [RHEL-30145]
  - doc/netlink: Add sub-message support to netlink-raw (Petr Oros) [RHEL-30145]
  - tools/net/ynl: Use consistent array index expression formatting (Petr Oros) [RHEL-30145]
  - net: rtnl: use rcu_replace_pointer_rtnl in rtnl_unregister_* (Petr Oros) [RHEL-30145]
  - net: rtnl: introduce rcu_replace_pointer_rtnl (Petr Oros) [RHEL-30145]
  - netlink: specs: mptcp: rename the MPTCP path management spec (Petr Oros) [RHEL-30145]
  - netlink: specs: ovs: correct enum names in specs (Petr Oros) [RHEL-30145]
  - netlink: specs: ovs: remove fixed header fields from attrs (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: print prototypes for recursive stuff (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: store recursive nests by a pointer (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: re-sort ignoring recursive nests (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: record information about recursive nests (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: fill in implementations for TypeUnused (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: support fixed headers in genetlink (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: use enum user type for members and args (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: add missing request free helpers for dumps (Petr Oros) [RHEL-30145]
  - netlink: specs: devlink: add some(not all) missing attributes in devlink.yaml (Petr Oros) [RHEL-30145]
  - rtnl: add helper to send if skb is not null (Petr Oros) [RHEL-30145]
  - rtnl: add helper to check if a notification is needed (Petr Oros) [RHEL-30145]
  - rtnl: add helper to check if rtnl group has listeners (Petr Oros) [RHEL-30145]
  - tools: ynl: use strerror() if no extack of note provided (Petr Oros) [RHEL-30145]
  - tools: pynl: make flags argument optional for do() (Petr Oros) [RHEL-30145]
  - docs: netlink: add NLMSG_DONE message format for doit actions (Petr Oros) [RHEL-30145]
  - doc/netlink: Add bitfield32, s8, s16 to the netlink-raw schema (Petr Oros) [RHEL-30145]
  - docs: netlink: link to family documentations from spec info (Petr Oros) [RHEL-30145]
  - devlink: warn about existing entities during reload-reinit (Petr Oros) [RHEL-30145]
  - Documentation: devlink: extend reload-reinit description (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: always construct struct ynl_req_state (Petr Oros) [RHEL-30145]
  - ethtool: don't propagate EOPNOTSUPP from dumps (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: use enum name from the spec (Petr Oros) [RHEL-30145]
  - tools: ynl-get: use family c-name (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: always append ULL/LL to range types (Petr Oros) [RHEL-30145]
  - Documentation: Document each netlink family (Petr Oros) [RHEL-30145]
  - tools: ynl: fix duplicate op name in devlink (Petr Oros) [RHEL-30145]
  - tools: ynl: fix header path for nfsd (Petr Oros) [RHEL-30145]
  - rtnetlink: introduce nlmsg_new_large and use it in rtnl_getlink (Petr Oros) [RHEL-30145]
  - devlink: Add device lock assert in reload operation (Petr Oros) [RHEL-30145]
  - devlink: Acquire device lock during reload command (Petr Oros) [RHEL-30145]
  - devlink: Allow taking device lock in pre_doit operations (Petr Oros) [RHEL-30145]
  - devlink: Enable the use of private flags in post_doit operations (Petr Oros) [RHEL-30145]
  - devlink: Acquire device lock during netns dismantle (Petr Oros) [RHEL-30145]
  - devlink: Move private netlink flags to C file (Petr Oros) [RHEL-30145]
  - netlink: specs: Introduce time stamping set command (Petr Oros) [RHEL-30145]
  - netlink: specs: Introduce new netlink command to list available time stamping layers (Petr Oros) [RHEL-30145]
  - netlink: specs: Introduce new netlink command to get current timestamp (Petr Oros) [RHEL-30145]
  - nfsd: regenerate user space parsers after ynl-gen changes (Petr Oros) [RHEL-30145]
  - netlink: fill in missing MODULE_DESCRIPTION() (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: don't touch the output file if content is the same (Petr Oros) [RHEL-30145]
  - netlink: specs: devlink: add forgotten port function caps enum values (Petr Oros) [RHEL-30145]
  - doc/netlink: Update schema to support cmd-cnt-name and cmd-max-name (Petr Oros) [RHEL-30145]
  - tools: ynl: introduce option to process unknown attributes or types (Petr Oros) [RHEL-30145]
  - net: Add MDB get device operation (Petr Oros) [RHEL-30145]
  - bridge: add MDB get uAPI attributes (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: respect attr-cnt-name at the attr set level (Petr Oros) [RHEL-30145]
  - netlink: specs: support conditional operations (Petr Oros) [RHEL-30145]
  - netlink: make range pointers in policies const (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: add support for exact-len validation (Petr Oros) [RHEL-30145]
  - tools: ynl: add uns-admin-perm to genetlink legacy (Petr Oros) [RHEL-30145]
  - devlink: remove netlink small_ops (Petr Oros) [RHEL-30145]
  - devlink: remove duplicated netlink callback prototypes (Petr Oros) [RHEL-30145]
  - netlink: specs: devlink: add the remaining command to generate complete split_ops (Petr Oros) [RHEL-30145]
  - devlink: rename netlink callback to be aligned with the generated ones (Petr Oros) [RHEL-30145]
  - devlink: make devlink_flash_overwrite enum named one (Petr Oros) [RHEL-30145]
  - netlink: specs: devlink: make dont-validate single line (Petr Oros) [RHEL-30145]
  - netlink: specs: devlink: remove reload-action from devlink-get cmd reply (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: render rsp_parse() helpers if cmd has only dump op (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: introduce support for bitfield32 attribute type (Petr Oros) [RHEL-30145]
  - genetlink: don't merge dumpit split op for different cmds into single iter (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: change spacing around __attribute__ (Petr Oros) [RHEL-30145]
  - tcp: add RTAX_FEATURE_TCP_USEC_TS (Petr Oros) [RHEL-30145]
  - netlink: specs: add support for auto-sized scalars (Petr Oros) [RHEL-30145]
  - netlink: add variable-length / auto integers (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: make the mnl_type() method public (Petr Oros) [RHEL-30145]
  - devlink: convert most of devlink_fmsg_*() to return void (Petr Oros) [RHEL-30145]
  - qed: devlink health: use retained error fmsg API (Petr Oros) [RHEL-30145]
  - net/mlx5: devlink health: use retained error fmsg API (Petr Oros) [RHEL-30145]
  - mlxsw: core: devlink health: use retained error fmsg API (Petr Oros) [RHEL-30145]
  - octeontx2-af: devlink health: use retained error fmsg API (Petr Oros) [RHEL-30145]
  - hinic: devlink health: use retained error fmsg API (Petr Oros) [RHEL-30145]
  - bnxt_en: devlink health: use retained error fmsg API (Petr Oros) [RHEL-30145]
  - netdevsim: devlink health: use retained error fmsg API (Petr Oros) [RHEL-30145]
  - devlink: retain error in struct devlink_fmsg (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: support limit names (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: support full range of min/max checks for integer values (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: track attribute use (Petr Oros) [RHEL-30145]
  - devlink: document devlink_rel_nested_in_notify() function (Petr Oros) [RHEL-30145]
  - Documentation: devlink: add a note about RTNL lock into locking section (Petr Oros) [RHEL-30145]
  - Documentation: devlink: add nested instance section (Petr Oros) [RHEL-30145]
  - devlink: don't take instance lock for nested handle put (Petr Oros) [RHEL-30145]
  - devlink: take device reference for devlink object (Petr Oros) [RHEL-30145]
  - devlink: call peernet2id_alloc() with net pointer under RCU read lock (Petr Oros) [RHEL-30145]
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Petr Oros) [RHEL-30145]
  - docs: netlink: clean up after deprecating version (Petr Oros) [RHEL-30145]
  - tools: ynl: fix converting flags to names after recent cleanup (Petr Oros) [RHEL-30145]
  - tools: ynl: Add source files for nfsd netlink protocol (Petr Oros) [RHEL-30145]
  - NFSD: introduce netlink stubs (Petr Oros) [RHEL-30145]
  - net: Handle bulk delete policy in bridge driver (Petr Oros) [RHEL-30145]
  - tools: ynl: use ynl-gen -o instead of stdout in Makefile (Petr Oros) [RHEL-30145]
  - netlink: specs: don't allow version to be specified for genetlink (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: handle do ops with no input attrs (Petr Oros) [RHEL-30145]
  - netlink: specs: remove redundant type keys from attributes in subsets (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: lift type requirement for attribute subsets (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: use uapi header name for the header guard (Petr Oros) [RHEL-30145]
  - netlink: Annotate struct netlink_policy_dump_state with __counted_by (Petr Oros) [RHEL-30145]
  - tools: ynl: use uAPI include magic for samples (Petr Oros) [RHEL-30145]
  - tools: ynl: don't regen on every make (Petr Oros) [RHEL-30145]
  - handshake: Fix sign of key_serial_t fields (Petr Oros) [RHEL-30145]
  - handshake: Fix sign of socket file descriptor fields (Petr Oros) [RHEL-30145]
  - devlink: introduce possibility to expose info about nested devlinks (Petr Oros) [RHEL-30145]
  - devlink: convert linecard nested devlink to new rel infrastructure (Petr Oros) [RHEL-30145]
  - devlink: expose peer SF devlink instance (Petr Oros) [RHEL-30145]
  - devlink: introduce object and nested devlink relationship infra (Petr Oros) [RHEL-30145]
  - devlink: extend devlink_nl_put_nested_handle() with attrtype arg (Petr Oros) [RHEL-30145]
  - devlink: move devlink_nl_put_nested_handle() into netlink.c (Petr Oros) [RHEL-30145]
  - devlink: put netnsid to nested handle (Petr Oros) [RHEL-30145]
  - devlink: move linecard struct into linecard.c (Petr Oros) [RHEL-30145]
  - mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (Rafael Aquini) [RHEL-31840] {CVE-2024-26783}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-32372]
  - ASoC: SOF: ipc4-topology: Save the ALH DAI index during hw_params (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: pcm: reset all PCM sources in case of xruns (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: pcm: add pending_stop state variable (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: pcm: simplify sof_pcm_hw_free() with helper (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: sof-audio: revisit sof_pcm_stream_free() error handling and logs (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: hda: Clear Soundwire node ID during BE DAI hw_free (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: hda: move helper to static inline (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: IPC4: extend dai_data with node_id (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: hda: extend signature of sdw_hda_dai_hw_params() (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: set the DMA TLV device as dai_index (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: hda-dai: add helpers to set dai config (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: hda-dai: set dma_stream_channel_map device (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: hda-dai: set lowest N bits in ch_mask (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: make dma_config_tlv be an array (Jaroslav Kysela) [RHEL-26198]
  - Revert "ASoC: SOF: Intel: hda-dai-ops: only allocate/release streams for first CPU DAI" (Jaroslav Kysela) [RHEL-26198]
  - Revert "ASoC: SOF: Intel: hda-dai-ops: reset device count for SoundWire DAIs" (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: hda-dai: fix channel map configuration for aggregated dailink (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Introduce generic names for IPC types (Jaroslav Kysela) [RHEL-26198]
  - arm64/arch_timer: Fix MMIO byteswap (Phil Auld) [RHEL-32862]
  - cpuidle: Use local_clock_noinstr() (Phil Auld) [RHEL-32862]
  - sched/clock: Provide local_clock_noinstr() (Phil Auld) [RHEL-32862]
  - sched/clock: Fix local_clock() before sched_clock_init() (Phil Auld) [RHEL-32862]
  - sched/clock: Make local_clock() noinstr (Phil Auld) [RHEL-32862]
  - sched/clock: Use try_cmpxchg64 in sched_clock_{local,remote} (Phil Auld) [RHEL-32862]
  - math64: Always inline u128 version of mul_u64_u64_shr() (Phil Auld) [RHEL-32862]
  - s390/time: Provide sched_clock_noinstr() (Phil Auld) [RHEL-32862]
  - arm64/arch_timer: Provide noinstr sched_clock_read() functions (Phil Auld) [RHEL-32862]
  - arm64/io: Always inline all of __raw_{read,write}[bwlq]() (Phil Auld) [RHEL-32862]
  - time/sched_clock: Provide sched_clock_noinstr() (Phil Auld) [RHEL-32862]
  - seqlock/latch: Provide raw_read_seqcount_latch_retry() (Phil Auld) [RHEL-32862]
  - timekeeping: Consolidate fast timekeeper (Phil Auld) [RHEL-32862]
  - timekeeping: Annotate ktime_get_boot_fast_ns() with data_race() (Phil Auld) [RHEL-32862]
  - KVM: s390: Check kvm pointer when testing KVM_CAP_S390_HPAGE_1M (Thomas Huth) [RHEL-29741]
  - s390/mm: Fix storage key clearing for guest huge pages (Thomas Huth) [RHEL-29741]
  - s390/vfio-ap: handle hardware checkstop state on queue reset operation (Thomas Huth) [RHEL-29741]
  - KVM: s390: Refactor kvm_is_error_gpa() into kvm_is_gpa_in_memslot() (Thomas Huth) [RHEL-29741]
  - KVM: s390: selftest: memop: Fix undefined behavior (Thomas Huth) [RHEL-29741]
  - KVM: s390: only deliver the set service event bits (Thomas Huth) [RHEL-29741]
  - KVM: s390: fix virtual vs physical address confusion (Thomas Huth) [RHEL-29741]
  - KVM: s390: move s390-specific structs to uapi/asm/kvm.h (Thomas Huth) [RHEL-29741]
  - KVM: s390: selftests: memop: add a simple AR test (Thomas Huth) [RHEL-29741]
  - KVM: s390: fix access register usage in ioctls (Thomas Huth) [RHEL-29741]
  - KVM: s390: introduce kvm_s390_fpu_(store|load) (Thomas Huth) [RHEL-29741]
  - KVM: selftests: s390x: Remove redundant newlines (Thomas Huth) [RHEL-29741]
  - s390/fpu: remove TIF_FPU (Thomas Huth) [RHEL-29741]
  - s390/fpu: limit save and restore to used registers (Thomas Huth) [RHEL-29741]
  - s390/fpu: decrease stack usage for some cases (Thomas Huth) [RHEL-29741]
  - s390/fpu: let fpu_vlm() and fpu_vstm() return number of registers (Thomas Huth) [RHEL-29741]
  - s390/fpu: remove anonymous union from struct fpu (Thomas Huth) [RHEL-29741]
  - s390/fpu: remove regs member from struct fpu (Thomas Huth) [RHEL-29741]
  - s390/kvm: convert to regular kernel fpu user (Thomas Huth) [RHEL-29741]
  - s390/fpu: make kernel fpu context preemptible (Thomas Huth) [RHEL-29741]
  - s390/fpu: change type of fpu mask from u32 to int (Thomas Huth) [RHEL-29741]
  - s390/fpu: rename save_fpu_regs() to save_user_fpu_regs(), etc (Thomas Huth) [RHEL-29741]
  - s390/fpu: convert FPU CIF flag to regular TIF flag (Thomas Huth) [RHEL-29741]
  - s390/fpu: convert __kernel_fpu_begin()/__kernel_fpu_end() to C (Thomas Huth) [RHEL-29741]
  - s390/fpu: provide and use vlm and vstm inline assemblies (Thomas Huth) [RHEL-29741]
  - s390/fpu: provide and use lfpc, sfpc, and stfpc inline assemblies (Thomas Huth) [RHEL-29741]
  - s390/fpu: provide and use ld and std inline assemblies (Thomas Huth) [RHEL-29741]
  - s390/fpu: use lfpc instead of sfpc instruction (Thomas Huth) [RHEL-29741]
  - s390/fpu: add documentation about fpu helper functions (Thomas Huth) [RHEL-29741]
  - s390/fpu: move, rename, and merge header files (Thomas Huth) [RHEL-29741]
  - s390/fpu: various coding style changes (Thomas Huth) [RHEL-29741]
  - s390/fpu: use KERNEL_VXR_LOW instead of KERNEL_VXR_V0V7 (Thomas Huth) [RHEL-29741]
  - s390/fpu: improve description of RXB macro (Thomas Huth) [RHEL-29741]
  - s390/fpu: fix VLGV macro (Thomas Huth) [RHEL-29741]
  - s390/switch_to: use generic header file (Thomas Huth) [RHEL-29741]
  - s390/acrs: cleanup access register handling (Thomas Huth) [RHEL-29741]
  - s390/fpu: make use of __uninitialized macro (Thomas Huth) [RHEL-29741]
  - Compiler Attributes: Add __uninitialized macro (Thomas Huth) [RHEL-29741]
  - s390/fpu: remove __load_fpu_regs() export (Thomas Huth) [RHEL-29741]
  - KVM: s390: cpu model: Use proper define for facility mask size (Thomas Huth) [RHEL-29741]
  - s390/vx: fix save/restore of fpu kernel context (Thomas Huth) [RHEL-29741]
  - s390/mm: convert pgste locking functions to C (Thomas Huth) [RHEL-29741]
  - s390/fpu: get rid of MACHINE_HAS_VX (Thomas Huth) [RHEL-29741]
  - s390/als: add vector facility to z13 architecture level set (Thomas Huth) [RHEL-29741]
  - s390/fpu: remove "novx" option (Thomas Huth) [RHEL-29741]
  - s390/fpu: remove ARCH_WANTS_DYNAMIC_TASK_STRUCT support (Thomas Huth) [RHEL-29741]
  - KVM: s390: remove superfluous save_fpu_regs() call (Thomas Huth) [RHEL-29741]
  - s390/ptrace: remove leftover comment (Thomas Huth) [RHEL-29741]
  - s390/fpu: get rid of test_fp_ctl() (Thomas Huth) [RHEL-29741]
  - s390: remove .fixup section (Thomas Huth) [RHEL-29741]
  - KVM: s390: use READ_ONCE() to read fpc register value (Thomas Huth) [RHEL-29741]
  - s390/ptrace: handle setting of fpc register correctly (Thomas Huth) [RHEL-29741]
  - KVM: s390: Harden copying of userspace-array against overflow (Thomas Huth) [RHEL-29741]
  - s390/vfio-ap: improve reaction to response code 07 from PQAP(AQIC) command (Thomas Huth) [RHEL-29741]
  - s390/vfio-ap: set status response code to 06 on gisc registration failure (Thomas Huth) [RHEL-29741]
  - s390/ap: fix AP bus crash on early config change callback invocation (Thomas Huth) [RHEL-29741]
  - s390/ap: re-enable interrupt for AP queues (Thomas Huth) [RHEL-29741]
  - s390/ap: rework to use irq info from ap queue status (Thomas Huth) [RHEL-29741]
  - s390/mm: move translation-exception identification structure to fault.h (Thomas Huth) [RHEL-29741]
  - s390/ap: show APFS value on error reply 0x8B (Thomas Huth) [RHEL-29741]
  - s390/zcrypt: introduce new internal AP queue se_bound attribute (Thomas Huth) [RHEL-29741]
  - s390/ap: re-init AP queues on config on (Thomas Huth) [RHEL-29741]
  - s390/setup: use strlcat() instead of strcat() (Thomas Huth) [RHEL-29741]
  - s390/airq: remove lsi_mask from airq_struct (Thomas Huth) [RHEL-29741]
  - s390/pfault: use consistent comment style (Thomas Huth) [RHEL-29741]
  - s390/pfault: cleanup inline assemblies (Thomas Huth) [RHEL-29741]
  - s390/pfault: use early_param() instead if __setup() (Thomas Huth) [RHEL-29741]
  - s390/pfault: remove not needed packed and aligned attributes (Thomas Huth) [RHEL-29741]
  - s390/pfault: use UL instead of ULL (Thomas Huth) [RHEL-29741]
  - s390/mm: move pfault code to own C file (Thomas Huth) [RHEL-29741]
  - s390/virtio_ccw: fix virtual vs physical address confusion (Thomas Huth) [RHEL-29741]
  - s390/cio: use bitwise types to allow for type checking (Thomas Huth) [RHEL-29741]
  - s390/cio: introduce bitwise dma types and helper functions (Thomas Huth) [RHEL-29741]
  - s390/vfio_ccw: fix virtual vs physical address confusion (Thomas Huth) [RHEL-29741]
  - s390/cio: fix virtual vs physical address confusion (Thomas Huth) [RHEL-29741]
  - s390/zcrypt: fix reference counting on zcrypt card objects (Thomas Huth) [RHEL-29741]
  - s390/vtime: fix average steal time calculation (Thomas Huth) [RHEL-29741]
  - s390: include linux/io.h instead of asm/io.h (Thomas Huth) [RHEL-29741]
  - s390: fix various typos (Thomas Huth) [RHEL-29741]
  - lib/bitmap: drop optimization of bitmap_{from,to}_arr64 (Thomas Huth) [RHEL-29741]
  - s390/crypto: use vector instructions only if available for ChaCha20 (Thomas Huth) [RHEL-29741]
  - s390/relocate_kernel: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/entry: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/purgatory: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/kprobes: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/reipl: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/head64: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/earlypgm: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/crc32le: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/crc32be: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/crypto,chacha: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/lib: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390: enable HAVE_ARCH_STACKLEAK (Thomas Huth) [RHEL-29741]
  - s390/stack: set lowcore kernel stack pointer early (Thomas Huth) [RHEL-29741]
  - s390/stack: use STACK_INIT_OFFSET where possible (Thomas Huth) [RHEL-29741]
  - s390/dumpstack: simplify in stack logic code (Thomas Huth) [RHEL-29741]
  - s390/entry: rely on long-displacement facility (Thomas Huth) [RHEL-29741]
  - s390/bp: remove __bpon() (Thomas Huth) [RHEL-29741]
  - s390/bp: remove s390_isolate_bp_guest() (Thomas Huth) [RHEL-29741]
  - s390/bp: remove TIF_ISOLATE_BP (Thomas Huth) [RHEL-29741]
  - s390/bp: add missing BPENTER to program check handler (Thomas Huth) [RHEL-29741]
  - s390/mcck: cleanup user process termination path (Thomas Huth) [RHEL-29741]
  - s390/nmi: fix virtual-physical address confusion (Thomas Huth) [RHEL-29741]
  - s390/entry: remove toolchain dependent micro-optimization (Thomas Huth) [RHEL-29741]
  - s390/vx: remove __uint128_t type from __vector128 struct again (Thomas Huth) [RHEL-29741]
  - s390/vx: use simple assignments to access __vector128 members (Thomas Huth) [RHEL-29741]
  - s390/vx: add 64 and 128 bit members to __vector128 struct (Thomas Huth) [RHEL-29741]
  - s390/virtio: sort out physical vs virtual pointers usage (Thomas Huth) [RHEL-29741]
  - s390/early: fix sclp_early_sccb variable lifetime (Thomas Huth) [RHEL-29741]
  - s390/nmi: get rid of private slab cache (Thomas Huth) [RHEL-29741]
  - s390/nmi: move storage error checking back to C, enter with DAT on (Thomas Huth) [RHEL-29741]
  - s390/nmi: print machine check interruption code before stopping system (Thomas Huth) [RHEL-29741]
  - s390/sclp: introduce sclp_emergency_printk() (Thomas Huth) [RHEL-29741]
  - s390/sclp: keep sclp_early_sccb (Thomas Huth) [RHEL-29741]
  - s390/nmi: rework register validation handling (Thomas Huth) [RHEL-29741]
  - s390/nmi: use vector instruction macros instead of byte patterns (Thomas Huth) [RHEL-29741]
  - s390/vx: add vx-insn.h wrapper include file (Thomas Huth) [RHEL-29741]
  - s390/appldata: remove power management callbacks (Thomas Huth) [RHEL-29741]
  - s390/mm: use pmd_pgtable_page() helper in __gmap_segment_gaddr() (Thomas Huth) [RHEL-29741]
  - mm/thp: rename pmd_to_page() as pmd_pgtable_page() (Thomas Huth) [RHEL-29741]
  - s390/entry: sort out physical vs virtual pointers usage in sie64a (Thomas Huth) [RHEL-29741]
  - s390/nmi: use irqentry_nmi_enter()/irqentry_nmi_exit() (Thomas Huth) [RHEL-29741]
  - lib/test_bitmap: test the tail after bitmap_to_arr64() (Thomas Huth) [RHEL-29741]
  - lib/bitmap: fix off-by-one in bitmap_to_arr64() (Thomas Huth) [RHEL-29741]
  - lib: bitmap: fix the duplicated comments on bitmap_to_arr64() (Thomas Huth) [RHEL-29741]
  - KVM: s390: replace bitmap_copy with bitmap_{from,to}_arr64 where appropriate (Thomas Huth) [RHEL-29741]
  - lib/bitmap: add test for bitmap_{from,to}_arr64 (Thomas Huth) [RHEL-29741]
  - lib: add bitmap_{from,to}_arr64 (Thomas Huth) [RHEL-29741]
  - lib/bitmap: extend comment for bitmap_(from,to)_arr32() (Thomas Huth) [RHEL-29741]
  - s390/stack: add union to reflect kvm stack slot usages (Thomas Huth) [RHEL-29741]
  - s390/stack: merge empty stack frame slots (Thomas Huth) [RHEL-29741]
  - s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST flag (Thomas Huth) [RHEL-29741]
  - s390: generate register offsets into pt_regs automatically (Thomas Huth) [RHEL-29741]
  - s390: simplify early program check handler (Thomas Huth) [RHEL-29741]
  - s390/head: get rid of 31 bit leftovers (Thomas Huth) [RHEL-29741]
  - scripts/min-tool-version.sh: raise minimum clang version to 14.0.0 for s390 (Thomas Huth) [RHEL-29741]
  - s390/boot: do not emit debug info for assembly with llvm's IAS (Thomas Huth) [RHEL-29741]
  - s390/boot: workaround llvm IAS bug (Thomas Huth) [RHEL-29741]
  - s390/purgatory: workaround llvm's IAS limitations (Thomas Huth) [RHEL-29741]
  - s390/entry: workaround llvm's IAS limitations (Thomas Huth) [RHEL-29741]
  - s390/alternatives: remove padding generation code (Thomas Huth) [RHEL-29741]
  - s390/alternatives: provide identical sized orginal/alternative sequences (Thomas Huth) [RHEL-29741]
  - s390/compat: cleanup compat_linux.h header file (Thomas Huth) [RHEL-29741]
  - s390/entry: remove broken and not needed code (Thomas Huth) [RHEL-29741]
  - s390/boot: convert parmarea to C (Thomas Huth) [RHEL-29741]
  - s390/boot: convert initial lowcore to C (Thomas Huth) [RHEL-29741]
  - s390/ptrace: move short psw definitions to ptrace header file (Thomas Huth) [RHEL-29741]
  - s390/head: initialize all new psws (Thomas Huth) [RHEL-29741]
  - s390/boot: change initial program check handler to disabled wait psw (Thomas Huth) [RHEL-29741]
  - s390/head: adjust iplstart entry point (Thomas Huth) [RHEL-29741]
  - s390/vx: remove comments from macros which break LLVM's IAS (Thomas Huth) [RHEL-29741]
  - s390/nospec: prefer local labels in .set directives (Thomas Huth) [RHEL-29741]
  - s390/alternatives: use insn format for new instructions (Thomas Huth) [RHEL-29741]
  - s390/alternatives: avoid using jgnop mnemonic (Thomas Huth) [RHEL-29741]
  - s390/alternatives: use instructions instead of byte patterns (Thomas Huth) [RHEL-29741]
  - s390/traps: improve panic message for translation-specification exception (Thomas Huth) [RHEL-29741]
  - s390: convert ".insn" encoding to instruction names (Thomas Huth) [RHEL-29741]
  - s390/crypto: fix compile error for ChaCha20 module (Thomas Huth) [RHEL-29741]
  - s390/nospec: move to single register thunks (Thomas Huth) [RHEL-29741]
  - s390/ptrace: remove opencoded offsetof (Thomas Huth) [RHEL-29741]
  - s390: always use the packed stack layout (Thomas Huth) [RHEL-29741]
  - s390/ftrace: fix arch_ftrace_get_regs implementation (Thomas Huth) [RHEL-29741]
  - s390/ftrace: fix ftrace_caller/ftrace_regs_caller generation (Thomas Huth) [RHEL-29741]
  - s390/nmi: handle vector validity failures for KVM guests (Thomas Huth) [RHEL-29741]
  - s390/nmi: handle guarded storage validity failures for KVM guests (Thomas Huth) [RHEL-29741]
  - s390/sclp: sort out physical vs virtual pointers usage (Thomas Huth) [RHEL-29741]
  - s390: make STACK_FRAME_OVERHEAD available via asm-offsets.h (Thomas Huth) [RHEL-29741]
  - s390/ftrace: add HAVE_DYNAMIC_FTRACE_WITH_DIRECT_CALL support (Thomas Huth) [RHEL-29741]
  - s390/ptrace: add function argument access API (Thomas Huth) [RHEL-29741]
  - selftests/ftrace: add s390 support for kprobe args tests (Thomas Huth) [RHEL-29741]
  - s390/ptrace: fix coding style (Thomas Huth) [RHEL-29741]
  - s390/ftrace: provide separate ftrace_caller/ftrace_regs_caller implementations (Thomas Huth) [RHEL-29741]
  - s390/ftrace: add ftrace_instruction_pointer_set() helper function (Thomas Huth) [RHEL-29741]
  - s390/ftrace: add HAVE_DYNAMIC_FTRACE_WITH_ARGS support (Thomas Huth) [RHEL-29741]
  - s390/jump_label: make use of HAVE_JUMP_LABEL_BATCH (Thomas Huth) [RHEL-29741]
  - s390/ftrace: add missing serialization for graph caller patching (Thomas Huth) [RHEL-29741]
  - s390/ftrace: use text_poke_sync_lock() (Thomas Huth) [RHEL-29741]
  - s390/jump_label: use text_poke_sync() (Thomas Huth) [RHEL-29741]
  - s390/ftrace: remove dead code (Thomas Huth) [RHEL-29741]
  - s390/ftrace: remove incorrect __va usage (Thomas Huth) [RHEL-29741]
  - s390/sclp: add __nonstring annotation (Thomas Huth) [RHEL-29741]
  - s390/entry: make oklabel within CHKSTG macro local (Thomas Huth) [RHEL-29741]
  - s390/sclp: add tracing of SCLP interactions (Thomas Huth) [RHEL-29741]
  - s390/debug: fix kernel-doc warnings (Thomas Huth) [RHEL-29741]
  - s390/debug: add early tracing support (Thomas Huth) [RHEL-29741]
  - s390/debug: fix debug area life cycle (Thomas Huth) [RHEL-29741]
  - s390/debug: keep debug data on resize (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: make sie capability regular hwcap (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: remove hwcap stfle check (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: remove z/Architecture mode active check (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: use consistent coding style / remove comments (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: open code initialization of first six hwcap bits (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: split setup_hwcaps() (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: move setup_hwcaps() (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: add sanity checks (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: use named initializers for hwcap string arrays (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: introduce HWCAP bit numbers (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: shorten HWCAP defines (Thomas Huth) [RHEL-29741]
  - s390/cpacf: get rid of register asm (Thomas Huth) [RHEL-29741]
  - s390/debug: remove unused print defines (Thomas Huth) [RHEL-29741]
  - s390/dasd: remove debug printk (Thomas Huth) [RHEL-29741]
  - ipc/msg.c: fix percpu_counter use after free (Rafael Aquini) [RHEL-15602]
  - ipc/msg: mitigate the lock contention with percpu counter (Rafael Aquini) [RHEL-15602]
  - percpu: add percpu_counter_add_local and percpu_counter_sub_local (Rafael Aquini) [RHEL-15602]
  - redhat/configs: Add CONFIG_USB_PCI_AMD (Desnes Nunes) [RHEL-28810]
  - redhat/configs: Add CONFIG_USB_LJCA (Desnes Nunes) [RHEL-28810]
  - redhat/configs: Add CONFIG_USB_CHIPIDEA_NPCM (Desnes Nunes) [RHEL-28810]
  - redhat/configs: Add CONFIG_TYPEC_MUX_PTN36502 (Desnes Nunes) [RHEL-28810]
  - usb: xhci-mtk: set the dma max_seg_size (Desnes Nunes) [RHEL-28810]
  - usb: xhci-mtk: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-28810]
  - xhci: tracing: Use the new __vstring() helper (Desnes Nunes) [RHEL-28810]
  - Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Fix NULL pointer dereference in tb_port_update_credits() (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Do not create DisplayPort tunnels on adapters of the same router (Desnes Nunes) [RHEL-28810]
  - usb: misc: onboard_hub: use pointer consistently in the probe function (Desnes Nunes) [RHEL-28810]
  - usb: typec: ucsi: Fix race between typec_switch and role_switch (Desnes Nunes) [RHEL-28810]
  - USB: serial: option: add Quectel EG912Y module support (Desnes Nunes) [RHEL-28810]
  - USB: serial: ftdi_sio: update Actisense PIDs constant names (Desnes Nunes) [RHEL-28810]
  - usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3 (Desnes Nunes) [RHEL-28810]
  - usb: typec: ucsi: fix gpio-based orientation detection (Desnes Nunes) [RHEL-28810]
  - USB: serial: option: add Quectel RM500Q R13 firmware support (Desnes Nunes) [RHEL-28810]
  - USB: serial: option: add Foxconn T99W265 with new baseline (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth (Desnes Nunes) [RHEL-28810]
  - r8152: add vendor/device ID pair for ASUS USB-C2500 (Desnes Nunes) [RHEL-28810]
  - Revert "xhci: Loosen RPM as default policy to cover for AMD xHC 1.1" (Desnes Nunes) [RHEL-28810]
  - usb: typec: class: fix typec_altmode_put_partner to put plugs (Desnes Nunes) [RHEL-28810]
  - USB: gadget: core: adjust uevent timing on gadget unbind (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Fix memory leak in margining_port_remove() (Desnes Nunes) [RHEL-28810]
  - USB: serial: option: add Luat Air72*U series products (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: qcom,dwc3: fix example wakeup interrupt types (Desnes Nunes) [RHEL-28810]
  - USB: serial: option: add Fibocom L7xx modules (Desnes Nunes) [RHEL-28810]
  - USB: xhci-plat: fix legacy PHY double init (Desnes Nunes) [RHEL-28810]
  - usb: typec: tipd: Supply also I2C driver data (Desnes Nunes) [RHEL-28810]
  - i2c: Add i2c_get_match_data() (Desnes Nunes) [RHEL-28810]
  - usb: xhci-mtk: fix in-ep's start-split check failure (Desnes Nunes) [RHEL-28810]
  - usb: dwc3: set the dma max_seg_size (Desnes Nunes) [RHEL-28810]
  - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-28810]
  - usb: dwc3: add missing of_node_put and platform_device_put (Desnes Nunes) [RHEL-28810]
  - usb: dwc3: Fix default mode initialization (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Fix a memory leak in an error handling path (Desnes Nunes) [RHEL-28810]
  - usb: typec: tcpm: Skip hard reset when in error recovery (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: hcd: add missing phy name to example (Desnes Nunes) [RHEL-28810]
  - USB: serial: option: don't claim interface 4 for ZTE MF290 (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Only add device router DP IN to the head of the DP resource list (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Send uevent after asymmetric/symmetric switch (Desnes Nunes) [RHEL-28810]
  - usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: fsa4480: Add compatible for OCP96011 (Desnes Nunes) [RHEL-28810]
  - usb: typec: fsa4480: Add support to swap SBU orientation (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: fsa4480: Add data-lanes property to endpoint (Desnes Nunes) [RHEL-28810]
  - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: rockchip,dwc3: update inno usb2 phy binding name (Desnes Nunes) [RHEL-28810]
  - Revert "dt-bindings: usb: Add bindings for multiport properties on DWC3 controller" (Desnes Nunes) [RHEL-28810]
  - Revert "dt-bindings: usb: qcom,dwc3: Add bindings for SC8280 Multiport" (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Fix one kernel-doc comment (Desnes Nunes) [RHEL-28810]
  - usb: core: Remove duplicated check in usb_hub_create_port_device (Desnes Nunes) [RHEL-28810]
  - usb: typec: tcpm: Add additional checks for contaminant (Desnes Nunes) [RHEL-28810]
  - usb: dwc3: add optional PHY interface clocks (Desnes Nunes) [RHEL-28810]
  - usb: typec: add support for PTN36502 redriver (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: add NXP PTN36502 Type-C redriver bindings (Desnes Nunes) [RHEL-28810]
  - usb: chipidea: Fix unused ci_hdrc_usb2_of_match warning for !CONFIG_OF (Desnes Nunes) [RHEL-28810]
  - usb: chipidea: Add support for NPCM (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: ci-hdrc-usb2: add npcm750 and npcm845 compatible (Desnes Nunes) [RHEL-28810]
  - usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: vialab,vl817: remove reset-gpios from required list (Desnes Nunes) [RHEL-28810]
  - usb-storage,uas: make internal quirks flags 64bit (Desnes Nunes) [RHEL-28810]
  - usb-storage: remove UNUSUAL_VENDOR_INTF macro (Desnes Nunes) [RHEL-28810]
  - usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present (Desnes Nunes) [RHEL-28810]
  - usb: host: xhci-plat: fix possible kernel oops while resuming (Desnes Nunes) [RHEL-28810]
  - usb: xhci: Implement xhci_handshake_check_state() helper (Desnes Nunes) [RHEL-28810]
  - xhci: split free interrupter into separate remove and free parts (Desnes Nunes) [RHEL-28810]
  - xhci: Enable RPM on controllers that support low-power states (Desnes Nunes) [RHEL-28810]
  - xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 (Desnes Nunes) [RHEL-28810]
  - xhci: Simplify event ring dequeue pointer update for port change events (Desnes Nunes) [RHEL-28810]
  - xhci: simplify event ring dequeue tracking for transfer events (Desnes Nunes) [RHEL-28810]
  - xhci: Clean up xhci_{alloc,free}_erst() declarations (Desnes Nunes) [RHEL-28810]
  - usb: Annotate struct urb_priv with __counted_by (Desnes Nunes) [RHEL-28810]
  - xhci: Clean up stale comment on ERST_SIZE macro (Desnes Nunes) [RHEL-28810]
  - xhci: Clean up ERST_PTR_MASK inversion (Desnes Nunes) [RHEL-28810]
  - xhci: Expose segment numbers in debugfs (Desnes Nunes) [RHEL-28810]
  - xhci: Update last segment pointer after Event Ring expansion (Desnes Nunes) [RHEL-28810]
  - xhci: Adjust segment numbers after ring expansion (Desnes Nunes) [RHEL-28810]
  - xhci: Use more than one Event Ring segment (Desnes Nunes) [RHEL-28810]
  - xhci: Set DESI bits in ERDP register correctly (Desnes Nunes) [RHEL-28810]
  - xhci: expand next_trb() helper to support more ring types (Desnes Nunes) [RHEL-28810]
  - xhci: Add busnumber to port tracing (Desnes Nunes) [RHEL-28810]
  - xhci: pass port structure to tracing instead of port number (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Configure asymmetric link if needed and bandwidth allows (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Add support for asymmetric link (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Introduce tb_switch_depth() (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Introduce tb_for_each_upstream_port_on_path() (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Introduce tb_port_path_direction_downstream() (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Set path power management packet support bit for USB4 v2 routers (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Change bandwidth reservations to comply USB4 v2 (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Make is_gen4_link() available to the rest of the driver (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth() (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Use constants for path weight and priority (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: ti,tps6598x: Disallow undefined properties (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: gpio-sbu-mux: Make 'mode-switch' not required (Desnes Nunes) [RHEL-28810]
  - usb: Inform the USB Type-C class about enumerated devices (Desnes Nunes) [RHEL-28810]
  - usb: typec: Link enumerated USB devices with Type-C partner (Desnes Nunes) [RHEL-28810]
  - media: cx231xx: Use EP5_BUF_SIZE macro (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Add DP IN added last in the head of the list of DP resources (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Log NVM version of routers and retimers (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Use tb_tunnel_xxx() log macros in tb.c (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Fix typo of HPD bit for Hot Plug Detect (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Fix typo in enum tb_link_width kernel-doc (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Fix debug log when DisplayPort adapter not available for pairing (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Check for unplugged router in tb_switch_clx_disable() (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Make tb_switch_clx_is_supported() static (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Get rid of usb4_usb3_port_actual_link_rate() (Desnes Nunes) [RHEL-28810]
  - thunderbolt: dma_test: Use enum tb_link_width (Desnes Nunes) [RHEL-28810]
  - usb: typec: altmodes/displayport: fixup drm internal api change vs new user. (Desnes Nunes) [RHEL-28810]
  - drm: Add HPD state to drm_connector_oob_hotplug_event() (Desnes Nunes) [RHEL-28810]
  - usb: Add support for Intel LJCA device (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Add status trace for tps25750 (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Add power status trace for tps25750 (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Add trace for tps25750 irq (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Add TPS25750 support (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Add device data to of_device_id (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Refactor tps6598x port registration (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Add patch mode to tps6598x (Desnes Nunes) [RHEL-28810]
  - USB: typec: tsp6598x: Add cmd timeout and response delay (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: tps6598x: Add tps25750 (Desnes Nunes) [RHEL-28810]
  - usb: Use device_get_match_data() (Desnes Nunes) [RHEL-28810]
  - usb: dwc2: add pci_device_id driver_data parse support (Desnes Nunes) [RHEL-28810]
  - usb: usbtest: fix a type promotion bug (Desnes Nunes) [RHEL-28810]
  - usb: ucsi: glink: use the connector orientation GPIO to provide switch events (Desnes Nunes) [RHEL-28810]
  - usb: dwc3: document gfladj_refclk_lpm_sel field (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: gpio-sbu-mux: Add an entry for CBDTU02043 (Desnes Nunes) [RHEL-28810]
  - docs: driver-api: usb: update dma info (Desnes Nunes) [RHEL-28810]
  - USB: dma: remove unused function prototype (Desnes Nunes) [RHEL-28810]
  - usb: atm: Use size_add() in call to struct_size() (Desnes Nunes) [RHEL-28810]
  - usb: gadget: clarify usage of USB_GADGET_DELAYED_STATUS (Desnes Nunes) [RHEL-28810]
  - usb: pd: Exposing the Peak Current value of Fixed Supplies to user space (Desnes Nunes) [RHEL-28810]
  - usb:typec:tcpm:support double Rp to Vbus cable as sink (Desnes Nunes) [RHEL-28810]
  - usb: xhci-mtk: improve split scheduling by separate IN/OUT budget (Desnes Nunes) [RHEL-28810]
  - usb: xhci-mtk: add a bandwidth budget table (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: ci-hdrc-usb2: Allow "fsl,imx27-usb" to be passed alone (Desnes Nunes) [RHEL-28810]
  - usb: pci-quirks: handle HAS_IOPORT dependency for UHCI handoff (Desnes Nunes) [RHEL-28810]
  - usb: pci-quirks: handle HAS_IOPORT dependency for AMD quirk (Desnes Nunes) [RHEL-28810]
  - usb: pci-quirks: group AMD specific quirk code together (Desnes Nunes) [RHEL-28810]
  - usbmon: Use list_for_each_entry() helper (Desnes Nunes) [RHEL-28810]
  - usb: chipidea: tegra: Consistently use dev_err_probe() (Desnes Nunes) [RHEL-28810]
  - usb: chipidea: Simplify Tegra DMA alignment code (Desnes Nunes) [RHEL-28810]
  - usb: chipidea: Fix DMA overwrite for Tegra (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: dwc3: Add SDX75 compatible (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: qcom,dwc3: Fix SDX65 clocks (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: dwc3: Add DWC_usb3 TX/RX threshold configurable (Desnes Nunes) [RHEL-28810]
  - usb: dwc3: core: configure TX/RX threshold for DWC3_IP (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: dwc3: Add Realtek DHC RTD SoC DWC3 USB (Desnes Nunes) [RHEL-28810]
  - usb: dwc3: add Realtek DHC RTD SoC dwc3 glue layer driver (Desnes Nunes) [RHEL-28810]
  - usb: typec: intel_pmc_mux: Configure Displayport Alternate mode 2.1 (Desnes Nunes) [RHEL-28810]
  - usb: pd: Add helper macro to get Type C cable speed (Desnes Nunes) [RHEL-28810]
  - usb: typec: Add Active or Passive cable defination to cable discover mode VDO (Desnes Nunes) [RHEL-28810]
  - usb: typec: Add Displayport Alternate Mode 2.1 Support (Desnes Nunes) [RHEL-28810]
  - usb: xhci: Move extcaps related macros to respective header file (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: Add bindings for multiport properties on DWC3 controller (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: qcom,dwc3: Add bindings for SC8280 Multiport (Desnes Nunes) [RHEL-28810]
  - usb: typec: intel_pmc_mux: enable sysfs usb role access (Desnes Nunes) [RHEL-28810]
  - usb: typec: intel_pmc_mux: Add new ACPI ID for Lunar Lake IOM device (Desnes Nunes) [RHEL-28810]
  - usb: typec: intel_pmc_mux: Expose IOM port status to debugfs (Desnes Nunes) [RHEL-28810]
  - usb: typec: intel_pmc_mux: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-28810]
  - media: cx231xx: Add EP5_BUF_SIZE and EP5_TIMEOUT_MS macros (Desnes Nunes) [RHEL-28810]
  - media: cx231xx: Switch to use kmemdup() helper (Desnes Nunes) [RHEL-28810]
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-28810]
  - media: usb: siano: Use kmemdup to simplify kmalloc and memcpy logic (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager (Desnes Nunes) [RHEL-28810]
  - phy: broadcom: sr-usb: fix Wvoid-pointer-to-enum-cast warning (Desnes Nunes) [RHEL-28810]
  - phy: fsl-imx8mq-usb: add dev_err_probe if getting vbus failed (Desnes Nunes) [RHEL-28810]
  - phy: fsl-imx8mp-usb: add support for phy tuning (Desnes Nunes) [RHEL-28810]
  - phy: tegra: xusb: check return value of devm_kzalloc() (Desnes Nunes) [RHEL-28810]
  - phy: tegra: xusb: Clear the driver reference in usb-phy dev (Desnes Nunes) [RHEL-28810]
  - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Desnes Nunes) [RHEL-28810]
  - phy: tegra: xusb: Support sleepwalk for Tegra234 (Desnes Nunes) [RHEL-28810]
  - phy: tegra: xusb: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx_pci: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx_pci: Drop if block with always false condition (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx_pci: fix return value check of mmc_add_host() (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx: add 74 Clocks in power on flow (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx: Fix build errors/warnings for unused variable (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx: Let MMC core handle runtime PM (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx: Use pm_runtime_{get,put}() to handle runtime PM (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx_pci: Fix long reads when clock is prescaled (Desnes Nunes) [RHEL-28810]
  - misc: rtsx: Fix clang -Wsometimes-uninitialized in rts5261_init_from_hw() (Desnes Nunes) [RHEL-28810]
  - misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to probe (Desnes Nunes) [RHEL-28810]
  - misc: rtsx: add rts5261 efuse function (Desnes Nunes) [RHEL-28810]
  - misc: rtsx: judge ASPM Mode to set PETXCFG Reg (Desnes Nunes) [RHEL-28810]
  - misc: rtsx_pcr: Fix a typo (Desnes Nunes) [RHEL-28810]
  - misc: rtsx: Fix an error handling path in rtsx_pci_probe() (Desnes Nunes) [RHEL-28810]
  - misc: rtsx: Avoid mangling IRQ during runtime PM (Desnes Nunes) [RHEL-28810]
  - misc: rtsx: Remove usage of the deprecated "pci-dma-compat.h" API (Desnes Nunes) [RHEL-28810]
  - mlxsw: core_env: Fix driver initialization with old firmware (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Register netdevice notifier before nexthop (Ivan Vecera) [RHEL-34673]
  - mlxsw: pci: Allocate skbs using GFP_KERNEL during initialization (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_ethtool: Fix -Wformat-truncation warning (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_thermal: Fix -Wformat-truncation warning (Ivan Vecera) [RHEL-34673]
  - mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_acl_flex_keys: Fill blocks with high entropy first (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_acl_flex_keys: Save chosen elements in all blocks per search (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_acl_flex_keys: Save chosen elements per block (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_acl_flex_keys: Add a bitmap to save which blocks are chosen (Ivan Vecera) [RHEL-34673]
  - mlxsw: Mark high entropy key blocks (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_span: Annotate struct mlxsw_sp_span with __counted_by (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Annotate struct mlxsw_sp_nexthop_group_info with __counted_by (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Annotate struct mlxsw_sp_counter_pool with __counted_by (Ivan Vecera) [RHEL-34673]
  - mlxsw: core: Annotate struct mlxsw_env with __counted_by (Ivan Vecera) [RHEL-34673]
  - mlxsw: Annotate struct mlxsw_linecards with __counted_by (Ivan Vecera) [RHEL-34673]
  - mlxsw: i2c: Utilize standard macros for dividing buffer into chunks (Ivan Vecera) [RHEL-34673]
  - mlxsw: core: Extend allowed list of external cooling devices for thermal zone binding (Ivan Vecera) [RHEL-34673]
  - mlxsw: reg: Limit MTBR register payload to a single data record (Ivan Vecera) [RHEL-34673]
  - mlxsw: Edit IPv6 key blocks to use one less block for multicast forwarding (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_acl_flex_keys: Add 'ipv4_5b' flex key (Ivan Vecera) [RHEL-34673]
  - mlxsw: Add 'ipv4_5' flex key (Ivan Vecera) [RHEL-34673]
  - mlxsw: Use size_mul() in call to struct_size() (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_hwmon: Adjust module label names based on MTCAP sensor counter (Ivan Vecera) [RHEL-34673]
  - mlxsw: i2c: Limit single transaction buffer size (Ivan Vecera) [RHEL-34673]
  - mlxsw: i2c: Fix chunk size setting in output mailbox buffer (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: Fix test failure on Spectrum-4 (Ivan Vecera) [RHEL-34673]
  - mlxsw: Fix the size of 'VIRT_ROUTER_MSB' (Ivan Vecera) [RHEL-34673]
  - mlxsw: reg: Fix SSPR register layout (Ivan Vecera) [RHEL-34673]
  - mlxsw: pci: Set time stamp fields also when its type is MIRROR_UTC (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Stop ignoring learning notifications from redirected traffic (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_flower: Disable learning and security lookup when redirecting (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_acl_flex_actions: Add IGNORE_ACTION (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_switchdev: Use is_zero_ether_addr() instead of ether_addr_equal() (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: router_bridge_lag: Add a new selftest (Ivan Vecera) [RHEL-34673]
  - mlxsw: Set port STP state on bridge enslavement (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Remove unused function declarations (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: rif_bridge: Add a new selftest (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: rif_lag_vlan: Add a new selftest (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: rif_lag: Add a new selftest (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: IPv6 events: Use tracker helpers to hold & put netdevices (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: RIF: Use tracker helpers to hold & put netdevices (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: hw_stats: Use tracker helpers to hold & put netdevices (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: FIB: Use tracker helpers to hold & put netdevices (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_switchdev: Use tracker helpers to hold & put netdevices (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_nve: Do not take reference when looking up netdevice (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Drop unused functions mlxsw_sp_port_lower_dev_hold/_put() (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_env: Read transceiver module EEPROM in 128 bytes chunks (Ivan Vecera) [RHEL-34673]
  - mlxsw: reg: Increase Management Cable Info Access Register length (Ivan Vecera) [RHEL-34673]
  - mlxsw: reg: Remove unused function argument (Ivan Vecera) [RHEL-34673]
  - mlxsw: reg: Add Management Capabilities Mask Register (Ivan Vecera) [RHEL-34673]
  - mlxsw: reg: Move 'mpsc' definition in 'mlxsw_reg_infos' (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Permit enslavement to netdevices with uppers (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Replay IP NETDEV_UP on device deslavement (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Replay IP NETDEV_UP on device enslavement (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Replay neighbours when RIF is made (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Replay MACVLANs when RIF is made (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Offload ethernet nexthops when RIF is made (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Join RIFs of LAG upper VLANs (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_switchdev: Replay switchdev objects on port join (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: On port enslavement to a LAG, join upper's bridges (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Add a replay_deslavement argument to event handlers (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Allow event handlers to check unowned bridges (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Split a helper out of mlxsw_sp_netdevice_event() (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Extract a helper to schedule neighbour work (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Allow address handlers to run on bridge ports (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: rtnetlink: Drop obsolete tests (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_switchdev: Manage RIFs on PVID change (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: mlxsw_sp_inetaddr_bridge_event: Add an argument (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Adjust mlxsw_sp_inetaddr_vlan_event() coding style (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Take VID for VLAN FIDs from RIF params (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Pass struct mlxsw_sp_rif_params to fid_get (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_switchdev: Pass extack to mlxsw_sp_br_ban_rif_pvid_change() (Ivan Vecera) [RHEL-34673]
  - selftests: forwarding: Add test cases for flower port range matching (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: Test port range registers' occupancy (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: Add scale test for port ranges (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_flower: Add ability to match on port ranges (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_acl: Pass main driver structure to mlxsw_sp_acl_rulei_destroy() (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_acl: Add port range key element (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_port_range: Add devlink resource support (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_port_range: Add port range core (Ivan Vecera) [RHEL-34673]
  - mlxsw: resource: Add resource identifier for port range registers (Ivan Vecera) [RHEL-34673]
  - mlxsw: reg: Add Policy-Engine Port Range Register (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Fix an IS_ERR() vs NULL check (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Track next hops at CRIFs (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Split nexthop finalization to two stages (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Use router.lb_crif instead of .lb_rif_index (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Link CRIFs to RIFs (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Maintain CRIF for fallback loopback RIF (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Maintain a hash table of CRIFs (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Use mlxsw_sp_ul_rif_get() to get main VRF LB RIF (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Add extack argument to mlxsw_sp_lb_rif_init() (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: one_armed_router: Use port MAC for bridge address (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: vxlan: Disable IPv6 autogen on bridges (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: spectrum: q_in_vni_veto: Disable IPv6 autogen on a bridge (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: qos_mc_aware: Disable IPv6 autogen on bridges (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: qos_ets_strict: Disable IPv6 autogen on bridges (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: qos_dscp_bridge: Disable IPv6 autogen on a bridge (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: mirror_gre_scale: Disable IPv6 autogen on a bridge (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: extack: Disable IPv6 autogen on bridges (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: q_in_q_veto: Disable IPv6 autogen on bridges (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Move IPIP init up (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Extract a helper for RIF migration (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Add a helper to check if netdev has addresses (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Extract a helper to free a RIF (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Access nhgi->rif through a helper (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Access nh->rif->dev through a helper (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Access rif->dev from params in mlxsw_sp_rif_create() (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Access rif->dev through a helper (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Add a helper specifically for joining a LAG (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Extract a helper from mlxsw_sp_port_vlan_router_join() (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Privatize mlxsw_sp_rif_dev() (Ivan Vecera) [RHEL-34673]
  - mlxsw: Convert does-RIF-have-this-netdev queries to a dedicated helper (Ivan Vecera) [RHEL-34673]
  - mlxsw: Convert RIF-has-netdevice queries to a dedicated helper (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Reuse work neighbor initialization in work scheduler (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Use the available router pointer for netevent handling (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Pass router to mlxsw_sp_router_schedule_work() directly (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Move here inetaddr validator notifiers (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: mlxsw_sp_router_fini(): Extract a helper variable (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: egress_vid_classification: Fix the diagram (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: ingress_rif_conf_1d: Fix the diagram (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Do not query MAX_VRS on each iteration (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Do not query MAX_RIFS on each iteration (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Use extack in mlxsw_sp~_rif_ipip_lb_configure() (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Clarify a comment (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_flower: Add ability to match on layer 2 miss (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_flower: Do not force matching on iif (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_flower: Split iif parsing to a separate function (Ivan Vecera) [RHEL-34673]
  - mlxfw: Replace zero-length array with DECLARE_FLEX_ARRAY() helper (Ivan Vecera) [RHEL-34673]
  - selftests: forwarding: introduce helper for standard ethtool counters (Ivan Vecera) [RHEL-34673]
  - selftests: forwarding: generalize bail_on_lldpad from mlxsw (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_thermal: Simplify transceiver module get_temp() callback (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_thermal: Make mlxsw_thermal_module_init() void (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_thermal: Use static trip points for transceiver modules (Ivan Vecera) [RHEL-34673]
  - net/mlxsw: Convert to i2c's .probe_new() (Ivan Vecera) [RHEL-34673]
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Ivan Vecera) [RHEL-32141]
  - cgroup/cpuset: Fix retval in update_cpumask() (Waiman Long) [RHEL-34600]
  - cgroup/cpuset: Fix a memory leak in update_exclusive_cpumask() (Waiman Long) [RHEL-34600]
  - kernel/cgroup: use kernfs_create_dir_ns() (Waiman Long) [RHEL-34600]
  - PM: sleep: Remove obsolete comment from unlock_system_sleep() (Waiman Long) [RHEL-34600]
  - Documentation: PM: Adjust freezing-of-tasks.rst to the freezer changes (Waiman Long) [RHEL-34600]
  - cgroup: Move rcu_head up near the top of cgroup_root (Waiman Long) [RHEL-34600]
  - cgroup: Add a new helper for cgroup1 hierarchy (Waiman Long) [RHEL-34600]
  - cgroup: Add annotation for holding namespace_sem in current_cgns_cgroup_from_root() (Waiman Long) [RHEL-34600]
  - cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show() (Waiman Long) [RHEL-34600]
  - cgroup: Make operations on the cgroup root_list RCU safe (Waiman Long) [RHEL-34600]
  - cgroup: Remove unnecessary list_empty() (Waiman Long) [RHEL-34600]
  - cgroup_freezer: cgroup_freezing: Check if not frozen (Waiman Long) [RHEL-34600]
  - sched: psi: fix unprivileged polling against cgroups (Waiman Long) [RHEL-34600]
  - cgroup: use legacy_name for cgroup v1 disable info (Waiman Long) [RHEL-34600]
  - cgroup: Avoid extra dereference in css_populate_dir() (Waiman Long) [RHEL-34600]
  - cgroup: Check for ret during cgroup1_base_files cft addition (Waiman Long) [RHEL-34600]
  - sched/core: Update stale comment in try_to_wake_up() (Waiman Long) [RHEL-34600]
  - cgroup: Remove duplicates in cgroup v1 tasks file (Waiman Long) [RHEL-34600]
  - cgroup: fix build when CGROUP_SCHED is not enabled (Waiman Long) [RHEL-34600]
  - cgroup: Avoid -Wstringop-overflow warnings (Waiman Long) [RHEL-34600]
  - cgroup:namespace: Remove unused cgroup_namespaces_init() (Waiman Long) [RHEL-34600]
  - cgroup/rstat: Record the cumulative per-cpu time of cgroup and its descendants (Waiman Long) [RHEL-34600]
  - cgroup: clean up if condition in cgroup_pidlist_start() (Waiman Long) [RHEL-34600]
  - cgroup: fix obsolete function name in cgroup_destroy_locked() (Waiman Long) [RHEL-34600]
  - cgroup: fix obsolete function name above css_free_rwork_fn() (Waiman Long) [RHEL-34600]
  - cgroup/cpuset: fix kernel-doc (Waiman Long) [RHEL-34600]
  - cgroup: clean up printk() (Waiman Long) [RHEL-34600]
  - cgroup: fix obsolete comment above cgroup_create() (Waiman Long) [RHEL-34600]
  - cgroup/misc: Store atomic64_t reads to u64 (Waiman Long) [RHEL-34600]
  - cgroup/misc: Change counters to be explicit 64bit types (Waiman Long) [RHEL-34600]
  - cgroup/misc: update struct members descriptions (Waiman Long) [RHEL-34600]
  - cgroup: remove cgrp->kn check in css_populate_dir() (Waiman Long) [RHEL-34600]
  - cgroup: fix obsolete function name (Waiman Long) [RHEL-34600]
  - cgroup: use cached local variable parent in for loop (Waiman Long) [RHEL-34600]
  - cgroup: put cgroup_tryget_css() inside CONFIG_CGROUP_SCHED (Waiman Long) [RHEL-34600]
  - cgroup: fix obsolete comment above for_each_css() (Waiman Long) [RHEL-34600]
  - cgroup/cpuset: avoid unneeded cpuset_mutex re-lock (Waiman Long) [RHEL-34600]
  - cgroup: minor cleanup for cgroup_extra_stat_show() (Waiman Long) [RHEL-34600]
  - cgroup: remove unneeded return value of cgroup_rm_cftypes_locked() (Waiman Long) [RHEL-34600]
  - kernfs: add stub helper for kernfs_generic_poll() (Waiman Long) [RHEL-34600]
  - sched/psi: Select KERNFS as needed (Waiman Long) [RHEL-34600]
  - sched: add throttled time stat for throttled children (Waiman Long) [RHEL-34600]
  - sched: don't account throttle time for empty groups (Waiman Long) [RHEL-34600]
  - sched/psi: use kernfs polling functions for PSI trigger polling (Waiman Long) [RHEL-34600]
  - psi: remove 500ms min window size limitation for triggers (Waiman Long) [RHEL-34600]
  - cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}() (Waiman Long) [RHEL-34600]
  - cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex (Waiman Long) [RHEL-34600]
  - freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL (Waiman Long) [RHEL-34600]
  - sched: Fix race in task_call_func() (Waiman Long) [RHEL-34600]
  - sched/psi: Per-cgroup PSI accounting disable/re-enable interface (Waiman Long) [RHEL-34600]
  - sched: Fix more TASK_state comparisons (Waiman Long) [RHEL-34600]
  - sched: Fix TASK_state comparisons (Waiman Long) [RHEL-34600]
  - freezer,sched: Rewrite core freezer logic (Waiman Long) [RHEL-34600]
  - cgroup.c: remove redundant check for mixable cgroup in cgroup_migrate_vet_dst (Waiman Long) [RHEL-34600]
  - ethtool: add SET for TCP_DATA_SPLIT ringparam (Ivan Vecera) [RHEL-32112]
  - i40e: Report MFS in decimal base instead of hex (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: fix i40e_count_filters() to count only active/new filters (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: Enforce software interrupt during busy-poll exit (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: remove unnecessary qv_info ptr NULL checks (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: Remove VEB recursion (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: Fix broken support for floating VEBs (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: Add helpers to find VSI and VEB by SEID and use them (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: Introduce and use macros for iterating VSIs and VEBs (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: Use existing helper to find flow director VSI (Kamal Heib) [RHEL-17460 RHEL-25596]
  - cpufreq: intel_pstate: Update default EPPs for Meteor Lake (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: Allow model specific EPPs (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: Refine computation of P-state for given frequency (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: Prioritize firmware-provided balance performance EPP (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: Revise global turbo disable check (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: set stale CPU frequency to minimum (Steve Best) [RHEL-34665]
  - bitfield: add FIELD_PREP_CONST() (Steve Best) [RHEL-34665]
  - NFSv4.1/pnfs: fix NFS with TLS in pnfs (Benjamin Coddington) [RHEL-34576]
  - octeontx2-af: Use separate handlers for interrupts (Kamal Heib) [RHEL-35170] {CVE-2024-27030}
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35078] {CVE-2024-26993}
  - init/main.c: Fix potential static_command_line memory overflow (Steve Best) [RHEL-35088] {CVE-2024-26988}
  - tls: remove redundant assignment to variable decrypted (Sabrina Dubroca) [RHEL-29306]
  - net: skbuff: generalize the skb->decrypted bit (Sabrina Dubroca) [RHEL-29306]
  - tls: fix lockless read of strp->msg_ready in ->poll (Sabrina Dubroca) [RHEL-29306]
  - tls: get psock ref after taking rxlock to avoid leak (Sabrina Dubroca) [RHEL-29306]
  - selftests: tls: add test with a partially invalid iov (Sabrina Dubroca) [RHEL-29306]
  - tls: adjust recv return with async crypto and failed copy to userspace (Sabrina Dubroca) [RHEL-29306]
  - tls: recv: process_rx_list shouldn't use an offset with kvec (Sabrina Dubroca) [RHEL-29306]
  - tls: fix peeking with sync+async decryption (Sabrina Dubroca) [RHEL-29306]
  - selftests: tls: add test for peeking past a record of a different type (Sabrina Dubroca) [RHEL-29306]
  - selftests: tls: add test for merging of same-type control messages (Sabrina Dubroca) [RHEL-29306]
  - tls: don't skip over different type records from the rx_list (Sabrina Dubroca) [RHEL-29306]
  - tls: stop recv() if initial process_rx_list gave us non-DATA (Sabrina Dubroca) [RHEL-29306]
  - tls: break out of main loop when PEEK gets a non-data record (Sabrina Dubroca) [RHEL-29306]
  - selftests: tls: increase the wait in poll_partial_rec_async (Sabrina Dubroca) [RHEL-29306]
  - net: tls: fix returned read length with async decrypt (Sabrina Dubroca) [RHEL-29306]
  - selftests: tls: use exact comparison in recv_partial (Sabrina Dubroca) [RHEL-29306]
  - net: tls, add test to capture error on large splice (Sabrina Dubroca) [RHEL-29306]
  - tls: Use size_add() in call to struct_size() (Sabrina Dubroca) [RHEL-29306]
  - net/tls: avoid TCP window full during ->read_sock() (Sabrina Dubroca) [RHEL-29306]
  - PCI: Fix pci_rh_check_status() call semantics (Luiz Capitulino) [RHEL-35032]
  - ionic: keep stats struct local to error handling (Michal Schmidt) [RHEL-36065]
  - ionic: better dma-map error handling (Michal Schmidt) [RHEL-36065]
  - ionic: remove unnecessary NULL test (Michal Schmidt) [RHEL-36065]
  - ionic: rearrange ionic_queue for better layout (Michal Schmidt) [RHEL-36065]
  - ionic: rearrange ionic_qcq (Michal Schmidt) [RHEL-36065]
  - ionic: carry idev in ionic_cq struct (Michal Schmidt) [RHEL-36065]
  - ionic: refactor skb building (Michal Schmidt) [RHEL-36065]
  - ionic: fold adminq clean into service routine (Michal Schmidt) [RHEL-36065]
  - ionic: use specialized desc info structs (Michal Schmidt) [RHEL-36065]
  - ionic: remove the cq_info to save more memory (Michal Schmidt) [RHEL-36065]
  - ionic: remove callback pointer from desc_info (Michal Schmidt) [RHEL-36065]
  - ionic: move adminq-notifyq handling to main file (Michal Schmidt) [RHEL-36065]
  - ionic: drop q mapping (Michal Schmidt) [RHEL-36065]
  - ionic: remove desc, sg_desc and cmb_desc from desc_info (Michal Schmidt) [RHEL-36065]
  - ionic: change MODULE_AUTHOR to person name (Michal Schmidt) [RHEL-36065]
  - ionic: Clean RCT ordering issues (Michal Schmidt) [RHEL-36065]
  - ionic: Use CQE profile for dim (Michal Schmidt) [RHEL-36065]
  - ionic: change the hwstamp likely check (Michal Schmidt) [RHEL-36065]
  - ionic: reduce the use of netdev (Michal Schmidt) [RHEL-36065]
  - ionic: Pass local netdev instead of referencing struct (Michal Schmidt) [RHEL-36065]
  - ionic: Check stop no restart (Michal Schmidt) [RHEL-36065]
  - ionic: Clean up BQL logic (Michal Schmidt) [RHEL-36065]
  - ionic: Make use napi_consume_skb (Michal Schmidt) [RHEL-36065]
  - ionic: Shorten a Tx hotpath (Michal Schmidt) [RHEL-36065]
  - ionic: Change default number of descriptors for Tx and Rx (Michal Schmidt) [RHEL-36065]
  - ionic: Rework Tx start/stop flow (Michal Schmidt) [RHEL-36065]
  - ionic: restore netdev feature bits after reset (Michal Schmidt) [RHEL-36065]
  - ionic: check cmd_regs before copying in or out (Michal Schmidt) [RHEL-36065]
  - ionic: check before releasing pci regions (Michal Schmidt) [RHEL-36065]
  - ionic: use pci_is_enabled not open code (Michal Schmidt) [RHEL-36065]
  - ionic: implement xdp frags support (Michal Schmidt) [RHEL-36065]
  - ionic: add ndo_xdp_xmit (Michal Schmidt) [RHEL-36065]
  - ionic: Add XDP_REDIRECT support (Michal Schmidt) [RHEL-36065]
  - ionic: Add XDP_TX support (Michal Schmidt) [RHEL-36065]
  - ionic: Add XDP packet headroom (Michal Schmidt) [RHEL-36065]
  - ionic: add initial framework for XDP support (Michal Schmidt) [RHEL-36065]
  - ionic: use dma range APIs (Michal Schmidt) [RHEL-36065]
  - ionic: add helpers for accessing buffer info (Michal Schmidt) [RHEL-36065]
  - ionic: set adminq irq affinity (Michal Schmidt) [RHEL-36065]
  - ionic: minimal work with 0 budget (Michal Schmidt) [RHEL-36065]
  - ionic: fill out pci error handlers (Michal Schmidt) [RHEL-36065]
  - ionic: lif debugfs refresh on reset (Michal Schmidt) [RHEL-36065]
  - ionic: use timer_shutdown_sync (Michal Schmidt) [RHEL-36065]
  - ionic: no fw read when PCI reset failed (Michal Schmidt) [RHEL-36065]
  - ionic: prevent pci disable of already disabled device (Michal Schmidt) [RHEL-36065]
  - ionic: bypass firmware cmds when stuck in reset (Michal Schmidt) [RHEL-36065]
  - ionic: keep filters across FLR (Michal Schmidt) [RHEL-36065]
  - ionic: pass opcode to devcmd_wait (Michal Schmidt) [RHEL-36065]
  - ionic: Re-arrange ionic_intr_info struct for cache perf (Michal Schmidt) [RHEL-36065]
  - ionic: Make the check for Tx HW timestamping more obvious (Michal Schmidt) [RHEL-36065]
  - ionic: Don't check null when calling vfree() (Michal Schmidt) [RHEL-36065]
  - ionic: set ionic ptr before setting up ethtool ops (Michal Schmidt) [RHEL-36065]
  - ionic: Use cached VF attributes (Michal Schmidt) [RHEL-36065]
  - ionic: Fix dim work handling in split interrupt mode (Michal Schmidt) [RHEL-36065]
  - ionic: fix snprintf format length warning (Michal Schmidt) [RHEL-36065]
  - ionic: replace deprecated strncpy with strscpy (Michal Schmidt) [RHEL-36065]
  - ionic: expand the descriptor bufs array (Michal Schmidt) [RHEL-36065]
  - ionic: add a check for max SGs and SKB frags (Michal Schmidt) [RHEL-36065]
  - ionic: count SGs in packet to minimize linearize (Michal Schmidt) [RHEL-36065]
  - ionic: fix 16bit math issue when PAGE_SIZE >= 64KB (Michal Schmidt) [RHEL-36065]
  - ionic: Remove unused declarations (Michal Schmidt) [RHEL-36065]
  - ionic: Add missing err handling for queue reconfig (Michal Schmidt) [RHEL-36065]
  - ionic: add FLR recovery support (Michal Schmidt) [RHEL-36065]
  - ionic: pull out common bits from fw_up (Michal Schmidt) [RHEL-36065]
  - ionic: extract common bits from ionic_probe (Michal Schmidt) [RHEL-36065]
  - ionic: extract common bits from ionic_remove (Michal Schmidt) [RHEL-36065]
  - ionic: remove dead device fail path (Michal Schmidt) [RHEL-36065]
  - ionic: remove WARN_ON to prevent panic_on_warn (Michal Schmidt) [RHEL-36065]
  - ionic: use vmalloc_array and vcalloc (Michal Schmidt) [RHEL-36065]
  - ionic: add support for ethtool extended stat link_down_count (Michal Schmidt) [RHEL-36065]
  - ionic: catch failure from devlink_alloc (Michal Schmidt) [RHEL-36065]
  - ionic: remove noise from ethtool rxnfc error msg (Michal Schmidt) [RHEL-36065]
  - ionic: Don't overwrite the cyclecounter bitmask (Michal Schmidt) [RHEL-36065]
  - ionic: Remove redundant pci_clear_master (Michal Schmidt) [RHEL-36065]
  - ionic: add tx/rx-push support with device Component Memory Buffers (Michal Schmidt) [RHEL-36065]
  - ionic: remove unnecessary void casts (Michal Schmidt) [RHEL-36065]
  - ionic: remove unnecessary indirection (Michal Schmidt) [RHEL-36065]
  - ionic: missed doorbell workaround (Michal Schmidt) [RHEL-36065]
  - ionic: clear up notifyq alloc commentary (Michal Schmidt) [RHEL-36065]
  - ionic: clean interrupt before enabling queue to avoid credit race (Michal Schmidt) [RHEL-36065]
  - net: ionic: Fix error handling in ionic_init_module() (Michal Schmidt) [RHEL-36065]
  - ionic: refactor use of ionic_rx_fill() (Michal Schmidt) [RHEL-36065]
  - ionic: enable tunnel offloads (Michal Schmidt) [RHEL-36065]
  - ionic: new ionic device identity level and VF start control (Michal Schmidt) [RHEL-36065]
  - ionic: only save the user set VF attributes (Michal Schmidt) [RHEL-36065]
  - ionic: replay VF attributes after fw crash recovery (Michal Schmidt) [RHEL-36065]
  - ionic: catch NULL pointer issue on reconfig (Michal Schmidt) [RHEL-36065]
  - ionic: VF initial random MAC address if no assigned mac (Michal Schmidt) [RHEL-36065]
  - ionic: fix up issues with handling EAGAIN on FW cmds (Michal Schmidt) [RHEL-36065]
  - ionic: clear broken state on generation change (Michal Schmidt) [RHEL-36065]
  - net: ionic: fix error check for vlan flags in ionic_set_nic_features() (Michal Schmidt) [RHEL-36065]
  - ionic: convert users of bitmap_foo() to linkmode_foo() (Michal Schmidt) [RHEL-36065]
  - arm64: add dependency between vmlinuz.efi and Image (Lenny Szubowicz) [RHEL-25537]
  - aarch64: enable zboot (Lenny Szubowicz) [RHEL-25537]
  - arm64: efi: enable generic EFI compressed boot (Lenny Szubowicz) [RHEL-25537]
  - kbuild: factor out the common installation code into scripts/install.sh (Lenny Szubowicz) [RHEL-25537]
  - ipv6: fib6_rules: flush route cache when rule is changed (Hangbin Liu) [RHEL-31050]
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-31050 RHEL-33271] {CVE-2024-26852}
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (Hangbin Liu) [RHEL-31050]
  - ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid (Hangbin Liu) [RHEL-31050]
  - ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() (Hangbin Liu) [RHEL-31050]
  - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses (Hangbin Liu) [RHEL-31050]
  - ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (Hangbin Liu) [RHEL-29532 RHEL-31050] {CVE-2024-26631}
  - net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX (Hangbin Liu) [RHEL-31050]
  - ipv6: remove hard coded limitation on ipv6_pinfo (Hangbin Liu) [RHEL-31050]
  - tools headers UAPI: Sync the linux/in.h with the kernel sources (Hangbin Liu) [RHEL-31050]
  - ipv{4,6}/raw: fix output xfrm lookup wrt protocol (Hangbin Liu) [RHEL-31050]
  - net: openvswitch: limit the number of recursions from action sets (Aaron Conole) [RHEL-23575] {CVE-2024-1151}
  - RHEL: enable CONFIG_AMD_ATL (Aristeu Rozanski) [RHEL-26704]
  - EDAC/amd64: Use new AMD Address Translation Library (Aristeu Rozanski) [RHEL-26704]
  - RAS: Introduce AMD Address Translation Library (Aristeu Rozanski) [RHEL-26704]
  - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21507] {CVE-2024-0340}
  - serial: 8250: Toggle IER bits on only after irq has been set up (Prarit Bhargava) [RHEL-30355]
  - HID: intel-ish-hid: ipc: Add Arrow Lake PCI device ID (Tony Camuso) [RHEL-31212]
  - HID: Intel-ish-hid: Ishtp: Fix sensor reads after ACPI S3 suspend (Tony Camuso) [RHEL-31212]
  - HID: intel-ish-hid: ipc: Rework EHL OOB wakeup (Tony Camuso) [RHEL-31212]
  - HID: intel-ish-hid: ishtp-fw-loader: use helper functions for connection (Tony Camuso) [RHEL-31212]
  - HID: intel-ish-hid: ishtp-hid-client: use helper functions for connection (Tony Camuso) [RHEL-31212]
  - HID: Intel-ish-hid: Ishtp: Add helper functions for client connection (Tony Camuso) [RHEL-31212]
  - maple_tree: fix node allocation testing on 32 bit (Nico Pache) [RHEL-5619]
  - bdi: remove enum wb_congested_state (Nico Pache) [RHEL-5619]
  - mm/page_alloc: fix min_free_kbytes calculation regarding ZONE_MOVABLE (Nico Pache) [RHEL-5619]
  - fuse: remove unneeded lock which protecting update of congestion_threshold (Nico Pache) [RHEL-5619]
  - mm: memcg: use larger batches for proactive reclaim (Nico Pache) [RHEL-5619]
  - hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write (Nico Pache) [RHEL-5619]
  - Revert "page cache: fix page_cache_next/prev_miss off by one" (Nico Pache) [RHEL-5619]
  - tmpfs: fix Documentation of noswap and huge mount options (Nico Pache) [RHEL-5619]
  - selftests/memfd: sysctl: fix MEMFD_NOEXEC_SCOPE_NOEXEC_ENFORCED (Nico Pache) [RHEL-5619]
  - mm/memfd: sysctl: fix MEMFD_NOEXEC_SCOPE_NOEXEC_ENFORCED (Nico Pache) [RHEL-5619]
  - kasan: remove hwasan-kernel-mem-intrinsic-prefix=1 for clang-14 (Nico Pache) [RHEL-5619]
  - mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (Nico Pache) [RHEL-5619]
  - objtool: mem*() are not uaccess safe (Nico Pache) [RHEL-5619]
  - mm: page_alloc: unreserve highatomic page blocks before oom (Nico Pache) [RHEL-5619]
  - mm/hugetlb: fix nodes huge page allocation when there are surplus pages (Nico Pache) [RHEL-5619]
  - mm: fix unaccount of memory on vma_link() failure (Nico Pache) [RHEL-5619]
  - vfs: fix readahead(2) on block devices (Nico Pache) [RHEL-5619]
  - kasan: print the original fault addr when access invalid shadow (Nico Pache) [RHEL-5619]
  - hugetlbfs: close race between MADV_DONTNEED and page fault (Nico Pache) [RHEL-5619]
  - hugetlbfs: extend hugetlb_vma_lock to private VMAs (Nico Pache) [RHEL-5619]
  - hugetlbfs: clear resv_map pointer if mmap fails (Nico Pache) [RHEL-5619]
  - mm/page_alloc: use write_seqlock_irqsave() instead write_seqlock() + local_irq_save(). (Nico Pache) [RHEL-5619]
  - writeback: account the number of pages written back (Nico Pache) [RHEL-5619]
  - mm/hugetlb.c: fix a bug within a BUG(): inconsistent pte comparison (Nico Pache) [RHEL-5619]
  - mm: memcontrol: don't throttle dying tasks on memory.high (Nico Pache) [RHEL-5619]
  - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Nico Pache) [RHEL-5619]
  - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Nico Pache) [RHEL-5619]
  - mm/memcontrol: do not tweak node in mem_cgroup_init() (Nico Pache) [RHEL-5619]
  - mm:vmscan: fix inaccurate reclaim during proactive reclaim (Nico Pache) [RHEL-5619]
  - fuse: remove reliance on bdi congestion (Nico Pache) [RHEL-5619]
  - minmax: clamp more efficiently by avoiding extra comparison (Nico Pache) [RHEL-5619]
  - minmax: sanity check constant bounds when clamping (Nico Pache) [RHEL-5619]
  - FAT: use io_schedule_timeout() instead of congestion_wait() (Nico Pache) [RHEL-5619]
  - mm, mmap: fix vma_merge() case 7 with vma_ops->close (Nico Pache) [RHEL-5619]
  - mmap: fix error paths with dup_anon_vma() (Nico Pache) [RHEL-5619]
  - mm: move vma locking out of vma_prepare and dup_anon_vma (Nico Pache) [RHEL-5619]
  - mm: always lock new vma before inserting into vma tree (Nico Pache) [RHEL-5619]
  - mm: lock vma explicitly before doing vm_flags_reset and vm_flags_reset_once (Nico Pache) [RHEL-5619]
  - mm: mark VMA as being written when changing vm_flags (Nico Pache) [RHEL-5619]
  - mm: replace mmap with vma write lock assertions when operating on a vma (Nico Pache) [RHEL-5619]
  - mm: for !CONFIG_PER_VMA_LOCK equate write lock assertion for vma and mmap (Nico Pache) [RHEL-5619]
  - mmap: fix vma_iterator in error path of vma_merge() (Nico Pache) [RHEL-5619]
  - kunit: kasan_test: disable fortify string checker on kmalloc_oob_memset (Nico Pache) [RHEL-5619]
  - x86/mm/pat: fix VM_PAT handling in COW mappings (Nico Pache) [RHEL-5619]
  - mm: cachestat: fix two shmem bugs (Nico Pache) [RHEL-5619]
  - memtest: use {READ,WRITE}_ONCE in memory scanning (Nico Pache) [RHEL-5619]
  - mm: cachestat: fix folio read-after-free in cache walk (Nico Pache) [RHEL-5619]
  - kasan/test: avoid gcc warning for intentional overflow (Nico Pache) [RHEL-5619]
  - mm: memcontrol: clarify swapaccount=0 deprecation warning (Nico Pache) [RHEL-5619]
  - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb (Nico Pache) [RHEL-5619]
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Nico Pache) [RHEL-5619]
  - readahead: avoid multiple marked readahead pages (Nico Pache) [RHEL-5619]
  - mm: fix unmap_mapping_range high bits shift bug (Nico Pache) [RHEL-5619]
  - mm/mglru: respect min_ttl_ms with memcgs (Nico Pache) [RHEL-5619]
  - mm/shmem: fix race in shmem_undo_range w/THP (Nico Pache) [RHEL-5619]
  - mm/rmap: fix misplaced parenthesis of a likely() (Nico Pache) [RHEL-5619]
  - mm: fix oops when filemap_map_pmd() without prealloc_pte (Nico Pache) [RHEL-5619]
  - mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors (Nico Pache) [RHEL-5619]
  - mm: fix for negative counter: nr_file_hugepages (Nico Pache) [RHEL-5619]
  - mm: zswap: fix pool refcount bug around shrink_worker() (Nico Pache) [RHEL-5619]
  - mm/migrate: fix do_pages_move for compat pointers (Nico Pache) [RHEL-5619]
  - mm/page_alloc: correct start page when guard page debug is enabled (Nico Pache) [RHEL-5619]
  - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Nico Pache) [RHEL-5619]
  - mm/cma: use nth_page() in place of direct struct page manipulation (Nico Pache) [RHEL-5619]
  - mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are specified (Nico Pache) [RHEL-5619]
  - mm, memcg: reconsider kmem.limit_in_bytes deprecation (Nico Pache) [RHEL-5619]
  - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Nico Pache) [RHEL-5619]
  - mm: page_alloc: fix CMA and HIGHATOMIC landing on the wrong buddy list (Nico Pache) [RHEL-5619]
  - rcu: dump vmalloc memory info safely (Nico Pache) [RHEL-5619]
  - mm/vmalloc: add a safer version of find_vm_area() for debug (Nico Pache) [RHEL-5619]
  - mm: memory-failure: fix unexpected return value in soft_offline_page() (Nico Pache) [RHEL-5619]
  - mm: add a call to flush_cache_vmap() in vmap_pfn() (Nico Pache) [RHEL-5619]
  - mm/gup: handle cont-PTE hugetlb pages correctly in gup_must_unshare() via GUP-fast (Nico Pache) [RHEL-5619]
  - mm: enable page walking API to lock vmas during the walk (Nico Pache) [RHEL-5619]
  - smaps: use vm_normal_page_pmd() instead of follow_trans_huge_pmd() (Nico Pache) [RHEL-5619]
  - mm/gup: reintroduce FOLL_NUMA as FOLL_HONOR_NUMA_FAULT (Nico Pache) [RHEL-5619]
  - mm: hugetlb_vmemmap: fix a race between vmemmap pmd split (Nico Pache) [RHEL-5619]
  - memcg: drop kmem.limit_in_bytes (Nico Pache) [RHEL-5619]
  - hugetlb: do not clear hugetlb dtor until allocating vmemmap (Nico Pache) [RHEL-5619]
  - zsmalloc: fix races between modifications of fullness and isolated (Nico Pache) [RHEL-5619]
  - kasan, slub: fix HW_TAGS zeroing with slub_debug (Nico Pache) [RHEL-5619]
  - kasan: fix type cast in memory_is_poisoned_n (Nico Pache) [RHEL-5619]
  - mm: call arch_swap_restore() from do_swap_page() (Nico Pache) [RHEL-5619]
  - shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs (Nico Pache) [RHEL-5619]
  - kasan: use internal prototypes matching gcc-13 builtins (Nico Pache) [RHEL-5619]
  - kasan: add kasan_tag_mismatch prototype (Nico Pache) [RHEL-5619]
  - radix tree: remove unused variable (Nico Pache) [RHEL-5619]
  - lib/test_meminit: allocate pages up to order MAX_ORDER (Nico Pache) [RHEL-5619]
  - maple_tree: fix 32 bit mas_next testing (Nico Pache) [RHEL-5619]
  - lz4: fix LZ4_decompress_safe_partial read out of bound (Nico Pache) [RHEL-5619]
  - lib/raid6/test: fix multiple definition linking error (Nico Pache) [RHEL-5619]
  - mm/mmap: Fix error return in do_vmi_align_munmap() (Nico Pache) [RHEL-5619]
  - mm/ksm: support fork/exec for prctl (Nico Pache) [RHEL-5619]
  - mm/uffd: allow vma to merge as much as possible (Nico Pache) [RHEL-5619]
  - mm/uffd: fix vma operation where start addr cuts part of vma (Nico Pache) [RHEL-5619]
  - mm/khugepaged: fix regression in collapse_file() (Nico Pache) [RHEL-5619]
  - mm: remove unused vma_init_lock() (Nico Pache) [RHEL-5619]
  - fs/proc/kcore: reinstate bounce buffer for KCORE_TEXT regions (Nico Pache) [RHEL-5619]
  - mm/mempolicy: Take VMA lock before replacing policy (Nico Pache) [RHEL-5619]
  - mm: lock_vma_under_rcu() must check vma->anon_vma under vma lock (Nico Pache) [RHEL-5619]
  - tcp: Use per-vma locking for receive zerocopy (Nico Pache) [RHEL-5619]
  - mm: fix memory ordering for mm_lock_seq and vm_lock_seq (Nico Pache) [RHEL-5619]
  - mm: lock VMA in dup_anon_vma() before setting ->anon_vma (Nico Pache) [RHEL-5619]
  - mm: don't drop VMA locks in mm_drop_all_locks() (Nico Pache) [RHEL-5619]
  - userfaultfd: fix regression in userfaultfd_unmap_prep() (Nico Pache) [RHEL-5619]
  - mm/gup: disallow FOLL_LONGTERM GUP-fast writing to file-backed mappings (Nico Pache) [RHEL-5619]
  - mm/gup: disallow FOLL_LONGTERM GUP-nonfast writing to file-backed mappings (Nico Pache) [RHEL-5619]
  - mm/mmap: separate writenotify and dirty tracking logic (Nico Pache) [RHEL-5619]
  - mm/mlock: rename mlock_future_check() to mlock_future_ok() (Nico Pache) [RHEL-5619]
  - mm/mmap: refactor mlock_future_check() (Nico Pache) [RHEL-5619]
  - mm: avoid rewalk in mmap_region (Nico Pache) [RHEL-5619]
  - mm: add vma_iter_{next,prev}_range() to vma iterator (Nico Pache) [RHEL-5619]
  - mm: update vma_iter_store() to use MAS_WARN_ON() (Nico Pache) [RHEL-5619]
  - mm: update validate_mm() to use vma iterator (Nico Pache) [RHEL-5619]
  - dmapool: create/destroy cleanup (Nico Pache) [RHEL-5619]
  - mm/mempolicy: fix set_mempolicy_home_node() previous VMA pointer (Nico Pache) [RHEL-5619]
  - mm/vmalloc: fix the unchecked dereference warning in vread_iter() (Nico Pache) [RHEL-5619]
  - selftests/mm: FOLL_LONGTERM need to be updated to 0x100 (Nico Pache) [RHEL-5619]
  - hugetlb: revert use of page_cache_next_miss() (Nico Pache) [RHEL-5619]
  - mm/mlock: fix vma iterator conversion of apply_vma_lock_flags() (Nico Pache) [RHEL-5619]
  - mm: add a NO_INHERIT flag to the PR_SET_MDWE prctl (Nico Pache) [RHEL-5619]
  - mm: make PR_MDWE_REFUSE_EXEC_GAIN an unsigned long (Nico Pache) [RHEL-5619]
  - tools headers UAPI: Sync linux/prctl.h with the kernel sources (Nico Pache) [RHEL-5619]
  - mm: fix memcpy_from_file_folio() integer underflow (Nico Pache) [RHEL-5619]
  - mm: page_alloc: remove stale CMA guard code (Nico Pache) [RHEL-5619]
  - mm/memory-failure: fix hardware poison check in unpoison_memory() (Nico Pache) [RHEL-5619]
  - tools/Makefile: do missed s/vm/mm/ (Nico Pache) [RHEL-5619]
  - mm: memory-failure: avoid false hwpoison page mapped error info (Nico Pache) [RHEL-5619]
  - mm: memory-failure: fix potential unexpected return value from unpoison_memory() (Nico Pache) [RHEL-5619]
  - mm/swapfile: fix wrong swap entry type for hwpoisoned swapcache page (Nico Pache) [RHEL-5619]
  - Docs/admin-guide/mm/zswap: remove zsmalloc's lack of writeback warning (Nico Pache) [RHEL-5619]
  - mm: fix arithmetic for max_prop_frac when setting max_ratio (Nico Pache) [RHEL-5619]
  - mm: fix arithmetic for bdi min_ratio (Nico Pache) [RHEL-5619]
  - mm/gup: add missing gup_must_unshare() check to gup_huge_pgd() (Nico Pache) [RHEL-5619]
  - docs: Fix path paste-o for /sys/kernel/warn_count (Nico Pache) [RHEL-5619]
  - mm: remove unused inline functions from include/linux/mm_inline.h (Nico Pache) [RHEL-5619]
  - mm: add more BUILD_BUG_ONs to gfp_migratetype() (Nico Pache) [RHEL-5619]
  - mm: cleanup is_highmem() (Nico Pache) [RHEL-5619]
  - mm/huge_memory: check pmd_present first in is_huge_zero_pmd (Nico Pache) [RHEL-5619]
  - mm/mmap: drop ARCH_HAS_VM_GET_PAGE_PROT (Nico Pache) [RHEL-5619]
  - s390/mm: enable ARCH_HAS_VM_GET_PAGE_PROT (Nico Pache) [RHEL-5619]
  - memregion: Fix memregion_free() fallback definition (Nico Pache) [RHEL-5619]
  - mm: Add kernel-doc for folio->mlock_count (Nico Pache) [RHEL-5619]
  - nodemask.h: fix compilation error with GCC12 (Nico Pache) [RHEL-5619]
  - mm/swap: fix the obsolete comment for SWP_TYPE_SHIFT (Nico Pache) [RHEL-5619]
  - filemap: Update the folio_lock documentation (Nico Pache) [RHEL-5619]
  - filemap: Remove obsolete comment in lock_page (Nico Pache) [RHEL-5619]
  - kasan: mark KASAN_VMALLOC flags as kasan_vmalloc_flags_t (Nico Pache) [RHEL-5619]
  - mm/vmalloc: fix comments about vmap_area struct (Nico Pache) [RHEL-5619]
  - mm/memcg: retrieve parent memcg from css.parent (Nico Pache) [RHEL-5619]
  - remove congestion tracking framework (Nico Pache) [RHEL-5619]
  - mm: slab: Delete unused SLAB_DEACTIVATED flag (Nico Pache) [RHEL-5619]
  - mm: fix boolreturn.cocci warning (Nico Pache) [RHEL-5619]
  - memblock: Remove #ifdef __KERNEL__ from memblock.h (Nico Pache) [RHEL-5619]
  - mm/slab: Finish struct page to struct slab conversion (Nico Pache) [RHEL-5619]
  - memblock: fix memblock_phys_alloc() section mismatch error (Nico Pache) [RHEL-5619]
  - mm, slab: Remove compiler check in __kmalloc_index (Nico Pache) [RHEL-5619]
  - memblock: improve MEMBLOCK_HOTPLUG documentation (Nico Pache) [RHEL-5619]
  - mm/memory_hotplug: remove stale function declarations (Nico Pache) [RHEL-5619]
  - mm/vmstat: annotate data race for zone->free_area[order].nr_free (Nico Pache) [RHEL-5619]
  - mm/page_alloc.c: avoid allocating highmem pages via alloc_pages_exact[_nid] (Nico Pache) [RHEL-5619]
  - mm: fix data race in PagePoisoned() (Nico Pache) [RHEL-5619]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-453.el9]
changelog:
  - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26577] {CVE-2023-52464}
  - rtc: cmos: Use ACPI alarm for non-Intel x86 systems too (Čestmír Kalina) [RHEL-19606]
  - redhat: configs: move CONFIG_BLK_SED_OPAL to configs/common/generic/ (Ming Lei) [RHEL-18186]
  - platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe (Steve Best) [RHEL-30600] {CVE-2024-26650}
  - x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (Steve Best) [RHEL-31441] {CVE-2024-26674}
  - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29296] {CVE-2023-52560}
  - kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (Steve Best) [RHEL-34985] {CVE-2024-26946}
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Jose Ignacio Tornos Martinez) [RHEL-31530] {CVE-2023-52638}
  - RDMA/efa: Add shutdown notifier (Kamal Heib) [RHEL-15968]
  - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34973 RHEL-34974] {CVE-2024-26960}
  - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34973 RHEL-34974] {CVE-2024-26960}
  - config: wifi: enable RTL 8822BU device (Jose Ignacio Tornos Martinez) [RHEL-33698]
  - selftests: cgroup: fix unexpected failure on test_memcg_sock (Waiman Long) [RHEL-33709]
  - selftests: cgroup: Add 'malloc' failures checks in test_memcontrol (Waiman Long) [RHEL-33709]
  - selftests: memcg: fix compilation (Waiman Long) [RHEL-33709]
  - x86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section (Lenny Szubowicz) [RHEL-31446] {CVE-2024-26678}
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Jose Ignacio Tornos Martinez) [RHEL-31532] {CVE-2023-52637}
  - pstore: inode: Only d_invalidate() is needed (Steve Best) [RHEL-35207] {CVE-2024-27389}
  - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35043] {CVE-2024-27014}
  - iavf: Fix TC config comparison with existing adapter TC config (Michal Schmidt) [RHEL-17485]
  - iavf: drop duplicate iavf_{add|del}_cloud_filter() calls (Michal Schmidt) [RHEL-17485]
  - iavf: adopt skb_network_header_len() more broadly (Michal Schmidt) [RHEL-17485]
  - iavf: adopt skb_network_offset() and similar helpers (Michal Schmidt) [RHEL-17485]
  - iavf: field get conversion (Michal Schmidt) [RHEL-17485]
  - iavf: field prep conversion (Michal Schmidt) [RHEL-17485]
  - iavf: add bit macro includes where needed (Michal Schmidt) [RHEL-17485]
  - iavf: use iavf_schedule_aq_request() helper (Michal Schmidt) [RHEL-17485]
  - iavf: Remove queue tracking fields from iavf_adminq_ring (Michal Schmidt) [RHEL-17485]
  - ubi: Check for too small LEB size in VTBL code (Steve Best) [RHEL-25094] {CVE-2024-25739}
  - cxgb4: Properly lock TX queue for the selftest. (Michal Schmidt) [RHEL-31990 RHEL-9354]
  - net: chelsio: remove unused function calc_tx_descs (Michal Schmidt) [RHEL-9354]
  - net: chelsio: cxgb4: add an error code check in t4_load_phy_fw (Michal Schmidt) [RHEL-9354]
  - cxgb4: Annotate struct smt_data with __counted_by (Michal Schmidt) [RHEL-9354]
  - cxgb4: Annotate struct sched_table with __counted_by (Michal Schmidt) [RHEL-9354]
  - cxgb4: Annotate struct cxgb4_tc_u32_table with __counted_by (Michal Schmidt) [RHEL-9354]
  - cxgb4: Annotate struct clip_tbl with __counted_by (Michal Schmidt) [RHEL-9354]
  - chelsio/l2t: Annotate struct l2t_data with __counted_by (Michal Schmidt) [RHEL-9354]
  - net: cxgb4vf: Remove redundant pci_clear_master (Michal Schmidt) [RHEL-9354]
  - cxgb4: fill IPsec state validation failure reason (Michal Schmidt) [RHEL-9354]
  - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() (Michal Schmidt) [RHEL-9354]
  - cxgb4: fix missing unlock on ETHOFLD desc collect fail path (Michal Schmidt) [RHEL-9354]
  - PCI/ASPM: Restore parent state to parent, child state to child (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Clarify that pcie_aspm=off means leave ASPM untouched (Myron Stowe) [RHEL-33544]
  - MAINTAINERS: Drop Gustavo Pimentel as PCI DWC Maintainer (Myron Stowe) [RHEL-33544]
  - PCI: qcom: Add X1E80100 PCIe support (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom: Document the X1E80100 PCIe Controller (Myron Stowe) [RHEL-33544]
  - PCI: qcom: Enable BDF to SID translation properly (Myron Stowe) [RHEL-33544]
  - PCI: qcom: Disable ASPM L0s for sc8280xp, sa8540p and sa8295p (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom: Do not require 'msi-map-mask' (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom: Allow 'required-opps' (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sa8775p: Move SA8775p to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sc7280: Move SC7280 to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sc8180x: Move SC8180X to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sc8280xp: Move SC8280XP to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sm8350: Move SM8350 to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sm8150: Move SM8150 to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sm8250: Move SM8250 to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sm8450: Move SM8450 to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sm8550: Move SM8550 to dedicated schema (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Add iMX95 Endpoint (EP) support (Myron Stowe) [RHEL-33544]
  - dt-bindings: imx6q-pcie: Add iMX95 pcie endpoint compatible string (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Add epc_features in imx6_pcie_drvdata (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Clean up addr_space retrieval code (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Add iMX95 PCIe Root Complex support (Myron Stowe) [RHEL-33544]
  - dt-bindings: imx6q-pcie: Add imx95 pcie compatible string (Myron Stowe) [RHEL-33544]
  - dt-bindings: imx6q-pcie: Restruct reg and reg-name (Myron Stowe) [RHEL-33544]
  - dt-bindings: imx6q-pcie: Clean up duplicate clocks check (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Simplify switch-case logic by introducing init_phy() callback (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Simplify configure_type() by using mode_off and mode_mask (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Simplify ltssm_enable() by using ltssm_off and ltssm_mask (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Simplify reset handling by using *_FLAG_HAS_*_RESET (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Simplify PHY handling by using IMX6_PCIE_FLAG_HAS_PHYDRV (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Simplify clock handling by using clk_bulk*() function (Myron Stowe) [RHEL-33544]
  - PCI: dwc: endpoint: Fix advertised resizable BAR size (Myron Stowe) [RHEL-33544]
  - PCI: dwc: Strengthen the MSI address allocation logic (Myron Stowe) [RHEL-33544]
  - PCI: cadence: Clear the ARI Capability Next Function Number of the last function (Myron Stowe) [RHEL-33544]
  - PCI: brcmstb: Fix broken brcm_pcie_mdio_write() polling (Myron Stowe) [RHEL-33544]
  - PCI: Make pcie_port_bus_type const (Myron Stowe) [RHEL-33544]
  - PCI: endpoint: Drop only_64bit on reserved BARs (Myron Stowe) [RHEL-33544]
  - PCI: endpoint: Clean up hardware description for BARs (Myron Stowe) [RHEL-33544]
  - PCI: epf-mhi: Add support for SA8775P SoC (Myron Stowe) [RHEL-33544]
  - PCI: epf-mhi: Add "pci_epf_mhi_" prefix to the function names (Myron Stowe) [RHEL-33544]
  - PCI: epf-vntb: Return actual error code during pci_vntb_probe() failure (Myron Stowe) [RHEL-33544]
  - NTB: fix possible name leak in ntb_register_device() (Myron Stowe) [RHEL-33544]
  - PCI: endpoint: pci-epf-vntb: Remove superfluous checks for pci_epf_alloc_space() API (Myron Stowe) [RHEL-33544]
  - PCI: endpoint: pci-epf-test: Remove superfluous checks for pci_epf_alloc_space() API (Myron Stowe) [RHEL-33544]
  - PCI: endpoint: Improve pci_epf_alloc_space() API (Myron Stowe) [RHEL-33544]
  - PCI: endpoint: Refactor pci_epf_alloc_space() API (Myron Stowe) [RHEL-33544]
  - PCI: endpoint: Make pci_epf_bus_type const (Myron Stowe) [RHEL-33544]
  - PCI/sysfs: Demacrofy pci_dev_resource_resize_attr(n) functions (Myron Stowe) [RHEL-33544]
  - PCI: Remove obsolete pci_cleanup_rom() declaration (Myron Stowe) [RHEL-33544]
  - PCI/sysfs: Compile pci-sysfs.c only if CONFIG_SYSFS=y (Myron Stowe) [RHEL-33544]
  - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() (Myron Stowe) [RHEL-33544]
  - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-33544]
  - PCI/PM: Allow runtime PM with no PM callbacks at all (Myron Stowe) [RHEL-33544]
  - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" (Myron Stowe) [RHEL-33544]
  - PCI: Disable D3cold on Asus B1400 PCI-NVMe bridge (Myron Stowe) [RHEL-33544]
  - PCI/P2PDMA: Fix a sleeping issue in a RCU read section (Myron Stowe) [RHEL-33544]
  - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken (Myron Stowe) [RHEL-33544]
  - PCI: Place interrupt related code into irq.c (Myron Stowe) [RHEL-33544]
  - PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports (Myron Stowe) [RHEL-33544]
  - PCI/DPC: Ignore Surprise Down error on hot removal (Myron Stowe) [RHEL-33544]
  - PCI/DPC: Print all TLP Prefixes, not just the first (Myron Stowe) [RHEL-33544]
  - PCI: Move devres code from pci.c to devres.c (Myron Stowe) [RHEL-33544]
  - PCI: Move PCI-specific devres code to drivers/pci/ (Myron Stowe) [RHEL-33544]
  - PCI: Move pci_iomap.c to drivers/pci/ (Myron Stowe) [RHEL-33544]
  - pci_iounmap(): Fix MMIO mapping leak (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Update save_state when configuration changes (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Disable L1 before configuring L1 Substates (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Call pci_save_ltr_state() from pci_save_pcie_state() (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Save L1 PM Substates Capability for suspend/resume (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Move pci_save_ltr_state() to aspm.c (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Always build aspm.c (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Move pci_configure_ltr() to aspm.c (Myron Stowe) [RHEL-33544]
  - PCI/AER: Generalize TLP Header Log reading (Myron Stowe) [RHEL-33544]
  - PCI/AER: Use explicit register size for PCI_ERR_CAP (Myron Stowe) [RHEL-33544]
  - PCI/AER: Block runtime suspend when handling errors (Myron Stowe) [RHEL-33544]
  - PCI/AER: Clean up version indentation in ABI docs (Myron Stowe) [RHEL-33544]
  - PCI/AER: Fix rootport attribute paths in ABI docs (Myron Stowe) [RHEL-33544]
  - PCI: Move pci_clear_and_set_dword() helper to PCI header (Myron Stowe) [RHEL-33544]
  - PCI: Add debug print for device ready delay (Myron Stowe) [RHEL-33544]
  - PCI/AER: Unmask RCEC internal errors to enable RCH downstream port error handling (Myron Stowe) [RHEL-33544]
  - PCI/AER: Forward RCH downstream port-detected errors to the CXL.mem dev handler (Myron Stowe) [RHEL-33544]
  - PCI/AER: Refactor cper_print_aer() for use by CXL driver module (Myron Stowe) [RHEL-33544]
  - NTB: EPF: fix possible memory leak in pci_vntb_probe() (Myron Stowe) [RHEL-33544]
  - devres: show which resource was invalid in __devm_ioremap_resource() (Myron Stowe) [RHEL-33544]
  - devres: remove devm_ioremap_np (Myron Stowe) [RHEL-33544]
  - lib: devres: use numa aware allocation (Myron Stowe) [RHEL-33544]
  - PCI: Allow architecture-specific pci_remap_iospace() (Myron Stowe) [RHEL-33544]
  - pci_iounmap'2: Electric Boogaloo: try to make sense of it all (Myron Stowe) [RHEL-33544]
  - parisc: Declare pci_iounmap() parisc version only when CONFIG_PCI enabled (Myron Stowe) [RHEL-33544]
  - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31824] {CVE-2024-26802}
  - drm/i915/display: Increase number of fast wake precharge pulses (Mika Penttilä) [RHEL-20439]
  - drm/i915/psr: Improve fast and IO wake lines calculation (Mika Penttilä) [RHEL-20439]
  - drm/i915/display: Make intel_dp_aux_fw_sync_len available for PSR code (Mika Penttilä) [RHEL-20439]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-454.el9]
changelog:
  - RAS: enable CONFIG_RAS_FMPM (Aristeu Rozanski) [RHEL-17008]
  - RAS: Avoid build errors when CONFIG_DEBUG_FS=n (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/FMPM: Safely handle saved records of various sizes (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records() (Aristeu Rozanski) [RHEL-17008]
  - Merge tag 'edac_updates_for_v6.9' of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/FMPM: Fix off by one when unwinding on error (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/FMPM: Add debugfs interface to print record entries (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/FMPM: Save SPA values (Aristeu Rozanski) [RHEL-17008]
  - RAS: Export helper to get ras_debugfs_dir (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2() (Aristeu Rozanski) [RHEL-17008]
  - RAS: Introduce a FRU memory poison manager (Aristeu Rozanski) [RHEL-17008]
  - x86/cpu/amd: Provide a separate accessor for Node ID (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/ATL: Add MI300 row retirement support (Aristeu Rozanski) [RHEL-17008]
  - Documentation: Move RAS section to admin-guide (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/ATL: Add MI300 support (Aristeu Rozanski) [RHEL-17008]
  - Documentation: RAS: Add index and address translation section (Aristeu Rozanski) [RHEL-17008]
  - hwmon: (fam15h_power) Use topology_core_id() (Aristeu Rozanski) [RHEL-17008]
  - scsi: lpfc: Use topology_core_id() (Aristeu Rozanski) [RHEL-17008]
  - cpu/SMT: Make SMT control more robust against enumeration failures (Aristeu Rozanski) [RHEL-17008]
  - dm integrity: fix out-of-range warning (Benjamin Marzinski) [RHEL-34599]
  - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-34599]
  - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-33217] {CVE-2024-26880}
  - dm raid: fix false positive for requeue needed during reshape (Benjamin Marzinski) [RHEL-34599]
  - dm: replace fmode_t with a block-specific type for block open flags (Benjamin Marzinski) [RHEL-34599]
  - dm flakey: use get_random_u8() in corrupt_bio_random (Benjamin Marzinski) [RHEL-34599]
  - block: count 'ios' and 'sectors' when io is done for bio-based device (Benjamin Marzinski) [RHEL-34599]
  - dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter (Benjamin Marzinski) [RHEL-34599]
  - dm integrity: Use alloc_ordered_workqueue() to create ordered workqueues (Benjamin Marzinski) [RHEL-34599]
  - dm: Add support for block PR read keys/reservation (Benjamin Marzinski) [RHEL-34599]
  - dm: Annotate struct dm_bio_prison with __counted_by (Benjamin Marzinski) [RHEL-34599]
  - dm: Annotate struct dm_stat with __counted_by (Benjamin Marzinski) [RHEL-34599]
  - dm: Annotate struct stripe_c with __counted_by (Benjamin Marzinski) [RHEL-34599]
  - dm crypt: Annotate struct crypt_config with __counted_by (Benjamin Marzinski) [RHEL-34599]
  - dm raid: Annotate struct raid_set with __counted_by (Benjamin Marzinski) [RHEL-34599]
  - scsi: target: Fix SELinux error when systemd-modules loads the target module (Maurizio Lombardi) [RHEL-21327]
  - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-31226]
  - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-31226]
  - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-31226]
  - redhat/configs: Enable x86 CONFIG_MITIGATION_RFDS (Waiman Long) [RHEL-31226]
  - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-31226]
  - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-31226]
  - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-31226]
  - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-31226]
  - KVM/VMX: Move VERW closer to VMentry for MDS mitigation (Waiman Long) [RHEL-31226]
  - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-31226]
  - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-31226]
  - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-31226]
  - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-31226]
  - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-31226]
  - PM: clk: make pm_clk_add_notifier() take a const pointer (Jerry Snitselaar) [RHEL-28792]
  - driver core: bus: constantify subsys_register() calls (Jerry Snitselaar) [RHEL-28792]
  - driver core: bus: make bus_sort_breadthfirst() take a const pointer (Jerry Snitselaar) [RHEL-28792]
  - vfio/type1: constify bus_type use in vfio_bus_type (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: idxd: constify the struct device_type usage (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: idxd: make dsa_bus_type const (Jerry Snitselaar) [RHEL-28792]
  - driver core: device.h: make struct bus_type a const * (Jerry Snitselaar) [RHEL-28792]
  - driver core: make the bus_type in struct device_driver constant (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: of: constify of_phandle_args in of_dma_find_controller() (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: ptdma: use consistent DMA masks (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: usb-dmac: Avoid format-overflow warning (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: sh: rz-dmac: Avoid format-overflow warning (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: imx-sdma: fix Excess kernel-doc warnings (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28792 RHEL-28869] {CVE-2023-52492}
  - dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: dmatest: prevent using swiotlb buffer with nobounce parameter (Jerry Snitselaar) [RHEL-28792]
  - iommu/tegra: Use tegra_dev_iommu_get_stream_id() in the remaining places (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: idxd: Fix incorrect descriptions for GRPCFG register (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: idxd: Protect int_handle field in hw descriptor (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: Remove unused declaration dma_chan_cleanup() (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: qcom: fix Wvoid-pointer-to-enum-cast warning (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: usb-dmac: Annotate struct usb_dmac_desc with __counted_by (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: tegra: Annotate struct tegra_dma_desc with __counted_by (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: idxd: Register dsa_bus_type before registering idxd sub-drivers (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: idxd: rate limit printk in misc interrupt thread (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: tegra20-apb-dma: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: tegra186-gpc-dma: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: sh: usb-dmac: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: sh: rz-dmac: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: sh: rcar-dmac: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: qcom: hidma: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: imx-sdma: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: idma64: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: dw: platform: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine:idxd: Use local64_try_cmpxchg in perfmon_pmu_event_update (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: Explicitly include correct DT includes (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: qcom: gpi: Use devm_platform_get_and_ioremap_resource() (Jerry Snitselaar) [RHEL-28792]
  - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() (Myron Stowe) [RHEL-29481] {CVE-2023-52617}
  - PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Myron Stowe) [RHEL-29481] {CVE-2023-52617}
  - kbuild: factor out the common objtool arguments (Joe Lawrence) [RHEL-2773]
  - kbuild: move vmlinux.o link to scripts/Makefile.vmlinux_o (Joe Lawrence) [RHEL-2773]
  - kbuild: remove redundant cleanups in scripts/link-vmlinux.sh (Joe Lawrence) [RHEL-2773]
  - kbuild: add cmd_and_savecmd macro (Joe Lawrence) [RHEL-2773]
  - kbuild: warn if FORCE is missing for if_changed(_dep,_rule) and filechk (Joe Lawrence) [RHEL-2773]
  - kbuild: macrofy the condition of if_changed and friends (Joe Lawrence) [RHEL-2773]
  - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31646] {CVE-2024-26759}
  - timers: Use already existing function for forwarding timer base (Phil Auld) [RHEL-33787]
  - timers: Split out forward timer base functionality (Phil Auld) [RHEL-33787]
  - timers: Clarify check in forward_timer_base() (Phil Auld) [RHEL-33787]
  - timers: Move store of next event into __next_timer_interrupt() (Phil Auld) [RHEL-33787]
  - timers: Do not IPI for deferrable timers (Phil Auld) [RHEL-33787]
  - tracing/timers: Add tracepoint for tracking timer base is_idle flag (Phil Auld) [RHEL-33787]
  - tracing/timers: Enhance timer_start tracepoint (Phil Auld) [RHEL-33787]
  - tick-sched: Warn when next tick seems to be in the past (Phil Auld) [RHEL-33787]
  - tick/sched: Cleanup confusing variables (Phil Auld) [RHEL-33787]
  - tick-sched: Fix function names in comments (Phil Auld) [RHEL-33787]
  - tick/nohz: Update comments some more (Phil Auld) [RHEL-33787]
  - tick/nohz: Don't shutdown the lowres tick from itself (Phil Auld) [RHEL-33787]
  - tick/nohz: Update obsolete comments (Phil Auld) [RHEL-33787]
  - tick/nohz: Rename the tick handlers to more self-explanatory names (Phil Auld) [RHEL-33787]
  - tick/rcu: Fix false positive "softirq work is pending" messages (Phil Auld) [RHEL-33787]
  - tick/common: Align tick period during sched_timer setup (Phil Auld) [RHEL-33787]
  - selftests/proc: Assert clock_gettime(CLOCK_BOOTTIME) VS /proc/uptime monotonicity (Phil Auld) [RHEL-33787]
  - selftests/proc: Remove idle time monotonicity assertions (Phil Auld) [RHEL-33787]
  - MAINTAINERS: Remove stale email address (Phil Auld) [RHEL-33787]
  - timers/nohz: Remove middle-function __tick_nohz_idle_stop_tick() (Phil Auld) [RHEL-33787]
  - timers/nohz: Add a comment about broken iowait counter update race (Phil Auld) [RHEL-33787]
  - timers/nohz: Protect idle/iowait sleep time under seqcount (Phil Auld) [RHEL-33787]
  - timers/nohz: Only ever update sleeptime from idle exit (Phil Auld) [RHEL-33787]
  - timers/nohz: Restructure and reshuffle struct tick_sched (Phil Auld) [RHEL-33787]
  - tick/common: Align tick period with the HZ tick. (Phil Auld) [RHEL-33787]
  - tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem (Phil Auld) [RHEL-33787]
  - timers/nohz: Switch to ONESHOT_STOPPED in the low-res handler when the tick is stopped (Phil Auld) [RHEL-33787]
  - tracing/timer: Add missing argument documentation of trace points (Phil Auld) [RHEL-33787]
  - scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (Maurizio Lombardi) [RHEL-25590]
  - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33188 RHEL-35110] {CVE-2024-26973}
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33188] {CVE-2024-26901}
  - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-35393]
  - md: don't account sync_io if iostats of the disk is disabled (Nigel Croxon) [RHEL-35393]
  - md: Fix overflow in is_mddev_idle (Nigel Croxon) [RHEL-35393]
  - md: add check for sleepers in md_wakeup_thread() (Nigel Croxon) [RHEL-35393]
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-35393]
  - Revert "md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING" (Nigel Croxon) [RHEL-35393]
  - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-35393]
  - platform/x86: ISST: Add Grand Ridge to HPM CPU list (Steve Best) [RHEL-35956]
  - platform/x86: ISST: Add Granite Rapids-D to HPM CPU list (Steve Best) [RHEL-35956]
  - platform/x86: ISST: Allow reading core-power state on HWP disabled systems (Steve Best) [RHEL-35956]
  - platform/x86: ISST: Process read/write blocked feature status (Steve Best) [RHEL-35956]
  - platform/x86/intel/tpmi: Change vsec offset to u64 (Steve Best) [RHEL-35956]
  - platform/x86/intel/tpmi: Move TPMI ID definition (Steve Best) [RHEL-35956]
  - platform/x86/intel/tpmi: Modify external interface to get read/write state (Steve Best) [RHEL-35956]
  - platform/x86/intel/tpmi: Don't create devices for disabled features (Steve Best) [RHEL-35956]
  - platform/x86/intel/tpmi: Add debugfs support for read/write blocked (Steve Best) [RHEL-35956]
  - of: fdt: fix off-by-one error in unflatten_dt_nodes() (Steve Best) [RHEL-35465] {CVE-2022-48672}
  - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36047]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-455.el9]
changelog:
  - Documentation: vmcoreinfo: Fix htmldocs warning (Baoquan He) [RHEL-32199]
  - arm64: Fix dangling references to Documentation/arm64 (Baoquan He) [RHEL-32199]
  - arm64: crash_core: Export MODULES, VMALLOC, and VMEMMAP ranges (Baoquan He) [RHEL-32199]
  - LoongArch: Add ELF-related definitions (Baoquan He) [RHEL-32199]
  - kexec.h: add linux/kexec.h to UAPI compile-test coverage (Baoquan He) [RHEL-32199]
  - crash_dump: remove duplicate include in crash_dump.h (Baoquan He) [RHEL-32199]
  - crash_dump: fix boolreturn.cocci warning (Baoquan He) [RHEL-32199]
  - crash_dump: Make elfcorehdr address/size symbols always visible (Baoquan He) [RHEL-32199]
  - proc/vmcore: fix signedness bug in read_from_oldmem() (Baoquan He) [RHEL-32199]
  - use less confusing names for iov_iter direction initializers (Baoquan He) [RHEL-32199]
  - coredump, vmcore: Set p_align to 4 for PT_NOTE (Baoquan He) [RHEL-32199]
  - copy_oldmem_kernel() - WRITE is "data source", not destination (Baoquan He) [RHEL-32199]
  - vmcoreinfo: warn if we exceed vmcoreinfo data size (Baoquan He) [RHEL-32199]
  - x86/purgatory: Omit use of bin2c (Baoquan He) [RHEL-32199]
  - kexec: support purgatories with .text.hot sections (Baoquan He) [RHEL-32199]
  - kexec: enable kexec_crash_size to support two crash kernel regions (Baoquan He) [RHEL-32199]
  - kexec: add helper __crash_shrink_memory() (Baoquan He) [RHEL-32199]
  - kexec: improve the readability of crash_shrink_memory() (Baoquan He) [RHEL-32199]
  - kexec: clear crashk_res if all its memory has been released (Baoquan He) [RHEL-32199]
  - kexec: delete a useless check in crash_shrink_memory() (Baoquan He) [RHEL-32199]
  - kexec: fix a memory leak in crash_shrink_memory() (Baoquan He) [RHEL-32199]
  - kexec: avoid calculating array size twice (Baoquan He) [RHEL-32199]
  - kexec: introduce sysctl parameters kexec_load_limit_* (Baoquan He) [RHEL-32199]
  - kexec: factor out kexec_load_permitted (Baoquan He) [RHEL-32199]
  - Documentation: sysctl: correct kexec_load_disabled (Baoquan He) [RHEL-32199]
  - ARM: kexec: make machine_crash_nonpanic_core() static (Baoquan He) [RHEL-32199]
  - kexec: replace crash_mem_range with range (Baoquan He) [RHEL-32199]
  - kexec: remove the unneeded result variable (Baoquan He) [RHEL-32199]
  - proc/vmcore: fix potential memory leak in vmcore_init() (Baoquan He) [RHEL-32199]
  - kexec: replace kmap() with kmap_local_page() (Baoquan He) [RHEL-32199]
  - powerpc/powernv: Add a null pointer check in opal_powercap_init() (Mamatha Inamdar) [RHEL-37050] {CVE-2023-52696}
  - scsi: sg: Avoid race in error handling & drop bogus warn (Ewan D. Milne) [RHEL-35659]
  - scsi: sg: Avoid sg device teardown race (Ewan D. Milne) [RHEL-35659]
  - xfs: dax - remove tech preview tag (Bill O'Donnell) [RHEL-35289]
  - percpu-internal/pcpu_chunk: re-layout pcpu_chunk structure to reduce false sharing (Audra Mitchell) [RHEL-15605]
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37264] {CVE-2024-35876}
  - Bluetooth: hci_h5: Add ability to allocate memory for private data (Bastien Nocera) [RHEL-33202 RHEL-33203] {CVE-2024-26890}
  - Bluetooth: btrtl: fix out of bounds memory access (Bastien Nocera) [RHEL-33202 RHEL-33203] {CVE-2024-26890}
  - redhat: pass correct RPM_VMLINUX_H to bpftool install (Ian Wienand)


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-456.el9]
changelog:
  - powerpc: Export mmu_feature_keys[] as non-GPL (Mamatha Inamdar) [RHEL-26102]
  - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (Mamatha Inamdar) [RHEL-38276] {CVE-2023-52740}
  - platform/x86/intel/pmc/lnl: Remove SSRAM support (David Arcari) [RHEL-27144]
  - platform/x86/intel/vsec: Remove nuisance message (David Arcari) [RHEL-27144]
  - powerpc/qspinlock: Fix stale propagated yield_cpu (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: add compile-time tuning adjustments (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: provide accounting and options for sleepy locks (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: allow indefinite spinning on a preempted owner (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: reduce remote node steal spins (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: use spin_begin/end API (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: allow lock stealing in trylock and lock fastpath (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: add ability to prod new queue head CPU (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: allow propagation of yield CPU down the queue (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: allow stealing when head of queue yields (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: implement option to yield to previous node (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: paravirt yield to lock owner (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: store owner CPU in lock word (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: theft prevention to control latency (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: allow new waiters to steal the lock before queueing (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: convert atomic operations to assembly (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: use a half-word store to unlock to avoid larx/stcx. (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: add mcs queueing for contended waiters (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: powerpc qspinlock implementation (Artem Savkov) [RHEL-36278]
  - thermal/drivers/tsens: Add suspend to RAM support for tsens (Lucas Karpinski) [RHEL-35736]
  - thermal/qcom/tsens: Drop ops_v0_1 (Lucas Karpinski) [RHEL-35736]
  - thermal: tsens: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-35736]
  - drivers: thermal: tsens: Annotate struct tsens_priv with __counted_by (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Make tsens_xxxx_nvmem static (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/temp-alarm: Use dev_err_probe (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/tsens-v0_1: Add MSM8909 data (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/tsens-v0_1: Add mdm9607 correction offsets (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/tsens-v0_1: Fix mdm9607 slope values (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/tsens: Drop unused legacy structs (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/tsens-v0_1: Add support for MSM8226 (Lucas Karpinski) [RHEL-35736]
  - thermal/core: Use the thermal zone 'devdata' accessor in thermal located drivers (Lucas Karpinski) [RHEL-35736]
  - thermal: Remove core header inclusion from drivers (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom-spmi-adc-tm5: Use asm intead of asm-generic (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Drop single-cell code for msm8976/msm8956 (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Drop single-cell code for msm8939 (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Drop single-cell code for mdm9607 (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Rework legacy calibration data parsers (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Support using nvmem cells for msm8974 calibration (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Support using nvmem cells for calibration data (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: fix slope values for msm8939 (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Drop msm8976-specific defines (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Drop unnecessary hw_ids (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom: Fix lock inversion (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom: Fix set_trip_temp() deadlock (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom: Use generic thermal_zone_get_trip() function (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/lmh: Fix irq handler return value (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom: Demote error log of thermal zone register to debug (Lucas Karpinski) [RHEL-35736]
  - thermal: qcom-spmi-adc-tm5: suppress probe-deferral error message (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Add IPQ8074 support (Lucas Karpinski) [RHEL-35736]
  - thermal: qcom: qcom-spmi-adc-tm5: convert to IIO fwnode API (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/spmi-adc-tm5: Remove unnecessary print function dev_err() (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/spmi-adc-tm5: Register thermal zones as hwmon sensors (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/temp-alarm: Register thermal zones as hwmon sensors (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/lmh: Add sc8180x compatible (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Add compat string for the qcom,msm8960 (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/lmh: Add support for sm8150 (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/lmh: make QCOM_LMH depends on QCOM_SCM (Lucas Karpinski) [RHEL-35736]
  - New configs in drivers/thermal (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom: Add support for LMh driver (Lucas Karpinski) [RHEL-35736]
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31690] {CVE-2024-26773}
  - ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt (Pavel Reichl) [RHEL-31686] {CVE-2024-26774}
  - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31614] {CVE-2024-26704}
  - ext4: reduce unnecessary memory allocation in alloc_flex_gd() (Pavel Reichl) [RHEL-30509] {CVE-2023-52622}
  - ext4: avoid online resizing failures due to oversized flex bg (Pavel Reichl) [RHEL-30509] {CVE-2023-52622}
  - ext4: remove unnecessary check from alloc_flex_gd() (Pavel Reichl) [RHEL-30509] {CVE-2023-52622}
  - ext4: unify the type of flexbg_size to unsigned int (Pavel Reichl) [RHEL-30509] {CVE-2023-52622}
  - scsi: ufs: host: Fix kernel-doc warning (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: qcom: Avoid re-init quirk when gears match (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: ufs-qcom: Add support for UFS device version detection (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: ufs-qcom: Check return value of phy_set_mode_ext() (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: ufs-qcom: Set initial PHY gear to max HS gear for HW ver 4 and newer (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: ufs-qcom: Limit HS-G5 Rate-A to hosts with HW version 5 (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: ufs-qcom: Allow the first init start with the maximum supported gear (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: ufs-qcom: Setup host power mode during init (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: ufs-qcom: No need to set hs_rate after ufshcd_init_host_param() (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: host: Rename structure ufs_dev_params to ufs_host_params (Joel Slebodnick) [RHEL-35861]
  - mfd: intel-lpss: Introduce QUIRK_CLOCK_DIVIDER_UNITY for XPS 9530 (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Switch to generalized quirk table (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Fix the fractional clock divider flags (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Don't fail probe on success of pci_alloc_irq_vectors() (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Provide Intel LPSS PM ops structure (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Move exported symbols to INTEL_LPSS namespace (David Arcari) [RHEL-20053]
  - lib/vsprintf: declare no_hash_pointers in sprintf.h (David Arcari) [RHEL-20053]
  - lib/vsprintf: split out sprintf() and friends (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Adjust header inclusions (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Use device_get_match_data() (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Revert "Add missing check for platform_get_resource" (David Arcari) [RHEL-20053]
  - mfd: intel-lpss-acpi: Convert to platform remove callback returning void (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Return error code received from the IRQ API (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Use PCI APIs instead of dereferencing (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Remove usage of the deprecated ida_simple_xx() API (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Add missing check for platform_get_resource (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Hide suspend/resume functions in #ifdef (David Arcari) [RHEL-20053]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-457.el9]
changelog:
  - net: add netdev_lockdep_set_classes() to virtual drivers (Davide Caratti) [RHEL-6066]
  - net: bridge: use netdev_lockdep_set_classes() (Davide Caratti) [RHEL-6066]
  - vlan: use netdev_lockdep_set_classes() (Davide Caratti) [RHEL-6066]
  - net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path (Davide Caratti) [RHEL-6066]
  - net/sched: fix false lockdep warning on qdisc root lock (Davide Caratti) [RHEL-6066]
  - selftests: net: more pmtu.sh fixes (Hangbin Liu) [RHEL-31077]
  - selftests: net: cope with slow env in so_txtime.sh test (Hangbin Liu) [RHEL-31077]
  - selftests: net: cope with slow env in gro.sh test (Hangbin Liu) [RHEL-31077]
  - selftests: forwarding: Fix bridge locked port test flakiness (Hangbin Liu) [RHEL-31077]
  - selftests: forwarding: Fix bridge MDB test flakiness (Hangbin Liu) [RHEL-31077]
  - selftests: forwarding: Fix layer 2 miss test flakiness (Hangbin Liu) [RHEL-31077]
  - selftests: net: let big_tcp test cope with slow env (Hangbin Liu) [RHEL-31077]
  - selftests: net: avoid just another constant wait (Hangbin Liu) [RHEL-31077]
  - selftests: net: fix tcp listener handling in pmtu.sh (Hangbin Liu) [RHEL-31077]
  - selftests: net: don't access /dev/stdout in pmtu.sh (Hangbin Liu) [RHEL-31077]
  - selftests: net: test vxlan pmtu exceptions with tcp (Hangbin Liu) [RHEL-31077]
  - selftests: net: cut more slack for gro fwd tests. (Hangbin Liu) [RHEL-31077]
  - selftests: forwarding: List helper scripts in TEST_FILES Makefile variable (Hangbin Liu) [RHEL-31077]
  - selftests: bonding: Check initial state (Hangbin Liu) [RHEL-31077]
  - selftests: net: fix available tunnels detection (Hangbin Liu) [RHEL-31077]
  - selftests: net: give more time for GRO aggregation (Hangbin Liu) [RHEL-31077]
  - selftests: net: fix rps_default_mask with >32 CPUs (Hangbin Liu) [RHEL-31077]
  - selftests: forwarding: Remove executable bits from lib.sh (Hangbin Liu) [RHEL-31077]
  - selftests: bonding: Change script interpreter (Hangbin Liu) [RHEL-31077]
  - selftests/net: fix grep checking for fib_nexthop_multiprefix (Hangbin Liu) [RHEL-31077]
  - selftests/net: ipsec: fix constant out of range (Hangbin Liu) [RHEL-31077]
  - selftests: net: fcnal-test: check if FIPS mode is enabled (Hangbin Liu) [RHEL-31077]
  - selftests: net: vrf-xfrm-tests: change authentication and encryption algos (Hangbin Liu) [RHEL-31077]
  - selftests: add few test cases for tap driver (Hangbin Liu) [RHEL-31077]
  - net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Hangbin Liu) [RHEL-31077]
  - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-29553]
  - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-29553]
  - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-29553]
  - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-29553]
  - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-29553]
  - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-29553]
  - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-29553]
  - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-29553]
  - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-29553]
  - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-29553]
  - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-29553]
  - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-29553]
  - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-29553]
  - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-29553]
  - powerpc/smp: do not decrement idle task preempt count in CPU offline (Mamatha Inamdar) [RHEL-38427] {CVE-2021-47454}
  - Squashfs: check the inode number is not the invalid value of zero (Abhi Das) [RHEL-35098] {CVE-2024-26982}
  - locktorture: Increase Hamming distance between call_rcu_chain and rcu_call_chains (Waiman Long) [RHEL-35759]
  - torture: add missing dependency on hrtimer.h (Waiman Long) [RHEL-35759]
  - locking/mutex: Document that mutex_unlock() is non-atomic (Waiman Long) [RHEL-35759]
  - cleanup: Add conditional guard support (Waiman Long) [RHEL-35759]
  - locking/osq_lock: Clarify osq_wait_next() (Waiman Long) [RHEL-35759]
  - locking/osq_lock: Clarify osq_wait_next() calling convention (Waiman Long) [RHEL-35759]
  - locking/osq_lock: Move the definition of optimistic_spin_node into osq_lock.c (Waiman Long) [RHEL-35759]
  - locktorture: Check the correct variable for allocation failure (Waiman Long) [RHEL-35759]
  - locktorture: Rename readers_bind/writers_bind to bind_readers/bind_writers (Waiman Long) [RHEL-35759]
  - doc: Catch-up update for locktorture module parameters (Waiman Long) [RHEL-35759]
  - locktorture: Add call_rcu_chains module parameter (Waiman Long) [RHEL-35759]
  - locktorture: Add new module parameters to lock_torture_print_module_parms() (Waiman Long) [RHEL-35759]
  - torture: Print out torture module parameters (Waiman Long) [RHEL-35759]
  - locktorture: Add acq_writer_lim to complain about long acquistion times (Waiman Long) [RHEL-35759]
  - locktorture: Consolidate "if" statements in lock_torture_writer() (Waiman Long) [RHEL-35759]
  - locktorture: Alphabetize torture_param() entries (Waiman Long) [RHEL-35759]
  - rcutorture: Fix stuttering races and other issues (Waiman Long) [RHEL-35759]
  - locktorture: Add readers_bind and writers_bind module parameters (Waiman Long) [RHEL-35759]
  - torture: Move rcutorture_sched_setaffinity() out of rcutorture (Waiman Long) [RHEL-35759]
  - torture: Make torture_hrtimeout_ns() take an hrtimer mode parameter (Waiman Long) [RHEL-35759]
  - torture: Share torture_random_state with torture_shuffle_tasks() (Waiman Long) [RHEL-35759]
  - locking/seqlock: Fix grammar in comment (Waiman Long) [RHEL-35759]
  - locking/seqlock: Propagate 'const' pointers within read-only methods, remove forced type casts (Waiman Long) [RHEL-35759]
  - locking/lockdep: Fix string sizing bug that triggers a format-truncation compiler-warning (Waiman Long) [RHEL-35759]
  - locking/seqlock: Change __seqprop() to return the function pointer (Waiman Long) [RHEL-35759]
  - locking/seqlock: Simplify SEQCOUNT_LOCKNAME() (Waiman Long) [RHEL-35759]
  - locking/seqlock: Fix typo in comment (Waiman Long) [RHEL-35759]
  - locking/debug: Fix debugfs API return value checks to use IS_ERR() (Waiman Long) [RHEL-35759]
  - locking/ww_mutex/test: Make sure we bail out instead of livelock (Waiman Long) [RHEL-35759]
  - locking/ww_mutex/test: Fix potential workqueue corruption (Waiman Long) [RHEL-35759]
  - locking/ww_mutex/test: Use prng instead of rng to avoid hangs at bootup (Waiman Long) [RHEL-35759]
  - locking: export contention tracepoints for bcachefs six locks (Waiman Long) [RHEL-35759]
  - locking/seqlock: Do the lockdep annotation before locking in do_write_seqcount_begin_nested() (Waiman Long) [RHEL-35759]
  - lockdep: fix static memory detection even more (Waiman Long) [RHEL-35759]
  - torture: Stop right-shifting torture_random() return values (Waiman Long) [RHEL-35759]
  - torture: Move stutter_wait() timeouts to hrtimers (Waiman Long) [RHEL-35759]
  - torture: Move torture_shuffle() timeouts to hrtimers (Waiman Long) [RHEL-35759]
  - torture: Move torture_onoff() timeouts to hrtimers (Waiman Long) [RHEL-35759]
  - torture: Make torture_hrtimeout_*() use TASK_IDLE (Waiman Long) [RHEL-35759]
  - torture: Add lock_torture writer_fifo module parameter (Waiman Long) [RHEL-35759]
  - torture: Add a kthread-creation callback to _torture_create_kthread() (Waiman Long) [RHEL-35759]
  - torture: Support randomized shuffling for proxy exec testing (Waiman Long) [RHEL-35759]
  - locking: add lockevent_read() prototype (Waiman Long) [RHEL-35759]
  - lockdep: Add lock_set_cmp_fn() annotation (Waiman Long) [RHEL-35759]
  - locktorture: Add long_hold to adjust lock-hold delays (Waiman Long) [RHEL-35759]
  - torture: Fix hang during kthread shutdown phase (Waiman Long) [RHEL-35759]
  - torture: Seed torture_random_state on CPU (Waiman Long) [RHEL-35759]
  - seqlock: drop seqcount_ww_mutex_t (Waiman Long) [RHEL-35759]
  - sections: global data can be in .bss (Waiman Long) [RHEL-35759]
  - bnxt_en: do not map packet buffers twice (Petr Oros) [RHEL-31941]
  - bnxt_en: Fix skb recycling logic in bnxt_deliver_skb() (Petr Oros) [RHEL-31941]
  - bpf, test_run: fix crashes due to XDP frame overwriting/corruption (Petr Oros) [RHEL-31941]
  - bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES (Petr Oros) [RHEL-31941]
  - Revert "bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES" (Petr Oros) [RHEL-31941]
  - bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES (Petr Oros) [RHEL-31941]
  - page_pool: fix netlink dump stop/resume (Petr Oros) [RHEL-31941]
  - page_pool: fix typos and punctuation (Petr Oros) [RHEL-31941]
  - page_pool: transition to reference count management after page draining (Petr Oros) [RHEL-31941]
  - net: page_pool: factor out releasing DMA from releasing the page (Petr Oros) [RHEL-31941]
  - net: page_pool: fix general protection fault in page_pool_unlist (Petr Oros) [RHEL-31941]
  - tools: ynl: don't skip regeneration from make targets (Petr Oros) [RHEL-31941]
  - tools: ynl: order building samples after generated code (Petr Oros) [RHEL-31941]
  - tools: ynl: make sure we use local headers for page-pool (Petr Oros) [RHEL-31941]
  - tools: ynl: fix build of the page-pool sample (Petr Oros) [RHEL-31941]
  - tools: ynl: add sample for getting page-pool information (Petr Oros) [RHEL-31941]
  - net: page_pool: mute the periodic warning for visible page pools (Petr Oros) [RHEL-31941]
  - net: page_pool: expose page pool stats via netlink (Petr Oros) [RHEL-31941]
  - net: page_pool: report when page pool was destroyed (Petr Oros) [RHEL-31941]
  - net: page_pool: report amount of memory held by page pools (Petr Oros) [RHEL-31941]
  - net: page_pool: add netlink notifications for state changes (Petr Oros) [RHEL-31941]
  - net: page_pool: implement GET in the netlink API (Petr Oros) [RHEL-31941]
  - net: page_pool: add nlspec for basic access to page pools (Petr Oros) [RHEL-31941]
  - eth: link netdev to page_pools in drivers (Petr Oros) [RHEL-31941]
  - net: page_pool: stash the NAPI ID for easier access (Petr Oros) [RHEL-31941]
  - net: page_pool: record pools per netdev (Petr Oros) [RHEL-31941]
  - net: page_pool: id the page pools (Petr Oros) [RHEL-31941]
  - net: page_pool: factor out uninit (Petr Oros) [RHEL-31941]
  - net: page_pool: avoid touching slow on the fastpath (Petr Oros) [RHEL-31941]
  - net: page_pool: split the page_pool_params into fast and slow (Petr Oros) [RHEL-31941]
  - page_pool: update document about fragment API (Petr Oros) [RHEL-31941]
  - page_pool: introduce page_pool_alloc() API (Petr Oros) [RHEL-31941]
  - page_pool: remove PP_FLAG_PAGE_FRAG (Petr Oros) [RHEL-31941]
  - bnxt_en: Let the page pool manage the DMA mapping (Petr Oros) [RHEL-31941]
  - bnxt_en: Use the unified RX page pool buffers for XDP and non-XDP (Petr Oros) [RHEL-31941]
  - page_pool: unify frag_count handling in page_pool_is_last_frag() (Petr Oros) [RHEL-31941]
  - page_pool: fragment API support for 32-bit arch with 64-bit DMA (Petr Oros) [RHEL-31941]
  - page_pool: fix documentation typos (Petr Oros) [RHEL-31941]
  - docs: net: page_pool: de-duplicate the intro comment (Petr Oros) [RHEL-31941]
  - net: skbuff: always try to recycle PP pages directly when in softirq (Petr Oros) [RHEL-31941]
  - page_pool: add a lockdep check for recycling in hardirq (Petr Oros) [RHEL-31941]
  - net: skbuff: avoid accessing page_pool if !napi_safe when returning page (Petr Oros) [RHEL-31941]
  - page_pool: place frag_* fields in one cacheline (Petr Oros) [RHEL-31941]
  - net: page_pool: merge page_pool_release_page() with page_pool_return_page() (Petr Oros) [RHEL-31941]
  - net: page_pool: hide page_pool_release_page() (Petr Oros) [RHEL-31941]
  - eth: stmmac: let page recycling happen with skbs (Petr Oros) [RHEL-31941]
  - page_pool: add DMA_ATTR_WEAK_ORDERING on all mappings (Petr Oros) [RHEL-31941]
  - xdp: remove unused {__,}xdp_release_frame() (Petr Oros) [RHEL-31941]
  - xdp: recycle Page Pool backed skbs built from XDP frames (Petr Oros) [RHEL-31941]
  - net: page_pool, skbuff: make skb_mark_for_recycle() always available (Petr Oros) [RHEL-31941]
  - selftests/bpf: robustify test_xdp_do_redirect with more payload magics (Petr Oros) [RHEL-31941]
  - Documentation: networking: correct spelling (Petr Oros) [RHEL-31941]
  - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37232] {CVE-2024-35888}
  - tcp: Add memory barrier to tcp_push() (Antoine Tenart) [RHEL-22708]
  - tcp: tcp_wfree() refactoring (Antoine Tenart) [RHEL-22708]
  - powerpc/powernv: Add a null pointer check to scom_debug_init_one() (Mamatha Inamdar) [RHEL-37052] {CVE-2023-52690}
  - KVM: Drop unused @may_block param from gfn_to_pfn_cache_invalidate_start() (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add coverage of EPT-disabled to vmx_dirty_log_test (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Fix and clarify comments about clearing D-bit vs. write-protecting (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Remove function comments above clear_dirty_{gfn_range,pt_masked}() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Precisely invalidate MMU root_role during CPUID update (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Disable LBR virtualization if the CPU doesn't support LBR callstacks (Maxim Levitsky) [RHEL-32430]
  - perf/x86/intel: Expose existence of callback support to KVM (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Snapshot LBR capabilities during module initialization (Maxim Levitsky) [RHEL-32430]
  - tools/include: Sync uapi/linux/kvm.h and asm/kvm.h with the kernel sources (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Stop compiling vmenter.S with OBJECT_FILES_NON_STANDARD (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Create a stack frame in __svm_sev_es_vcpu_run() (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Save/restore args across SEV-ES VMRUN via host save area (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Save/restore non-volatile GPRs in SEV-ES VMRUN via host save area (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Wrap __svm_sev_es_vcpu_run() with #ifdef CONFIG_KVM_AMD_SEV (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Create a stack frame in __svm_vcpu_run() for unwinding (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Clobber RAX instead of RBX when discarding spec_ctrl_intercepted (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Drop 32-bit "support" from __svm_sev_es_vcpu_run() (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Remove a useless zeroing of allocated memory (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Ignore MKTME KeyID bits when intercepting #PF for allow_smaller_maxphyaddr (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: fix max_guest_memory_test with more that 256 vCPUs (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Verify post-RESET value of PERF_GLOBAL_CTRL in PMCs test (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Set enable bits for GP counters in PERF_GLOBAL_CTRL at "RESET" (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Disable support for adaptive PEBS (Maxim Levitsky) [RHEL-32430]
  - KVM: Explicitly disallow activatating a gfn_to_pfn_cache with INVALID_GPA (Maxim Levitsky) [RHEL-32430]
  - KVM: Check validity of offset+length of gfn_to_pfn_cache prior to activation (Maxim Levitsky) [RHEL-32430]
  - KVM: Add helpers to consolidate gfn_to_pfn_cache's page split check (Maxim Levitsky) [RHEL-32430]
  - KVM: SEV: fix compat ABI for KVM_MEMORY_ENCRYPT_OP (Maxim Levitsky) [RHEL-32430]
  - selftests: kvm: remove meaningless assignments in Makefiles (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Check that PV_UNHALT is cleared when HLT exiting is disabled (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Explicitly close guest_memfd files in some gmem tests (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: fix recursive deadlock in timer injection (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: simplify locking and make more self-contained (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: remove WARN_ON_ONCE() with false positives in evtchn delivery (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: inject vCPU upcall vector when local APIC is enabled (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: improve accuracy of Xen timers (Maxim Levitsky) [RHEL-32430]
  - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add a basic SEV-ES smoke test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add a basic SEV smoke test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Use the SEV library APIs in the intra-host migration test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add library for creating and interacting with SEV guests (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Allow tagging protected memory in guest page tables (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Explicitly ucall pool from shared memory (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add support for protected vm_vaddr_* allocations (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add support for allocating/managing protected guest memory (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add a macro to iterate over a sparsebit range (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Make sparsebit structs const where appropriate (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Extend VM creation's @shape to allow control of VM subtype (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: x86: Use TAP interface in the userspace_msr_exit test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: x86: Use TAP interface in the vmx_pmu_caps test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: x86: Use TAP interface in the fix_hypercall test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: x86: Use TAP interface in the sync_regs test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add a macro to define a test with one vcpu (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Move setting a vCPU's entry point to a dedicated API (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: x86: sync_regs_test: Get regs structure before modifying it (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: x86: sync_regs_test: Use vcpu_run() where appropriate (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Combine "check" and "get" APIs for passthrough MSR lookups (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Rename vmplX_ssp -> plX_ssp (Maxim Levitsky) [RHEL-32430]
  - kvm/x86: allocate the write-tracking metadata on-demand (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: return early if msr_bitmap is not supported (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: fix comment to add LBR to passthrough MSRs (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Explicitly check NMI from guest to reducee false positives (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add CONFIG_64BIT definition for the build (Maxim Levitsky) [RHEL-32430]
  - selftests/kvm: Fix issues with $(SPLIT_TESTS) (Maxim Levitsky) [RHEL-32430]
  - KVM: Get rid of return value from kvm_arch_create_vm_debugfs() (Maxim Levitsky) [RHEL-32430]
  - tools/include: Sync x86 asm/irq_vectors.h with the kernel sources (Maxim Levitsky) [RHEL-32430]
  - x86: irq: unconditionally define KVM interrupt vectors (Maxim Levitsky) [RHEL-32430]
  - KVM: fix kvm_mmu_memory_cache allocation warning (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Free TDP MMU roots while holding mmy_lock for read (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Alloc TDP MMU roots while holding mmu_lock for read (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Check for usable TDP MMU root while holding mmu_lock for read (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Skip invalid TDP MMU roots when write-protecting SPTEs (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Skip invalid roots when zapping leaf SPTEs for GFN range (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Allow passing '-1' for "all" as_id for TDP MMU iterators (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Don't do TLB flush when zappings SPTEs in invalid roots (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Zap invalidated TDP MMU roots at 4KiB granularity (Maxim Levitsky) [RHEL-32430]
  - KVM: Add a comment explaining the directed yield pending interrupt logic (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Clean up directed yield API for "has pending interrupt" (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Rely solely on preempted_in_kernel flag for directed yield (Maxim Levitsky) [RHEL-32430]
  - KVM: Add dedicated arch hook for querying if vCPU was preempted in-kernel (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Sanity check that kvm_has_noapic_vcpu is zero at module_exit() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Move "KVM no-APIC vCPU" key management into local APIC code (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Fully defer to vendor code to decide how to force immediate exit (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2 (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Handle forced exit due to preemption timer in fastpath (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Drop superfluous check on direct MMU vs. WRITE_PF_TO_SP flag (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Drop dedicated logic for direct MMUs in reexecute_instruction() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Don't acquire mmu_lock when using indirect_shadow_pages as a heuristic (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Open code all direct reads to guest DR6 and DR7 (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Make kvm_get_dr() return a value, not use an out parameter (Maxim Levitsky) [RHEL-32430]
  - x86/cpu: Add a VMX flag to enumerate 5-level EPT support to userspace (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Test top-down slots event in x86's pmu_counters_test (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: allow vcpu_info content to be 'safely' copied (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: check the need for invalidation under read lock first (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: advertize the KVM_XEN_HVM_CONFIG_SHARED_INFO_HVA capability (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: re-map Xen's vcpu_info using HVA rather than GPA (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: map Xen's shared_info page using HVA rather than GFN (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: allow vcpu_info to be mapped by fixed HVA (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: allow shared_info to be mapped by fixed HVA (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: re-initialize shared_info if guest (32/64-bit) mode is set (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: separate initialization of shared_info cache and content (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: allow a cache to be activated with a fixed (userspace) HVA (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: include page offset in uhva and use it consistently (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: stop open-coding offset_in_page() (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: remove KVM_GUEST_USES_PFN usage (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: add a mark-dirty helper (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: mark guest pages dirty with the pfncache lock held (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: remove unnecessary exports (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: Add a map helper function (Maxim Levitsky) [RHEL-32430]
  - treewide: remove CONFIG_HAVE_KVM (Maxim Levitsky) [RHEL-32430]
  - vfio: replace CONFIG_HAVE_KVM with IS_ENABLED(CONFIG_KVM) (Maxim Levitsky) [RHEL-32430]
  - x86: replace CONFIG_HAVE_KVM with IS_ENABLED(CONFIG_KVM) (Maxim Levitsky) [RHEL-32430]
  - MIPS: introduce Kconfig for MIPS VZ (Maxim Levitsky) [RHEL-32430]
  - kvm: move "select IRQ_BYPASS_MANAGER" to common code (Maxim Levitsky) [RHEL-32430]
  - KVM: remove unnecessary #ifdef (Maxim Levitsky) [RHEL-32430]
  - KVM: define __KVM_HAVE_GUEST_DEBUG unconditionally (Maxim Levitsky) [RHEL-32430]
  - kvm: replace __KVM_HAVE_READONLY_MEM with Kconfig symbol (Maxim Levitsky) [RHEL-32430]
  - KVM: arm64: move ARM-specific defines to uapi/asm/kvm.h (Maxim Levitsky) [RHEL-32430]
  - KVM: powerpc: move powerpc-specific structs to uapi/asm/kvm.h (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: move x86-specific structs to uapi/asm/kvm.h (Maxim Levitsky) [RHEL-32430]
  - KVM: remove more traces of device assignment UAPI (Maxim Levitsky) [RHEL-32430]
  - kvm: x86: use a uapi-friendly macro for GENMASK (Maxim Levitsky) [RHEL-32430]
  - kvm: x86: use a uapi-friendly macro for BIT (Maxim Levitsky) [RHEL-32430]
  - uapi: introduce uapi-friendly macros for GENMASK (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: rename push to emulate_push for consistency (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Clean up partially uninitialized integer in emulate_pop() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/emulator: emulate movbe with operand-size prefix (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Report up-to-date exit qualification to userspace (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Return -EINVAL instead of -EBUSY on attempt to re-init SEV/SEV-ES (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Add support for allowing zero SEV ASIDs (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Use unsigned integers when dealing with ASIDs (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Set sev->asid in sev_asid_new() instead of overloading the return (Maxim Levitsky) [RHEL-32430]
  - KVM: Nullify async #PF worker's "apf" pointer as soon as it might be freed (Maxim Levitsky) [RHEL-32430]
  - KVM: Get reference to VM's address space in the async #PF worker (Maxim Levitsky) [RHEL-32430]
  - KVM: Put mm immediately after async #PF worker completes remote gup() (Maxim Levitsky) [RHEL-32430]
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Improve documentation of MSR_KVM_ASYNC_PF_EN (Maxim Levitsky) [RHEL-32430]
  - x86/kvm: Use separate percpu variable to track the enabling of asyncpf (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Fix broken debugregs ABI for 32 bit kernels (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Avoid CPL lookup if PMC enabline for USER and KERNEL is the same (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Check eventsel first when emulating (branch) insns retired (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Expand the comment about what bits are check emulating events (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Snapshot event selectors that KVM emulates in software (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Process only enabled PMCs when emulating events in software (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Add macros to iterate over all PMCs given a bitmap (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Snapshot and clear reprogramming bitmap before reprogramming (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Move pmc_idx => pmc translation helper to common code (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Add common define to capture fixed counters offset (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Zero out PMU metadata on AMD if PMU is disabled (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Use KMEM_CACHE instead of kmem_cache_create() (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Extend PMU counters test to validate RDPMC after WRMSR (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add helpers for safe and safe+forced RDMSR, RDPMC, and XGETBV (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add a forced emulation variation of KVM_ASM_SAFE() (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Test PMC virtualization with forced emulation (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Move KVM_FEP macro into common library header (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Query module param to detect FEP in MSR filtering test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add helpers to read integer module params (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add a helper to query if the PMU module param is enabled (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Expand PMU counters test to verify LLC events (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add functional test for Intel's fixed PMU counters (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Test consistency of CPUID with num of fixed counters (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Test consistency of CPUID with num of gp counters (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Test Intel PMU architectural events on fixed counters (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Test Intel PMU architectural events on gp counters (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add pmu.h and lib/pmu.c for common PMU assets (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Extend {kvm,this}_pmu_has() to support fixed counters (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Drop the "name" param from KVM_X86_PMU_FEATURE() (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add vcpu_set_cpuid_property() to set properties (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Explicitly check for RDPMC of unsupported Intel PMC types (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Treat "fixed" PMU type in RDPMC as index as a value, not flag (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Disallow "fast" RDPMC for architectural Intel PMUs (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Apply "fast" RDPMC only to Intel PMUs (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Prioritize VMX interception over #GP on RDPMC due to bad index (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Don't ignore bits 31:30 for RDPMC index on AMD (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Get eventsel for fixed counters from perf (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Setup fixed counters' eventsel during PMU initialization (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Remove KVM's enumeration of Intel's architectural encodings (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Allow programming events that match unsupported arch events (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Always treat Fixed counters as available when supported (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Use mutex guards to eliminate __kvm_x86_vendor_init() (Maxim Levitsky) [RHEL-32430]
  - KVM: Harden against unpaired kvm_mmu_notifier_invalidate_range_end() calls (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add a testcase to verify GUEST_MEMFD and READONLY are exclusive (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Create GUEST_MEMFD for relevant invalid flags testcases (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Restrict KVM_SW_PROTECTED_VM to the TDP MMU (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Update KVM_SW_PROTECTED_VM docs to make it clear they're a WIP (Maxim Levitsky) [RHEL-32430]
  - KVM: Make KVM_MEM_GUEST_MEMFD mutually exclusive with KVM_MEM_READONLY (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Mark target gfn of emulated atomic instruction as dirty (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Don't assert on exact number of 4KiB in dirty log split test (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Fix KVM_GET_MSRS stack info leak (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Fix type length error when reading pmu->fixed_ctr_ctrl (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Make gtod_is_based_on_tsc() return 'bool' (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Check irqchip mode before create PIT (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Fail tests when open() fails with !ENOENT (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Avoid infinite loop in hyperv_features when invtsc is missing (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Delete superfluous, unused "stage" variable in AMX test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: x86_64: Remove redundant newlines (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Remove redundant newlines (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Reword the NX hugepage test's skip message to be more helpful (Maxim Levitsky) [RHEL-32430]
  - tools headers UAPI: Sync kvm headers with the kernel sources (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: add missing "depends on KVM" (Maxim Levitsky) [RHEL-32430]
  - KVM: fix direction of dependency on MMU notifiers (Maxim Levitsky) [RHEL-32430]
  - KVM: introduce CONFIG_KVM_COMMON (Maxim Levitsky) [RHEL-32430]
  - KVM: clean up directives to compile out irqfds (Maxim Levitsky) [RHEL-32430]
  - KVM: remove deprecated UAPIs (Maxim Levitsky) [RHEL-32430]
  - KVM: remove CONFIG_HAVE_KVM_IRQFD (Maxim Levitsky) [RHEL-32430]
  - KVM: remove CONFIG_HAVE_KVM_EVENTFD (Maxim Levitsky) [RHEL-32430]
  - KVM: guest-memfd: fix unused-function warning (Maxim Levitsky) [RHEL-32430]
  - KVM x86/xen: add an override for PVCLOCK_TSC_STABLE_BIT (Maxim Levitsky) [RHEL-32430]
  - KVM: nSVM: Hide more stuff under CONFIG_KVM_HYPERV/CONFIG_HYPERV (Maxim Levitsky) [RHEL-32430]
  - KVM: nVMX: Hide more stuff under CONFIG_KVM_HYPERV (Maxim Levitsky) [RHEL-32430]
  - KVM: nVMX: Introduce accessor to get Hyper-V eVMCS pointer (Maxim Levitsky) [RHEL-32430]
  - KVM: nVMX: Introduce helpers to check if Hyper-V evmptr12 is valid/set (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Make Hyper-V emulation optional (Maxim Levitsky) [RHEL-32430]
  - KVM: nVMX: Move guest_cpuid_has_evmcs() to hyperv.h (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Fix vmxon_pa == vmcs12_pa == -1ull nVMX testcase for !eVMCS (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Make Hyper-V tests explicitly require KVM Hyper-V support (Maxim Levitsky) [RHEL-32430]
  - KVM: nVMX: Split off helper for emulating VMCLEAR on Hyper-V eVMCS (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Introduce helper to handle Hyper-V paravirt TLB flush requests (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Split off hyperv_evmcs.{ch} (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Introduce helper to check if vector is set in Hyper-V SynIC (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Introduce helper to check if auto-EOI is set in Hyper-V SynIC (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Split off vmx_onhyperv.{ch} from hyperv.{ch} (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Move Hyper-V partition assist page out of Hyper-V emulation context (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: Remove unneeded xen context from kvm_arch when !CONFIG_KVM_XEN (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Fix broken assert messages in Hyper-V features test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Fix benign %llx vs. %lx issues in guest asserts (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Fix MWAIT error message when guest assertion fails (Maxim Levitsky) [RHEL-32430]
  - KVM: Harden copying of userspace-array against overflow (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Harden copying of userspace-array against overflow (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: fix comment about mmu_unsync_pages_lock (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: always take tdp_mmu_pages_lock (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: remove unnecessary "bool shared" argument from iterators (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: remove unnecessary "bool shared" argument from functions (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Check for leaf SPTE when clearing dirty bit in the TDP MMU (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Fix off-by-1 when splitting huge pages during CLEAR (Maxim Levitsky) [RHEL-32430]
  - KVM: move KVM_CAP_DEVICE_CTRL to the generic check (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Track emulated counter events instead of previous counter (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Update sample period in pmc_write_counter() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Remove manual clearing of fields in kvm_pmu_init() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Stop calling kvm_pmu_reset() at RESET (it's redundant) (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Reset the PMU, i.e. stop counters, before refreshing (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Move PMU reset logic to common x86 code (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM,VMX: Use %rip-relative addressing to access kvm_rebooting (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Don't intercept IRET when injecting NMI and vNMI is enabled (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Explicitly require FLUSHBYASID to enable SEV support (Maxim Levitsky) [RHEL-32430]
  - KVM: nSVM: Advertise support for flush-by-ASID (Maxim Levitsky) [RHEL-32430]
  - Revert "nSVM: Check for reserved encodings of TLB_CONTROL in nested VMCB" (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Use a switch statement and macros in __feature_translate() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Turn off KVM_WERROR by default for all configs (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Remove x86's so called "MMIO warning" test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add logic to detect if ioctl() failed because VM was killed (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Drop the single-underscore ioctl() helpers (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Declare flush_remote_tlbs{_range}() hooks iff HYPERV!=n (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Use KVM-governed feature framework to track "LAM enabled" (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Advertise and enable LAM (user and supervisor) (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Virtualize LAM for user pointer (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Virtualize LAM for supervisor pointer (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Untag addresses for LAM emulation where applicable (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Introduce get_untagged_addr() in kvm_x86_ops and call it in emulator (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Remove kvm_vcpu_is_illegal_gpa() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Add & use kvm_vcpu_is_legal_cr3() to check CR3's legality (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Drop non-PA bits when getting GFN for guest's PGD (Maxim Levitsky) [RHEL-32430]
  - KVM: SEV: Do not intercept accesses to MSR_IA32_XSS for SEV-ES guests (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Fix dynamic generation of configuration names (Maxim Levitsky) [RHEL-32430]
  - KVM: Convert comment into an assertion in kvm_io_bus_register_dev() (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Update EFER software model on CR0 trap for SEV-ES (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: add -MP to CFLAGS (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Actually print out magic token in NX hugepages skip message (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Remove 'return void' expression for 'void function' (Maxim Levitsky) [RHEL-32430]
  - Revert "KVM: Prevent module exit until all VMs are freed" (Maxim Levitsky) [RHEL-32430]
  - KVM: Set file_operations.owner appropriately for all such structures (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Get CPL directly when checking if loaded vCPU is in kernel mode (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Avoid using forced target for generating arm64 headers (Maxim Levitsky) [RHEL-32430]
  - tools headers arm64: Update sysreg.h with kernel sources (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Generate sysreg-defs.h and add to include path (Maxim Levitsky) [RHEL-32430]
  - perf build: Generate arm64's sysreg-defs.h and add to include path (Maxim Levitsky) [RHEL-32430]
  - tools: arm64: Add a Makefile for generating sysreg-defs.h (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Test behavior of HWCR, a.k.a. MSR_K7_HWCR (Maxim Levitsky) [RHEL-32430]
  - KVM: Annotate struct kvm_irq_routing_table with __counted_by (Maxim Levitsky) [RHEL-32430]
  - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37060] {CVE-2023-52686}
  - crypto: qcom-rng - Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-36682]
  - crypto: qcom-rng - Add missing dependency on hw_random (Lucas Karpinski) [RHEL-36682]
  - crypto: qcom-rng - Add hw_random interface support (Lucas Karpinski) [RHEL-36682]
  - crypto: qcom-rng: Make the core clock optional regardless of ACPI presence (Lucas Karpinski) [RHEL-36682]
  - crypto: qcom-rng - Fix qcom_rng_of_match unused warning (Lucas Karpinski) [RHEL-36682]
  - bpf: fix check for attempt to corrupt spilled pointer (Viktor Malik) [RHEL-26569] {CVE-2023-52462}
  - vxlan: Add missing VNI filter counter update in arp_reduce(). (Ivan Vecera) [RHEL-36610]
  - vxlan: Fix racy device stats updates. (Ivan Vecera) [RHEL-36610]
  - selftests: vxlan_mdb: Fix failures with old libnet (Ivan Vecera) [RHEL-36610]
  - selftests: fill in some missing configs for net (Ivan Vecera) [RHEL-36610]
  - vxlan: Cleanup IFLA_VXLAN_PORT_RANGE entry in vxlan_get_size() (Ivan Vecera) [RHEL-36610]
  - mlxsw: spectrum_nve_vxlan: Fix unsupported flag regression (Ivan Vecera) [RHEL-36610]
  - net-next: gro: Fix use of skb_gro_header_slow (Ivan Vecera) [RHEL-36610]
  - vxlan: Add missing entries to vxlan_get_size() (Ivan Vecera) [RHEL-36610]
  - vxlan: vnifilter: Use GFP_KERNEL instead of GFP_ATOMIC (Ivan Vecera) [RHEL-36610]
  - vxlan: Use helper functions to update stats (Ivan Vecera) [RHEL-36610]
  - drivers: vxlan: vnifilter: free percpu vni stats on error path (Ivan Vecera) [RHEL-36610]
  - vxlan: Add support for nexthop ID metadata (Ivan Vecera) [RHEL-36610]
  - ip_tunnels: Add nexthop ID field to ip_tunnel_key (Ivan Vecera) [RHEL-36610]
  - selftests: net: vxlan: Fix selftest regression after changes in iproute2. (Ivan Vecera) [RHEL-36610]
  - selftests: net: vxlan: Add tests for vxlan nolocalbypass option. (Ivan Vecera) [RHEL-36610]
  - net: vxlan: Add nolocalbypass option to vxlan. (Ivan Vecera) [RHEL-36610]
  - selftests: net: Add VXLAN MDB test (Ivan Vecera) [RHEL-36610]
  - vxlan: Enable MDB support (Ivan Vecera) [RHEL-36610]
  - vxlan: Add MDB data path support (Ivan Vecera) [RHEL-36610]
  - vxlan: mdb: Add an internal flag to indicate MDB usage (Ivan Vecera) [RHEL-36610]
  - vxlan: mdb: Add MDB control path support (Ivan Vecera) [RHEL-36610]
  - vxlan: Expose vxlan_xmit_one() (Ivan Vecera) [RHEL-36610]
  - vxlan: Move address helpers to private headers (Ivan Vecera) [RHEL-36610]
  - selftests: Fix failing VXLAN VNI filtering test (Ivan Vecera) [RHEL-36610]
  - vxlan: Fix memory leaks in error path (Ivan Vecera) [RHEL-36610]
  - net: gro: skb_gro_header helper function (Ivan Vecera) [RHEL-36610]
  - net: vxlan: Fix kernel coding style (Ivan Vecera) [RHEL-36610]
  - net: vxlan: Add extack support to vxlan_fdb_delete (Ivan Vecera) [RHEL-36610]
  - selftests/net: add missing tests to Makefile (Ivan Vecera) [RHEL-36610]
  - vxlan: do not feed vxlan_vnifilter_dump_dev with non vxlan devices (Ivan Vecera) [RHEL-36610]
  - drivers: vxlan: fix returnvar.cocci warning (Ivan Vecera) [RHEL-36610]
  - vxlan_core: delete unnecessary condition (Ivan Vecera) [RHEL-36610]
  - drivers: vxlan: vnifilter: add support for stats dumping (Ivan Vecera) [RHEL-36610]
  - drivers: vxlan: vnifilter: per vni stats (Ivan Vecera) [RHEL-36610]
  - selftests: add new tests for vxlan vnifiltering (Ivan Vecera) [RHEL-36610]
  - vxlan: vni filtering support on collect metadata device (Ivan Vecera) [RHEL-36610]
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [RHEL-37511]
  - ipv6: sr: fix missing sk_buff release in seg6_input_core (Hangbin Liu) [RHEL-37511]
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [RHEL-37511]
  - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-37511]
  - ipv6: sr: add missing seg6_local_exit (Hangbin Liu) [RHEL-37511]
  - tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string (Ivan Vecera) [RHEL-36218]
  - net: bql: fix building with BQL disabled (Ivan Vecera) [RHEL-36218]
  - net: sched: Remove NET_ACT_IPT from Kconfig (Ivan Vecera) [RHEL-36218]
  - net: fill in MODULE_DESCRIPTION()s for net/sched (Ivan Vecera) [RHEL-36218]
  - net/sched: act_mirred: Don't zero blockid when net device is being deleted (Ivan Vecera) [RHEL-36218]
  - selftests: forwarding: Fix layer 2 miss test flakiness (Ivan Vecera) [RHEL-36218]
  - net: netdevsim: don't try to destroy PHC on VFs (Ivan Vecera) [RHEL-36218]
  - net: sched: track device in tcf_block_get/put_ext() only for clsact binder types (Ivan Vecera) [RHEL-36218]
  - net/sched: Remove ipt action tests (Ivan Vecera) [RHEL-36218]
  - net/sched: simplify tc_action_load_ops parameters (Ivan Vecera) [RHEL-36218]
  - net: sched: move block device tracking into tcf_block_get/put_ext() (Ivan Vecera) [RHEL-36218]
  - net/sched: sch_api: conditional netlink notifications (Ivan Vecera) [RHEL-36218]
  - net/sched: introduce ACT_P_BOUND return code (Ivan Vecera) [RHEL-36218]
  - net/sched: cls_api: complement tcf_tfilter_dump_policy (Ivan Vecera) [RHEL-36218]
  - net/sched: Remove uapi support for CBQ qdisc (Ivan Vecera) [RHEL-36218]
  - net/sched: Remove uapi support for ATM qdisc (Ivan Vecera) [RHEL-36218]
  - net/sched: Remove uapi support for dsmark qdisc (Ivan Vecera) [RHEL-36218]
  - net/sched: Remove uapi support for tcindex classifier (Ivan Vecera) [RHEL-36218]
  - net/sched: Remove uapi support for rsvp classifier (Ivan Vecera) [RHEL-36218]
  - net/sched: Remove CONFIG_NET_ACT_IPT from default configs (Ivan Vecera) [RHEL-36218]
  - net/sched: Retire ipt action (Ivan Vecera) [RHEL-36218]
  - net: sched: em_text: fix possible memory leak in em_text_destroy() (Ivan Vecera) [RHEL-36218]
  - net/sched: act_mirred: Allow mirred to block (Ivan Vecera) [RHEL-36218]
  - net/sched: act_mirred: Add helper function tcf_mirred_replace_dev (Ivan Vecera) [RHEL-36218]
  - net/sched: cls_api: Expose tc block to the datapath (Ivan Vecera) [RHEL-36218]
  - net/sched: Introduce tc block netdev tracking infra (Ivan Vecera) [RHEL-36218]
  - net: sched: Add initial TC error skb drop reasons (Ivan Vecera) [RHEL-36218]
  - packet: add a generic drop reason for receive (Ivan Vecera) [RHEL-36218]
  - net: sched: Make tc-related drop reason more flexible for remaining qdiscs (Ivan Vecera) [RHEL-36218]
  - net: sched: Move drop_reason to struct tc_skb_cb (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: skip idr replace on bound actions (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: rely on rcu in tcf_idr_check_alloc (Ivan Vecera) [RHEL-36218]
  - net/sched: cls_api: conditional notification of events (Ivan Vecera) [RHEL-36218]
  - net/sched: cls_api: remove 'unicast' argument from delete notification (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: conditional notification of events (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: don't open code max() (Ivan Vecera) [RHEL-36218]
  - rtnl: add helper to send if skb is not null (Ivan Vecera) [RHEL-36218]
  - rtnl: add helper to check if a notification is needed (Ivan Vecera) [RHEL-36218]
  - rtnl: add helper to check if rtnl group has listeners (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: use tcf_act_for_each_action in tcf_idr_insert_many (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: stop loop over ops array on NULL in tcf_action_init (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: avoid non-contiguous action array (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: use tcf_act_for_each_action (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: remove filters/tests.json (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: rename concurrency.json to flower.json (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: remove spurious './' from Makefile (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: remove spurious nsPlugin usage (Ivan Vecera) [RHEL-36218]
  - net/sched: cbs: Use units.h instead of the copy of a definition (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: remove unused import (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: cleanup on Ctrl-C (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: prefix iproute2 functions with "ipr2" (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: remove unnecessary time.sleep (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: remove buildebpf plugin (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: report number of workers in use (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: timeout on unbounded loops (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: leverage -all in suite ns teardown (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: use netns delete from pyroute2 (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: move back to per test ns setup (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: cap parallel tdc to 4 cores (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: add hashtable tests for u32 (Ivan Vecera) [RHEL-36218]
  - net/sched: cls_u32: replace int refcounts with proper refcounts (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: use parallel tdc in kselftests (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: preload all modules in kselftests (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: rework namespaces and devices setup (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: drop '-N' argument from nsPlugin (Ivan Vecera) [RHEL-36218]
  - net: don't dump stack on queue timeout (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: better validate TCA_FQ_WEIGHTS and TCA_FQ_PRIOMAP (Ivan Vecera) [RHEL-36218]
  - net, sched: Fix SKB_NOT_DROPPED_YET splat under debug config (Ivan Vecera) [RHEL-36218]
  - net: sched: Fill in missing MODULE_DESCRIPTION for qdiscs (Ivan Vecera) [RHEL-36218]
  - net: sched: Fill in missing MODULE_DESCRIPTION for classifiers (Ivan Vecera) [RHEL-36218]
  - net: sched: Fill in MODULE_DESCRIPTION for act_gate (Ivan Vecera) [RHEL-36218]
  - sched: act_ct: switch to per-action label counting (Ivan Vecera) [RHEL-36218]
  - net: sched: sch_qfq: Use non-work-conserving warning handler (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: fastpath needs to take care of sk->sk_pacing_status (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: fix off-by-one error in fq_dequeue() (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: add test for 'rt' upgrade on hfsc (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: move auxiliary scripts to a dedicated folder (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: add missing Kconfig options to 'config' (Ivan Vecera) [RHEL-36218]
  - net, sched: Add tcf_set_drop_reason for {__,}tcf_classify (Ivan Vecera) [RHEL-36218]
  - net, sched: Make tc-related drop reason more flexible (Ivan Vecera) [RHEL-36218]
  - net: sched: cls_u32: Fix allocation size in u32_init() (Ivan Vecera) [RHEL-36218]
  - netem: Annotate struct disttable with __counted_by (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: add TCA_FQ_WEIGHTS attribute (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: add 3 bands and WRR scheduling (Ivan Vecera) [RHEL-36218]
  - net_sched: export pfifo_fast prio2band[] (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: remove q->ktime_cache (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: always garbage collect (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: add fast path for mostly idle qdisc (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: change how @inactive is tracked (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: struct sched_data reorg (Ivan Vecera) [RHEL-36218]
  - net_sched: constify qdisc_priv() (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: update tdc documentation (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: implement tdc parallel test run (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: update test definitions for local resources (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: localize test resources (Ivan Vecera) [RHEL-36218]
  - net/sched: cls_route: make netlink errors meaningful (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: cls_u32: add tests for classid (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: cls_route: add tests for classid (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: cls_fw: add tests for classid (Ivan Vecera) [RHEL-36218]
  - net/ipv6: SKB symmetric hash should incorporate transport ports (Ivan Vecera) [RHEL-36218]
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Ivan Vecera) [RHEL-36218]
  - net/sched: fq_pie: avoid stalls in fq_pie_timer() (Ivan Vecera) [RHEL-36218]
  - netem: use seeded PRNG for correlated loss events (Ivan Vecera) [RHEL-36218]
  - netem: use a seeded PRNG for generating random losses (Ivan Vecera) [RHEL-36218]
  - netem: add prng attribute to netem_sched_data (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: verify that a qdisc can be grafted onto a taprio class (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: test that taprio can only be attached as root (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: add ptp_mock Kconfig dependency (Ivan Vecera) [RHEL-36218]
  - net: netdevsim: mimic tc-taprio offload (Ivan Vecera) [RHEL-36218]
  - net: netdevsim: use mock PHC driver (Ivan Vecera) [RHEL-36218]
  - redhat/configs: Add CONFIG_PTP_1588_CLOCK_MOCK (Ivan Vecera) [RHEL-36218]
  - net: ptp: create a mock-up PTP Hardware Clock driver (Ivan Vecera) [RHEL-36218]
  - net/sched: taprio: dump class stats for the actual q->qdiscs[] (Ivan Vecera) [RHEL-36218]
  - net/sched: taprio: delete misleading comment about preallocating child qdiscs (Ivan Vecera) [RHEL-36218]
  - net/sched: taprio: try again to report q->qdiscs[] to qdisc_leaf() (Ivan Vecera) [RHEL-36218]
  - net/sched: taprio: keep child Qdisc refcount elevated at 2 in offload mode (Ivan Vecera) [RHEL-36218]
  - net/sched: taprio: don't access q->qdiscs[] in unoffloaded mode during attach() (Ivan Vecera) [RHEL-36218]
  - net: pkt_cls: Remove unused inline helpers (Ivan Vecera) [RHEL-36218]
  - tc: flower: Enable offload support IPSEC SPI field. (Ivan Vecera) [RHEL-36218]
  - tc: flower: support for SPI (Ivan Vecera) [RHEL-36218]
  - net: flow_dissector: Add IPSEC dissector (Ivan Vecera) [RHEL-36218]
  - net/sched: sch_qfq: warn about class in use while deleting (Ivan Vecera) [RHEL-36218]
  - net/sched: sch_drr: warn about class in use while deleting (Ivan Vecera) [RHEL-36218]
  - net/sched: wrap open coded Qdics class filter counter (Ivan Vecera) [RHEL-36218]
  - overflow: Allow mixed type arguments (Ivan Vecera) [RHEL-36218]
  - compiler.h: drop fallback overflow checkers (Ivan Vecera) [RHEL-36218]
  - dpll: fix dpll_pin_on_pin_register() for multiple parent pins (Petr Oros) [RHEL-32098]
  - dpll: indent DPLL option type by a tab (Petr Oros) [RHEL-32098]
  - dpll: fix dpll_xa_ref_*_del() for multiple registrations (Petr Oros) [RHEL-32098]
  - dpll: spec: use proper enum for pin capabilities attribute (Petr Oros) [RHEL-32098]
  - dpll: move all dpll<>netdev helpers to dpll code (Petr Oros) [RHEL-32098]
  - dpll: fix build failure due to rcu_dereference_check() on unknown type (Petr Oros) [RHEL-32098]
  - dpll: rely on rcu for netdev_dpll_pin() (Petr Oros) [RHEL-32098]
  - dpll: fix possible deadlock during netlink dump operation (Petr Oros) [RHEL-32098]
  - dpll: check that pin is registered in __dpll_pin_unregister() (Petr Oros) [RHEL-32098]
  - dpll: move xa_erase() call in to match dpll_pin_alloc() error path order (Petr Oros) [RHEL-32098]
  - dpll: expose fractional frequency offset value to user (Petr Oros) [RHEL-32098]
  - dpll: allocate pin ids in cycle (Petr Oros) [RHEL-32098]
  - dpll: remove leftover mode_supported() op and use mode_get() instead (Petr Oros) [RHEL-32098]
  - Documentation: dpll: wrap DPLL_CMD_PIN_GET output in a code block (Petr Oros) [RHEL-32098]
  - Documentation: dpll: Fix code blocks (Petr Oros) [RHEL-32098]
  - MAINTAINERS: adjust header file entry in DPLL SUBSYSTEM (Petr Oros) [RHEL-32098]
  - netdev: Remove unneeded semicolon (Petr Oros) [RHEL-32098]
  - ipvs: Fix checksumming on GSO of SCTP packets (Xin Long) [RHEL-36204]
  - net: sctp: fix skb leak in sctp_inq_free() (Xin Long) [RHEL-36204]
  - sctp: preserve const qualifier in sctp_sk() (Xin Long) [RHEL-36204]
  - sctp: Simplify the allocation of slab caches (Xin Long) [RHEL-36204]
  - sctp: fix busy polling (Xin Long) [RHEL-36204]
  - sctp: support MSG_ERRQUEUE flag in recvmsg() (Xin Long) [RHEL-36204]
  - arm64: dts: qcom: sa8775p: Make watchdog bark interrupt edge triggered (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8775p: enable safety IRQ (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: Make watchdog bark interrupt edge triggered (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: Add sa8775p compatible (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: Add compatible for MSM8226 (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: Add compatible for SM6375 (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: Add QCM2290 (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: qcom-tsens: Correct unit address (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8540p-ride: correct name of remoteproc_nsp0 firmware (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: add per-sensor cells for msm8974 (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: support per-sensor calibration cells (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: add msm8956 compat (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8540p-ride: Document i2c busses (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8540p-ride: Fix some i2c pinctrl settings (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8540p-ride: add i2c nodes (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: add missing spi nodes (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: add missing i2c nodes (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: rename qup0_i2c4 to i2c4 (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: rename qup2_i2c5 to i2c21 (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: rename qup2_uart17 to uart17 (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8540p-ride: disable pcie2a node (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8540p-ride: enable pcie2a node (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8540p-ride: enable rtc (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: Pad addresses to 8 hex digits (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: drop bogus clock-controller property (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: correct SPMI bus address cells (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: align PSCI domain names with DT schema (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: add gpr node (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: fix USB-DP PHY nodes (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: fix primary USB-DP PHY reset (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: qcom-tsens: narrow interrupts for SC8280XP, SM6350 and SM8450 (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: Add sc8280xp compatible (Steve Dunnagan) [RHEL-33072]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-3
changelog:
  - Fix Keylime configuration upgrades issues introduced in last rebase
    Resolves: RHEL-475
  - Handle session close using a session manager
    Resolves: RHEL-1252
  - Add ignores for EV_PLATFORM_CONFIG_FLAGS
    Resolves: RHEL-947


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-4
changelog:
  - Update spec file to use %verify(not md5 size mode mtime) for files updated in %post scriptlets
    Resolves: RHEL-475


author: Sergio Correia <scorreia@redhat.com> - 6.5.2-1
changelog:
  - Update to 6.5.2
    Resolves: CVE-2022-3500
    Resolves: rhbz#2138167 - agent fails IMA attestation when one scripts is executed quickly after the other
    Resolves: rhbz#2140670 - Segmentation fault in /usr/share/keylime/create_mb_refstate script
    Resolves: rhbz#142009 - Registrar may crash during EK validation when require_ek_cert is enabled


author: Sergio Correia <scorreia@redhat.com> - 6.5.2-4
changelog:
  - Backport upstream PR#1240 - logging: remove option to log into separate file
    Resolves: rhbz#2154584 - keylime verifier is not logging to /var/log/keylime


author: Patrik Koncity <pkoncity@redhat.com> - 7.3.0-2
changelog:
  - Keylime SELinux policy provides more restricted ports.
  - New SELinux label for ports used by keylime.
  - Adding tabrmd interfaces allow unix stream socket communication and dbus communication.
  - Allow the keylime_server_t domain to get the attributes of all filesystems.
    Resolves: RHEL-595
    Resolves: RHEL-390
    Resolves: RHEL-948


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: Julien Rische <jrische@redhat.com> - 1.19.1-14
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.19.1-20
changelog:
  - Fix OpenSSL 3 MD5 encyption in FIPS mode
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2068458


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
  - Resolves: rhbz#2151513
  - Remove invalid password expiry warning
  - Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2063838
  - New upstream version (1.20.1)
  - Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  - Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.0~BETA-1
changelog:
  - new upstream release
  - remove upstreamed patches
  - update CCFLAGS (https://github.com/ksh93/ksh/commit/98f989afcc7)
    Resolves: #1986897


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-11
changelog:
  - tests: Wait for raid and mirrored LVs to be synced before removing
    Resolves: rhbz#2030647
  - spec: Require the same version of utils for lvm-devel and lvm-dbus-devel
    Resolves: rhbz#2028113


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Vishal Vijayraghavan <vvijayra AT redhat DOT com> - 1:2.1.3-1
changelog:
  - New release of liberation-fonts 2.1.3
  - Resolves:rh#1464310 : Tilded G not works with Liberation Sans and Serif


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.46.1-1
changelog:
  - Rebase to new stable branch version 1.46.1
    resolves: rhbz#2011711
  - Add --enable-appliance-format-auto
  - Add support for Kylin
  - Document lazy-counters setting cannot be changed in XFS version 5
    resolves: rhbz#2025944, rhbz#1995391, rhbz#2024022
  - Require libvirt-daemon-driver-storage-core
    resolves: rhbz#2018358
  - Fix usage of strerror_r which caused corrupted error messages
    resolves: rhbz#2030396


author: Laszlo Ersek <lersek@redhat.com> - 1:1.46.1-2
changelog:
  - Add detection support for Rocky Linux
    resolves: rhbz#2030709
  - Resolve conflict between manual and libvirt-assigned PCI addresses
    resolves: rhbz#2034160


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-2
changelog:
  - Rebase to new stable branch version 1.48.4
    resolves: rhbz#2059285
  - Disable 5-level page tables when using -cpu max
    resolves: rhbz#2084568
  - SELinux relabelling should not stop on ext4 immutable bits
    resolves: rhbz#1794518
  - Ignore "iface" in add-drive variants
    resolves: rhbz#1844341
  - Lift protocol limit on guestfs_readdir()
    resolves: rhbz#1674392
  - Check return values from librpm calls (2089623)
  - Document limitations of encrypted RBD disks
    resolves: rhbz#2033247
  - Fix lvm-set-filter failed in guestfish with the latest lvm2 package
    resolves: rhbz#1965941
  - Enable PHP bindings
    resolves: rhbz#2097718
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2101281
  - Add clevis-luks to BRs, required for Clevis & Tang
    related: rhbz#1809453
  - Add zstd support to guestfs_file_architecture
    resolves: rhbz#2117004


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-4
changelog:
  - New API: guestfs_inspect_get_build_id
  - Add support for detecting Windows >= 10, returned through osinfo
    resolves: rhbz#2012658


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-1
changelog:
  - Rebase libguestfs to 1.50.1
    resolves: rhbz#2168625
  - Use q35 machine type for libguestfs appliance
    resolves: rhbz#2168578


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-4
changelog:
  - Rebase libguestfs to 1.50.1
    resolves: rhbz#2168625
  - Use q35 machine type for libguestfs appliance
    resolves: rhbz#2168578
  - Run SELinux relabelling in parallel [for virt-v2v]
    resolves: rhbz#2190276


author: Laszlo Ersek <lersek@redhat.com> - 1:1.50.1-5
changelog:
  - let "guestfish -i" recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable quickcheck; we now use "-cpu max" (upstream 30f74f38bd6e)
    resolves: rhbz#2209279


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard W.M. Jones <rjones@redhat.com> - 8.2-1
changelog:
  - Rebuild for RHEL AV 8.2.
  - Include ntfs-3g-system-compression plugin.
    resolves: rhbz#1705234, rhbz#1796073


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.5.2-5
changelog:
  - replace use of ucpp with gcc cpp
  - Resolves: tdf#132739 two html style tags where there should be just one


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Update to 4.4. Resolves: rhbz#1975812
  - Port compiler warning suppression by Paul Wouters:
    https://src.fedoraproject.org/rpms/libreswan/c/8d7f98d41444ac77c562f735b4b93038f5346ce2?branch=rawhide


author: Daiki Ueno <dueno@redhat.com> - 4.4-3
changelog:
  - Backport removal gethostbyname2 uses from the upstream
  - Fix issues spotted by covscan (rhbz#1938784)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Stefan Berger <stefanb@linux.ibm.com> - 0.7.5-0.20210218gite271498466
changelog:
  - Addressed UBSAN and cppcheck detected issues
  - Return proper size of ECC Parameters to pass HLK tests


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-2
changelog:
  - nodedev: transient mdev update on nodeDeviceCreateXML (rhbz#2143158)
  - nodedev: refactor mdevctl thread functions (rhbz#2143158)
  - nodedev: update mdevs from the mdevctl thread (rhbz#2143158)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-3
changelog:
  - tests: remove acpi support from s390x ccw hotplug tests (rhbz#2168499)
  - tests: add capabilities for QEMU 8.1.0 on s390x (rhbz#2168499)
  - qemu: add run-with async-teardown capability (rhbz#2168499)
  - qemu: allow use of async teardown in domain (rhbz#2168499)
  - conf: domcaps: Add 'async-teardown' domain capability (rhbz#2168499)
  - qemu: S390 does not provide physical address size (rhbz#2224016)
  - nodedev: report mdev persistence properly (rhbz#2143158)
  - node_device: Don't leak error message buffer from virMdevctlListDefined|Active (rhbz#2143158)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-4
changelog:
  - storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (CVE-2023-3750, rhbz#2221851)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-5
changelog:
  - Revert "qemu_passt: Actually use @logfd" (rhbz#2209191)
  - Revert "qemu_passt: Precreate passt logfile" (rhbz#2209191)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-6
changelog:
  - tests: Use DO_TEST_CAPS_*_ABI_UPDATE() for ppc64 (rhbz#2196178)
  - tests: Switch to firmware autoselection for hvf (rhbz#2196178)
  - tests: Use virt-4.0 machine type for aarch64 (rhbz#2196178)
  - tests: Consistently use /path/to/guest_VARS.fd (rhbz#2196178)
  - tests: Turn abi-update.xml into a symlink (rhbz#2196178)
  - tests: Rename firmware-auto-efi-nvram-path (rhbz#2196178)
  - qemu: Fix return value for qemuFirmwareFillDomainLegacy() (rhbz#2196178)
  - qemu: Fix lookup against stateless/combined pflash (rhbz#2196178)
  - tests: Add some more DO_TEST*ABI_UPDATE* macros (rhbz#2196178)
  - tests: Add more tests for firmware selection (rhbz#2196178)
  - tests: Update firmware descriptor files (rhbz#2196178)
  - tests: Drop tags from BIOS firmware descriptor (rhbz#2196178)
  - tests: Include microvm in firmwaretest (rhbz#2196178)
  - qemu: Don't overwrite NVRAM template for legacy firmware (rhbz#2196178)
  - qemu: Generate NVRAM path in more cases (rhbz#2196178)
  - qemu: Filter firmware based on loader.readonly (rhbz#2196178)
  - qemu: Match NVRAM template extension for new domains (rhbz#2196178)
  - conf: Don't default to raw format for loader/NVRAM (rhbz#2196178)
  - tests: Rename firmware-auto-efi-format-loader-qcow2-nvram-path (rhbz#2196178)
  - tests: Reintroduce firmware-auto-efi-format-mismatch (rhbz#2196178)
  - rpm: Reorder scriptlets (rhbz#2210058)
  - rpm: Reduce use of with_modular_daemons (rhbz#2210058)
  - rpm: Remove custom libvirtd restart logic (rhbz#2210058)
  - rpm: Introduce new macros for handling of systemd units (rhbz#2210058)
  - rpm: Switch to new macros for handling of systemd units (rhbz#2210058)
  - rpm: Delete unused macros (rhbz#2210058)


author: Jiri Denemark <jdenemar@redhat.com> - 9.9.0-1
changelog:
  - Rebased to libvirt-9.9.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-7525, rhbz#RHEL-7570, rhbz#RHEL-7542, rhbz#RHEL-7568, rhbz#RHEL-7545
      rhbz#RHEL-3231, rhbz#RHEL-7382, rhbz#RHEL-7345, rhbz#RHEL-1717, rhbz#RHEL-7528
      rhbz#RHEL-1833, rhbz#RHEL-7569, rhbz#RHEL-4432, rhbz#RHEL-974, rhbz#RHEL-4994
      rhbz#RHEL-7419


author: Jiri Denemark <jdenemar@redhat.com> - 9.10.0-1
changelog:
  - Rebased to libvirt-9.10.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-16878, rhbz#RHEL-14611, rhbz#RHEL-7384, rhbz#RHEL-16870, rhbz#RHEL-18439
      rhbz#RHEL-16751, rhbz#RHEL-4452, rhbz#RHEL-17841, rhbz#RHEL-15288, rhbz#RHEL-7040


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-1
changelog:
  - Rebased to libvirt-10.0.0 (RHEL-15267)
  - The rebase also fixes the following bugs:
      RHEL-18782, RHEL-735, RHEL-18165, RHEL-4607, RHEL-700
      RHEL-7100, RHEL-15480, RHEL-7416, RHEL-20609, RHEL-7570
      RHEL-20444, RHEL-17596, RHEL-7569


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-2
changelog:
  - tests: Add hostcpudata for machine with CPU clusters (RHEL-7043)
  - conf: Report CPU clusters in capabilities XML (RHEL-7043)
  - conf: Allow specifying CPU clusters (RHEL-7043)
  - qemu: Introduce QEMU_CAPS_SMP_CLUSTERS (RHEL-7043)
  - qemu: Use CPU clusters for guests (RHEL-7043)
  - tests: Add test case for CPU clusters (RHEL-7043)
  - qemu: Make monitor aware of CPU clusters (RHEL-7043)
  - tests: Verify handling of CPU clusters in QMP data (RHEL-7043)
  - build: Make daemons depend on generated *_protocol.[ch] (RHEL-15267)
  - domain_validate: Check for domain address conflicts fully (RHEL-4452)
  - qemu_hotplug: Don't lose 'created' flag in qemuDomainChangeNet() (RHEL-22714)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-3
changelog:
  - remote_driver: Restore special behavior of remoteDomainGetBlockIoTune() (RHEL-22800)
  - conf: Introduce dynamicMemslots attribute for virtio-mem (RHEL-15316)
  - qemu_capabilities: Add QEMU_CAPS_DEVICE_VIRTIO_MEM_PCI_DYNAMIC_MEMSLOTS capability (RHEL-15316)
  - qemu_validate: Check capability for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_command: Generate cmd line for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_snapshot: fix detection if non-leaf snapshot isn't in active chain (RHEL-23212)
  - qemu_snapshot: create: refactor external snapshot detection (RHEL-22797)
  - qemu_snapshot: create: don't require disk-only flag for offline external snapshot (RHEL-22797)
  - remoteDispatchAuthPolkit: Fix lock ordering deadlock if client closes connection during auth (RHEL-20337)
  - util: virtportallocator: Add VIR_DEBUG statements for port allocations and release (RHEL-21543)
  - qemu: migration: Properly handle reservation of manually specified NBD port (RHEL-21543)
  - qemuMigrationDstStartNBDServer: Refactor cleanup (RHEL-21543)
  - virPCIVPDResourceIsValidTextValue: Adjust comment to reflect actual code (RHEL-22314)
  - util: pcivpd: Refactor virPCIVPDResourceIsValidTextValue (RHEL-22314)
  - virNodeDeviceCapVPDFormatCustom*: Escape unsanitized strings (RHEL-22314)
  - virNodeDeviceCapVPDFormat: Properly escape system-originated strings (RHEL-22314)
  - schema: nodedev: Adjust allowed characters in 'vpdFieldValueFormat' (RHEL-22314)
  - tests: Test the previously mishandled PCI VPD characters (RHEL-22314)
  - Don't overwrite error message from 'virXPathNodeSet' (RHEL-22314)
  - tests: virpcivpdtest: Remove 'testVirPCIVPDReadVPDBytes' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDReadVPDBytes' (RHEL-22314)
  - util: pcivpd: Unexport virPCIVPDParseVPDLargeResourceFields (RHEL-22314)
  - tests: virpcivpd: Remove 'testVirPCIVPDParseVPDStringResource' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDParseVPDLargeResourceString' (RHEL-22314)
  - virPCIVPDResourceGetKeywordPrefix: Fix logging (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceCustomUpsertValue (RHEL-22314)
  - conf: virNodeDeviceCapVPDParse*: Remove pointless NULL checks (RHEL-22314)
  - virpcivpdtest: testPCIVPDResourceBasic: Remove tests for uninitialized 'ro'/'rw' section (RHEL-22314)
  - util: virPCIVPDResourceUpdateKeyword: Remove impossible checks (RHEL-22314)
  - conf: node_device: Refactor 'virNodeDeviceCapVPDParseCustomFields' to fix error reporting (RHEL-22314)
  - virNodeDeviceCapVPDParseXML: Fix error reporting (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceUpdateKeyword (RHEL-22314)
  - virPCIDeviceHasVPD: Refactor "debug" messages (RHEL-22314)
  - virPCIDeviceGetVPD: Fix multiple error handling bugs (RHEL-22314)
  - virPCIDeviceGetVPD: Handle errors in callers (RHEL-22314)
  - virPCIVPDReadVPDBytes: Refactor error handling (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceString: Properly report errors (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Merge logic conditions (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Remove impossible 'default' switch case (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor processing of read data (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor return logic (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Report proper errors (RHEL-22314)
  - virPCIVPDParse: Do reasonable error reporting (RHEL-22314)
  - virt-admin: Add warning when connection to default daemon fails (RHEL-23170)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-4
changelog:
  - Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
  - qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
  - qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
  - domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-5
changelog:
  - cpu: x86: Add support for adding features to existing CPU models (RHEL-25995)
  - qemu: domain: Check arch in qemuDomainMakeCPUMigratable (RHEL-25995)
  - conf: cpu: Introduce virCPUDefListFeatures (RHEL-25995)
  - qemu: domain: Drop added features from migratable CPU (RHEL-25995)
  - Add vmx-* features to Broadwell* (RHEL-25995)
  - Add vmx-* features to Cascadelake* (RHEL-25995)
  - Add vmx-* features to Conroe (RHEL-25995)
  - Add vmx-* features to Cooperlake (RHEL-25995)
  - Add vmx-* features to core{,2}duo (RHEL-25995)
  - Add vmx-* features to Haswell* (RHEL-25995)
  - Add vmx-* features to Icelake* (RHEL-25995)
  - Add vmx-* features to IvyBridge* (RHEL-25995)
  - Add vmx-* features to kvm* (RHEL-25995)
  - Add vmx-* features to Nehalem* (RHEL-25995)
  - Add vmx-* features to Penryn (RHEL-25995)
  - Add vmx-* features to SandyBridge* (RHEL-25995)
  - Add vmx-* features to SapphireRapids (RHEL-25995)
  - Add vmx-* features to Skylake* (RHEL-25995)
  - Add vmx-* features to Snowridge (RHEL-25995)
  - Add vmx-* features to Westmere* (RHEL-25995)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-7
changelog:
  - qemu: virtiofs: do not crash if cgroups are missing
  - qemu: virtiofs: set correct label when creating the socket
  - qemu: virtiofs: error out if getting the group or user name fails
  - Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)
  - qemu: Fix migration with custom XML (RHEL-30622)


author: Jiri Denemark <jdenemar@redhat.com> - 10.3.0-1
changelog:
  - Rebased to libvirt-10.3.0 (RHEL-29642)
  - The rebase also fixes the following bugs:
      RHEL-25993, RHEL-7101, RHEL-7461, RHEL-16333, RHEL-7343
      RHEL-28808, RHEL-32880, RHEL-35879, RHEL-34112, RHEL-30373
      RHEL-23416, RHEL-23608, RHEL-26276, RHEL-22728


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Jakub Jelen <jjelen@redhat.com> - 1.1.33-4
changelog:
  - Do not build python bindings even if the python is available
  - Fix CVE-2019-13117 (#1728547)
  - Fix CVE-2019-13118 (#1728542)


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "aarch64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j32  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-3
changelog:
  - fix handling of zero-length messages
  - minimize default configuration
  - remove obsolete build requirement


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 16.0.1-4
changelog:
  - Improve error messages for unsupported relocs on s390x (rhbz#2216906)
  - Disable LLVM_UNREACHABLE_OPTIMIZE


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Frank Crawford <frank@crawford.emu.id.au> - 7.5.4-2
changelog:
  - Add requires for perl-diagnostics (#1893671) and perl-lib (#1893503)
  - Add other requires as nothing is now automatically supplied


author: Brian C. Lane <bcl@redhat.com> 34.9.12-1
changelog:
  - mkksiso: Improve debug message about unsupported arch (bcl@redhat.com)
    Related: rhbz#2049192
  - mkksiso: Add kickstart to s390x cdboot.prm (bcl@redhat.com)
    Resolves: rhbz#2049192


author: Brian C. Lane <bcl@redhat.com> 34.9.15-1
changelog:
  - tito: Add the LoraxRHELTagger from rhel8-branch (bcl)
    Related: rhbz#2070910
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2070910


author: Brian C. Lane <bcl@redhat.com> 34.9.16-1
changelog:
  - Makefile: Add local-srpm target to create a .src.rpm from HEAD (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix s390x support (bcl)
    Related: rhbz#2088631
  - mkksiso: Remove use of os.path.join (bcl)
    Related: rhbz#2088631
  - Makefile: Add mkksiso to coverage report (bcl)
    Related: rhbz#2088631
  - setup.py: Install mkksiso to /usr/bin (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix grub2 editing error (bcl)
    Related: rhbz#2088631
  - mkksiso: Rewrite to use xorriso features (bcl)
    Resolves: rhbz#2088631


author: Brian C. Lane <bcl@redhat.com> 34.9.17-1
changelog:
  - minimal.ks: Add include for architecture specific packages (bcl)
    Related: rhbz#2051548
  - livemedia.ks: Add include for architecture specific packages (bcl)
    Resolves: rhbz#2051548
  - tests: Add tests for mkksiso (bcl)
    Related: rhbz#2037015
  - mkksiso: Add kernel cmdline customization support (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Move kickstart to --ks KICKSTART (bcl)
    Related: rhbz#2037015
  - mkksiso: Add helper functions for kernel cmdline modifications (bcl)
    Related: rhbz#2037015
  - lorax.spec: Fix changelog order (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.18-1
changelog:
  - mkksiso: Set u+rw permission on extracted files and directories (bcl)
    Related: rhbz#2088631
  - lorax.spec: Fix changelog (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.19-1
changelog:
  - mkksiso: Optionally support 3 arguments or --ks (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Add -U to xorriso on ppc64le (bcl)
    Resolves: rhbz#2109665
  - mkksiso: Fix passing -iso-level to xorriso (bcl)
    Related: rhbz#2109665


author: Brian C. Lane <bcl@redhat.com> 34.9.20-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042057
  - templates: Update path to license files (bcl)
    Related: rhbz#2042057
  - templates: Update boot timeout to 5s (bcl)
    Related: rhbz#2042057


author: Brian C. Lane <bcl@redhat.com> 34.9.23-1
changelog:
  - rsyslog.conf: Set WorkDirectory to /var/lib/rsyslog (bcl)
    Resolves: rhbz#2158731
  - lorax.spec: fix changelog entry for 2132511 (bcl)
    Related: rhbz#2132511


author: Brian C. Lane <bcl@redhat.com> - 9.0-26
changelog:
  - templates: Change nomodeset / basic graphics to use inst.text (bcl)
    Resolves: rhbz#1961092
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl)
    Related: rhbz#1961092


author: Brian C. Lane <bcl@redhat.com> - 9.0-29
changelog:
  - Drop ia32 uefi package installation (bcl)
    Resolves: rhbz#2038397
  - Enable sftp when using inst.sshd (bcl)
    Resolves: rhbz#2035049


author: Brian C. Lane <bcl@redhat.com> - 9.0-30
changelog:
  - Add .discinfo on all arches (bcl)
    Resolves: rhbz#2030008
  - Add inst.rngd cmdline option (bcl)
    Resolves: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-31
changelog:
  - Do not install rng-tools (bcl)
    Resolves: rhbz#2028720
  - Revert "Add inst.rngd cmdline option" (bcl)
    Related: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-35
changelog:
  - Makefile: Making it easier to create releases (bcl)
    Related: rhbz#2071074
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2071074


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Tom Callaway <spot@fedoraproject.org> - 33.3.1-17
changelog:
  - hack this ancient beastie to work with lua 5.4
  - maintainer, please update this to the current upstream release at your earliest convenience


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-2
changelog:
  - Exit with error when --devicesfile used does not exist.
  - Restore --reportformat option in pvdisplay.
  - Improve multipath backlist option handling.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-3
changelog:
  - Fix effect of setting multipath_component_detection to 0.
  - Fix lvmdbusd using lvm shell with editline.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-4
changelog:
  - Fix missing warning on thin pool over provisioning.
  - Fix infinite recursion in lvresize_fs_helper when resizing LUKS device.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-5
changelog:
  - Fix vgimportclone fail if PV has no metadata.
  - Fix lvmdbusd missing stderr for commands not returning JSON.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Christopher Tubbs <ctubbsii@fedoraproject.org> - 1:3.6.3-6
changelog:
  - Remove unneeded commons-logging from runtime class path (rhbz#1883751)
  - Also remove redundant commons-codec


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: Konstantin Kostiuk <kkostiuk@redhat.com> 103.0.0
changelog:
  - Set version to 103.0.0
  - BZ#1992643 - Add mingw-qemu-ga-win package to CentOS stream
  - Rebase to qemu-6.2.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.0
changelog:
  - Set version to 104.0.0
  - BZ#2078384 - Rebase QEMU Guest Agent Windows to 7.0.0
  - Rebase to qemu-7.0.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.2
changelog:
  - Set version to 104.0.2
  - BZ#2084608 - Fix mismatched allocation function
  - BZ#2084613 - qga-win: race condition in build


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.1
changelog:
  - Set version to 105.0.1
  - Remove redundant package
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.2
changelog:
  - Set version to 105.0.2
  - Fix wrong requires
  - Fix missing patch0002
  - Remove extra Summary
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.3
changelog:
  - Set version to 105.0.3
  - BZ#2090250 - mingw-qemu-ga-win: Add Provides: bundled() to rpm packages [rhel-9]


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Jakub Kadlcik <frostyx@email.cz> 0.5-1
changelog:
  - Release for epel8 as well (frostyx@email.cz)
  - Require createrepo_c for the createrepo_mod package (frostyx@email.cz)
  - modulemd-merge: improve README.md file (frostyx@email.cz)
  - repo2module: improve README.md file (frostyx@email.cz)
  - dir2module: improve README.md file (frostyx@email.cz)
  - Improve README.md file (frostyx@email.cz)
  - createrepo_mod: improve README.md file (frostyx@email.cz)
  - Loosen the python3-libmodulemd dependency to just libmodulemd
    (frostyx@email.cz)
  - createrepo_mod: use just createrepo_c if it has built-in module support
    (frostyx@email.cz)
  - Explicitly depend on python3-setuptools (frostyx@email.cz)
  - createrepo_mod: dump modules.yaml into the correct directory
    (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6-1
changelog:
  - Generate manpages for all tools in this repository 
  - modulemd-generate-macros: add a tool for generating module-build-macros
  - modulemd_tools: add the first pieces of a python library (for internal usage only)


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-1
changelog:
  - New upstream stable version 1.26.3.
    resolves: rhbz#1950632
  - Add Python .cleanup() method.
  - Fix data corruption in zero and trim on unaligned tail.
    resolves: rhbz#1990134


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-3
changelog:
  - Fix parsing of delay-* options
    resolves: rhbz#1991649
  - Fix assertion failure during server shutdown
  - Fix delay-close option
    resolves: rhbz#1991652
  - tests/test-debug-flags.sh: Don't use port 10809 during test
    resolves: rhbz#1991945


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.5-1
changelog:
  - Rebase along stable branch to 1.26.5
    resolves: rhbz#1995327
  - Add nbdkit-vddk-plugin -D vddk.stats=1 flag
    resolves: rhbz#1995329
  - Add nbdkit-cow-filter cow-block-size parameter
    resolves: rhbz#1995332
  - Fix CVE-2021-3716 nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS
  - Update keyring


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-11
changelog:
  - nfs.man: adding new mount option max_connect (bz 2106848)
  - systemd: Fix format-overflow warning (bz 2106896)


author: Steve Dickson <steved@redhat.com> 2.5.4-12
changelog:
  - idmapd: Fix error status when nfs-idmapd exits (bz 2001764)
  - mount.nfs Fix error reporting for already mounted shares (bz 2054300)
  - rpcctl - fix failure when setting xprt offline and online (bz 2081934)
  - rpc-pipefs-generator: allocate enough space (bz 2109420)


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Gris Ge <fge@redhat.com> - 2.2.27-1
changelog:
  - N/A

   - Support TCP congestion window(cwnd) in route. (59f99632)
   - Support query interface driver. (67817c23)
   - New API to generate changed state. (fe5327a2)

   - Include driver information for `persist-nic-names` subcommand. (1129e46b)
   - nm: Protect global DNS config in checkpoint. (881373ba)
   - route rule: Append rule instead of overriding when iface defined. (88d3d3ef)
  - Resolves RHEL-19409


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
  - Resolves: rhbz#2153714
  - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
  - Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2159389
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.0-1
changelog:
  - Update to v20.5.0
  - Remove dtrace support
  - bcond corepack, so we don't provide it by default
  - Decrease debuginfo verbosity for all arches
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.1-1
changelog:
  - Rebase to new security release
  - Address CVE-2023-32002, CVE-2023-32004, CVE-2023-32558 (high)
  - Address CVE-2023-32006, CVE-2023-32559 (medium)
  - Address CVE-2023-32005, CVE-2023-32003 (low)
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.8.1-1
changelog:
  - Update node and nghttp
  - Add fips patch
  - Fixes CVE-2023-44487 (nghttp)
  - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Jan Staněk <jstanek@redhat.com> - 2.0.3-6
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-3.3
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jerry James <loganjerry@gmail.com> - 8.0.1-1
changelog:
  - Version 8.0.1
  - Add 0002-Catch-CompileException-in-test.patch to fix compilation of a test
  - Make generate-tarball.sh actually compress the tarball


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.0-1
changelog:
  - Rebase to 12.0.0 [bz#2061193]
  - Resolves: bz#2061193
    ([ESXi][RHEL9]Open-vm-tools release 12.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-1
changelog:
  - Rebase to open-vm-tools 12.0.5 [bz#2090275]
  - Resolves: bz#2090275
    ([ESXi][RHEL9]Open-vm-tools release 12.0.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.0-1
changelog:
  - Rebase to open-mv-tools 12.1.0 [bz#2121203]
  - Resolves: bz#2121203
    ([ESXi][RHEL9]Open-vm-tools release 12.1.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1
changelog:
  - Rebase to open-vm-tools 12.1.5 [bz#2150190]
  - Resolves: bz#2150190
    ([ESXi][RHEL9]Open-vm-tools release 12.1.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
changelog:
  - Rebase to open-vm-tools 12.2.0 [bz#2177086]
  - Resolves: bz#2177086
    ([ESXi][RHEL9]open-vm-tools version 12.2.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-2
changelog:
  - ovt-Use-https-instead-of-http-for-documentation-links.patch [bz#2208160]
  - Resolves: bz#2208160
    ([ESXi][RHEL9] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215566]
  - Resolves: bz#2215566
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-br-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebaer to open-vm-tools 12.2.5
  - Resolves: bz#2214862
    ([ESXi][RHEL9]open-vm-tools version 12.2.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236544]
  - Resolves: bz#2236544
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2446]
  - Resolves: RHEL-2446
    ([RHEL9.3][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5-1 [RHEL-15058]
  - Fixed CVE-2023-34058 [RHEL-14653]
  - Fixed CVE-2023-34059 [RHEL-14687]
  - Resolves: RHEL-15058
    ([ESXi][RHEL9]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14653
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-9.4.0])
  - Resolves: RHEL-14687
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-9.4.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-15346]
  - Resolves: RHEL-15346
    (Add Restart=on-failure to vmtoolsd.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30341
  - Resolves: RHEL-30341
    ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-35543]
  - Resolves: RHEL-35543
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
changelog:
  - Added some linker hardening flags to pass annocheck
    Related: rhbz#2031802

    * Tue Dec 14 2021 Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
  - Added gating
    Related: rhbz#2031794


author: Michael Petlan <mpetlan@redhat.com> - 1.2.0-2
changelog:
  - Update to upstream 1.2.0 -- fix opencsd_tag
    Related: rhbz#2041578

    * Fri Jan 21 2022 Michael Petlan <mpetlan@redhat.com> - 1.2.0-1
  - Update to upstream 1.2.0
    Related: rhbz#2041578


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-24
changelog:
  - Set minimal value of RSA key length via configuration option - support both names
    Resolves: rhbz#2128352


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-26
changelog:
  - Fix one-byte overflow in SSH banner processing
    Resolves: rhbz#2138345
  - Fix double free() in error path
    Resolves: rhbz#2138347


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-28
changelog:
  - Do not try to use SHA1 for host key ownership proof when we don't support it server-side
    Resolves: rhbz#2088750


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-30
changelog:
  - Some non-terminating processes were listening on ports.
    Resolves: rhbz#2177768
  - On sshd startup, we check whether signing using the SHA1 for signing is
    available and don't use it when it isn't.
  - On ssh private key conversion we explicitly use SHA2 for testing RSA keys.
  - In sshd, when SHA1 signatures are unavailable, we fallback (fall forward :) )
    to SHA2 on host keys proof confirmation.
  - On a client side we permit SHA2-based proofs from server when requested SHA1
    proof (or didn't specify the hash algorithm that implies SHA1 on the client
    side). It is aligned with already present exception for RSA certificates.
  - We fallback to SHA2 if SHA1 signatures is not available on the client side
    (file sshconnect2.c).
  - We skip dss-related tests (they don't work without SHA1).
    Resolves: rhbz#2070163
  - FIPS compliance efforts for dh, ecdh and signing
    Resolves: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-31
changelog:
  - Fix minor issues with openssh-8.7p1-evp-fips-compl-dh.patch:
  - Check return values
  - Use EVP API to get the size of DH
  - Add some log debug lines
  - Related: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Sahana Prasad <sahana@redhat.com> - 1:3.0.7-16
changelog:
  - Upload new upstream sources without manually hobbling them.
  - Remove the hobbling script as it is redundant. It is now allowed to ship
    the sources of patented EC curves, however it is still made unavailable to use
    by compiling with the 'no-ec2m' Configure option. The additional forbidden
    curves such as P-160, P-192, wap-tls curves are manually removed by updating
    0011-Remove-EC-curves.patch.
  - Enable Brainpool curves.
  - Apply the changes to ec_curve.c and  ectest.c as a new patch
    0010-Add-changes-to-ectest-and-eccurve.patch instead of replacing them.
  - Modify 0011-Remove-EC-curves.patch to allow Brainpool curves.
  - Modify 0011-Remove-EC-curves.patch to allow code under macro OPENSSL_NO_EC2M.
    Resolves: rhbz#2130618, rhbz#2188180


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-19
changelog:
  - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode
    Resolves: rhbz#2169757


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-20
changelog:
  - Fix possible DoS translating ASN.1 object identifiers
    Resolves: CVE-2023-2650
  - Release the DRBG in global default libctx early
    Resolves: rhbz#2211340


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Matej Tyc <matyc@redhat.com> - 2.0.0-5
changelog:
  - Fix handling of content archives
    Resolves: rhbz#1996129
  - Fix handling of content fingerprint
    Resolves: rhbz#1993065
  - Fix crash when a previously selected hardening has been cancelled
    Resolves: rhbz#2014108
  - Pull latest translations


author: Matej Tyc <matyc@redhat.com> - 2.0.0-8
changelog:
  - Introduce unified help support
    Resolves: rhbz#2043512
  - Update translations
    Resolves: rhbz#2017374


author: Matej Tyc <matyc@redhat.com> - 2.0.0-9
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1999587
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2042334


author: Matej Tyc <matyc@redhat.com> - 2.0.0-12
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2065751


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210809-1
changelog:
  - Update for new release (v20210809) [bz#1970881]
  - Resolves: bz#1970881
    ([RHEL-9] virt-install --location fails with Could not find an installable distribution at URL '/var/lib/libvirt/images/boot.iso')


author: Victor Toso <victortoso@redhat.com> - 20221130-1
changelog:
  - Update for new release (v20221130)
    Resolves: rhbz#2135751
  - Add rhel-8.8 and rhel-9.2 prereleases
    Related: rhbz#2135751


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2023.5-1
changelog:
  - https://github.com/ostreedev/ostree/releases/tag/v2023.5
    backport: https://github.com/ostreedev/ostree/commit/7f70614a1ac1950ebde3df0e26cc9ab1d72b2f1f
    Resolves: rhbz#2221997


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Alex Macdonald <almacdon@redhat.com> - 1.2.2-3
changelog:
  - Remove osgi metadata patch0 that previously added a manifest
  - Include patch (courtesy of jkang) to package as a bundle instead of a jar
  - Update maven-compiler-plugin source/target version for builds in f33


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Stefano Brivio <sbrivio@redhat.com> - 0^20221015.gb3f3591-1
changelog:
  - Add versioning information
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_09_29.06aa26f..2022_10_15.b3f3591


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-2
changelog:
  - udp: Actually use host resolver to forward DNS queries (rhbz#2177075)
  - conf: Split add_dns{4,6}() out of get_dns() (rhbz#2177075)
  - conf, udp: Allow any loopback address to be used as resolver (rhbz#2177075)
  - tcp, tcp_splice: Get rid of false positive CWE-394 Coverity warning from fls() (rhbz#2177084)
  - tcp: Avoid false (but convoluted) positive Coverity CWE-476 warning (rhbz#2177084)
  - tcp: Avoid (theoretical) resource leak (CWE-772) Coverity warning (rhbz#2177084)
  - Fix definitions of SOCKET_MAX, TCP_MAX_CONNS (rhbz#2177084)
  - doc/demo: Fix and suppress ShellCheck warnings (rhbz#2177084)
  - contrib/selinux: Drop duplicate init_daemon_domain() rule (rhbz#2176813)
  - contrib/selinux: Let passt write to stdout and stderr when it starts (rhbz#2176813)
  - contrib/selinux: Allow binding and connecting to all UDP and TCP ports (rhbz#2176813)
  - contrib/selinux: Let interface users set paths for log, PID, socket files (rhbz#2176813)
  - contrib/selinux: Drop "example" from headers: this is the actual policy (rhbz#2176813)
  - contrib/selinux: Drop unused passt_read_data() interface (rhbz#2176813)
  - contrib/selinux: Split interfaces into smaller bits (rhbz#2176813)
  - fedora: Install SELinux interface files to shared include directory (rhbz#2176813)
  - tcp, udp, util: Pass socket creation errors all the way up (rhbz#2177080)
  - tcp, udp: Fix partial success return codes in {tcp,udp}_sock_init() (rhbz#2177080)
  - conf: Terminate on EMFILE or ENFILE on sockets for port mapping (rhbz#2177080)
  - tcp: Clamp MSS value when queueing data to tap, also for pasta (rhbz#2177083)
  - Fix up SELinux labels on install/uninstall, require matching -selinux package (rhbz#2176813)
  - Resolves: rhbz#2177075 rhbz#2177084 rhbz#2177080 rhbz#2177083 rhbz#2176813


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-3
changelog:
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-4
changelog:
  - Drop (pointless) patches 20, 21, 22, actually apply changes to the spec file!
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-2
changelog:
  - Drop user_namespace create allow rule, incompatible with current el9 kernel
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-3
changelog:
  - Explicit restorecon in scriptlet as rpm(8) mix up contexts with hard links
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-4
changelog:
  - Switch to copies instead of links for pasta: previous workaround unreliable
  - Resolves: RHELPLAN-155811


author: Nathan Scott <nathans@redhat.com> - 6.0.4-1
changelog:
  - Ensure pmcd.conf not rewritten needlessly (BZ 2166819)
  - Add support for pmieconf webhook action (BZ 2185803)
  - Rebase to latest stable version of PCP (BZ 2175602)


author: Nathan Scott <nathans@redhat.com> - 6.1.1-1
changelog:
  - Improve pmlogcheck performance with compressed archives (RHEL-3930)
  - Fix pcp-ss(1) utility handling of duplicate sources (RHEL-7498)
  - Fine-tune PCP python wrapper path resolution (RHEL-7509)
  - Rebase to latest stable version of PCP (RHEL-2317)


author: Nathan Scott <nathans@redhat.com> - 6.1.1-2
changelog:
  - Fix pcp-ss(1) default handling of listen state (RHEL-17335)
  - Added pcp package dependency on diffutils for diffstat(1)


author: Nathan Scott <nathans@redhat.com> - 6.2.1-1
changelog:
  - Rebase to latest stable version of PCP (RHEL-30198)
  - Disable pmproxy(1) RESP proxying by default (RHEL-30720)
  - Add pmcheck(1) utility to check installation (RHEL-25497)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-1
changelog:
  - Rebase to latest stable version of PCP (RHEL-30198)
  - Fix pcp2openmetrics on s390x reading from an archive (RHEL-32407)
  - Fix pcp2openmetrics -F output file option (RHEL-32674)
  - Fix pmlogdump version reporting (RHEL-32381)
  - Add timestamps for pcp2openmetrics archive option (RHEL-32369)
  - Add new metrics to monitor VMware balloon usage (RHEL-32198)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-1
changelog:
  - Added conditional lockdown policy access by pmdakvm (BZ 1940971)
  - Added spec file dependency on cyrus-sasl-scram (BZ 1942879)
  - Update to latest PCP sources (BZ 1957575)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-2
changelog:
  - Improve pmchart duplicate archive diagnostics (BZ 1615718)
  - Save pmchart users prefered archive locations (BZ 1615742)
  - Remove libvarlink dependency from podman PMDA (BZ 1956608)
  - Correct pcp-testsuite file permissions (BZ 1922040)
  - Resolve pcp-testsuite linkage problems (BZ 1950263)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-3
changelog:
  - Fix pmproxy parallel TLS requests bug (BZ 1947989)
  - Backport pmrep archive creation fix (BZ 1974266)
  - Related: rhbz#1957575


author: Mark Goodwin <mgoodwin@redhat.com> - 5.3.1-4
changelog:
  - Improve pmproxy and libpcp_web scalability (BZ 1975069)
  - Provide a pcp-ss(1) tool in pcp-system-tools (BZ 1879350)


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-3
changelog:
  - Fix misparsing long numbers as a backreference and a number without
    a closing bracket as a quantifier (upstream bug #2690)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.014-14
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions of installed files


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.17029-1
changelog:
  - Update to 0.17029
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.002002-1
changelog:
  - Update to 1.002002
    - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps
      like /foo/i but not /foo/; having trailing flags is now optional! (GH#6)
    - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set;
      this is because bareword '-default' was being interpreted as the Perl
      'default' keyword (GH#5)
  - Unbundle newly-bundled test modules


author: Paul Howarth <paul@city-fan.org> - 1.16-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.72-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Socket::Utils CERT_asHash and CERT_create now support subject and
      issuer with multiple same parts (like multiple OU); in this case an array
      ref instead of a scalar is used as hash value (GH#95)


author: Michal Josef Špaček <mspacek@redhat.com> - 2.070-4
changelog:
  - Remove failing tests in openssl 3.0.0-alpha16. Related: rhbz#1968046
    - Provisional for mass rebuild of openssl3.


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.03-1
changelog:
  - Update to 4.03
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Petr Pisar <ppisar@redhat.com> - 1:0.68-3
changelog:
  - Fix resolving localhost on loopback-only machines
    (https://github.com/perl-ldap/perl-ldap/pull/60)


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix failing installation in parallel make (GH#38)
    - Infrastructure improvements and tooling updates, lots of author tests with
      corresponding fixes added
    - Added slide and slideatatime functions
    - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043,
      CPAN RT#132940)
    - Bump List::MoreUtils::XS requirement to 0.430
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.86-1
changelog:
  - Update to 0.86
    - Update PAUSE and ANDK keys to 2020
    - Update documentation pertaining to SHA1
    - Fix compatibility with Crypt::OpenPGP
  - Use mktemp to create temporary GPG directory


author: Paul Howarth <paul@city-fan.org> - 0.21-26
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Paul Howarth <paul@city-fan.org> - 1.106-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license macro


author: Paul Howarth <paul@city-fan.org> - 1:0.38-458
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Breaking Change: Set $YAML::LoadBlessed default to false to make it more
      secure


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Peter Jones <pjones@redhat.com> - 113-10
changelog:
  - I really cannot figure out why bkernel01 thinks the certificate nickname
    starts with /CN=, but it does, so I'm gonna stop fighting with the sand.


author: Filip Janus <fjanus@redhat.com> - 1.7.0-1
changelog:
  - Initial import for postgresql 15 module
  - Update to 1.7.0
  - Support postgresql 15
  - Related: #2128410


author: Remi Collet <rcollet@redhat.com> - 8.0.10-1
changelog:
  - rebase to 8.0.10 #1992513
  - compatibility with OpenSSL 3.0 #1992492
  - snmp:  add sha256 / sha512 security protocol #1936635
  - phar: implement openssl_256 and openssl_512 for phar signatures
  - phar: use sha256 signature by default


author: Remi Collet <rcollet@redhat.com> - 8.0.20-1
changelog:
  - rebase to 8.0.20 #2095752
  - clean unneeded dependency on useradd command #2095447
  - add upstream patch to initialize pcre before mbstring
  - retrieve tzdata version from /usr/share/zoneinfo/tzdata.zi


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.30-1
changelog:
  - Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
  - Update to JWS 5.3.0 distribution
  - Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-1
changelog:
  - Update to JWS 5.5, and drop jakarta-saaj dependency
  - Updates to javapackages-local removed %add_maven_depmap which broke the build,
    so I removed most of the maven artifacts as they aren't very useful anyway
  - Cleaned up a few unnecessary patches


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-2
changelog:
  - Related: rhbz#1977948 Cleanup unused tomcat-juli.jar copy now that the maven artifacts have been removed


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/68e7ae0)
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:4.7.2-1
changelog:
  - update to https://github.com/containers/podman/releases/tag/v4.7.2
  - remove gvisor from podman and depend on external one
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:4.7.2-2
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.7.2
    (https://github.com/containers/podman/commit/750b4c3a7c31f6573350f0b3f1b787f26e0fe1e3)
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:4.7.2-3
changelog:
  - Rebuild for following CVEs:
    CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322
  - Related: Jira:RHEL-2785


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:4.8.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.8.1
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:4.9.2-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9
    (https://github.com/containers/podman/commit/4c14019)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:4.9.3-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9
    (https://github.com/containers/podman/commit/b8a887c)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:4.9.4-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9
    (https://github.com/containers/podman/commit/4b69d93)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:4.9.4-0.2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9
    (https://github.com/containers/podman/commit/3ae0197)
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 2:5.0.0-2
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/5.0.0
    (https://github.com/containers/podman/commit/e71ec6f1d94d2d97fb3afe08aae0d8adaf8bddf0)
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-3
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175074
  - Resolves: #2179966
  - Resolves: #2187322
  - Resolves: #2187383
  - Resolves: #2203702
  - Resolves: #2207522


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-5
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175071
  - Resolves: #2179950
  - Resolves: #2187318
  - Resolves: #2187366
  - Resolves: #2203681
  - Resolves: #2207512


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-2
changelog:
  - gettext: handle unsupported languages properly (#2100378)
  - semodule: rename --rebuild-if-modules-changed to --refresh
  - python: Split "semanage import" into two transactions (#2063353)
  - selinux-autorelabel: Do not force reboot (#2093133)


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Jan Rybar <jrybar@redhat.com> - 3.6-16
changelog:
  - output is not redirected when ps_mem is killed
  - cmdline unwanted blank spaces fixed
  - Resolves: rhbz#2033997
  - Resolves: rhbz#2049743


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Brian C. Lane <bcl@redhat.com> - 3.32.1-1
changelog:
  - Use .z version for new builds, start with 3.32.0 (bcl)
    Related: rhbz#1968762
  - tests: Use pykickstart/commands relative to the import (bcl)
    Related: rhbz#1968762


author: Brian C. Lane <bcl@redhat.com> - 3.32.2-1
changelog:
  - Add RHEL 9 handler (mkolman)
    Resolves: rhbz#1966730
  - Add RHEL 9 version for commands that had a RHEL version in the past (mkolman)
    Related: rhbz#1966730
  - Add RHEL 9 version for BTRFS related commands (mkolman)
    Related: rhbz#1966730


author: Brian C. Lane <bcl@redhat.com> - 3.32.4-1
changelog:
  - github: Add rhel9-branch to the list of branches (bcl)
    Related: rhbz#2054906
  - Fix validation of packages arguments (bcl)
    Resolves: rhbz#2054906


author: Brian C. Lane <bcl@redhat.com> - 3.32.5-1
changelog:
  - Tools should default to RHEL9 not DEVEL (bcl)
    Resolves: rhbz#2060779
  - Default to RHEL9 for docs and ksshell test. (bcl)
    Related: rhbz#2060779
  - Set default version to RHEL9 (bcl)
    Related: rhbz#2060779
  - Remove the --ignorebroken option from RHEL handlers (vponcova)
    Related: rhbz#2060779
  - Add the isRHEL function (vponcova)
    Related: rhbz#2060779


author: Brian C. Lane <bcl@redhat.com> - 3.32.6-1
changelog:
  - tests: Update ksvalidator tests to allow new wording for help output (bcl)
    Related: rhbz#2083269
  - rootpw: Use RHEL9 instead of F37 for new rootpw feature (bcl)
    Related: rhbz#2083269
  - rootpw: Add an --allow-ssh argument (bcl)
    Resolves: rhbz#2083269
  - github: Fix workflow to only send coverage for python 3.9 (bcl)
    Related: rhbz#2083269


author: Brian C. Lane <bcl@redhat.com> - 3.32.10-1
changelog:
  - Add DNS handling options to the network command (vslavik)
    Resolves: rhbz#2172531
  - whitelist_externals has changed to allowlist_externals (bcl)
    Related: rhbz#2172531


author: Brian C. Lane <bcl@redhat.com> - 3.32.11-1
changelog:
  - tox: Only run unit tests for python 3.6 (bcl)
    Related: RHEL-17662
  - Add conflict test between ostree sources (#2125655) (jkonecny)
    Related: RHEL-17662
  - Fix missing seen check for output generation (#2125655) (jkonecny)
    Related: RHEL-17662
  - Add new ostreecontainer command (#2125655) (jkonecny)
    Resolves: RHEL-17662
  - Check the conflicting commands automatically (vponcova)
    Related: RHEL-17662
  - Fix tests for conflicting commands (vponcova)
    Related: RHEL-17662
  - Add conflicting commands support (bcl)
    Related: RHEL-17662


author: Brian C. Lane <bcl@redhat.com> - 3.32-1
changelog:
  - Conditionally BuildRequire coverage and sphinx for runtests (bcl)
    Resolves: rhbz#1916735
  - Change the lilo command removal to use RemovedCommand (vslavik)
  - Change the lilocheck command removal to use RemovedCommand (vslavik)
  - Fix test for the removed "interactive" command (vslavik)
  - Change the langsupport command removal to use RemovedCommand (vslavik)
  - Change the monitor command removal to use RemovedCommand (vslavik)
  - Change the mouse command removal to use RemovedCommand (vslavik)
  - Change the upgrade command removal to use RemovedCommand (vslavik)
  - Fix ksverdiff detection of removed commands (vslavik)
  - Check warnings of the deprecated kickstart commands (vponcova)
  - Remove the install command (vslavik)
  - Remove the deviceprobe command (vslavik)
  - Remove the device command (vslavik)
  - Remove the dmraid command (vslavik)
  - Remove the multipath command (vslavik)
  - Fix deprecation test for removed commands (vslavik)
  - Switch interactive removal to use RemovedCommand (bcl)
  - Add RemovedCommand for removing commands and documenting them (bcl)
  - Remove support for the updates command without an URL (vponcova)
  - Document how to deprecate commands and options (bcl)
  - Remove the ignoredisk --interactive option (vslavik)
  - Remove the partition --active option (vslavik)
  - Deprecate the %traceback section (vslavik)
  - Add missing .coveragerc file (bcl)
  - Switch to using GitHub Actions instead of Travis CI (bcl)
  - Add support for running via tox (bcl)
  - Deprecate the method command (vslavik)
  - Remove the bootloader option --upgrade (vslavik)


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-44
changelog:
  - Set $RPM_BUILD_ROOT in %{python3_...} macros
    to allow selecting alternate sysconfig install scheme based on that variable


author: Karolina Surma <ksurma@redhat.com> - 3.9-45
changelog:
  - Introduce -f (read from file) option to %py{3}_check_import
  - Introduce -t (filter top-level modules) option to %py{3}_check_import
  - Introduce -e (exclude module globs) option to %py{3}_check_import


author: Karolina Surma <ksurma@redhat.com> - 3.9-46
changelog:
  - Fix multiline arguments processing for %py_check_import
  - Fix %py_shebang_flags handling within %py_check_import
  - Process .pth files in buildroot's sitedirs in %py_check_import
  - Move import_all_modules.py from python-srpm-macros to python-rpm-macros


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-47
changelog:
  - Set %__python3 value according to %python3_pkgversion
    I.e. when %python3_pkgversion is 3.12, %__python3 is /usr/bin/python3.12


author: Tomas Orsava <torsava@redhat.com> - 3.9-49
changelog:
  - Add lua helper functions to make it possible to automatically generate
    Obsoletes tags
  - Modify the %py_provides macro to also generate Obsoletes tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Tomas Orsava <torsava@redhat.com> - 3.9-51
changelog:
  - Add Obsoletes tags with the python39- prefix for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.14-1
changelog:
  - Update to 3.9.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#2120642, rhbz#1834423, rhbz#2128249


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.16-1
changelog:
  - Update to 3.9.16
  - Security fixes for CVE-2022-42919 and CVE-2022-45061
  Resolves: rhbz#2138705, rhbz#2144072


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.3-12
changelog:
  - Subpackage python2-appdirs has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.0-18
changelog:
  - Subpackage python2-augeas has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Pino Toscano <ptoscano@redhat.com> - 0.5.0-20
changelog:
  - Backport upstream commit d93e1563add8c40450556b7d74520439ee792bd9 to fix
    the discovery of location in the test
  - Execute the tests at build time
  - Add a simple gating test to execute the test script, and make it gating for
    the python-augeas source


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Miro Hrončok <mhroncok@redhat.com> - 5.0.6-19
changelog:
  - Subpackage python2-configobj has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Vendula Poncova <vponcova@redhat.com> - 0.4-1
changelog:
  - Replace the error register with the error mapper (vponcova)
  - Propagate additional arguments for the client handler factory (vponcova)
  - Propagate additional arguments in the class AddressedMessageBus (vponcova)
  - Generate the documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.0-1
changelog:
  - Fix the documentation (vponcova)
  - Fix minor typos (yurchor)
  - Enable Codecov (vponcova)
  - Test the documentation build (vponcova)
  - Extend the documentation (vponcova)
  - Add configuration files for Read the Docs and Conda (vponcova)
  - Fix all warnings from the generated documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.1-1
changelog:
  - Include tests and examples in the source distribution (vponcova)
  - Fix the pylint warning signature-differs (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.2-1
changelog:
  - Replace ABC with ABCMeta (vponcova)
  - Fix typing tests (vponcova)
  - Run tests on the latest CentOS (vponcova)
  - Install sphinx from PyPI (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.3-1
changelog:
  - Document differences between dasbus and pydbus (vponcova)
  - Improve the support for interface proxies in the service identifier (vponcova)
  - Improve the support for interface proxies in the message bus (vponcova)
  - Test the interface proxies (vponcova)
  - Make the message bus of a service identifier accessible (vponcova)
  - Fix the testing environment for Fedora Rawhide (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.4-1
changelog:
  - Handle all errors of the DBus call (vponcova)
  - Fix tests for handling DBus errors on the server side (vponcova)
  - Run packit smoke tests for all Fedora (jkonecny)
  - Fix packit archive creation (jkonecny)
  - Add possibility to change setup.py arguments (jkonecny)


author: Bryan Gurney <bgurney@redhat.com> - 0.8-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus and python3-into-dbus-python
  - Resolves: rhbz#1986608


author: Bryan Gurney <bgurney@redhat.com> - 0.04-4
changelog:
  - Remove check test
  - Remove Requires and BuildRequires for python3-pyparsing
  - Resolves: rhbz#1986574


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
changelog:
  - Fix Python configuration for ELN/RHEL 9
  - Rework bconds for Python now that there are no Fedoras left that should
    use Python2


author: Nicola Sella <nsella@redhat.com> - 4.3.0-2
changelog:
  - Move system-upgrade plugin to core (RhBug:2054235)
  - offline-upgrade: add support for security filters (RhBug:1939975)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-6
changelog:
  - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157)
  - system-upgrade: Add --poweroff option to reboot subcommand (RhBug:2157844)
  - Doc update for reposync (RhBug:2132383,2182004)
  - reposync: Implement --safe-write-path option (RhBug:1898089,2203766)
  - Enable the leaves and show-leaves DNF plugins (RhBug:2134638)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-7
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2207946)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-12
changelog:
  - Fix incorrect spanish translation file (RHEL-6394)
  - Fix for strange issue with binary garbage in smaps files (RHEL-6420, RhBug:2231923)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-14
changelog:
  - needs-restarting prefers to obtain a boot time from systemd to deal with
    RTCs running in local time (RHEL-14900)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.3.0-1
changelog:
  - Update to 4.3.0
  - [config-manager] Update documentation (RhBug:2075366)
  - [builddep] Warning when using macros with source rpms (RhBug:2077820)
  - [repomanage] Use modules only from repo they are handling (RhBug:2072441)
  - Skip all non rpm transaction items for transaction_action plugins (rhbug:2023652)
  - feat(repomanage): Add new option --oldonly


author: Christian Heimes <cheimes@redhat.com> - 2.1.0-3
changelog:
  - Add bconds for extras require trio, curio, and doh
  - Move trio and curio backend modules into extras subpackages
  - Enable python3-dns+curio meta package
  - Skip failing test testCanonicalNameDangling


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Bryan Gurney <bgurney@redhat.com> - 0.08-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus-signature-pyparsing and python3-dbus
  - Resolves: rhbz#1986609


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Miro Hrončok <mhroncok@redhat.com> - 1.10-18
changelog:
  - Subpackage python2-jsonpointer has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Bryan Gurney <bgurney@redhat.com> - 0.15-5
changelog:
  - Remove check test
  - Remove BuildRequires and Requires for python3-justbases
  - Resolves: rhbz#1986913


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-python-8.5.0 (rhbz#2060316)
  - The rebase also fixes the following bugs:
      rhbz#2092752


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Petr Viktorin <pviktori@redhat.com> - 1.1.4-1
changelog:
  - Update to version 1.1.4
  - Avoids test warnings on Python 3.10
    Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1907474


author: Martin Kolman <mkolman@redhat.com> - 0.48-1
changelog:
  - Merge pull request #23 from poncovka/master-decode_bytes (mkolman)
  - Handle bytes and strings from RPM (#1764642) (vponcova)


author: Martin Kolman <mkolman@redhat.com> - 0.49-1
changelog:
  - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman)
  - Fix make archive command after pot file removal (jkonecny)
  - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny)
  - Add Readme with description and translation badge (jkonecny)
  - Add pot file to the git ignore (jkonecny)
  - Pause release when making bumpver to check and solve translations (jkonecny)
  - Remove unused PREFIX from Makefile (jkonecny)
  - Remove Zanata (jkonecny)
  - Push translations to our translation repository (jkonecny)
  - Download translations from Weblate (jkonecny)
  - Remove pot file (jkonecny)
  - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman)
  - Fix Zanata client detection in Makefile (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.50-1
changelog:
  - Merge pull request #33 from mzidek-gh/master (mkolman)
  - dump: Use exception's type and value when calculating hash (mzidek)


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Tom Stellard <tstellar@redhat.com> - 4.6.8-3
changelog:
  - Use make_build macro instead of just make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Limit BuildRequires to necessary minimum in Red Hat Enterprise Linux
  - Skip pytest in Red Hat Enterprise Linux
  - Do not build -doc subpackage for Red Hat Enterprise Linux


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.0-1
changelog:
  - Resolves: rhbz#1922352 - python-oauthlib requires python-mock
  - Update to upstream 3.1.0
  - Gets rid of obsolete python-nose dependency
  - Nuke the python2/python3 conditionals, let's only support python3


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.0-2
changelog:
  - Remove the python3-oauthlib+signedtoken package
  - When building, skip tests that require jwt
  - Resolves: rhbz#1966407 - Drop python-jwt dependency from python-oauthlib


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.1-1
changelog:
  - Resolves: rhbz#1935433 - python-oauthlib implements and/or uses the
                             deprecated SHA1 algorithm by default


author: TomasHalman <thalman@redhat.com> - 3.1.1-3
changelog:
  - Remove RSA support
  - Remove build dependency on blinker
    Resolves: rhbz#1984046 - python-oauthlib depends on jwt for RSA


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-6
changelog:
  - Subpackage python2-ply has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:4.8.0.post1-1
changelog:
  - update to https://github.com/containers/podman-py/releases/tag/v4.8.0.post1
  - Related: Jira:RHEL-2112


author: Miro Hrončok <mhroncok@redhat.com> - 0.7.2-21
changelog:
  - Subpackage python2-prettytable has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Dominik Mierzejewski <rpm@greysector.net> - 0.26-1
changelog:
  - update to 0.26 (#1780153)
  - make main package archful to run tests on all arches
    (pythonN-pyelftools subpackages are still noarch)
  - run readelf tests on x86_64 only for now
  - rename binaries to conform to Python packaging guidelines
  - enable python3 subpackage for EPEL7
  - declare bundled old construct module instead of needlessly requiring it


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Miro Hrončok <mhroncok@redhat.com> - 3.4-6
changelog:
  - Subpackage python2-pyserial has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Charalampos Stratakis <cstratak@redhat.com> - 6.2.2-2
changelog:
  - Disable tests and documentation generation on RHEL9 to avoid pulling in dependencies
  - Drop redundant build dependency on wcwidth (unused since 6.0.0rc1)


author: Tony Asleson <tasleson@redhat.com> - 0.14.6-6
changelog:
  - Fix build failure
    Bad source: /builddir/build/SOURCES/pywbem-0.14.6.tar.gz: No such file or directory


author: Miro Hrončok <mhroncok@redhat.com> - 0.26-8
changelog:
  - Subpackage python2-pyxdg has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 6.1-10
changelog:
  - Resolves: #1935839 Remove python-imaging build requirements for RHEL
  - Run unit tests during build


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.0-11
changelog:
  - Don't use SIGNATURE_RSA
  - Related: #1935433 - python-oauthlib implements and/or uses the deprecated
                        SHA1 algorithm by default


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Miro Hrončok <mhroncok@redhat.com> - 12-1
changelog:
  - Disable the dist generators for Python 2
  - https://fedoraproject.org/wiki/Changes/Disable_Python_2_Dist_RPM_Generators_and_Freeze_Python_2_Macros


author: Tomas Orsava <torsava@redhat.com> - 12-2
changelog:
  - scripts/pythondistdeps: Switch from using pkg_resources to importlib.metadata
    for reading the egg/dist-info metadata
  - The script no longer requires setuptools but instead requires packaging


author: Tomas Orsava <torsava@redhat.com> - 12-4
changelog:
  - scripts/pythondistdeps: Treat extras names case-insensitively and always
    output them in lower case (#1936875)


author: Miro Hrončok <mhroncok@redhat.com> - 12-5.1
changelog:
  - Do not generate setuptools requirement for console_scripts on Python 3.10+
  - See https://fedoraproject.org/wiki/Changes/Reduce_dependencies_on_python3-setuptools


author: Miro Hrončok <mhroncok@redhat.com> - 12-6
changelog:
  - Get rid of distutils deprecation warning (by not using it)
  - The distutils module is deprecated in Python 3.10+
  - https://www.python.org/dev/peps/pep-0632/


author: Tomas Orsava <torsava@redhat.com> - 12-8
changelog:
  - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes
    tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1954531 - Update to Samba 4.14.4
  - resolves: rhbz#1949446 - Fix CVE-2021-20254
  - resolves: rhbz#1942378 - Disable nis support


author: Andreas Schneider <asn@redhat.com> - 4.14.4-7
changelog:
  - related: rhbz#1954531 - Fix build issues with gcc
  - resolves: rhbz#1959712 - Add iouring vfs module


author: Andrea Claudi <aclaudi@redhat.com> - [2.4.4-4.el9]
changelog:
  - Don't build scapy-doc package on rhel (Andrea Claudi) [1973720]
  - Enable gating test on RHEL9 (Jianwen Ji) [1974642]


author: Andrea Claudi <aclaudi@redhat.com> - 2.5.0-1.el9
changelog:
  - Don't package scapy tests (Andrea Claudi)
  - Fix scapy compliance with pep-0440 (Andrea Claudi) [2162667]
  - New version 2.5.0 (Andrea Claudi) [RHEL-657]


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.8-1
changelog:
  - New version - 1.8 (Jiri Konecny)
  - Add missing make command to spec file (Jiri Konecny)
  - Don't translate the prompt keys (Vendula Poncova)
  - Enable daily build for Anaconda-devel COPR repository (Jiri Konecny)
  - Use Fedora container registry instead of Dockerhub (Jiri Konecny)
  - Migrate COPR daily COPR builds to Packit (Jiri Konecny)
  - Test build on Fedora ELN (Jiri Konecny)
  - Remove packit get-current-action (Jiri Konecny)
  - Run tests in GitHub workflow (Martin Pitt)
  - Fix raise-missing-from (W0707) pylint warnings (Martin Pitt)
  - Fix pylint to check test code correctly (Jiri Konecny)
  - Use script to run unit tests (Jiri Konecny)
  - Use relative imports in tests (Jiri Konecny)
  - Change directory structure of unit tests (Jiri Konecny)
  - Fix documentation of _process_screen method (Jiri Konecny)
  - Fix pylint issues (Jiri Konecny)
  - Use pylint instead of pocketlint (Jiri Konecny)
  - Add coverage support (Jiri Konecny)
  - Make link to exmples directory in Readme (Jiri Konecny)
  - Fix homepage of the project in setup.py (Jiri Konecny)
  - Fix classifiers in setup.py (Jiri Konecny)
  - Add pypi-upload to Makefile (Jiri Konecny)
  - Use correct variant of the field (Jiri Konecny)
  - Propose Fedora update only to Fedora in development (Jiri Konecny)
  - Add upstream tag template to packit for releasing (Jiri Konecny)
  - Packit will download archive from Source0 if needed (Jiri Konecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.8.3-1
changelog:
  - Fix bumpver Makefile target (Jiri Konecny)
  - Add tests for UIScreen wide disabling of concurrency check (Jiri Konecny)
    Related: rhbz#2134889
  - Abstract registering signal handler in the InputHandler constructor (Jiri Konecny)
    Related: rhbz#2134889
  - Allow to disable concurrency check for all UIScreen inputs (Jiri Konecny)
    Resolves: rhbz#2134889
  - Add Makefile target for local container tests (Jiri Konecny)
  - Use localization from rhel-9 weblate translation component (Jiri Konecny)
  - Remove changelog from the upstream spec file (Jiri Konecny)
  - Fix spec file archive link (Jiri Konecny)
  - Include also documentation to the tarball (Jiri Konecny)
  - Rename doc directory to docs (Jiri Konecny)
  - Add explanations of what is included in the MANIFEST.in file (Jiri Konecny)
  - Update packit config to reflect new tag naming (Jiri Konecny)
  - Change tag name to just version (Jiri Konecny)
  - Fix GitHub workflow checkout (Jiri Konecny)
  - Switch to packit new fedora-latest alias (Jiri Konecny)
  - Disable duplicate-code in pylint test (Jiri Konecny)
  - Remove duplicate of code between event loops (Jiri Konecny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jerry James <loganjerry@gmail.com> - 2020.3-4
changelog:
  - Fix cmake file installation (bz 1930389)
  - Allow use of RTM instructions when available
  - At upstream's suggestion, do not force ITT_NOTIFY support
  - Drop -fetchadd64 patch, only needed for forced ITT_NOTIFY support


author: Miro Hrončok <mhroncok@redhat.com> - 2.0.1-5
changelog:
  - Initial package for RHEL 9
  - Resolves: rhbz#2175213
  - Fedora+EPEL contributions by:
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Jonathon Turel <jturel@gmail.com> 0.7.2-1
changelog:
  - Use DNF on RHEL (jturel@gmail.com)
  - Use PackageManager to determine kernel version (jturel@gmail.com)
  - Use subprocess to check process path arguments (jturel@gmail.com)
  - Find the right lxml version for Python 3.4 (jturel@gmail.com)
  - Update Vagrantfile to use Fedora 30 (jturel@gmail.com)
  - Ignore debug kernels when checking if kernel has been updated
    (jturel@gmail.com)
  - Add build dependency for nosetests (frostyx@email.cz)
  - Run tests within the %check phase (frostyx@email.cz)
  - Update fedora branches (frostyx@email.cz)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-3
changelog:
  - Update tito releaser branches (frostyx@email.cz)
  - Not build for python2 package for Fedora anymore (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.4-1
changelog:
  - Fix list index out of range for ssh process names (frostyx@email.cz)
  - When there is no helper, it doesn't contain anything (frostyx@email.cz)
  - Fix wrong parameters number when upating an application objects
    (frostyx@email.cz)
  - Remove unnecessary string decoding (frostyx@email.cz)
  - Fix the missing dist in release (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.9-1
changelog:
  - Create /var/run/reboot-required file (frostyx@email.cz)
  - Recommend the correct command for restarting auditd (frostyx@email.cz)
  - Add python3-setuptools dependency (frostyx@email.cz)
  - Fix argument passed to print_helper() (ferdnyc@gmail.com)
  - Add similar software to the readme (frostyx@email.cz)
  - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com)
  - Oracle Linux 8 uses dnf, too (suttner@atix.de)
  - Drop python-setuptools runtime dependency (frostyx@email.cz)
  - Fix Python DeprecationWarning: invalid escape sequence
    (jvanderwaa@redhat.com)
  - Add readthedocs configuration file (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-4
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1951923


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-5
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1952814


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25671
  - Resolves: RHEL-25643


author: Gerd Hoffmann <kraxel@redhat.com> - 1.6-1
changelog:
  - update to version 1.6
  - drop peutils
  - add man-pages
  - add tests sub-package
  - resolves: rhbz#2142608


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <marcel.plch@protonmail.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@gmail.com>
        Sahana Prasad <sahana@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Till Maas <opensource@till.name>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Victor Stinner <vstinner@python.org>
        Ville Skyttä <ville.skytta@iki.fi>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


