# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 2.2.4-2
changelog:
  - Bump version to 2.2.4-2
  - Resolves: Bug 1859271 - RFE - Extend log of operations statistics in access log
  - Resolves: Bug 2093981 - RFE - Create Security Audit Log
  - Resolves: Bug 2109891 - Migrate 389 to pcre2
  - Resolves: Bug 2112361 - Supplier should do periodic update to avoid slow replication when a new direct update happen
  - Resolves: Bug 2112998 - performance search rate: checking if an entry is a referral is expensive
  - Resolves: Bug 2114039 - Current pbkdf2 hardcoded parameters are no longer secure
  - Resolves: Bug 2124660 - Retro changelog trimming uses maxage incorrectly
  - Resolves: Bug 2132697 - RFE - run as non-root
  - Resolves: Bug 2142636 - pam mutex lock causing high etimes, affecting red hat internal sso


author: Mark Reynolds <mreynolds@redhat.com> - 2.2.4-3
changelog:
  - Bump version to 2.2.4-3
  - Resolves: rhbz#2142636 - pam mutex lock causing high etimes, affecting red hat internal sso
  - Resolves: rhbz#2093981 - RFE - Create Security Audit Log
  - Resolves: rhbz#2132697 - [RFE] 389ds: run as non-root
  - Resolves: rhbz#2124660 - Retro changelog trimming uses maxage incorrectly
  - Resolves: rhbz#2114039 - Current pbkdf2 hardcoded parameters are no longer secure
  - Resolves: rhbz#2112998 - performance search rate: checking if an entry is a referral is expensive
  - Resolves: rhbz#2112361 - Supplier should do periodic update to avoid slow replication when a new direct update happen
  - Resolves: rhbz#2109891 - Migrate 389 to pcre2


author: Mark Reynolds <mreynolds@redhat.com> - 2.3.4-3
changelog:
  - Bump version to 2.3.4-3
  - Resolves: rhbz#2189954 - RFE Improve reponse time to filters containing 'nsrole'
  - Resolves: rhbz#2189946 - RFE support of slapi_memberof for plugins/core server
  - Resolves: rhbz#1974242 - Paged search impacts performance


author: Mark Reynolds <mreynolds@redhat.com> - 2.3.6-2
changelog:
  - Bump version to 2.3.6-2
  - Resolves: rhbz#2225532 - 389-ds-base FTBFS with rust-1.71.0
  - Resolves: rhbz#2218209 - useradd: invalid user ID '389:389': installing 389-ds-base in container fails to create the dirsrv user
  - Resolves: rhbz#2207691 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2179278 - dirsrv failed to start after reboot because "dirsrv" did not have access on /run/dirsrv


author: Simon Pichugin <spichugi@redhat.com> - 2.3.6-3
changelog:
  - Bump version to 2.3.6-3
  - Resolves: rhbz#2236163 - Regression: replication can't be enabled for consumer or hub role


author: James Chapman <jachapma@redhat.com> - 2.4.4-1
changelog:
  - Bump version to 2.4.4-1
  - Resolves: RHEL-15907 - Rebase 389-ds-base-2.4 in RHEL 9.4
  - Resolves: RHEL-16830 - ns-slapd crash in slapi_attr_basetype


author: James Chapman <jachapma@redhat.com> - 2.4.5-1
changelog:
  - Bump version to 2.4.5-1
  - Resolves: RHEL-15907 - Rebase 389-ds-base in RHEL 9.4
  - Resolves: RHEL-5142  - RFE Disable Transparent Huge Pages when using large caches
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix
  - Resolves: RHEL-5133  - RFE Provide a history for 'LastLoginTime'
  - Resolves: RHEL-16984 - RFE inChain Matching Rule


author: James Chapman <jachapma@redhat.com> - 2.4.5-2
changelog:
  - Bump version to 2.4.5-2
  - Resolves: RHEL-15907 - Rebase 389-ds-base in RHEL 9.4
  - Resolves: RHEL-5142  - RFE Disable Transparent Huge Pages when using large caches
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix
  - Resolves: RHEL-5133  - RFE Provide a history for 'LastLoginTime'
  - Resolves: RHEL-16984 - RFE inChain Matching Rule


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Beniamino Galvani <bgalvani@redhat.com> - 1.45.3-1
changelog:
  - Update to 1.45.3 release (development)
  - Improve explanation of the format and routes properties in keyfile man page (RHEL-1407)
  - Improve nm-settings-nmcli manpage to show format and valid values of properties (RHEL-2465)
  - Honor the autoactivate priority for port connections (RHEL-2202)
  - Properly document valid values for ip-tunnel properties (RHEL-1459)


author: Íñigo Huguet <ihuguet@redhat.com> - 1.45.5-1
changelog:
  - Update to 1.45.5 release (development)
  - Various fixes to Duplicate Address Detection (DAD) (RHEL-1581, RHEL-1411)
  - New option to avoid sending the DHCPv4 client-identifier (RHEL-1469)
  - Support setting channels in ethtool options (RHEL-1471)


author: Beniamino Galvani <bgalvani@redhat.com> - 1.45.6-1
changelog:
  - Update to 1.45.6 release (development)
  - Fix ovs activation with netdev datapath and cloned MAC (RHEL-5886)


author: Beniamino Galvani <bgalvani@redhat.com> - 1.45.8-1
changelog:
  - Update to 1.45.8 (development)
  - Introduce "stable-ssid" option for wifi.cloned-mac-address property (RHEL-16470)


author: Ján Václav <jvaclav@redhat.com> - 1.45.9-1
changelog:
  - Update to 1.45.9 (development)
  - Add support for PRP/HSR interface (RHEL-5852)
  - Drop support for the 'slaves-order' option in NetworkManager.conf (RHEL-19437)
  - Return error when setting invalid IP addresses or properties via D-Bus (RHEL-19315)
  - Fix extra route being created besides ECMP route (RHEL-1682)


author: Stanislas FAYE <sfaye@redhat.com> - 1.45.10-1
changelog:
  - Update to 1.45.10 (development)
  - Deprecate and Replace connection.master in libnm-core and libnm (RHEL-17619)


author: Thomas Haller <thaller@redhat.com> - 1:1.43.10-1
changelog:
  - Update to 1.43.10 release (development)
  - fix reading infiniband p-key from ifcfg files (rh #2209974)
  - improve autoconnect when selecting controller (rh #2121451)
  - fix managing devices after network reconnect (rh #2149012)
  - better handle ignore-carrier for bond/bridge/team (rh #2180363)
  - cloud-setup: block wait-online while configuration is ongoing (rh #2151040)
  - cloud-setup: avoid leaving half configured system (rh #2207812)
  - cloud-setup: log warning when no provider detected (rh #2214880)
  - cloud-setup: fix RPM description (rh #2214491)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.43.11-1
changelog:
  - update to 1.43.11 release (development)
  - fix assertion about missing ifindex when resetting MAC (rh #2215022)
  - fix wrong order of entries in resolv.conf after reconnect (rh #2218448)
  - do not fail activation when SR-IOV VF parameters can't be applied (rh #2210164)
  - warn that the ifcfg-rh plugin is deprecated (rh #2190375)


author: Wen Liang <wenliang@redhat.com> - 1:1.43.90-1
changelog:
  - update to 1.43.90 release (release candidate)
  - manager: allow controller activation if device is deactivating (rh #2125615)
  - assume: change IPv6 method from "ignore" and "disabled" into "auto" for loopback device (rh #2207878)
  - device: delete software device when lose carrier and is controller (rh #2224479)
  - core: better handle ignore-carrier=no for bond/bridge/team devices (rh #2180363)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.44.0-1
changelog:
  - update to 1.44.0 release
  - nmcli: add nmcli version mismatch warning (rh #2173196)
  - checkpoint: preserve devices that were removed and readded (rh #2177590)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.2.18-2
changelog:
  - Support point-to-point IPSec tunnel (RHEL-20690)
  - Fix crash in libreswan_nmstate_iface_dpd_rsa (RHEL-21221)
  - Support configuring IPSec mode with 'type' (RHEL-21554)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Notify systemd when beginning to shutdown
  - Fix possible information disclosure


author: Richard Hughes <rhughes@redhat.com> - 1.2.3-1
changelog:
  - New upstream release
  - Add support for coercing upgrade to distupgrade
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon disappears
  - Remove large transaction size sanity check


author: Milan Crha <mcrha@redhat.com> - 1.2.4-1
changelog:
  - New upstream release
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Honor install_weak_deps=False
  - Improve thread safety on an operation cancellation
  - Let the finish understand the 'cancelled' exit code
  - Only set polkit interactive flag if method call has too
  - Read update information also when getting list of updates
  - Use 'hy_query_get_advisory_pkgs', if available


author: Pete Walter <pwalter@fedoraproject.org> - 2.0.14-1
changelog:
  - Update to 2.0.14
  - Rebase multilib.patch
  - Don't use globs in the form of libFOO.so.* for listing files


author: Neal Gompa <ngompa13@gmail.com> - 2.0.14-6
changelog:
  - Switch to CMake to build SDL2
  - Build JACK support unconditionally since PipeWire-JACK exists in RHEL 9


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-1
changelog:
  - Rebase to 2.3.0.2 [bz#1972101]
  - Resolves: bz#1972101
    ([Azure][RHEL-9]Rebase WALinuxAgent to 2.3.0.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2
changelog:
  - wala-Require-iptables-package.patch [bz#1978572]
  - Resolves: bz#1978572
    ([Azure][WALA][RHEL-9] WALA needs iptables package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1
changelog:
  - Rebase to 2.7.0.6-1 [bz#2083464]
  - Adding restart_if implementation for RHEL [bz#2081944]
  - Resolves: bz#2083464
    ([Azure][RHEL-9]Rebase WALinuxAgent to v2.7.0.6)
  - Resolves: bz#2081944
    ([Azure][WALA][9.0] WALA provisions VM failed because of no "ifdown")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-2
changelog:
  - wla-redhat-Fix-command-sequence-for-restarting-net-inter.patch [bz#2098233]
  - Resolves: bz#2098233
    ([Azure][WALA][RHEL-9] [9.1] walinuxagent kills network during boot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2114830]
  - wla-Update-Log-Collector-default-in-Comments-and-Readme-.patch [bz#2093965]
  - Resolves: bz#2114830
    ([Azure][WALA][RHEL-9.1] Provisioning failed if no ifcfg-eth0)
  - Resolves: bz#2093965
    ([Azure][WALA][RHEL-9] The description of "Logs.Collect" is incorrect)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-4
changelog:
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-5
changelog:
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-6
changelog:
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-7
changelog:
  - wla-redhat-Azure-CVM-specific-udev-rules.patch [bz#2162668]
  - Resolves: bz#2162668
    (Add support for importing remotely sealed TPM2 objects)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-8
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [bz#2165042]
  - Resolves: bz#2165042
    ([9.0.z] /dev/disk/azure/ is created as symlink to sr0 or sda and not as a directory[Azure])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-9
changelog:
  - wla-redhat-Adjust-tpm2_createprimary-key-attributes-to-m.patch [bz#2167322]
  - Resolves: bz#2167322
    (Adjust TPM primary key creation parameters to match Azure)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.8.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.8.0
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.9.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0
  - Related: Jira:RHEL-2112


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Sohan Kunkerkar <skunkerk@redhat.com> - 4.6.0-2
changelog:
  - Rebuild because of Fedora infra issues last week to see if a new build fixes some 
    problems we are seeing.


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-19
changelog:
  - use gating and config file from rhel-8.5
  - remove check of periodically changing files
    Resolves: rhbz#1957656
  - config cleanup
    Resolves: rhbz#1957654


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-20
changelog:
  - fix configuration option with-dbhmactype
  - do not use sha1 and md5 by default
    Resolves: rhbz#1935457
  - fix important static analysis issues
    Resolves: rhbz#1938676


author: Jaroslav Kysela <perex@perex.cz> - 2.2.5-2
changelog:
  - add sof-rpl-rt711-l0-rt1316-l12-rt714-l3.tplg for Dell SKU 0BDA
  - add xz compression support (with CRC32)


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.2.5-1
changelog:
  - payload: fix repo --includepkgs option (rvykydal)
    Resolves: rhbz#2158210
  - bootloader/zipl.py: update for zipl >= 2.25.0 (dan)
    Resolves: rhbz#2157916


author: Vladimír Slávik <vslavik@redhat.com> - 34.25.2.6-1
changelog:
  - Add a NVMe-FC tab to the Advanced Storage screen (vslavik)
    Resolves: rhbz#2107346
  - Update the .glade file for the Advanced Storage screen (vponcova)
    Related: rhbz#2107346
  - Filter out NVMe over Fibre Channel from local disks (vslavik)
    Resolves: rhbz#2107346
  - Install nvme-cli on boot.iso (vslavik)
    Resolves: rhbz#2107346


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.2.7-1
changelog:
  - Show an error message when subscription token transfer fails (mkolman)
    Resolves: rhbz#2057472
  - Bump blivet version for NVMe-oF support (vslavik)
    Resolves: rhbz#2164343
  - Make text in custom_storage_helper more accurate (ozobal)
    Resolves: rhbz#2133046
  - Fix infobar colors in GTK GUI (ozobal)
    Resolves: rhbz#2074827


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.3.1-1
changelog:
  - Add DNS search and ignore options from kickstart (vslavik)
    Resolves: rhbz#2065754
  - driver_updates: migrate driver_updates.py to pep8 format (jkonecny)
    Related: rhbz#2154906
  - driver_updates: adding tests for the new logging solution (jkonecny)
    Related: rhbz#2154906
  - driver_updates: add lot of debug logs for easier debugging (jkonecny)
    Related: rhbz#2154906
  - driver_updates: extend where we print log messages (jkonecny)
    Resolves: rhbz#2154906
  - Add missing documentation about OEMDRV (jkonecny)
    Related: rhbz#2171811
  - oemdrv: wait up to 5 seconds for disks to be handled (rmetrich)
    Resolves: rhbz#2171811


author: Vladimír Slávik <vslavik@redhat.com> - 34.25.3.2-1
changelog:
  - Fix kickstart proxy cmd in stage1 (jkonecny)
    Resolves: rhbz#2177219
  - Check minimal LUKS passphrase length in FIPS mode for Kickstart (vslavik)
    Resolves: rhbz#2163497
  - GUI: Require 8 chars of LUKS passwords in FIPS mode (vslavik)
    Resolves: rhbz#2163497
  - Use inst.proxy in stage1 (jkonecny)
    Resolves: rhbz#2177219
  - Change driver_updates exit info messages to debug (jkonecny)
    Related: rhbz#2154906


author: Vladimír Slávik <vslavik@redhat.com> - 34.25.3.3-1
changelog:
  - Stop infinite wait for CDROM when KS is processed (jkonecny)
    Resolves: rhbz#2209599
  - Apply --noverifyssl option for liveimg kickstart command (jstodola)
    Resolves: rhbz#2157921


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.4-1
changelog:
  - Warn about deprecated inst.geoloc=provider_... (vslavik)
    Resolves: rhbz#2127473
  - Improve doc strings for geolocation (vslavik)
    Related: rhbz#2127473
  - Do not run geolocation for TUI (vslavik)
    Resolves: rhbz#2127473
  - gui: Simplify invalid timezone handling. (vslavik)
    Related: rhbz#2127473
  - Try to set timezone from language on welcome spoke (vslavik)
    Resolves: rhbz#2127473
  - Always set timezone with priority (vslavik)
    Resolves: rhbz#2127473
  - Add timezone priority to module backend and interface (vslavik)
    Resolves: rhbz#2127473
  - Use existing locale in welcome spoke (vslavik)
    Resolves: rhbz#2127473
  - Apply geolocation in main process (vslavik)
    Related: rhbz#2127473
  - Add back waiting for geolocation (vslavik)
    Related: rhbz#2127473
  - Add wait_for_task() to wait for a Task with timeout (vslavik)
    Related: rhbz#2127473
  - Don't fall back to default timezone in welcome spoke (vslavik)
    Related: rhbz#2127473
  - Use directly URLs in conf geoloc provider field (vslavik)
    Related: rhbz#2127473
  - Remove unmodularized geolocation (vslavik)
    Related: rhbz#2127473
  - Use modularized geolocation instead of unmodularized (vslavik)
    Related: rhbz#2127473
  - Hide the geolocation task in Timezone's interface (vslavik)
    Related: rhbz#2127473
  - Add GeolocationTask to the Timezone module (vslavik)
    Related: rhbz#2127473
  - Add a D-Bus structure for geolocation data (vslavik)
    Related: rhbz#2127473
  - Add conf option for geolocation provider (vslavik)
    Related: rhbz#2127473
  - Retranslate welcome screen more simply (vslavik)
    Related: rhbz#2127473
  - Fix translations of the pre-release warning dialog (vponcova)
    Resolves: rhbz#2165762
    Related: rhbz#2127473
  - Split Timezone module tests for tasks to new file (vslavik)
    Related: rhbz#2127473
  - Make check for geolocation start a standalone helper (vslavik)
    Related: rhbz#2127473
  - Keep Timezone proxy in Welcome spoke (vslavik)
    Related: rhbz#2127473
  - Split starting locales in welcome spoke to a helper (vslavik)
    Related: rhbz#2127473
  - Rename constant to reflect its usage (vslavik)
    Related: rhbz#2127473
  - Fix "proxy" boot option is printing inst. warning (jkonecny)
    Related: rhbz#2177219
  - Allow showing proxy passwords on the installation source spoke (jstodola)
    Resolves: rhbz#2013190
  - Allow showing passwords on the subscription spoke (jstodola)
    Resolves: rhbz#2013190
  - Always hide the user password by default (jstodola)
    Related: rhbz#2013190
  - Always hide the root password by default (jstodola)
    Related: rhbz#2013190


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.5-1
changelog:
  - Add option for installing RedHat kernel (ozobal)
    Related: rhbz#2164819
    Resolves: rhbz#2214266
  - Add TUI for installing non-standard kernels (ozobal)
    Resolves: rhbz#2214266
    Resolves: rhbz#2164819
  - Add GUI option for installing 64k ARM kernel (ozobal)
    Resolves: rhbz#2214266
    Resolves: rhbz#2164819
  - Add match_available_packages to dnf_manager (ozobal)
    Related: rhbz#2214266
    Related: rhbz#2164819


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.6-1
changelog:
  - Remove unused variable in TUI software selection (ozobal)
    Related: rhbz#2214266
    Related: rhbz#2164819
  - Fix aarch64 architecture detection (jstodola)
    Resolves: rhbz#2164819


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.7-1
changelog:
  - Allow showing passphrase when unlocking LUKS device (jstodola)
    Resolves: rhbz#2013190
  - Be more indulgent when reclaiming disk space (jstodola)
    Resolves: rhbz#2187371
  - Do not print error on inst.ks=cdrom|hd (jkonecny)
    Resolves: rhbz#2077045


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.8-1
changelog:
  - iscsi: Allow changing iSCSI initiator name once set (vtrefny)
    Resolves: rhbz#2223977
  - Missing translation for button labels in Beta dialog
    Resolves: rhbz#2225450


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.9-1
changelog:
  - timezone: for kickstart allow also timezones not offered by GUI (rvykydal)
    Resolves: jira#RHEL-13150
  - Rename Organization to Organization ID on subscription screen (mkolman)
    Resolves: jira#RHEL-11167


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.2-1
changelog:
  - tests: Add a test case for the NVMe module (vtrefny)
    Resolves: RHEL-11543
    Resolves: RHEL-11544
  - Add a simple NVMe module for NVMe Fabrics support (vtrefny)
    Resolves: RHEL-11543
    Resolves: RHEL-11544
  - network: ignore BOOTIF connections when creating device configurations
    (rvykydal)
    Resolves: RHEL-4766
  - network: ignore BOOTIF connections when looking for initramfs bond ports
    (rvykydal)
    Resolves: RHEL-4766


author: Martin Kolman <mkolman@redhat.com> - 8.2.1-1
changelog:
  - initial help content update for RHEL 8.2
  - add help content for the "Connect to Red Hat" spoke
  - drop content for the superseded "System Purpose" spoke
    Resolves: rhbz#1788855


author: Nick Clifton <nickc@redhat.com> - 11.04-1
changelog:
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.


author: Nick Clifton <nickc@redhat.com> - 11.12-1
changelog:
  - Annocheck: Add code to handle another glibc function built without LTO.
  - GCC Plugin: Do not run if other plugins are active.  (#2175768)
  - Annocheck: Add code to handle glibc functions built without LTO.
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate dbeuginfo files.
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Libannocheck: Fix bug causing infinite looping when running tests.
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)


author: Nick Clifton <nickc@redhat.com> - 12.07-1
changelog:
  - Annocheck: Fix lto testing.  (#2177140)
  - gcc-plugin: generate warnings about misspelt -D_FORTIFY_SOURCE and/or -D_GLIBCXX_ASSERTIONS options.
  - gcc-plugin: use a bigger buffer for constructing notes.
  - llvm-plugin: Fix detection of optimization level.  Improve test.
  - clang-plugin: Improve test.
  - configure: More improvements.
  - annocheck: Fix seg-fault when checking for glibc components in string format notes.
  - configure: Simplify.
  - gcc plugin: Add filenames to string notes.  Allow use of ANNOBIN environment variable.
  - llvm plugin: Add workaround for building with LLVM-16.
  - clang plugin: Fix for building with Clang-16.
  - gcc plugin: Keep ELF notes at protocol version 3.
  - Protocol Version 4: String format notes.
  - Annocheck: Update message for LTO tests.  (#2177140)


author: Nick Clifton <nickc@redhat.com> - 12.09-1
changelog:
  - Annocheck: Fix detection of missing plugin options.  (#2189492)
  - Fix generation of auto-generated files.
  - Fix covscan reported errors.


author: Nick Clifton <nickc@redhat.com> - 12.12-1
changelog:
  - Rebuild against LLVM-16.  (#2212739)
  - Annocheck: Check for string notes in separate debug info files.  (#2211694)
  - Annocheck: Add support for el10 and rhel-10 profiles.  (RHEL-526)
  - Annocheck: Suppress more tests for Rust binaries.


author: Nick Clifton <nickc@redhat.com> - 12.28-1
changelog:
  - Tests: Fix obsoleted syntax in plans/ci.fmf  (RHEL-12194)
  - Spec File: Use SPDX licensing.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - LLVM Plugin: Fix building with LLVM version 17.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.
  - Annocheck: Remove dependency upon binutils-devel.
  - Annocheck: Add detection of known parts of libstdc++-nonshared.a that contain gaps.  (#2217864)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifron <nickc@redhat.com> - 12.31-1
changelog:
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.


author: Sergei Petrosian <spetrosi@redhat.com> - 1.1.1-1
changelog:
  - Insert the "Ansible managed" comment to the /var/opt/mssql/mssql.conf file
    Resolves rhbz#2064690 (EL9)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.1.1-3
changelog:
  - Fix inserting ansible_managed
    Resolves: rhbz#2057652
  - Users now can provide a custom URLs to pull packages and RPM key from
    Resolves: rhbz#2070452
  - Add "Requires: ansible-core or ansible"
    Resolves: rhbz#2067496


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-1
changelog:
  - Add MVP HA functionality to the server role
    Resolves: rhbz#2066337
  - Add mssql_tls_remote_src to the server role
    Resolves: rhbz#2098212
  - Add Requires: linux-system-roles or rhel-system-roles
  - Add downstream values to galaxy.yml


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-2
changelog:
  - Update mssql commit
    Resolves: rhbz#2066337
  - Add condition for upstream spec build for galaxy_transform
  - Replace extra-mapping with replacing in the legacy format with sed


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.3-1
changelog:
  - Use firewall role to configure firewall for SQL Server
    Resolves: rhbz#2120709
  - Add mssql_ha_virtual_ip
    Replace mssql_ha_db_name with mssql_ha_db_names to let users replicate multiple DBs
    Resolves: rhbz#2066337

  - Replace simple `mssql_input_sql_file` with `pre` and `post` variables
    Resolves: rhbz#2120712
  - Add Requires: linux-system-roles or rhel-system-roles
  - Replace fedora.linux_system_roles:redhat.rhel_system_roles on RHEL
  - Add downstream values to galaxy.yml
  - Change defcommit to defsource that takes both tags and commits
  - Update CHANGELOG.md with the current date and copy it to collection dir


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.4-1
changelog:
  - Replicate all provided databases
    - This change fixes the bug where only the first database provided with
  mssql_ha_db_names got replicated
    - Clarify that the role does not remove not listed databases
    Resolves: rhbz#2066337
  - Input multiple sql scripts
    - Allow _input_sql_file vars to accept list of files
    - Flush handlers prior to inputting post sql script
    Resolves: rhbz#2120712
  - Note that ha_cluster is not idempotent
  - SPEC: Do not update dates in CHANGELOG.md


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-1
changelog:
  - Keep spec consistent with linux-system-roles and simplify
    - Return conditionals related to EL to keep up- and downstream consistent
    - Add pretrans scriplet to remove symlinks if exist to fix issue with update
    - Instead of copying doc and license files create symlinks
    - Dynamically generate %files section
    - Add -t to md2html to generate TOC
    - Do not install roles to /usr/share/microsoft and then create symlinks
      to /usr/share/ansible/roles/, instead install directly to
      /usr/share/ansible/roles/
    - Remove unused removal of ambiguous python shebangs
    - Remove all loops because this RPM contains only one role
    - Remove defsource - simply define the source for mssql
    - 's|$RPM_BUILD_ROOT|%{buildroot}|' for consistency
    - Remove getarchivedir for simplicity
    - Wrap description by 80 symbols and clarify it
    - Remove tests/.fmf dir from the RPM
    Resolves: rhbz#2151281
  - On SQL Server Enterprise Edition, support configuring asynchronous replication
    Resolves: rhbz#2151282
  - Support configuring a read-scale SQL server availability group (without pacemaker
    Resolves: rhbz#2151283
  - Use the certificate role to create the cert and the key
    Resolves: rhbz#2151284
  - Support SQL Server version 2022
    Resolves: rhbz#2153428
  - Support integrating with AD Server for authentication
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-2
changelog:
  - Replace fedora.linux_system_roles/redhat.rhel_system_roles and
    linux-system-roles.mssql with microsoft.sql.server in the role.
    Resolves: rhbz#2151281
  - Use latest 1.3.0 to fix ad_Integration issues
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-3
changelog:
  - Spec: add functionality to build from a commit hash
  - Use latest 1.3.0 to add flexibility to AD integration functionality
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.4.1-1
changelog:
  - Update BuiildRequires to use ansible-core on RHEL > 8.8
  - Move RHEL related code into an include for spec readability
  - Update role to version 1.4.1 to add customizable storage paths
    Resolves: RHEL-529


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Dimitri Savineau <dsavinea@redhat.com> - 2.14.2-4
changelog:
  - rebuild with python 3.11 (rhbz#2169466)
  - remove bundled dependencies from requirements file (rhbz#2152615)
  - add bundled version of resolvelib
  - use PyPi sources
  - remove straightplugin
  - add missing obsoletes constraint


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204510)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.7-1
changelog:
  - ansible-core 2.14.7 release (rhbz#2221820)
  - rebuild with python 3.9 (rhbz#2221820)
  - remove bundled packaging, pyparsing and resolvelib.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.9-1
changelog:
  - ansible-core 2.14.9 release (rhbz#2232432)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Thomas Woerner <twoerner@redhat.com> - 1.7.0-1
changelog:
  - Update to version 1.7.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.7.0
    Resolves: RHBZ#2080322
  - New idrange management module.
    Resolves: RHBZ#2069188
  - Not able to update empty descriptions in automount maps.a
    Resolves: RHBZ#2050179
  - New servicedelegationrule management module.
    Resolves: RHBZ#2069179
  - New servicedelegationtarget management module.
    Resolves: RHBZ#2069180
  - Add support for managing idoverrideusers in ipagroup.
    Resolves: RHBZ#2069183


author: Thomas Woerner <twoerner@redhat.com> - 1.8.0-1
changelog:
  - idrange: Fix usage of dom_name when idrange doesn't exist.
    Resolves: RHBZ#2086994
  - smartcard roles for ansible-freeipa
    Resolves: RHBZ#2076567


author: Thomas Woerner <twoerner@redhat.com> - 1.8.1-1
changelog:
  - Update to version 1.8.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.1
    Related: RHBZ#2080322
  - ipa server deploys failing with latest IPA compose
    Resolves: RHBZ#2103924
  - ipaserver_external_cert_files failes to copy with ansible 2.13
    Resolves: RHBZ#2104142


author: Thomas Woerner <twoerner@redhat.com> - 1.8.2-1
changelog:
  - Update to version 1.8.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.2
    Related: RHBZ#2080322
  - SIDs are always generated for server and replica deployments
    Resolves: RHBZ#2110478
  - Random Serial Numbers are not enabled by default any more
    Resolves: RHBZ#2110523
  - Fixes comparison of bool values in IPA 4.9.10+ for ipadnsconfig
    Resolves: RHBZ#2110538


author: Thomas Woerner <twoerner@redhat.com> - 1.8.3-1
changelog:
  - Update to version 1.8.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.3
    Related: RHBZ#2080322
  - Fixes replica deployment issue for domains without SID support.
    Related: RHBZ#2110478


author: Thomas Woerner <twoerner@redhat.com> - 1.8.4-1
changelog:
  - Update to version 1.8.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.4
    Resolves: RHBZ#2125592
  - 'ansible-doc' -l lists most idm modules as 'UNDOCUMENTED'
    Resolves: RHBZ#2125603
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2125616
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2069184


author: Thomas Woerner <twoerner@redhat.com> - 1.9.0-1
changelog:
  - Update to version 1.9.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.0
    Related: RHBZ#2125592
  - pwpolicy: Add support for password check and grace limit
    Resolves: RHBZ#2127911
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2127446
  - ipaclient: No kinit on controller for deployment using OTP
    Resolves: RHBZ#2127887
  - ipaclient: Configure DNS resolver
    Resolves: RHBZ#2127895
  - New netgroup management module
    Resolves: RHBZ#2127910
  - sudorule: Add support for 'hostmask' parameter
    Resolves: RHBZ#2127913
  - ipaconfig: Fix fail_json calls
    Resolves: RHBZ#2134375
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2134505
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132731


author: Thomas Woerner <twoerner@redhat.com> - 1.9.1-1
changelog:
  - Update to version 1.9.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.1
    Resolves: RHBZ#2125592
  - pwpolicy: Allow clearing policy values
    Resolves: RHBZ#2150334
  - Use netgroup_find instead of netgroup_show to workaround IPA bug
    Resolves: RHBZ#2144725


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-1
changelog:
  - Update to version 1.9.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.2
    Resolves: RHBZ#2125592
  - ipabackup: Use ipabackup_item again in copy_backup_to_server
    Resolves: RHBZ#2165953


author: Thomas Woerner <twoerner@redhat.com> - 1.10.0-1
changelog:
  - Update to version 1.10.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
    Resolves: RHBZ#2170373
  - ipareplica/server: Enable removal from domain with undeployment
    Resolves: RHBZ#2127903
  - ipagroup: Allow multiple group management
    Resolves: RHBZ#2175763
  - ipaserver: Allow deployments with random serial numbers
    Resolves: RHBZ#2127905
  - ipagroup: Fix ensuring external group members (without trust-ad)
    Resolves: RHBZ#2183822
  - ipaclient: Add subid option to select the sssd profile with-subid
    Resolves: RHBZ#2175767
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#2127883
  - ipaclient: Keep server affinity while deploying as long as possible
    Resolves: RHBZ#2175757


author: Thomas Woerner <twoerner@redhat.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
    Resolves: RHBZ#2170373
  - Multiple service management
    Resolves: RHBZ#2175771
  - New ipacert module
    Resolves: RHBZ#2127907
  - Fix maxsequence handling in ipapwpolicy module
    Resolves: RHBZ#2214294


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Resolves: RHBZ#2170373
  - ipaautomountmap: add support for indirect maps
    Resolves: RHBZ#2050176
  - ipauser: Add support to modify GECOS field
    Resolves: RHBZ#2169372
  - ipauser: Add support for parameter "street"
    Resolves: RHBZ#2215531
  - ipauser: Add support for SMB attributes
    Resolves: RHBZ#2215533
  - ipauser: Support for External IdP attributes
    Resolves: RHBZ#2215536
  - Fix handling of ipapwpolicy attributes usercheck and dictcheck
    Resolves: RHBZ#2215542
  - Update authtypes authind
    Resolves: RHBZ#2215538


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Resolves: RHEL-13744
  - New idoverridegroup management module.
    Resolves: RHEL-16937
  - New idoverrideuser management module.
    Resolves: RHEL-16942
  - New idview management module.
    Resolves: RHEL-16934
  - New idp management module.
    Resolves: RHEL-16939
  - idoverride{user,group}: Fix delete_continue with state absent
    Resolves: RHEL-16680


author: Thomas Woerner <twoerner@redhat.com> - 1.6.3-1
changelog:
  - Update to version 1.6.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.3
    Related: RHBZ#2010622


author: Nathan Scott <nathans@redhat.com> 2.0.3-1
changelog:
  - Updated for new version with changed namespace
  - Ansible collection macros now used in the spec
  - Added ansible-lint checking in %check section


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Tom Stellard <tstellar@redhat.com> - 1.6.1-13
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Omair Majid <omajid@redhat.com> - 8.0.100~rc.1-0.2
changelog:
  - Add patches to fix mono and arm64 issues
  - Include libmono-*.a files in the SDK
  - Fix CI configuration
  - Related: RHEL-4074


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-102
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062824 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-103
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2071725 - Default systemd service config blocks audit watch rules in some directories [rhel-9.1.0]


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-2
changelog:
  - Parse auto_reset_crashkernel in kdump
    resolves: rhbz#2042772
  - Add new directives and options for chrony


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-4
changelog:
  - Fix parsing of /usr/lib/tmpfiles.d/provision.conf
  - Fix parsing of /etc/kernel/cmdline
    resolves: rhbz#2155136, rhbz#2159282


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080239)
  - backup-restore now works correctly (RHBZ #2070541)
  - add with-subid to sssd profile (RHBZ #2075192)
  - add with-gssapi to sssd profile (RHBZ #2077893)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - update translations (RHBZ #2139642)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151145)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Nils Philippsen <nils@tiptoe.de> - 0.1.72-2
changelog:
  - BR: librsvg2-tools for rsvg-convert
  - mark license files as %license
  - use %apiver macro consistently
  - don't ship .gitignore file


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Jerome Marchand <jmarchan@redhat.com> - 0.20.0-7
changelog:
  - Sync with latest libbpf (fixes BPF_F_BROADCAST breakages of rhbz#1992430)
  - Fix cpudist, mdflush, readahead and threadsnoop (rhbz#1992430)
  - Handle the renaming of task_struct_>state field
  - Drop tools that relies on features disabled on RHEL


author: Jerome Marchand <jmarchan@redhat.com> - 0.26.0-3
changelog:
  - Rebuild with LLVM 16 (rhbz#2050112)
  - Fix compactsnoop (rhbz#2042236)
  - Fix killsnoop documentation (rhbz#2075500)
  - Fix funcslower (rhbz#2075415)
  - Fix deadlock memory usage issue (rhbz#2050112)
  - Fix nfsslower (rhbz#2180934)
  - Use upstream fix for nfsslower unititialized struct issue


author: Jerome Marchand <jmarchan@redhat.com> - 0.28.0-1
changelog:
  - Rebase to v0.28.0 (RHEL-9976)
  - Rebuild with LLVM 17 (RHEL-10591)
  - Fix bpf-biosnoop out of bound access (RHEL-8664)
  - Fix kvmexit missing VM exit reasons and statistics (RHEL-8702)
  - Fix multi-word array type handling (RHEL-8674)
  - Fix tcpstates -Y (RHEL-8490)
  - Fix bio tools (RHEL-8553)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-3
changelog:
  - Tighten cache protection against record from forwarders (CVE-2021-25220)
  - Include test of forwarders


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-5
changelog:
  - Fix possible serve-stale related crash (CVE-2022-3080)
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-6
changelog:
  - Bound the amount of work performed for delegations (CVE-2022-2795)
  - Add /usr/lib64/named to bind-chroot (#2129466)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-9
changelog:
  - Prevent flooding with UPDATE requests (CVE-2022-3094)
  - Handle RRSIG queries when server-stale is active (CVE-2022-3736)
  - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)


author: Yara Ahmad <yahmad@redhat.com> - 2.35.2-40
changelog:
  - Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (#2164701)


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-2
changelog:
  - Fix potential AttributeError when getting stratis blockdev info
    Related: rhbz#2123711
  - tests: Skip XFS resize test on CentOS/RHEL 9
    Related: rhbz#2123711


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-3
changelog:
  - Catch BlockDevNotImplementedError for btrfs plugin calls
    Resolves: rhbz#2139166
  - Revert "Adjust to new XFS min size"
    Resolves: rhbz#2139189


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-7
changelog:
  - Fix setting kickstart data
    Resolves: rhbz#2174296
  - Do not set memory limit for LUKS2 when running in FIPS mode
    Resolves: rhbz#2193096


author: Jan Pokorny <japokorn@redhat.com> - 3.6.0-9
changelog:
  Backport iSCSI initiator name related fixes:
  - Allow changing iSCSI initiator name after setting it
    Resolves: rhbz#2221935
  - Add a basic test case for the iscsi module
    Resolves: rhbz#2221935
  - tests: Use blivet-specific prefix for targetcli backing files
    Resolves: rhbz#2221935
  - iscsi: Save firmware initiator name to /etc/iscsi/initiatorname.iscsi
    Resolves: rhbz#2221932
  - tests: Improve iscsi_test.ISCSITestCase
    Resolves: rhbz#2221935


author: Tomas Bzatek <tbzatek@redhat.com> - 3.6.0-10
changelog:
  - nvme: Require additional rpms for dracut
    Resolves: RHEL-2855
  - nvme: Align HostNQN and HostID format to TP-4126
    Resolves: RHEL-1254


author: Tomas Bzatek <tbzatek@redhat.com> - 3.6.0-11
changelog:
  - nvme: Retrieve HostNQN from a first active fabrics connection
  - tests: Add a simple unit test for the NVMe module
    Resolves: RHEL-11541


author: Jan Pokorny <japokorn@redhat.com> - 3.4.0-15
changelog:
  - Add a very simple NVMe module
    Resolves: rhbz#2073008
  - Add support for NPIV-enabled zFCP devices
    Resolves: rhbz#1937030
  - Fix removing zFCP SCSI devices
    Related: rhbz#1937030
  - tests: Mark "fake" disks in test_get_related_disks as non-existing
    Resolves: rhbz#2062690


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-18
changelog:
  - Backport patch to autoselect best cipher suite when working over lanplus backend
  - Fixed 'ipmitool pef status/info' not printing final newline
  - Expanded column for sensor name in 'ipmi sdr/sensor' output so longer names are aligned


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-19
changelog:
  - Backport fix for CVE-2020-5208 (#1798722); for details see
    https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-26
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Colin Walters <walters@verbum.org> - 0.2.11-2
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.11
    Resolves: https://issues.redhat.com/browse/RHEL-5273


author: Colin Walters <walters@verbum.org> - 0.2.15-2
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.15
    Related: https://issues.redhat.com/browse/RHEL-14388


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0 (rhbz#2121920)
  - Rebuild for LLVM 15 (rhbz#2118995)
  - Download the cereal library (not packaged into RHEL9)
  - Fixed several tools (rhbz#1975148, rhbz#2088577, rhbz#2128208, rhbz#2073675,
    rhbz#2073770)
  - Resolve conflicts between bpftrace and bcc manpages (rhbz#2075076)


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-2
changelog:
  - Fix missing kprobe attachpoints for bio* tools (s390x, ppc64le)
  - Rebuild for libbpf 1.0.0
  - Resolves: rhbz#2157829
  - Related: rhbz#2157592


author: Viktor Malik <vmalik@redhat.com> - 0.17.0-1
changelog:
  - Rebase on bpftrace 0.17.0 (RHEL-286)
  - Fix runqlat.bt, tcpdrop.bt, and undump.bt on aarch64 (rhbz#2170838)


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/078a7ff)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29.0
    (https://github.com/containers/buildah/commit/94b723c)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/94b723c)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/c822cc6)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/7fa17a8)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/f07d2c9)
  - Resolves: #2178263


author: Jindrich Novy <jnovy@redhat.com> - 1:1.30.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175073
  - Resolves: #2179958
  - Resolves: #2187332
  - Resolves: #2187375
  - Resolves: #2203696
  - Resolves: #2207518


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.33.1-3
changelog:
  - Rebuild for CVEs:
    CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322
  - Related: Jira:RHEL-2779


author: Jerry James <loganjerry@gmail.com> - 1.10.14-1
changelog:
  - Version 1.10.14
  - Remove no longer needed no-unixsocket.patch
  - Add workaround for compiling tests with JDK 11


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Josh Stone <jistone@redhat.com> - 1.71.0-2
changelog:
  - Relax the suspicious_double_ref_op lint (rhbz2225471)
  - Enable the profiler runtime for native hosts (rhbz2213875)


author: Ray Strode <rstrode@redhat.com> - 80.8-1
changelog:
  - Fix black spot in one of the backgrounds
    Resolves: #1684106
  - Add missing 2560x1600 8-abstract-light background
    Resolves: #1692309
  - letter box instead of crop backgrounds when there's no
    good aspect ratio
    Related: #1720610


author: Ray Strode <rstrode@redhat.com> - 81.0-1
changelog:
  - Add wallpapers for wider screen monitors
    Related: #1720610
  - Move logo to corner in wallpapers that have it in center
    Resolves: #1706793


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-4
changelog:
  - Add Pull request #18
  - Replaces kerberos with gssapi
  - Replaces requests_kerberos with requests_gssapi


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-5
changelog:
  - Add Pull request #19
  - Remove Pull request #17 as it is not accepted
  - Review comment #13, #14 addressed


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: Jerry James <loganjerry@gmail.com> - 0.15.0-1
changelog:
  - Version 0.15.0
  - Add -formatspec and -attribute-format patches
  - Build with both cmake and autotools


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Camilla Conte <cconte@redhat.com> - 23.1.1-2
changelog:
  - 0007-rhel-make-sure-previous-hostname-file-ends-with-a-ne.patch [bz#2184608]
  - Resolves: bz#2184608


author: Camilla Conte <cconte@redhat.com> - 23.1.1-4
changelog:
  - 0009-Make-user-vendor-data-sensitive-and-remove-log-permi.patch [bz#2190083]
  - Resolves: bz#2190083


author: Camilla Conte <cconte@redhat.com> - 23.1.1-5
changelog:
  - 0010-Do-not-generate-dsa-and-ed25519-key-types-when-crypt.patch [bz#2187164]
  - Resolves: bz#2187164


author: Camilla Conte <cconte@redhat.com> - 23.1.1-6
changelog:
  - 0011-Revert-Manual-revert-Use-Network-Manager-and-Netplan.patch
  - 0012-Revert-Revert-Add-native-NetworkManager-support-1224.patch
  - 0013-net-sysconfig-do-not-use-the-highest-autoconnect-pri.patch
  - 0014-net-sysconfig-cosmetic-fix-tox-formatting.patch
  - 0015-nm-generate-ipv6-stateful-dhcp-config-at-par-with-sy.patch [bz#2207716]
  - 0016-network_manager-add-a-method-for-ipv6-static-IP-conf.patch [bz#2196284]
  - 0017-net-sysconfig-enable-sysconfig-renderer-if-network-m.patch [bz#2194050]
  - 0018-network-manager-Set-higher-autoconnect-priority-for-.patch [bz#2196231]
  - 0019-Set-default-renderer-as-sysconfig-for-c9s-RHEL-9.patch [bz#2209349]
  - Resolves: bz#2118235 bz#2194050 bz#2196231 bz#2196284 bz#2207716 bz#2209349


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.1.1-7
changelog:
  - 0020-Revert-Set-default-renderer-as-sysconfig-for-c9s-RHE.patch
  - 0021-Set-default-renderer-as-sysconfig-for-centos-rhel-41.patch [bz#2209349]
  - Resolves: bz#2209349


author: Camilla Conte <cconte@redhat.com> - 23.1.1-8
changelog:
  - 0022-test-fixes-update-tests-to-reflect-AUTOCONNECT_PRIOR.patch [bz#2217865]
  - 0023-test-fixes-remove-NM_CONTROLLED-no-from-tests.patch [bz#2217865]
  - 0024-Revert-limit-permissions-on-def_log_file.patch [bz#2217865]
  - 0025-test-fixes-changes-to-apply-RHEL-specific-config-set.patch [bz#2217865]
  - 0026-Enable-SUSE-based-distros-for-ca-handling-2036.patch [bz#2217865]
  - 0027-Handle-non-existent-ca-cert-config-situation-2073.patch [bz#2217865]
  - 0028-logging-keep-current-file-mode-of-log-file-if-its-st.patch [bz#2222498]
  - 0029-DS-VMware-modify-a-few-log-level-4284.patch [bz#2225374]
  - Resolves: bz#2217865 bz#2222498 bz#2225374


author: Camilla Conte <cconte@redhat.com> - 23.1.1-9
changelog:
  - 0030-NM-renderer-set-default-IPv6-addr-gen-mode-for-all-i.patch [bz#2188388]
  - Resolves: bz#2188388


author: Camilla Conte <cconte@redhat.com> - 23.1.1-12
changelog:
  - Resolves: RHEL-2323
  - 0031-net-fix-ipv6_dhcpv6_stateful-stateless-slaac-configu.patch [bz#2227767]
  - Resolves: bz#2227767


author: Camilla Conte <cconte@redhat.com> - 22.1-8
changelog:
  - ci-cc_set_hostname-ignore-var-lib-cloud-data-set-hostna.patch [bz#2140893]
  - Resolves: bz#2140893
  (systemd[1]: Failed to start Initial cloud-init job after reboot system via sysrq 'b')


author: Camilla Conte <cconte@redhat.com> - 22.1-9
changelog:
  - ci-Allow-growpart-to-resize-encrypted-partitions-1316.patch [bz#2166245]
  - Resolves: bz#2166245
    (Add support for resizing encrypted root volume)


author: Camilla Conte <cconte@redhat.com> - 23.4-2
changelog:
  - 0003-Setting-autoconnect-priority-setting-for-network-scr.patch [RHEL-18313]
  - Resolves: RHEL-18313


author: Camilla Conte <cconte@redhat.com> - 23.4-3
changelog:
  - 0004-net-network_manager-do-not-set-may-fail-to-False-for.patch [RHEL-21629]
  - 0005-net-allow-dhcp6-configuration-from-generate_fallback.patch [RHEL-21629]
  - Resolves: RHEL-21629
  - 0006-net-nm-check-for-presence-of-ifcfg-files-when-nm-con.patch [RHEL-17609]
  - Resolves: RHEL-17609
  - 0007-test-jsonschema-Pin-jsonschema-version-4781.patch


author: Jacob Kozol <jkozol@redhat.com> - 32-1
changelog:
  - Add Edge Raw, RHEL Installer, Edge Simplified Installer image types
  - Improve user account modal responsiveness
  - Update tests
  - Update minor NPM dependencies
  - Update translation files


author: Packit <hello@packit.dev> - 299-1
changelog:
  - Kdump: Show location of kdump to verify the successful configuration test
  - Storage: Support for no-overprovisioning with Stratis
  - Storage: Cockpit can now add caches to encrypted Stratis pools


author: Packit <hello@packit.dev> - 300-1
changelog:
  - Celebrating the Nürnberg life release!
  - Storage: Support for growing block devices of a Stratis pool


author: Jindrich Novy <jnovy@redhat.com> - 77-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/77
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 78-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/78
  - Related: Jira:RHEL-2112


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Remove bots sudo rm from Makefile
  - Use journalctl --utc for Logs view to handle DST
  - Add Applications Menu test
  - Install cockpit-packagekit in local VM
  - Set timezone for Logs Correlation test


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Drop moment.js dependency
  - Tests: Assert pause state with a later command in rec1
  - CI: Update image to ubuntu 20.04


author: Justin Stephenson <jstephen@redhat.com> - 13-1
changelog:
  - Play after rewind in testFastforwardControls
  - Set TZ to avoid CI failures with testFilter* tests
  - testZoomSpeedControls incorrectly checks scale
  - Fix testSessionRecordingConf
  - Read TMT_TEST_DATA variable for LOGS in browser.sh
  - Fix node-modules in run-test.sh
  - Install sssd-proxy in test browser.sh
  - Add Files path for test recordings
  - FMF: Run tests together
  - Add executable bit to browser shell scripts
  - FMF: Fix minor typo in plans
  - Add FMF tests and test scripts
  - Read existing sssd conf domains and services
  - Makefile: Update Cockpit lib to 269bf89276c679a03befc8a04244addd
  - Remove CentOS condition in testZoomSpeedControls
  - Add accessible name label for Progress component
  - Remove 'enable_files_domain' from SSSD Config
  - SSSD config changes
  - testFastforwardControls update after player-restart
  - Switch wait_present to wait_visible
  - ESLint error and warning fixes
  - Fix stylelint errors
  - Dependency updates
  - Bring up to date with cockpit starter kit
  - Config: Switch SSSD files provider to Proxy provider
  - Update fedora license in spec file
  - Makefile: Bump test API to 267
  - Makefile: drop installing cockpit-ws/cockpit-packagekit
  - src: load translations via po.js
  - .semaphore: update TEST_OS to Fedora 36
  - webpack.config.js: update compression plugin to succeed build
  - Makefile: Adjust to changed rpmspec -q behaviour
  - Use standard "translate" marker in HTML
  - Update dependencies excluding Patternfly
  - Remove unneeded tlog UID code


author: Justin Stephenson <jstephen@redhat.com> - 4-1
changelog:
  - Release v4
  - Update parent id in metainfo file
  - Update package manifest
  - Fix rpmmacro to resolve correc    t path on CentOS7
  - Handle byte-array encoded journal data
  - Don't clobber cockpit bots directory
  - Move code out of deprecated React lifecycle functions


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2063148
  - Disable FIPS mode; it does not work and will not be certified
    Resolves: rhbz#2013669


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061316


author: Phil Sutter <psutter@redhat.com> - 1.4.5-15
changelog:
  - conntrack: fix compiler warnings
  - src: fix strncpy -Wstringop-truncation warnings
  - connntrack: Fix for memleak when parsing -j arg
  - Drop pointless assignments
  - Don't call exit() from signal handler
  - read_config_yy: Drop extra argument from dlog() call
  - helpers: ftp: Avoid ugly casts
  - Fix potential buffer overrun in snprintf() calls
  - cache: Fix features array allocation
  - hash: Flush tables when destroying


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.216.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.216.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.217.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.217.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.218.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.218.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.219.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.219.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.221.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.221.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.222.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.222.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.224.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.224.0
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:2.226.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.226.0
  - Remove dependency on policycoreutils-python-utils
  - Related: Jira:RHEL-2112
  - Related: Jira:RHEL-18316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.227.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.227.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.228.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.228.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.1
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Related: RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-4
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179960
  - Resolves: #2187333
  - Resolves: #2187376
  - Resolves: #2203705
  - Resolves: #2207519


author: Jindrich Novy <jnovy@redhat.com> - 2:1-12
changelog:
  - consume seccomp.json from the oldest vendored version of c/common,
    not main branch
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 2:1-16
changelog:
  - do not hardcode log_driver = "journald" and events_logger = "journald"
    for RHEL9 and leave the rootful/rootless behaviour change based on
    internal logic
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 2:1-41
changelog:
  - drop aardvark-dns and netavark - packaged separately
  - update vendored components
  - Related: #2061316


author: Sohan Kunkerkar <skunkerk@redhat.com> - 0.11.0-1
changelog:
  - New release
  - Fix inadvertent inclusion of coreos-installer-dracut in -bootinfra on RHEL
  - Have -dracut own 51coreos-installer directory on RHEL


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-5
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix segfault for the "l" command of gdb
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for other issues


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Nicola Sella <nsella@redhat.com> - 0.16.1
changelog:
  - Update to 0.16.1
  - Add the section number to the manual pages
  - Parse xml snippet in smaller parts (RhBug:1859689)
  - Add module metadata support to createrepo_c (RhBug:1795936)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Never leave behind .repodata lock on exit (RhBug:1906831)
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Adrian Reber <areber@redhat.com> - 3.15-11
changelog:
  - Remove unnecessary Requires: criu-libs
  - Remove wrong BR nftables-devel
  - Bump release for rebuild


author: Radostin Stoyanov <radostin@redhat.com> - 3.15-12
changelog:
  - Increase release number from 11 to 12
  - Disable podman test when crun doesn't support checkpoint/restore


author: Vladis Dronov <vdronov@redhat.com> - 15.9-10
changelog:
  - Bring in important patches from the upstream (39fb38..eaea31 in a git repo)
  - Fix the upstream tarball URL
  - Remove outdated patch files


author: Vladis Dronov <vdronov@redhat.com> - 15.9-14
changelog:
  - Add distrubution patches which were not upstreamed (bz 2072635)
  - Add self-tests
  - Add OSCI harness


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - 2217177 - Delays printing to lpd when reserved ports are exhausted
  - 2217284 - The command "cancel -x <job>" does not remove job files
  - 2217954 - Enlarge backlog queue for listen() in cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-1
changelog:
  - 1.28.7, urftopdf nor pdftoopvp aren't compiled anymore
  - 1904405 - HP M281fdw: čžš characters printed as squares with "driverless" driver


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-3
changelog:
  - fix TLS session caching disaster (CVE-2021-22901)
  - fix TELNET stack contents disclosure (CVE-2021-22898)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-8
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-12
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)
  - fix use-after-free and double-free in MQTT sending (CVE-2021-22945)


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-7
changelog:
  - Resolves: #2096149 - Fatal error when running "squatter -r user"
  - Resolves: #2096885 - Enhanced TMT testing for centos-stream


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Eugene Syromiatnikov <esyr@redhat.com> - 3.6-13
changelog:
  - Change "Requires: genisoimage" dependency to "Requires: /usr/bin/mkisofs"
    to enable xorriso-provided drop-in replacement implementation usage.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.1-3
changelog:
  - Fix some rpmlint issues, add comments, add license and doc,
    gpg verification, use pkgconfig BuildRequires, enable _hardened_build


author: Mark Wielaard <mjw@redhat.com> - 5.0-1
changelog:
  - Upgrade to upstream 5.0 release.
    - Removes find-debuginfo .sh suffix.
    - This release still has a find-debuginfo.sh -> find-debuginfo symlink.


author: Kalev Lember <klember@redhat.com> - 0.26-1
changelog:
  - Update to 0.26
  - Switch to the meson build system
  - Avoid hardcoding man page extensions
  - Drop old emacs-desktop-file-utils obsoletes/provides


author: Petr Menšík <pemensik@redhat.com> - 2.85-3
changelog:
  - Send queries only to best domain-specific server (#2047510)
  - Offer alternate DHCPv6 address if requested is already leased (#1998448)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.14-1
changelog:
  - dovecot updated to 2.3.14, pigeonhole to 0.5.14
  - use OpenSSL's implementation of HMAC
  - Remove autocreate, expire, snarf and mail-filter plugins.
  - Remove cydir storage driver.
  - Remove XZ/LZMA write support. Read support will be removed in future release.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.15-1
changelog:
  - dovecot updated to 2.3.15, pigeonhole updated to 0.5.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access (#1979833)
  - CVE-2021-33515: On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client
  - Add TSLv1.3 support to min_protocols.


author: Timothy Redaelli <tredaelli@redhat.com> - 19.11.1-1
changelog:
  - Rebase DPDK to 19.11.1 (#1824905)
  - Remove dpdk-pmdinfo.py (#1801361)
  - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)


author: Timothy Redaelli <tredaelli@redhat.com> - 21.11.2-1
changelog:
  - Rebase to 21.11.2 (#2126159)
  - Includes fixes for CVE-2022-2132 (#2107173) and CVE-2022-28199 (#2123616)


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Pavel Valena <pvalena@redhat.com> - 057-10.git20220721
changelog:
  - fix(dracut.sh): do not fail on irregular files
  - fix(98dracut-systemd): partly revert "emergency mode: use


author: Pavel Valena <pvalena@redhat.com> - 057-13.git20220816
changelog:
  - fix(kernel-modules): always include nvmem driver on
  - fix(drm): add video drivers needed on hyper-v and similar
  - fix(skipcpio): ignore broken pipe


author: Pavel Valena <pvalena@redhat.com> - 057-20.git20221213
changelog:
  - refactor(url-lib): write curl output directly to file
  - fix(dracut-initramfs-restore.sh): initramfs detection not
  - fix(90kernel-modules): install blk modules using symbol
  - fix(squash): build ld cache for squash loader
  - test(16-DMSQUASH): make it pass on arch
  - feat(dmsquash-live): add new dmsquash-live-autooverlay module


author: Pavel Valena <pvalena@redhat.com> - 057-38.git20230725
changelog:
  - fix(dracut.sh): use dynamically uefi's sections offset
  - fix(dracut.sh): handle imagebase for uefi
  - fix(dracut.sh): use gawk for strtonum
  - fix(rngd): install system service file
  - fix(nvmf): nvme list-subsys prints the address using commas
  - fix(nvmf): don't try to validate network connections in
  - fix(nvmf): no need to load the nvme module
  - fix(nvmf): don't create did-setup file
  - fix(nvmf): don't use "finished" queue for autoconnect
  - fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes
  - fix(nvmf): avoid calling "exit" in a cmdline hook
  - fix(nvmf): run cmdline hook before parse-ip-opts.sh
  - feat(nvmf): set rd.neednet=1 if tcp records encountered
  - fix(nvmf): install 8021q module unconditionally
  - fix(nvmf): support /etc/nvme/config.json
  - feat(nvmf): add code for parsing the NBFT


author: Pavel Valena <pvalena@redhat.com> - 057-43.git20230816
changelog:
  - feat(spec): include modules for IMA
  - fix(dracut): there can be \ at the end on line in awk script
  - fix(rngd): spacing
  - fix(integrity): do not enable EVM if there is no key
  - fix(fips): include openssl's fips.so and openssl.cnf


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.17-1
changelog:
  - New release: 1.17
  - Support raw BTF as available in /sys/kernel/btf/vmlinux.
  - When the sole argument passed isn't a file, take it as a class name:
  - Do not require a class name to operate without a file name.
  - Make --find_pointers_to consider unions:
  - Make --contains and --find_pointers_to honour --unions
  - Add support for finding pointers to void:
  - Make --contains and --find_pointers_to to work with base types:
  - Make --contains look for more than just unions, structs:
  - Consider unions when looking for classes containing some class:
  - Introduce --unions to consider just unions:
  - Fix -m/--nr_methods - Number of functions operating on a type pointer


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.18-1
changelog:
  - New release: 1.18
  - Use debugging info to pretty print raw data
  - Store percpu variables in vmlinux BTF.
  - Fixes to address segfaults on the gdb testsuite binaries
  - Bail out on partial units for now, avoiding segfaults and providing warning to user.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.19-1
changelog:
  - New release: 1.19
  - Split BTF
  - DWARF workarounds for DW_AT_declaration
  - Support cross-compiled ELF binaries with different endianness
  - Support showing typedefs for anonymous types
  - Speedups using libbpf algorithms
  - See changes-v1.19 for a complete and more detailed list of changes


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.20-1
changelog:
  - New release: v1.20
  - btf_encoder:
  - Improve ELF error reporting using elf_errmsg(elf_errno())
  - Improve objcopy error handling.
  - Fix handling of 'restrict' qualifier, that was being treated as a 'const'.
  - Support SHN_XINDEX in st_shndx symbol indexes
  - Cope with functions without a name
  - Fix BTF variable generation for kernel modules
  - Fix address size to match what is in the ELF file being processed.
  - Use kernel module ftrace addresses when finding which functions to encode.
  - libbpf:
  - Allow use of packaged version.
  - dwarf_loader:
  - Support DW_AT_data_bit_offset
  - DW_FORM_implicit_const in attr_numeric() and attr_offset()
  - Support DW_TAG_GNU_call_site, standardized rename of DW_TAG_GNU_call_site.
  - build:
  - Fix compilation on 32-bit architectures.


author: Jiri Olsa <jolsa@redhat.com> - 1.21-1
changelog:
  - remove ftrace filter
  - New release: v1.21
  - DWARF loader:
  - Handle DWARF5 DW_OP_addrx properly
  - Handle subprogram ret type with abstract_origin properly
  - Check .notes section for LTO build info
  - Check .debug_abbrev for cross-CU references
  - Permit merging all DWARF CU's for clang LTO built binary
  - Factor out common code to initialize a cu
  - Permit a flexible HASHTAGS__BITS
  - Use a better hashing function, from libbpf
  - btf_encoder:
  - Add --btf_gen_all flag
  - Match ftrace addresses within ELF functions
  - Funnel ELF error reporting through a macro
  - Sanitize non-regular int base type
  - Add support for the floating-point types
  - Pretty printer:
  - Honour conf_fprintf.hex when printing enumerations


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Viktor Malik <vmalik@redhat.com> - 1.25-1
changelog:
  - Resolves: rhbz#2190484
  - Build with system libbpf
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Hui Wang <huwang@redhat.com> - 1:4.20-4
changelog:
  - Drop unnecessary javax16.api.jar
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-7
changelog:
  - edk2-Revert-MdeModulePkg-TerminalDxe-add-other-text-resol.patch [bz#2162307]
  - Resolves: bz#2162307
    (Broken GRUB output on a serial console)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-8
changelog:
  - edk2-OvmfPkg-disable-dynamic-mmio-window-rhel-only.patch [bz#2174605]
  - Resolves: bz#2174605
    ([EDK2] disable dynamic mmio window)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-9
changelog:
  - edk2-remove-amd-sev-feature-flag-from-secure-boot-builds-.patch [bz#2169247]
  - Resolves: bz#2169247
    ([edk2] Install a sev guest with enrolled secure boot failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230301gitf80f052277c8-2
changelog:
  - edk2-build-script-update.patch [bz#2183230]
  - edk2-PcdDxeNxMemoryProtectionPolicy-update.patch [bz#2183230]
  - Resolves: bz#2183230
    ([edk2] Instruction abort exception when booting a VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230301gitf80f052277c8-3
changelog:
  - edk2-add-aarch64-qcow2-images.patch [bz#2186754]
  - edk2-update-json-files.patch [bz#2186754]
  - edk2-add-libvirt-version-conflict.patch [bz#2186754]
  - edk2-add-dbx-update-blob-rh-only.patch [RHEL-377]
  - edk2-spec-apply-dbx-update-rh-only.patch [RHEL-377]
  - Resolves: bz#2186754
    (edk2: Add firmware images in qcow2 format)
  - Resolves: RHEL-377
    (edk2: ship secure build variable store with latest dbx updates)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230301gitf80f052277c8-4
changelog:
  - edk2-OvmfPkg-Clarify-invariants-for-NestedInterruptTplLib.patch [bz#2189136]
  - edk2-OvmfPkg-Relax-assertion-that-interrupts-do-not-occur.patch [bz#2189136]
  - Resolves: bz#2189136
    (windows 11 installation broken with edk2-20230301gitf80f052277c8-1.el9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230301gitf80f052277c8-5
changelog:
  - edk2-dbx-update-2023-05-09-black-lotus-edition.patch [RHEL-470]
  - edk2-json-descriptors-explicitly-set-mode-split.patch [RHEL-469]
  - Resolves: RHEL-470
    (edk2: update variable store with latest dbx updates (may 9, black lotus edition))
  - Resolves: RHEL-469
    (explicitly set mode = split in firmware json description files)


author: Oliver Steffen <osteffen@redhat.com> - 20230524-1
changelog:
  - Rebase to edk2-stable202305 tag [RHEL-585]
    Resolves: RHEL-585
    ([rhel-9.3] rebase EDK2 to edk2-stable202305)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-2
changelog:
  - edk2-ArmVirt-add-VirtioSerialDxe-to-ArmVirtQemu-builds.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-factor-out-IsVirtio.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-factor-out-IsVirtioPc.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-set-up-virtio-serial-.patch [RHEL-643]
  - edk2-OvmfPkg-VirtioSerialDxe-use-TPL_NOTIFY.patch [RHEL-643]
  - edk2-OvmfPkg-VirtioSerialDxe-Remove-noisy-debug-print-on-.patch [RHEL-643]
  - edk2-OvmfPkg-PlatformInitLib-limit-phys-bits-to-46.patch [bz#2174749]
  - edk2-Revert-OvmfPkg-disable-dynamic-mmio-window-rhel-only.patch [bz#2174749]
  - edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2124143]
  - edk2-OvmfPkg-PlatformInitLib-check-PcdUse1GPageTable.patch [RHEL-644]
  - edk2-OvmfPkg-OvmfPkgIa32X64-enable-1G-pages.patch [RHEL-644]
  - edk2-OvmfPkg-MicrovmX64-enable-1G-pages.patch [RHEL-644]
  - Resolves: RHEL-643
    (add virtio serial support to armvirt)
  - Resolves: bz#2174749
    ([edk2] re-enable dynamic mmio window)
  - Resolves: bz#2124143
    (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-9])
  - Resolves: RHEL-644
    (enable gigabyte pages)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-3
changelog:
  - edk2-OvmfPkg-AmdSev-fix-BdsPlatform.c-assertion-failure-d.patch [bz#2190244]
  - edk2-OvmfPkg-IoMmuDxe-add-locking-to-IoMmuAllocateBounceB.patch [bz#2211060]
  - edk2-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch [bz#2218196]
  - Resolves: bz#2190244
    ([EDK2] [AMDSERVER 9.3 Bug] OVMF AP Creation Fixes)
  - Resolves: bz#2211060
    (SEV-es guest randomly stuck at boot to hard drive screen from powerdown and boot again)
  - Resolves: bz#2218196
    (Add vtpm devices with OVMF.amdsev.fd causes VM reset)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-4
changelog:
  - edk2-OvmfPkg-ResetVector-Fix-assembler-bit-test-flag-chec.patch [RHEL-9943]
  - Resolves: RHEL-9943
    ([EDK2][AMDSERVER Bug] OvmfPkg/ResetVector: Fix assembler bit test flag check [rhel-9.3.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-1
changelog:
  - Rebase to edk2-stable202311 [RHEL-12323]
  - Switch to OpenSSL 3.0 [RHEL-49]
  - Resolves: RHEL-12323
    (Rebase EDK2 for RHEL 9.4)
  - Resolves: RHEL-49
    (consume / bundle RHEL-9 OpenSSL (version 3.0.x) in RHEL-9 edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-2
changelog:
  - edk2-OvmfPkg-RiscVVirt-use-gEfiAuthenticatedVariableGuid-.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariableG.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variables.patch [RHEL-20963]
  - Resolves: RHEL-20963
    ([rhel9] guest fails to boot due to ASSERT error)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-3
changelog:
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch [RHEL-21155]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch [RHEL-21155]
  - edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21155]
  - Resolves: RHEL-21155
    (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-9])


author: Petr Pisar <ppisar@redhat.com> - 37-14
changelog:
  - Fix XML ABI dumps that were generated with a faulty GCC and missed the
    variadic arguments when building without LTO (bug #1863475)


author: Felix Kolwa <fkolwa@redhat.com> - 1.35.1-7
changelog:
  - Bump revision number to 7.
  - Pull in changes from Major Hayden:
    - Skip version check test
      Opened upstream bug:
          https://github.com/aws/efs-utils/issues/194
    - Disable automatic version check


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.187-5
changelog:
  - rhbz2088774: ship /etc/profile.d/debuginfod* files even without
                 default DEBUGINFOD_URLS.


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Bhavin Gandhi <bhavin7392@gmail.com> - 1:27.1-1
changelog:
  - emacs-27.1 is available (#1867841)
  - Add systemd-devel to support Type=notify in unit file
  - Build with Cairo and Jansson support
  - Remove ImageMagick dependency as it's no longer used


author: Jan Synáček <jsynacek@redhat.com> - 1:27.1-2
changelog:
  - use make macros (original patch provided by Tom Stellard)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Kalev Lember <klember@redhat.com> - 40.1-1
changelog:
  - Update to 40.1
  - Remove various minimum version requires
  - Remove old obsoletes
  - Don't use ldconfig_scriptlets
  - Filter private library provides


author: Felipe Borges <feborges@redhat.com> - 40.1-3
changelog:
  - Split evince-previewer into its own package
  - See https://github.com/fedora-silverblue/issue-tracker/issues/122


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Milan Crha <mcrha@redhat.com> - 3.40.4-10
changelog:
  - Related: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.40.4-4
changelog:
  - Resolves: #2071056 (Addressbook: Switch from GData Contacts API to CardDAV API for Google books)
  - Resolves: #2071742 (Add patch to use correct colors in mail preview with webkit2gtk3 2.36.x)


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: #2129703 (EShellWindow: The 'New' menu is not filled after start)
  - Correct Requires for the 'devel' subpackage to enchant-2


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-7
changelog:
  - CVE-2021-3482: Fix heap-based buffer overflow in Jp2Image::readMetadata()
    CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1956174


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-8
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964183

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964189


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Radovan Sroka <rsroka@redhat.com> - 1.0.3-3
changelog:
  RHEL 9 BETA
  - SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm
  Resolves: rhbz#1932225
  Resolves: rhbz#1977731


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-101
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespaces in trust files
  - use full paths in trust files
  Resolves: rhbz#2032408
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#2015307
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014449


author: Radovan Sroka <rsroka@redhat.com> - 1.1-100
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#2032408
  - introduce rules.d
  Resolves: rhbz#2054740
  - remove pretrans scriptlet
  Resolve: rhbz#2051481


author: Radovan Sroka <rsroka@redhat.com> - 1.1-104
changelog:
  RHEL 9.1.0 ERRATUM
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
  Resolves: rhbz#2069123
  - Faulty handling of static applications
  Resolves: rhbz#2096457


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-102
changelog:
  RHEL 9.1.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100041
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2097385
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070655
  - Introduce ppid rule attribute
  Resolves: rhbz#2102558
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111244
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111938
  - Remove dnf plugin
  Resolves: rhbz#2113959
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2115849


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-103
changelog:
  RHEL 9.2.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2097077
  - fapolicyd ineffective with systemd DynamicUser=yes
  Resolves: rhbz#2136802
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2160517
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2160518


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-104
changelog:
  RHEL 9.2.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2097077
  - fapolicyd ineffective with systemd DynamicUser=yes
  Resolves: rhbz#2136802
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2160517
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2160518
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: RHEL-192


author: Radovan Sroka <rsroka@redhat.com> - 1.3.1-100
changelog:
  RHEL 9.3.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-430
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-621
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-624
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-623
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-622
  - Default q_size doesn't match manpage's one
  Resolves: TBD


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-100
changelog:
  RHEL 9.3.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-430
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-621
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-624
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-623
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-622
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-627
  - fapolicyd-cli --update then mount/umount twice causes fapolicyd daemon to block (state 'D')
  Resolves: RHEL-817
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-730
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-816


author: Radovan Sroka <rsroka@redhat.com> - 1.0-3
changelog:
  - backported few cosmetic small patches from upstream master
  - rebase selinux tarbal to v0.3
  - file context pattern for /run/fapolicyd.pid is missing
  Resolves: rhbz#1834674


author: Radovan Sroka <rsroka@redhat.com> - 1.0.1-1
changelog:
  - rebase to 1.0.1
  - introduced uthash dependency
  - SELinux prevents the fapolicyd process from writing to /run/dbus/system_bus_socket
  Resolves: rhbz#1874491
  - SELinux prevents the fapolicyd process from writing to /var/lib/rpm directory
  Resolves: rhbz#1876538


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-42
changelog:
  - fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152107


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-43
changelog:
  - fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#2122944


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-45
changelog:
  - fence_aws: add --skip-race-check parameter to allow running outside
    of AWS network
    Resolves: rhbz#2183162


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-55
changelog:
  - bundled dateutil: fix tarfile CVE-2007-4559
    Resolves: rhbz#2217902
  - fence_ipmilan: fix typos in metadata
    Resolves: rhbz#2224267


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-56
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5396
  - bundled certifi: fix CVE-2023-37920
    Resolves: RHEL-9446


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-59
changelog:
  - fence_zvmip: document required user permissions in metadata/manpage
    Resolves: RHEL-14344
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14030


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-60
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14030


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18139
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20917
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-21345


author: W. Michael Petullo <mike@flyn.org> - 2.5.0-8
changelog:
  - Remove empty lib subpackage
  - Fix make command line (add missing '\')
  - Use -p with install
  - Do not create /etc/festival
  - Do not create /usr/share/info
  - Simplify %files
  - Note BSD license for hts_engine module
  - Split data into noarch package
  - The festival-devel package now provides festival-static
  - Markup additional files as licenses


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Richard W.M. Jones <rjones@redhat.com> 3.23-5
changelog:
  - Disable automatic provides for fio engines (RHBZ#1884954).
  - Apply patch to change SONAME of fio engines (see comment 8 of above bug).


author: Eric Sandeen <sandeen@redhat.com> 3.25-3
changelog:
  - Fix segfault with external IO engines and multiple threads
  - Enable dev-dax, pmemblk, libpmem engines for ppc64le


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Debarshi Ray <rishi@fedoraproject.org> - 1.12.4-2
changelog:
  - Don't try to add Fedora's OCI Flatpak repository on RHEL
  - Remove an obsolete Fedora-specific update path
  Resolves: #2051697


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-3
changelog:
  - Add back fullname property at the scan matching phase for the backward compatibility.
    Resolves: rhbz#1902881


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-4
changelog:
  - cherry pick some upstream patches
    - Skip leading white space in style.
    - Remove abort from FcCompareSize.
    - Fix memory leaks
    - Check qual and compare for family tests.
  -


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Antonio Torres <antorres@redhat.com> - 3.0.21-25
changelog:
  - Revert "Allow to connect to partially open LDAP handle"
  - Use infinite timeout (openldap default) when using LDAP+start-TLS
  - Update openssl dependency to not check epoch (was causing detection issues)
    Related: rhbz#1992551


author: Antonio Torres <antorres@redhat.com> - 3.0.21-31
changelog:
  - Update OpenSSL 3.0 support backport to current v3.0.x branch state
  - Add "--enable-fips-workaround" to build options
    Related: rhbz#2083699


author: Antonio Torres <antorres@redhat.com> - 3.0.21-34
changelog:
  - Use GID / UID 95 as it's reserved for FreeRADIUS (https://pagure.io/setup/blob/07f8debf03dfb0e5ed36051c13c86c8cd00cd241/f/uidgid#_107)
    Resolves: #2095403


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Akira TAGOH <tagoh@redhat.com> - 1.0.8-2
changelog:
  - Restore the deprecated API that was accidentally removed in the previous release.
    Resolves: rhbz#1787293


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-1
changelog:
  - Resolves: #2129731 - Rebase FRR to the latest version
  - Resolves: #2129743 - Add targeted SELinux policy for FRR
  - Resolves: #2127494 - BGP incorrectly withdraws routes on graceful restart capable routers


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-2
changelog:
  - Resolves: #2128738 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-6
changelog:
  - Resolves: #2184870 - Reachable assertion in peek_for_as4_capability function
  - Resolves: #2196795 - denial of service by crafting a BGP OPEN message with an option of type 0xff
  - Resolves: #2196796 - denial of service by crafting a BGP OPEN message with an option of type 0xff
  - Resolves: #2196794 - out-of-bounds read exists in the BGP daemon of FRRouting


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-12
changelog:
  - Resolves: RHEL-3541 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-2
changelog:
  - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15918 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <richard@hughsie.com> 1.5.2-1
changelog:
  - New upstream release
  - Add a flag to indicate if packages are supported
  - Add a plugin for the Pinebook Pro laptop
  - Allow components to set the icon from the metadata
  - Fall back to FAT32 internal partitions for detecting ESP
  - Fix detection of ColorHug version on older firmware versions
  - Fix reading BCM57XX vendor and device ids from firmware
  - Fix replugging the MSP430 device
  - Fix sync method when called from threads without a context
  - Ignore an invalid vendor-id when adding releases for display
  - Improve synaptics-mst reliability when writing data
  - Install modules-load configs in the correct directory
  - Notify the service manager when idle-quitting
  - Only download the remote metadata as required
  - Remove HSI update and attestation suffixes
  - Restore recognizing GPG and PKCS7 signature types in libfwupd
  - Set the SMBIOS chassis type to portable if a DT battery exists
  - Switch from libsoup to libcurl for downloading data


author: Richard Hughes <richard@hughsie.com> 1.5.3-1
changelog:
  - New upstream release
  - Add a UEFI quirk for Star Labs Lite Mk III
  - Add the device firmare ID for serio class hardware
  - Allow setting the GMainContext when used for sync methods
  - Allow the client to send legacy PKCS7 and GPG signatures
  - Export the driver name from FuUdevDevice
  - Fix a possible critical warning due to missing retval
  - Fix the endianness for the CRC check in bcm57xx
  - Make sure the correct interface number is used for QMI
  - Mark more user-visible strings as translatable
  - Restrict loading component types of firmware
  - Validate ModemManager firmware update method combinations


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - New upstream release
  - Add Maple Ridge Thunderbolt firmware parsing support
  - Allow creating FMAP and Synaptics firmware using builder.xml
  - Allow using fwupdtool as non-root for firmware commands
  - Do not trust the Block.HintSystem boolean for ESP filtering
  - Fix a memory leak when parsing Synaptics firmware
  - Fix a possible crash when reading the Goodix MOC USB request
  - Fix possible crashes when parsing invalid firmware


author: Richard Hughes <richard@hughsie.com> 1.5.5-1
changelog:
  - New upstream release
  - Add a plugin to update PixArt RF devices
  - Add new hardware to use the elantp and rts54hid plugins
  - Detect the AMD TSME encryption state for HSI-4
  - Detect the AMI PK test key is not installed for HSI-1
  - Fix flashing a fingerprint reader that is in use
  - Fix several critical warnings when parsing invalid firmware
  - Fix updating DFU devices that use DNLOAD_BUSY
  - Ignore the legacy UEFI OVMF dummy GUID
  - Make libfwupd more thread safe to fix a crash in gnome-software
  - Never show unprintable chars from invalid firmware in the logs


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Michal Schorm <mschorm@redhat.com> - 26.4.8-2
changelog:
  - Switch from SCONS build tooling to CMAKE build tooling
  - Use upstream variants of Systemd service file and Systemd service file wrapper srcipt


author: Lukas Javorsky <ljavorsk@redhat.com> - 26.4.9-2
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 10.69-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.73-2
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 11.08-4
changelog:
  - Fix building with Clang-16.  (#2216918)
  - Re-enable building with LTO.  (#2166579)
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)
  - Annocheck: Improve handling of tool versions.
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)
  - Rename gcc plugin to gts-annobin.  (#2111977)
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.1.1-3
changelog:
  - update from releases/gcc-12 branch
    - PRs c++/49387, c++/102307, c++/102651, c++/104470, c++/105491, c++/105589,
  	c++/105623, c++/105652, c++/105655, c++/105725, c++/105734,
  	c++/105756, c++/105761, c++/105779, c++/105795, c++/105852,
  	c++/105871, c++/105885, c++/105908, c++/105925, c++/105931,
  	c++/105964, c++/106001, c/105635, d/105544, fortran/105230,
  	gcov-profile/105535, ipa/100413, ipa/105600, ipa/105639, ipa/105739,
  	libgomp/105745, libgomp/106045, libstdc++/104731, libstdc++/105284,
  	libstdc++/105671, libstdc++/105681, middle-end/105537,
  	middle-end/105604, middle-end/105711, middle-end/105951,
  	middle-end/105998, middle-end/106030, other/105527,
  	preprocessor/105732, rtl-optimization/105455, rtl-optimization/105559,
  	rtl-optimization/105577, sanitizer/105714, sanitizer/105729,
  	target/101891, target/104871, target/105162, target/105209,
  	target/105292, target/105472, target/105556, target/105599,
  	target/105854, target/105879, target/105953, target/105960,
  	target/105970, target/105981, target/106096, tree-optimization/103116,
  	tree-optimization/105431, tree-optimization/105458,
  	tree-optimization/105528, tree-optimization/105562,
  	tree-optimization/105618, tree-optimization/105726,
  	tree-optimization/105736, tree-optimization/105786,
  	tree-optimization/105940
  - enable tsan and lsan on s390x (#2101610)
  - fix up libtsan on s390x
  - fix nvptx build (PRs bootstrap/105551, target/105938)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.14-1
changelog:
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217814)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 2.40-1
changelog:
  - Rebase to 2.40.
  - Retire: binutils-package-metadata.patch
  - Retire: binutils-gas-dwarf-skip-empty-functions.patch
  - Retire: binutils-CVE-38128-dwarf-abbrev-parsing.patch
  - Retire: binutils-readelf-no-sections.patch
  - Retire: binutils-libiberty-configure-compile-warnings.patch
  - Retire: binutils-CVE-2022-4285.patch


author: Nick Clifton <nickc@redhat.com> - 2.40-2
changelog:
  - Spec file: Remove duplicate gprofng debug file entries.
  - Spec file: Fix testsuite failures for RiscV64.


author: Nick Clifton <nickc@redhat.com> - 2.40-7
changelog:
  - Spec File: Fix typo.  (#2186396)
  - BFD library: Fix illegal memory access when loading corrupt symbol version info.  (#2186579)


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Marek Polacek <polacek@redhat.com> 13.1.1-1
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - GCC 13.1 release
    - PRs c/107041, target/109566
  - remove libcc1


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/91618, c++/96604, c++/109506, c++/109640, c++/109642, c++/109666,
  	c++/109671, c++/109756, c/107682, c/109409, c/109412, debug/109676,
  	fortran/109622, libffi/109447, libgomp/108098, libstdc++/40380,
  	libstdc++/109694, libstdc++/109703, rtl-optimization/109585,
  	target/108758, target/109069, target/109535, target/109661,
  	target/109762, tree-optimization/109573, tree-optimization/109609,
  	tree-optimization/109724, tree-optimization/109778


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-3
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/80488, c++/83258, c++/97700, c++/103807, c++/109651, c++/109745,
  	c++/109761, c++/109774, c++/109868, c++/109884, fortran/109641,
  	fortran/109846, libstdc++/109816, libstdc++/109883, target/104338,
  	target/109697


author: Marek Polacek <polacek@redhat.com> 13.1.1-4
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - PRs bootstrap/110085, c++/109871, fortran/100607, libgcc/109670,
  	libgcc/109685, libstdc++/108178, libstdc++/109261, libstdc++/109758,
  	libstdc++/109822, libstdc++/109949, libstdc++/110139,
  	middle-end/110200, target/82931, target/92729, target/104327,
  	target/105753, target/106907, target/109547, target/109650,
  	target/109800, target/109939, target/109954, target/110036,
  	target/110044, target/110088, target/110108, target/110227,
  	tree-optimization/109505, tree-optimization/110165,
  	tree-optimization/110166


author: Marek Polacek <polacek@redhat.com> 13.2.1-4
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/110488, ada/111434, c++/99631, c++/111471, c++/111485, c++/111493,
  	c++/111512, fortran/68155, fortran/92586, fortran/111674,
  	libstdc++/108046, libstdc++/111050, libstdc++/111102,
  	libstdc++/111511, middle-end/111699, modula2/111510, target/111121,
  	target/111411, tree-optimization/110315, tree-optimization/110386,
  	tree-optimization/111331, tree-optimization/111519


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-13
changelog:
  - Backport fix for problems associated with GCC 13's self-move warning.
    (Jan-Benedict Glaw)
  - Tweak gdb-6.6-buildid-locate-rpm.patch so that running GDB's configure
    script will not error out due to GCC 13's warnings.


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Keith Seitz <keiths@redhat.com> - 10.2-5.el9
changelog:
  - Backport five patches to support glibc 2.34 with merged libpthread.
    (Simon Marchi and Kevin Buettner, RH BZ 1971095)


author: Keith Seitz <keiths@redhat.com> - 10.2-6.el9
changelog:
  - Backport "PowerPC remove 512 bytes region limit if 2nd DAWR is available"
    (Rogerio Alves, RHBZ 1870029)
  - Backport patches for "Support prefixed instructions in GDB"
    (Will Schmidt and Luis Machado, RHBZ 1870031)


author: Bruno Larsen <blarsen@redhat.com>
changelog:
  - Bakport "Fix assertion failure in copy_type"
    (Tom Tromey, RHBZ 2155439)
  - Bakport "[gdb/testsuite] Fix PR20630 regression test in gdb.base/printcmds.exp"
    (Tom de Vries)


author: Bruno Larsen <blarsen@redhat.com> - 10.2-11.el9
changelog:
  - Backport "libiberty: prevent buffer overflow when decoding user input"
    (Luís Ferreira, RHBZ2132600)


author: Guinevere Larsen <blarsen@redhat.com> - 10.2-12.el9
changelog:
  - Backport "libiberty: Fix infinite recursion in rust demangler."
    (Nick Clifton)
  - Backport Add a recursion limit to the demangle_const function in the Rust demangler.
    (Nick Clifton, RHEL-4234)
  - Backport Fix typo in recent code to add stack recursion limit to the Rust demangler.
    (Nick Clifton)


author: Keith Seitz - 10.2-13.el9
changelog:
  - Backport patches for "Fix undefined behaviour dereferencing empty string"
    (Magne Hov et al, RHEL-17631)


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Ray Strode <rstrode@redhat.com> - 40.1-7
changelog:
  - Don't use gdm-disable-wayland binary in udev rules.
    It doesn't exist anymore.
    Related: #1985099


author: Ray Strode <rstrode@redhat.com> - 40.1-9
changelog:
  - Synchronize permission and group ownership for log dir between
    rpm file manifest and daemon expectations.
    Resolves: #1999586


author: Ray Strode <rstrode@redhat.com> - 40.1-12
changelog:
  - More fixes from RHEL 8:
    - Fix DisallowTCP=false
    - Fix crash when both wayland and xorg are unavailable
    Related: #2056931


author: Ray Strode <rstrode@redhat.com> - 40.1-15
changelog:
  - Fix accountsservice user templates
    Resolves: #2062827
  - Properly force Xorg on matrox cards
    Related: #2074013
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2074014


author: Ray Strode <rstrode@redhat.com> - 40.1-23
changelog:
  - Make /var/log/gdm tmpfiles.d snippet match files manifest
    to fix installability test
    Related: RHEL-19410


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 2.12.0-1
changelog:
  - Update to latest version (#1874604)
  - Remove duplicate docs/man directory (#1852765)
  - Add an option to disable modifying the git filter config (#1768060)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Florian Müllner <fmuellner@redhat.com> - 40.7-4
changelog:
  - Adjust classification banner position in fullscreen
    Resolves: #2153524
  - Don't grab focus when clicking desktop grid
    Resolves: #2150001
  - Make desktop icons resilient to background reloads
    Resolves: #2139895
  - Allow disabling workspace switch gesture
    Resolves: #2154358


author: Kalev Lember <klember@redhat.com> - 40.0-1
changelog:
  - Update to 40.0
  - Require hicolor-icon-theme for icon directories rather than adwaita
  - Use https source URL
  - Validate appdata file
  - Filter private libraries
  - Don't install various development files


author: Felipe Borges <feborges@redhat.com> - 40.0-25
changelog:
  - Backport translations for Multitasking panel
  - Make Multitasking panel capable of handling Right-to-Left locales
    Resolves: #2105228


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.0-1
changelog:
  - Update to 3.40.0
  - Disable the Facebook, Flickr and Foursquare providers
  - Remove Photos support from the Google provider
  Resolves: #1913641


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Florian Müllner <fmuellner@redhat.com> - 40.10-4
changelog:
  - Fix struts on login screen
    Resolves: #2145185
  - Allow gnome portal to access introspection API
    Resolves: #2079194


author: Milan Crha <mcrha@redhat.com> - 40.3-2
changelog:
  - Resolves: #1983553
  - Add rpm-ostree patch to hide packages from the search results
  - Add patch to implement what-provides search in the Flatpak plugin


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-12
changelog:
  - fips: mark PBKDF2 with short key and output sizes non-approved
  - fips: only mark HMAC as approved in PBKDF2
  - fips: mark gnutls_key_generate with short key sizes non-approved
  - fips: fix checking on hash algorithm used in ECDSA
  - fips: preserve operation context around FIPS selftests API


author: Zoltan Fridrich <zfridric@redhat.com> - 3.7.6-13
changelog:
  - fips: make XTS key check failure not fatal (#2130971)
  - enable source archive verification again (#2127094)
  - clear server's session ticket indication at rehandshake (#2136072)
  - crypto-api: add block cipher API with automatic padding (#2084161)
  - fips: remove library path checking from FIPS integrity check (#2140908)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-14
changelog:
  - cipher: add restriction on CCM tag length under FIPS mode (#2137807)
  - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: David Benoit <dbenoit@redhat.com> 3.0.9-5
changelog:
  - Remove fedora-specific Go dependency automation macros
  - Remove dependency on golist
  - Temporarily remove incompatible template spec files
  - Update gobuild flags
  - Resolves: rhbz#1982298


author: David Benoit <dbenoit@redhat.com> 3.0.9-9
changelog:
  - Delete remove-fedora-dependency-automation.patch
  - Bundle golist in /usr/libexec
  - Related: rhbz#2043107


author: David Benoit <dbenoit@redhat.com> - 1.19.4-1
changelog:
  - Rebase to Go 1.19.4
  - Fix ppc64le linker issue
  - Remove defunct patches
  - Remove downstream generated FIPS mode patches
  - Add golang-fips/go as the source for FIPS mode patches
  - Resolves: rhbz#2144539


author: David Benoit <dbenoit@redhat.com> - 1.19.6-1
changelog:
  - Rebase to Go 1.19.6
  - Resolves: rhbz#2174429
  - Fix memory leak
  - Resolves: rhbz#2157602
  - Enable tests in check phase


author: Carl George <carl@redhat.com> - 1.20.4-2
changelog:
  - Add go-toolset subpackage to ensure golang and go-toolset are published together
  - Resolves: rhbz#2117248


author: Alejandro Sáez <asm@redhat.com> - 1.20.8-1
changelog:
  - Rebase to Go 1.20.8
  - Remove fix-memory-leak-evp-sign-verify.patch as it is already included in the source
  - Resolves: RHEL-2775


author: Archana Ravindar <aravinda@redhat.com> - 1.21.3-3
changelog:
  - Add missing strict fips runtime detection patch
  - Temporarily disable FIPS tests on aarch64 due to builder kernel bugs
  - Related: RHEL-12624


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Mike FABIAN <mfabian@redhat.com> - 20200402-1
changelog:
  - Update to upstream snapshot tarball (fixes U+1F9D1 U+200D U+1F3A8 "artist"
    and many other sequences)


author: Akira TAGOH <tagoh@redhat.com> - 20201206-1
changelog:
  - Updates to 20201206.
    Resolves: rhbz#1899847
  - Refactoring spec file.
  - Fix invalid metainfo files.
    Resolves: rhbz#1830709


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Andreas Gerstmayr <agerstmayr@redhat.com> 9.0.8-1
changelog:
  - update to 9.0.8 tagged upstream community sources, see CHANGELOG
  - do not list /usr/share/grafana/conf twice
  - drop makefile in favor of create_bundles.sh script
  - sync provides/obsoletes with CentOS versions
  - drop husky patch


author: Andreas Gerstmayr <agerstmayr@redhat.com> 9.0.9-1
changelog:
  - update to 9.0.9 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-35957 grafana: Escalation from admin to server admin when auth proxy is used (rhbz#2125530)


author: Stan Cox <scox@redhat.com> 9.0.9-2
changelog:
  - resolve CVE-2022-39229 grafana: Using email as a username can prevent other users from signing in
  - resolve CVE-2022-2880 CVE-2022-41715 grafana: various flaws


author: Stan Cox <scox@redhat.com> 9.2.10-3
changelog:
  - bumps exporter-toolkit to v0.7.3, sanitize-url@npm to 6.0.2, skip problematic s390 tests, License AGPL-3.0-only.


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-10
changelog:
  - Resolves RHEL-7505
  - Adds a selinux policy for grafana
  - Resolves RHEL-12666
  - fix CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-13
changelog:
  - Resolves RHEL-19296
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-3
changelog:
  - use HMAC-SHA-256 instead of SHA-1 to generate password reset tokens
  - update FIPS tests in check phase


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-1
changelog:
  - update to 7.5.15 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources
  - resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling
  - resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation
  - resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure
  - resolve CVE-2021-23648 sanitize-url: XSS
  - resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter
  - declare Node.js dependencies of subpackages
  - make vendor and webpack tarballs reproducible


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-3
changelog:
  - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode
  - resolve CVE-2022-28131 golang: encoding/xml: stack exhaustion in Decoder.Skip
  - resolve CVE-2022-30633 golang: encoding/xml: stack exhaustion in Unmarshal


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.0.0-1
changelog:
  - update to 3.0.0 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies and (optionally) node.js dependencies


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.0.0-4
changelog:
  - update to 5.0.0 tagged upstream community sources, see CHANGELOG
  - install plugin in /usr/share and create symlink from /var using
    systemd-tmpfiles to work on rpm-ostree based distributions
  - revert the breaking change (change of internal plugin IDs) of upstream v5.0.0,
    i.e. there are no breaking changes when performing this upgrade
  - enable Go modules in build process
  - make vendor and webpack tarballs reproducible
  - drop makefile in favor of create_bundles.sh script


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.1.1-1
changelog:
  - update to 5.1.1 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.44.0-19
changelog:
  - Conditionalized guile support
    Resolves: rhbz#1953974
  - Updated RHEL macros
    Resolves: rhbz#1957653


author: Jose Noguera <jnoguera@redhat.com> - 0.12.0-1
changelog:
  - Update to 0.12.0
  - Add ability to configure maximum number of boot attempts via env var and config file.
  - Add How does it work section to README.
  - Add CI via GitHub Actions and unit testing with BATS.
  - Add update platforms DNS resolutiona and connection checker as health checks out of the box


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.14.0-1
changelog:
  - Release 0.14.0 (Peter Robinson)
  - Updated testing documentation (Jose Noguera)
  - README updated with TOC and improved explanations (Jose Noguera)
  - Add watchdog-triggered boot check #2 (Jose Noguera)
  - Update specfile and README to reflect changes in subpackage layout. (Jose Noguera)
  - Ensure all required health checks are run #52 (Jose Noguera)


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow
  - Patch CVE-2023-44446: MXF demuxer use-after-free
  - Resolves: RHEL-17030, RHEL-17039


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-4
changelog:
  - CVE-2023-40474: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40475: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40476: Integer overflow in H.265 video parser
  - ZDI-CAN-22300: buffer overflow vulnerability
  - Resolves: RHEL-19501, RHEL-19505, RHEL-19506, RHEL-20201


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-5
changelog:
  - Handle both compressed and uncompressed man pages
  - Fix build with small patch
  - Resolves: rhbz#2005247


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-6
changelog:
  - Fixes for CVE-2022-1920, CVE-2022-1921, CVE-2022-1922, CVE-2022-1923,
    CVE-2022-1924, CVE-2022-1925, CVE-2022-2122
    Resolves: rhbz#2131034, rhbz#2131039, rhbz#2131045, rhbz#2131049,
              rhbz#2131054, rhbz#2131060, rhbz#2131064


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - CVE-2023-37327: integer overflow leading to heap overwrite in FLAC
    image tag handling
  - Resolves: RHEL-19471


author: Kalev Lember <klember@redhat.com> - 3.24.25-2
changelog:
  - Backport upstream patches to fix regressions in Compose file parsing
  - Backport upstream patch to further tweak scrollbar transitions and size


author: Daniel P. Berrangé <berrange@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 release
  - Drop outdated conditionals
  - Drop outdated ldconfig script
  - Use versioned obsoletes tags
  - Resolves: rhbz#1949474


author: Kalev Lember <klember@redhat.com> - 2.24.33-3
changelog:
  - Drop imsettings dependency on Fedora as well
  - Recommend libcanberra-gtk2 for sound theme events in gtk2 apps


author: Kalev Lember <klember@redhat.com> - 4.1.2-1
changelog:
  - Update to 4.1.2
  - Disable gtk-doc support as we don't have gi-docgen in Fedora yet
  - Remove old obsoletes


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-6
changelog:
  - Clean up NetworkManager connection files
  - Add the copy-patches.sh script from virt-v2v
    resolves: rhbz#1980922


author: Richard W.M. Jones <rjones@redhat.com> - 1.48.2-5
changelog:
  - Rebase to guestfs-tools 1.48.2
    resolves: rhbz#2059286
  - Default to --selinux-relabel in various tools
    resolves: rhbz#2075718, rhbz#2089748
  - Add lvm system.devices cleanup operation to virt-sysprep
    resolves: rhbz#2072493
  - Refactor virt-customize --install, --update options in common submodule
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2102721
  - Fix virt-sysprep and LUKS-on-LVM guests
    resolves: rhbz#2106286


author: Richard W.M. Jones <rjones@redhat.com> - 1.48.2-8
changelog:
  - Support Rocky Linux in virt-customize
    resolves: rhbz#2133443
  - Disable OpenSUSE repo in virt-builder
    resolves: rhbz#2145160


author: Richard W.M. Jones <rjones@redhat.com> - 1.50.1-1
changelog:
  - Rebase to guestfs-tools 1.50.1
    resolves: rhbz#2168626
  - Fix virt-drivers inspection of RHEL 9.2 guests
    resolves: rhbz#2184963


author: Laszlo Ersek <lersek@redhat.com> - 1.50.1-3
changelog:
  - let virt-inspector recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable "make check"; we now use "-cpu max" (libguestfs 30f74f38bd6e)
    resolves: rhbz#2209280


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-1
changelog:
  - Rebase to guestfs-tools 1.51.6
  - Implement --key all:...
    resolves: RHEL-19030
  - Fix crash because of off-by-one error
    resolves: RHEL-19062


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-2
changelog:
  - Rebase to guestfs-tools 1.51.6
  - Implement --key all:...
    resolves: RHEL-19030
  - Fix crash because of off-by-one error
    resolves: RHEL-19062
  - Fix virt-customize --chown invalid format
    resolves: RHEL-21899


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.1
  - Related: Jira:RHEL-2112


author: Ryan O'Hara <rohara@redhat.com> - 2.4.7-1
changelog:
  - Update to 2.4.7 (#1966688)
  - Fix domain parts in :scheme and :path fields (CVE-2021-39240, #1998196)
  - Fix spaces in the :method field (CVE-2021-39241, #1998198)
  - Fix mismatch between :authority and Host fields (CVE-2021-39242, #1998200)
  - Fix request smuggling attack or response splitting (CVE-2021-40346, #2000621)


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Davide Caratti <dcaratti@redhat.com> - 2.9-15
changelog:
  - Disable 'badfuncs' in rpminspect tests
  - Build with -fPIE, and enable verbose build log
  - enable CONFIG_SUITEB192


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-1
changelog:
  - new version 2.4.53
  - Resolves: #2079939 - httpd rebase to 2.4.53
  - Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
    with core


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-3
changelog:
  - Resolves: #2065677 - httpd minimisation for ubi-micro
  - minimize httpd dependencies (new httpd-core package)
  - mod_systemd and mod_brotli are now packaged in the main httpd package


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-7
changelog:
  - Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
    smuggling
  - Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in 
    ap_strcmp_match()
  - Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
    by hop-by-hop mechanism
  - Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
  - Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
  - Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
  - Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
    with websockets


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-11
changelog:
  - Resolves: #2162500 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write
    of zero byte
  - Resolves: #2162486 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
  - Resolves: #2162510 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request
    smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-1
changelog:
  - Resolves: #2184403 - rebase httpd to 2.4.57
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-2
changelog:
  - Resolves: #2186645 - Fix issue found by covscan in httpd package
  - Resolves: #2173295 - Include Apache httpd module mod_authnz_fcgi


author: Joe Orton <jorton@redhat.com> - 2.4.57-6
changelog:
  - Resolves: RHEL-5071 - mod_dav_fs: add DavLockDBType
  - mod_dav_fs: add global mutex around lockdb interaction


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.36.20190303git
changelog:
  - Synchronize RHEL 8 changes [rhbz#1957651]
  - Resolves: rhbz#1957651
    ([Hyper-V][RHEL-9] Update build to rhel format and syncup RHEL 8 content for hyperv-daemons.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.38.20190303git
changelog:
  - hpvd-Enable-build-on-aarch64.patch [bz#2020148]
  - Resolves: bz#2020148
    ([Hyper-V][RHEL9.0][ARM] No hyperv-daemons package built for aarch64 platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.39.20190303git
changelog:
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [bz#2026371]
  - hpvd-Use-filename-for-connection-profile.patch [bz#2026371]
  - Resolves: bz#2026371
    ([RHEL9][Hyper-V]The /usr/libexec/hypervkvpd/hv_set_ifconfig need update for RHEL9 since the ifdown/ifup was not supported on RHEL9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.40.20190303git
changelog:
  - hpvd-hypervkvpd.service-ordering-fixes.patch [bz#2103188]
  - Resolves: bz#2103188
    ([Hyper-V][RHEL-9] hypervkvpd.service service ordering)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.41.20190303git
changelog:
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [bz#2122115]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [bz#2139457]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [bz#2139457]
  - Resolves: bz#2122115
    ([Hyper-V][RHEL-9] Cannot set gateway properly when set static IPADDR0,NETMASK0,GATEWAY in ifcfg-eth0)
  - Resolves: bz#2139457
    ([Hyper-V][RHEL9.2] Update Hyper-V-Daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.42.20190303git
changelog:
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931]
  - Resolves: bz#2218931
    ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.")


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.24-5
changelog:
  - Fix covscan reviews. Related: rhbz#1963071

  - Implement ibus_im_context_set_surrounding_with_selection()


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.11-10
changelog:
  - Replace kasumi with kausmi-unicode
  - Delete to require intltool
  - Delete to call gettext.bind_textdomain_codeset()


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.2-1
changelog:
  - Rebase to JSS 5.0.2
  - Bug 2029838 - SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.3-1
changelog:
  - Rebase to JSS 5.0.3
  - Bug 2046023 - CVE-2021-4213 jss: memory leak in TLS connection leads to OOM [rhel-9.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.2.1-1
changelog:
  - Rebase to JSS 5.2.1
  - Bug 2100807 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.3.0-0.3.beta2
changelog:
  - Rebase to JSS 5.3.0-beta2
  - Bug 2017098 - pki pkcs12-cert-add command failing with 'Unable to validate PKCS #12 file: Digests do not match' exception


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.3-1
changelog:
  - Bug #2033109 Invalid certificates with creation of subCA (pkispawn single step)[rhel-9.0.0]
  - Bug #2013141 kra-key-retrieve failed to accept xml input format to generate .p12 key through cli
  - Bug #2029838 SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.4.beta3
changelog:
  - Rebase to PKI 11.2.0-beta3
  - Bug #2062808 Drop SHA-1 use from authentication challenges [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-1
changelog:
  - Rebase to PKI 11.2.0
  - Bug #2084639 ipa cert-request ssl error
  - Bug #2099312 SKI field is not reflected back in generated CSR
  - Bug #2095197 PKI cert-fix operation failing


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.1-1
changelog:
  - Rebase to PKI 11.2.1
  - Bug #2107336 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-0.2.beta1
changelog:
  - Rebase to PKI 11.3.0-beta1
  - Bug #1849834 - [RFE] Provide EST Responder (RFC 7030)
  - Bug #1883477 - [RFE] Automatic expired certificate purging
  - Bug #2091999 - Error displayed should be user friendly in case RSNv3 certificate serial number collision
  - Bug #2106452 - softhsm2: Unable to create cert: Private key not found
  - Bug #2106459 - CVE-2022-2393 pki-core: Improper authentication/authorization with caServerKeygen_DirUserCert profile


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-1
changelog:
  - Rebase to PKI 11.3.0
  - Bug #2091993 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug #2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Sohan Kunkerkar <skunkerk@redhat.com> - 2.12.0-1
changelog:
  - Suppress hardcoded library path warning
  - Fix go-mods-to-bundled-provides script to parse correct rpm version
  - Import specfile from Fedora


author: Sohan Kunkerkar <skunkerk@redhat.com> - 2.13.0-2
changelog:
  - Rename -validate-nonlinux subpackage to -validate-redistributable
  - Add static Linux binaries to -redistributable
  - Fix macro invocation in comment
  - Avoid kernel lockdown on VMware when running with secure boot


author: Benjamin Gilbert <bgilbert@redhat.com> - 2.14.0-1
changelog:
  - New release
  - Add ignition-apply symlink
  - Add ignition-rmcfg symlink and ignition-delete-config.service


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-1
changelog:
  - Resolves: rhbz#2141315 [Rebase] Rebase ipa to latest 4.10.x release for RHEL 9.2
  - Resolves: rhbz#2094673 ipa-client-install should just use system wide CA store and do not specify TLS_CACERT in ldap.conf
  - Resolves: rhbz#2117167 After leapp upgrade on ipa-client ipa-server package installation failed. (`REQ_FULL_WITH_MEMBERS` returns object from wrong domain)
  - Resolves: rhbz#2127833 Password Policy Grace login limit allows invalid maximum value
  - Resolves: rhbz#2143224 [RFE] add certificate support to ipa-client instead of one time password
  - Resolves: rhbz#2144736 vault interoperability with older RHEL systems is broken
  - Resolves: rhbz#2148258 ipa-client-install does not maintain server affinity during installation
  - Resolves: rhbz#2148379 Add warning for empty targetattr when creating ACI with RBAC
  - Resolves: rhbz#2148380 OTP token sync always returns OK even with random numbers
  - Resolves: rhbz#2148381 Deprecated feature idnssoaserial in IdM appears when creating reverse dns zones
  - Resolves: rhbz#2148382 Introduction of URI records for kerberos breaks location functionality


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-2
changelog:
  - Resolves: rhbz#2148887 MemberManager with groups fails
  - Resolves: rhbz#2150335 idm:client is missing dependency on krb5-pkinit


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-4
changelog:
  - Resolves: rhbz#2161284 'ERROR Could not remove /tmp/tmpbkw6hawo.ipabkp' can be seen prior to 'ipa-client-install' command was successful
  - Resolves: rhbz#2164403 ipa-trust-add with --range-type=ipa-ad-trust-posix fails while creating an ID range
  - Resolves: rhbz#2162677 RFE: Implement support for PKI certificate and request pruning
  - Resolves: rhbz#2167312 - Backport latest test fixes in python3-ipatests


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-5
changelog:
  - Resolves: rhbz#2162656 Passwordless (GSSAPI) SSH not working for subdomain
  - Resolves: rhbz#2166326 Removing the last DNS type for ipa-ca does not work
  - Resolves: rhbz#2167473 RFE - Add a warning note about possible performance impact of the Auto Member rebuild task
  - Resolves: rhbz#2168244 requestsearchtimelimit=0 doesn't seems to be work with ipa-acme-manage pruning command


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.2-1
changelog:
  - Resolves: rhbz#2196426 [Rebase] Rebase ipa to latest 4.10.x release for RHEL 9.3
  - Resolves: rhbz#2192969 Better handling of the command line and web UI cert search and/or list features
  - Resolves: rhbz#2192625 Better catch of the IPA web UI event "IPA Error 4301:CertificateOperationError", and IPA httpd error CertificateOperationError
  - Resolves: rhbz#2188567 IPA client Kerberos configuration incompatible with java
  - Resolves: rhbz#2182683 Tolerate absence of PAC ticket signature depending of domain and servers capabilities [rhel-9]
  - Resolves: rhbz#2180914 Sequence processing failures for group_add using server context
  - Resolves: rhbz#2165880 Add RBCD support to IPA
  - Resolves: rhbz#2160399 get_ranges - [file ipa_sidgen_common.c, line 276]: Failed to convert LDAP entry to range struct


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.2-2
changelog:
  - Resolves: rhbz#2192969 Better handling of the command line and web UI cert search and/or list features
  - Resolves: rhbz#2214933 Uninstalling of the IPA server is encountering a failure during the unconfiguration of the CA (Unconfiguring CA)
  - Resolves: rhbz#2216114 After updating the RHEL from 8.7 to 8.8, IPA services fails to start
  - Resolves: rhbz#2216549 Upgrade to 4.9.10-6.0.1 fails: attributes are managed by topology plugin
  - Resolves: rhbz#2216611 Backport latest test fixes in python3-ipatests
  - Resolves: rhbz#2216872 User authentication failing on OTP validation using multiple tokens, succeeds with password only


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.2-3
changelog:
  - Resolves: rhbz#2229712 Delete operation protection for admin user
  - Resolves: rhbz#2227831 Interrupt request processing in ipadb_fill_info3() if connection to 389ds is lost
  - Resolves: rhbz#2227784 libipa_otp_lasttoken plugin memory leak
  - Resolves: rhbz#2224570 Improved error messages are needed when attempting to add a non-existing idp to a user
  - Resolves: rhbz#2230251 Backport latest test fixes to python3-ipatests


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.2-4
changelog:
  - Resolves: rhbz#2231847 RHEL 8.8 & 9.2 fails to create AD trust with STIG applied
  - Resolves: rhbz#2232056 Include latest test fixes in python3-ipatests


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-2
changelog:
  - Resolves: RHEL-14292 Backport latest test fixes in python3-ipatests
  - Resolves: RHEL-15443 Server install: failure to install with externally signed CA because of timezone issue
  - Resolves: RHEL-15444 Minimum length parameter in pwpolicy cannot be removed with empty string
  - Resolves: RHEL-14842 Upstream xmlrpc tests are failing in RHEL9.4


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-4
changelog:
  - Resolves: RHEL-12589 ipa: Invalid CSRF protection
  - Resolves: RHEL-19748 ipa hbac-test did not report that it hit an arbitrary search limit
  - Resolves: RHEL-21059 'DogtagCertsConfigCheck' fails, displaying the error message 'Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca'
  - Resolves: RHEL-21804 ipa client 4.10.2 - Failed to obtain host TGT
  - Resolves: RHEL-21809 CA less servers are failing to be added in topology segment for domain suffix
  - Resolves: RHEL-21810 ipa-client-install --automount-location does not work
  - Resolves: RHEL-21811 Handle change in behavior of pki-server ca-config-show in pki 11.5.0
  - Resolves: RHEL-21812 Backport latest test fixes in ipa
  - Resolves: RHEL-21813 krb5kdc fails to start when pkinit and otp auth type is enabled in ipa
  - Resolves: RHEL-21815 IPA 389ds plugins need to have better logging and tracing
  - Resolves: RHEL-21937 Make sure a default NetBIOS name is set if not passed in by ADTrust instance constructor


author: Rob Crittenden <rcritten@redhat.com> - 0.9-7
changelog:
  - debug='True' in ipahealthcheck.conf doesn't enable debug output (#2079861)
  - Validate value formats in the ipahealthcheck.conf file (#2079739)
  - Validate output_type options from ipahealthcheck.conf file (#2079698)


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Rob Crittenden <rcritten@redhat.com> - 0.8-7.1
changelog:
  - Switch from tox to pytest as the test runner. tox is being deprecated
    in some distros. (#1942157)


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> - 1.8.7-18
changelog:
  - Make iptables-nft-services require iptables-services to avoid confusion
  - Add deprecation notice to iptables-extensions man page as well


author: Phil Sutter <psutter@redhat.com> - 1.8.7-19
changelog:
  - Build iptables-services on C9S only
  - Use systemd_ordering in nft-services, too
  - Drop compat package, nft-services serves well for that purpose
  - Make legacy unconditionally provide iptables, it's not built on RHEL


author: Phil Sutter <psutter@redhat.com> - 1.8.7-25
changelog:
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options
  - nft: Use xtables_malloc() in mnl_err_list_node_add()


author: Phil Sutter <psutter@redhat.com> - 1.8.7-29
changelog:
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2.
  - Drop custom maven-compiler-plugin overrides in favor of upstream settings.


author: Marian Koncek <mkoncek@redhat.com> - 2.3.3-4
changelog:
  - Avoid possible NullPointerException
  - Resolves: rhbz#1993889
  - Load native library from the correct location
  - Resolves: rhbz#1994935


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:1.8.0.332.b09-2
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102435


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-3
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Perform configuration changes (e.g. nss.cfg, nss.fips.cfg, tzdb.dat) in installjdk
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2099801
  - Resolves: rhbz#2100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u342-b06 (EA)
  - Update release notes for shenandoah-8u342-b06.
  - Switch to EA mode for 8u342 pre-release builds.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Remove redundant "REPOS" variable from tarball script
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Resolves: rhbz#2083322


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-2
changelog:
  - Update to shenandoah-jdk8u342-b07 (GA)
  - Update release notes for 8u342-b07.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2106509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-2
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112405


author: Stephan Bergmann <sbergman@redhat.com> - 1:1.8.0.345.b01-3
changelog:
  - Disable copy-jdk-configs for Flatpak builds
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102727


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-4
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121273


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Resolves: rhbz#2077006


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u352-b07 (EA)
  - Update release notes for shenandoah-8u352-b07.
  - Switch to EA mode for 8u352 pre-release builds.
  - Rebase FIPS patch against 8u352-b07
  - Resolves: rhbz#2130623


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-3
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
  - Related: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-1
changelog:
  - Update to jdk-11.0.15.0+10
  - Update release notes to 11.0.15.0+10
  - Switch to GA mode for release
  - Resolves: rhbz#2073595


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.15.0.10-3
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102434


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-4
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2099839
  - Resolves: rhbz#2100676


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.16+7
  - Update release notes to 11.0.16+7
  - Switch to EA mode for 11.0.16 pre-release builds.
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-2
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106517


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-2
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119528


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-3
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121275


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.2.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130619


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.3.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Drop local copy of JDK-8275535 which is finally upstream
  - Related: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.3.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-3
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.7-0.1.ea
changelog:
  - Update to jdk-17.0.3.0+7
  - Update release notes to 17.0.3.0+7
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Include a test in the RPM to check the build has the correct vendor information.
  - Resolves: rhbz#2084218


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.7-0.2.ea
changelog:
  - Revert the following changes until copy-java-configs has adapted to relative symlinks:
  - * Move cacerts replacement to install section and retain original of this and tzdb.dat
  - * Run tests on the installed image, rather than the build image
  - * Introduce variables to refer to the static library installation directories
  - * Use relative symlinks so they work within the image
  - * Run debug symbols check during build stage, before the install strips them
  - The move of turning on system security properties is retained so we don't ship with them off
  - Related: rhbz#2084218


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.8-3
changelog:
  - Update to jdk-17.0.4.0+8
  - Update release notes to 17.0.4.0+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106524


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-2
changelog:
  - Update to jdk-17.0.4.1+1
  - Update release notes to 17.0.4.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119532


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-3
changelog:
  - Update FIPS support to bring in latest changes
  - * RH2104724: Avoid import/export of DH private keys
  - * RH2092507: P11Key.getEncoded does not work for DH keys in FIPS mode
  - * Build the systemconf library on all platforms
  - * RH2048582: Support PKCS#12 keystores
  - * RH2020290: Support TLS 1.3 in FIPS mode
  - Resolves: rhbz#2104725
  - Resolves: rhbz#2117758
  - Resolves: rhbz#2115164
  - Resolves: rhbz#2029665


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.4.1.1-4
changelog:
  - Fix flatpak builds (catering for their uncompressed manual pages)
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102726


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-5
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121268


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.5+1
  - Update release notes to 17.0.5+1
  - Switch to EA mode for 17.0.5 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130622


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-2
changelog:
  - Update to jdk-17.0.5+8 (GA)
  - Update release notes to 17.0.5+8 (GA)
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-5
changelog:
  - Update FIPS support to bring in latest changes
  - * Add nss.fips.cfg support to OpenJDK tree
  - * RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode
  - * Remove forgotten dead code from RH2020290 and RH2104724
  - Drop local nss.fips.cfg.in handling now this is handled in the patched OpenJDK build
  - Resolves: rhbz#2118493


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.1-0.3.ea
changelog:
  - Update to jdk-17.0.6+1
  - Update release notes to 17.0.6+1
  - Switch to EA mode for 17.0.6 pre-release builds.
  - Re-enable EA upstream status check now it is being actively maintained.
  - Drop JDK-8294357 (tzdata2022d) & JDK-8295173 (tzdata2022e) local patches which are now upstream
  - Drop JDK-8275535 local patch now this has been accepted and backported upstream
  - Bump tzdata requirement to 2022e now the package is available in RHEL
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.3.ea
changelog:
  - Update to jdk-17.0.6+9
  - Update release notes to 17.0.6+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150198


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Update FIPS support to bring in latest changes
  - * OJ1357: Fix issue on FIPS with a SecurityManager in place
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Update to jdk-17.0.6.0+10
  - Update release notes to 17.0.6.0+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Orion Poplawski <orion@nwra.com> - 0.19-3
changelog:
  - Use autoreconf -f to remove rpath
  - Use --disable-static to disable static builds
  - Use current make macros


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Kairui Song <kasong@redhat.com> - 006-4.20210721gitd046d22
changelog:
  - Update to latest git snapshot (20210721). Resolves: bz1937035, bz1959203
  - Apply RHEL only patch to enable kdump by default


author: Kairui Song <kasong@redhat.com> - 006-5.20210805gitce26db0
changelog:
  - Update to latest git snapshot, automated installation won't be blocked. Resolves: bz1986969
  - Update RHEL only patch, fix inst.kdump_addon=0 not working issue. Resolves: bz1986942


author: Kairui Song <kasong@redhat.com> - 006-7.20210812git5b74c1d
changelog:
  - Update to latest git snapshot, fix kdump spoke is incomplete after luks device is deleted. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-8.20210818git400359b
changelog:
  - Update to latest git snapshot, fix installation failure when reuse old partition. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-9.20210819git2026d20
changelog:
  - Update to latest git snapshot, fix encryption warning still present after disabling encryption. Resolves: bz1937035


author: Scott Weaver <scweaver@redhat.com> [5.14.0-382.el9]
changelog:
  - fbdev: Use /* */ comment in initializer macro (Mika Penttilä) [RHEL-1349]
  - kunit: Fix obsolete name in documentation headers (func->action) (Mika Penttilä) [RHEL-1349]
  - pagevec: rename fbatch_count() (Mika Penttilä) [RHEL-1349]
  - scatterlist: add sg_set_folio() (Mika Penttilä) [RHEL-1349]
  - mm: add __folio_batch_release() (Mika Penttilä) [RHEL-1349]
  - mm: fix a few rare cases of using swapin error pte marker (Mika Penttilä) [RHEL-1349]
  - mm/uffd: fix pte marker when fork() without fork event (Mika Penttilä) [RHEL-1349]
  - shmem: fix W=1 build warnings with CONFIG_SHMEM=n (Mika Penttilä) [RHEL-1349]
  - shmem: add shmem_read_folio() and shmem_read_folio_gfp() (Mika Penttilä) [RHEL-1349]
  - mm: fix khugepaged with shmem_enabled=advise (Mika Penttilä) [RHEL-1349]
  - shmem: convert shmem_write_end() to use a folio (Mika Penttilä) [RHEL-1349]
  - swap: avoid holding swap reference in swap_cache_get_folio (Mika Penttilä) [RHEL-1349]
  - mm/memfd: add F_SEAL_EXEC (Mika Penttilä) [RHEL-1349]
  - mm: fix vma->anon_name memory leak for anonymous shmem VMAs (Mika Penttilä) [RHEL-1349]
  - mm: anonymous shared memory naming (Mika Penttilä) [RHEL-1349]
  - mm: use pte markers for swap errors (Mika Penttilä) [RHEL-1349]
  - mm/shmem: remove unneeded assignments in shmem_get_folio_gfp() (Mika Penttilä) [RHEL-1349]
  - kunit: Add kunit_add_action() to defer a call until test exit (Mika Penttilä) [RHEL-1349]
  - debugfs: fix error when writing negative value to atomic_t debugfs file (Mika Penttilä) [RHEL-1349]
  - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (Mika Penttilä) [RHEL-1349]
  - fbdev: Add initializer macros for struct fb_ops (Mika Penttilä) [RHEL-1349]
  - fbdev: Move I/O read and write code into helper functions (Mika Penttilä) [RHEL-1349]
  - fbdev: Return number of bytes read or written (Mika Penttilä) [RHEL-1349]
  - of: Rename of_modalias_node() (Mika Penttilä) [RHEL-1349]
  - of: move from strlcpy with unused retval to strscpy (Mika Penttilä) [RHEL-1349]
  - fbdev: Handle video= parameter in video/cmdline.c (Mika Penttilä) [RHEL-1349]
  - fbdev: Move option-string lookup into helper (Mika Penttilä) [RHEL-1349]
  - fbdev: Unexport fb_mode_option (Mika Penttilä) [RHEL-1349]
  - fbdev: Read video= option with fb_get_option() in modedb (Mika Penttilä) [RHEL-1349]
  - fbdev: Support NULL for name in option-string lookup (Mika Penttilä) [RHEL-1349]
  - fbdev: Transfer video= option strings to caller; clarify ownership (Mika Penttilä) [RHEL-1349]
  - fbdev: Fix contact info in fb_cmdline.c (Mika Penttilä) [RHEL-1349]
  - nfsd: lock_rename() needs both directories to live on the same fs (Jeffrey Layton) [RHEL-14840]
  - iommu: Optimise PCI SAC address trick (Jerry Snitselaar) [RHEL-11705]
  - ipv4: Set offload_failed flag in fibmatch results (Guillaume Nault) [RHEL-14295]
  - net: ipv4: fix one memleak in __inet_del_ifa() (Guillaume Nault) [RHEL-14295]
  - nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID (Guillaume Nault) [RHEL-14295]
  - nexthop: Make nexthop bucket dump more efficient (Guillaume Nault) [RHEL-14295]
  - nexthop: Fix infinite nexthop dump when using maximum nexthop ID (Guillaume Nault) [RHEL-14295]
  - Revert "tcp: avoid the lookup process failing to get sk in ehash table" (Guillaume Nault) [RHEL-14295]
  - pptp: Fix fib lookup calls. (Guillaume Nault) [RHEL-14296]
  - x86/sgx: mark as supported (Vladis Dronov) [2041883]
  - x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race (Vladis Dronov) [2041883]
  - x86/sgx: Break up long non-preemptible delays in sgx_vepc_release() (Vladis Dronov) [2041883]
  - Documentation: Fix typos (only the SGX part) (Vladis Dronov) [2041883]
  - x86/sgx: Avoid using iterator after loop in sgx_mmu_notifier_release() (Vladis Dronov) [2041883]
  - selftests/sgx: Add "test_encl.elf" to TEST_FILES (Vladis Dronov) [2041883]
  - convert sgx_set_attribute() to fdget()/fdput() (Vladis Dronov) [2041883]
  - x86/sgx: use VM_ACCESS_FLAGS (Vladis Dronov) [2041883]
  - x86/sgx: Replace kmap/kunmap_atomic() calls (Vladis Dronov) [2041883]
  - x86/sgx: Reduce delay and interference of enclave release (Vladis Dronov) [2041883]
  - x86/vdso: Conditionally export __vdso_sgx_enter_enclave() (Vladis Dronov) [2041883]
  - x86/sgx: Add overflow check in sgx_validate_offset_length() (Vladis Dronov) [2041883]
  - vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE (Eric Auger) [RHEL-7126]
  - scsi: megaraid_sas: Driver version update to 07.727.03.00-rc1 (Tomas Henzl) [RHEL-8245]
  - scsi: megaraid_sas: Log message when controller reset is requested but not issued (Tomas Henzl) [RHEL-8245]
  - scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers (Tomas Henzl) [RHEL-8245]
  - scsi: megaraid_sas: Fix deadlock on firmware crashdump (Tomas Henzl) [RHEL-8245]
  - scsi: megaraid_sas: Use pci_dev_id() to simplify the code (Tomas Henzl) [RHEL-8245]
  - scsi: Add HAS_IOPORT dependencies (Tomas Henzl) [RHEL-8245]
  - scsi: megaraid_sas: Convert union megasas_sgl to flex-arrays (Tomas Henzl) [RHEL-8245]
  - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (Paolo Bonzini) [RHEL-10059]
  - x86/sev: Do not handle #VC for DR7 read/write (Paolo Bonzini) [RHEL-10059]
  - x86/sev: Use the GHCB protocol when available for SNP CPUID requests (Paolo Bonzini) [RHEL-10059]
  - x86/sev: Check for user-space IOIO pointing to kernel space (Paolo Bonzini) [RHEL-10059]
  - x86/sev: Check IOBM for IOIO exceptions from user-space (Paolo Bonzini) [RHEL-10059]
  - x86/sev: Disable MMIO emulation from user mode (Paolo Bonzini) [RHEL-10059]
  - x86/mm: Fix enc_status_change_finish_noop() (Paolo Bonzini) [RHEL-10059]
  - x86/tdx: Fix race between set_memory_encrypted() and load_unaligned_zeropad() (Paolo Bonzini) [RHEL-10059]
  - x86/mm: Allow guest.enc_status_change_prepare() to fail (Paolo Bonzini) [RHEL-10059]
  - x86/coco: Mark cc_platform_has() and descendants noinstr (Paolo Bonzini) [RHEL-10059]
  - virt: sevguest: Add CONFIG_CRYPTO dependency (Paolo Bonzini) [RHEL-10059]
  - mm/page_alloc: make deferred page init free pages in MAX_ORDER blocks (Paolo Bonzini) [RHEL-10059]
  - x86/sev: Change npages to unsigned long in snp_accept_memory() (Paolo Bonzini) [RHEL-10059]
  - efi/unaccepted: Fix soft lockups caused by parallel memory acceptance (Paolo Bonzini) [RHEL-10059]
  - efi/unaccepted: Make sure unaccepted table is mapped (Paolo Bonzini) [RHEL-10059]
  - x86/efi: Safely enable unaccepted memory in UEFI (Paolo Bonzini) [RHEL-10059]
  - x86/sev: Add SNP-specific unaccepted memory support (Paolo Bonzini) [RHEL-10059]
  - x86/sev: Use large PSC requests if applicable (Paolo Bonzini) [RHEL-10059]
  - x86/sev: Allow for use of the early boot GHCB for PSC requests (Paolo Bonzini) [RHEL-10059]
  - x86/sev: Put PSC struct on the stack in prep for unaccepted memory support (Paolo Bonzini) [RHEL-10059]
  - x86/sev: Fix calculation of end address based on number of pages (Paolo Bonzini) [RHEL-10059]
  - x86/tdx: Wrap exit reason with hcall_func() (Paolo Bonzini) [RHEL-10059]
  - x86/tdx: Add unaccepted memory support (Paolo Bonzini) [RHEL-10059]
  - x86/tdx: Refactor try_accept_one() (Paolo Bonzini) [RHEL-10059]
  - efi/unaccepted: Avoid load_unaligned_zeropad() stepping into unaccepted memory (Paolo Bonzini) [RHEL-10059]
  - efi: Add unaccepted memory support (Paolo Bonzini) [RHEL-10059]
  - x86/boot/compressed: Handle unaccepted memory (Paolo Bonzini) [RHEL-10059]
  - efi/unaccepted: Use ACPI reclaim memory for unaccepted memory table (Paolo Bonzini) [RHEL-10059]
  - efi/libstub: Implement support for unaccepted memory (Paolo Bonzini) [RHEL-10059]
  - efi/x86: Get full memory map in allocate_e820() (Paolo Bonzini) [RHEL-10059]
  - memblock tests: Fix compilation errors. (Paolo Bonzini) [RHEL-10059]
  - mm: Add support for unaccepted memory (Paolo Bonzini) [RHEL-10059]
  - x86/boot: Centralize __pa()/__va() definitions (Paolo Bonzini) [RHEL-10059]
  - x86/boot: Add an efi.h header for the decompressor (Paolo Bonzini) [RHEL-10059]
  - x86/tdx: Make _tdx_hypercall() and __tdx_module_call() available in boot stub (Paolo Bonzini) [RHEL-10059]
  - x86/tdx: Drop flags from __tdx_hypercall() (Paolo Bonzini) [RHEL-10059]
  - x86/tdx: Disable NOTIFY_ENABLES (Paolo Bonzini) [RHEL-10059]
  - x86/tdx: Relax SEPT_VE_DISABLE check for debug TD (Paolo Bonzini) [RHEL-10059]
  - x86/tdx: Use ReportFatalError to report missing SEPT_VE_DISABLE (Paolo Bonzini) [RHEL-10059]
  - cpuidle, tdx: Make TDX code noinstr clean (Paolo Bonzini) [RHEL-10059]
  - x86/tdx: Remove TDX_HCALL_ISSUE_STI (Paolo Bonzini) [RHEL-10059]
  - arch/idle: Change arch_cpu_idle() behavior: always exit with IRQs disabled (Paolo Bonzini) [RHEL-10059]
  - x86/insn: Avoid namespace clash by separating instruction decoder MMIO type from MMIO trace type (Paolo Bonzini) [RHEL-10059]
  - mm: avoid passing 0 to __ffs() (Paolo Bonzini) [RHEL-10059]
  - mm, treewide: redefine MAX_ORDER sanely (Paolo Bonzini) [RHEL-10059]
  - net: hns3: add max order judgement for tx spare buffer (Paolo Bonzini) [RHEL-10059]
  - iommu: fix MAX_ORDER usage in __iommu_dma_alloc_pages() (Paolo Bonzini) [RHEL-10059]
  - mm/slub: fix MAX_ORDER usage in calculate_order() (Paolo Bonzini) [RHEL-10059]
  - mm/page_reporting: fix MAX_ORDER usage in page_reporting_register() (Paolo Bonzini) [RHEL-10059]
  - perf/core: fix MAX_ORDER usage in rb_alloc_aux_page() (Paolo Bonzini) [RHEL-10059]
  - genwqe: fix MAX_ORDER usage (Paolo Bonzini) [RHEL-10059]
  - drm/i915: fix MAX_ORDER usage in i915_gem_object_get_pages_internal() (Paolo Bonzini) [RHEL-10059]
  - floppy: fix MAX_ORDER usage (Paolo Bonzini) [RHEL-10059]
  - um: fix MAX_ORDER usage in linux_main() (Paolo Bonzini) [RHEL-10059]
  - sparc/mm: fix MAX_ORDER usage in tsb_grow() (Paolo Bonzini) [RHEL-10059]
  - arch: mm: rename FORCE_MAX_ZONEORDER to ARCH_FORCE_MAX_ORDER (Paolo Bonzini) [RHEL-10059]
  - redhat/configs: update efi configs (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: fix efi_load_initrd_dev_path() kernel-doc comment (Paolo Bonzini) [RHEL-10059]
  - firmware/sysfb: Fix VESA format selection (Paolo Bonzini) [RHEL-10059]
  - efi: Bump stub image version for macOS HVF compatibility (Paolo Bonzini) [RHEL-10059]
  - efi/libstub: randomalloc: Return EFI_OUT_OF_RESOURCES on failure (Paolo Bonzini) [RHEL-10059]
  - efi/libstub: zboot: Add compressed image to make targets (Paolo Bonzini) [RHEL-10059]
  - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (Paolo Bonzini) [RHEL-10059]
  - efi: sysfb_efi: Fix DMI quirks not working for simpledrm (Paolo Bonzini) [RHEL-10059]
  - efi/libstub: smbios: Drop unused 'recsize' parameter (Paolo Bonzini) [RHEL-10059]
  - arm64: efi: Use SMBIOS processor version to key off Ampere quirk (Paolo Bonzini) [RHEL-10059]
  - efi/libstub: smbios: Use length member instead of record struct size (Paolo Bonzini) [RHEL-10059]
  - efi: earlycon: Reprobe after parsing config tables (Paolo Bonzini) [RHEL-10059]
  - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (Paolo Bonzini) [RHEL-10059]
  - efi: Use standard format for printing the EFI revision (Paolo Bonzini) [RHEL-10059]
  - efi: zboot: Use EFI protocol to remap code/data with the right attributes (Paolo Bonzini) [RHEL-10059]
  - efi/libstub: Add memory attribute protocol definitions (Paolo Bonzini) [RHEL-10059]
  - efi: efivars: prevent double registration (Paolo Bonzini) [RHEL-10059]
  - efi: verify that variable services are supported (Paolo Bonzini) [RHEL-10059]
  - efi: memmap: Disregard bogus entries instead of returning them (Paolo Bonzini) [RHEL-10059]
  - arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max machines (Paolo Bonzini) [RHEL-10059]
  - firmware/sysfb: Fix EFI/VESA format selection (Paolo Bonzini) [RHEL-10059]
  - efi: fix potential NULL deref in efi_mem_reserve_persistent (Paolo Bonzini) [RHEL-10059]
  - efi: Accept version 2 of memory attributes table (Paolo Bonzini) [RHEL-10059]
  - efi: fix userspace infinite retry read efivars after EFI runtime services page fault (Paolo Bonzini) [RHEL-10059]
  - efi: fix NULL-deref in init error path (Paolo Bonzini) [RHEL-10059]
  - efi: Put Linux specific magic number in the DOS header (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Always enable initrd command line loader and bump version (Paolo Bonzini) [RHEL-10059]
  - efi: stub: use random seed from EFI variable (Paolo Bonzini) [RHEL-10059]
  - efi: random: combine bootloader provided RNG seed with RNG protocol output (Paolo Bonzini) [RHEL-10059]
  - efi: memmap: Move manipulation routines into x86 arch tree (Paolo Bonzini) [RHEL-10059]
  - efi: memmap: Move EFI fake memmap support into x86 arch tree (Paolo Bonzini) [RHEL-10059]
  - arm64: efi: Force the use of SetVirtualAddressMap() on Altra machines (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Undeprecate the command line initrd loader (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Add mixed mode support to command line initrd loader (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Permit mixed mode return types other than efi_status_t (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Implement devicepath support for initrd commandline loader (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Merge zboot decompressor with the ordinary stub (Paolo Bonzini) [RHEL-10059]
  - efi/arm64: libstub: Split off kernel image relocation for builtin stub (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Factor out min alignment and preferred kernel load address (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Add image code and data size to the zimage metadata (Paolo Bonzini) [RHEL-10059]
  - efi/libstub: Use relocated version of kernel's struct screen_info (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Factor out EFI stub entrypoint into separate file (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Provide local implementations of strrchr() and memchr() (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Move screen_info handling to common code (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Enable efi_printk() in zboot decompressor (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Clone memcmp() into the stub (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Use local strncmp() implementation unconditionally (Paolo Bonzini) [RHEL-10059]
  - MAINTAINERS: adjust entry after arm64 efi-entry.S file movement (Paolo Bonzini) [RHEL-10059]
  - arm64: efi: Move efi-entry.S into the libstub source directory (Paolo Bonzini) [RHEL-10059]
  - arm64: efi: Avoid dcache_clean_poc() altogether in efi_enter_kernel() (Paolo Bonzini) [RHEL-10059]
  - arm64: efi: Move dcache cleaning of loaded image out of efi_enter_kernel() (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Deduplicate ftrace command line argument filtering (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Drop handling of EFI properties table (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Drop randomization of runtime memory map (Paolo Bonzini) [RHEL-10059]
  - ARM: 9255/1: efi/dump UEFI runtime page tables for ARM (Paolo Bonzini) [RHEL-10059]
  - efi: random: Use 'ACPI reclaim' memory for random seed (Paolo Bonzini) [RHEL-10059]
  - efi: random: reduce seed size to 32 bytes (Paolo Bonzini) [RHEL-10059]
  - efi: runtime: Don't assume virtual mappings are missing if VA == PA == 0 (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Fix incorrect payload size in zboot header (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Give efi_main() asmlinkage qualification (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Remove zboot signing from build options (Paolo Bonzini) [RHEL-10059]
  - efi: pstore: Follow convention for the efi-pstore backend name (Paolo Bonzini) [RHEL-10059]
  - efi/arm64: libstub: avoid SetVirtualAddressMap() when possible (Paolo Bonzini) [RHEL-10059]
  - efi: zboot: create MemoryMapped() device path for the parent if needed (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: fix up the last remaining open coded boot service call (Paolo Bonzini) [RHEL-10059]
  - efi/arm: libstub: move ARM specific code out of generic routines (Paolo Bonzini) [RHEL-10059]
  - efi/libstub: measure EFI LoadOptions (Paolo Bonzini) [RHEL-10059]
  - efi/libstub: refactor the initrd measuring functions (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: install boot-time memory map as config table (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: remove DT dependency from generic stub (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: unify initrd loading between architectures (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: remove pointless goto kludge (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: simplify efi_get_memory_map() and struct efi_boot_memmap (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: avoid efi_get_memory_map() for allocating the virt map (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: drop pointless get_memory_map() call (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: fix type confusion for load_options_size (Paolo Bonzini) [RHEL-10059]
  - efi/libstub: implement generic EFI zboot (Paolo Bonzini) [RHEL-10059]
  - efi/libstub: move efi_system_table global var into separate object (Paolo Bonzini) [RHEL-10059]
  - efi/libstub: use EFI provided memcpy/memset routines (Paolo Bonzini) [RHEL-10059]
  - efi/libstub: add some missing EFI prototypes (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: check Shim mode using MokSBStateRT (Paolo Bonzini) [RHEL-10059]
  - efi: capsule-loader: Fix use-after-free in efi_capsule_write (Paolo Bonzini) [RHEL-10059]
  - efi/x86: libstub: remove unused variable (Paolo Bonzini) [RHEL-10059]
  - efi: libstub: Disable struct randomization (Paolo Bonzini) [RHEL-10059]
  - efi: Correct comment on efi_memmap_alloc (Paolo Bonzini) [RHEL-10059]
  - drivers: fix typo in firmware/efi/memmap.c (Paolo Bonzini) [RHEL-10059]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-383.el9]
changelog:
  - redhat: configs: disable CONFIG_REMOTE_TARGET (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Fix target_cmd_counter leak (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Replace strlcpy() with strscpy() (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Fix write perf due to unneeded throttling (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsi: Stop using sprintf() in iscsi_target_configfs.c (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsi: Remove the unused netif_timeout attribute (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: tcmu: Replace strlcpy() with strscpy() (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Rename sbc_ops to exec_cmd_ops (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Replace all non-returning strlcpy() with strscpy() (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Fix error path in target_setup_session() (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsi: Prevent login threads from racing between each other (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsi: Fix hang in the iSCSI login code (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Fix invalid memory access (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Remove unused 'prod_len' variable (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: tcm_loop: Remove redundant driver match function (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsi: Handle abort for WRITE_PENDING cmds (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsit: Fix TAS handling during conn cleanup (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Fix multiple LUN_RESET handling (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsit: Free cmds before session free (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsit: Stop/wait on cmds during conn close (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsit: isert: Alloc per conn cmd counter (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Pass in cmd counter to use during cmd setup (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Move cmd counter allocation (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Move sess cmd counter to new struct (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Add virtual remote target (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: fcoe: Remove default fabric ops callouts (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: sbp: Remove default fabric ops callouts (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: loop: Remove default fabric ops callouts (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Add default fabric ops callouts (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Add RTPI attribute for target port (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Drop device-based RTPI (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Use RTPI from target port (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Add RTPI field to target port (Maurizio Lombardi) [RHEL-5751]
  - kernel/fork: beware of __put_task_struct() calling context (Wander Lairson Costa) [2060283]
  - virtio_balloon: Fix endless deflation and inflation on arm64 (Gavin Shan) [RHEL-1673]
  - ice: do not re-enable miscellaneous interrupt until thread_fn completes (Petr Oros) [2229762]
  - ice: trigger PFINT_OICR_TSYN_TX interrupt instead of polling (Petr Oros) [2229762]
  - ice: introduce ICE_TX_TSTAMP_WORK enumeration (Petr Oros) [2229762]
  - spi: spi-geni-qcom: Add SPI Device mode support for GENI based QuPv3 (Shawn Doherty) [RHEL-14715]
  - spi: spi-geni-qcom: enable SPI_CONTROLLER_MUST_TX for GPI DMA mode (Shawn Doherty) [RHEL-14715]
  - spi: spi-geni-qcom: correctly handle -EPROBE_DEFER from dma_request_chan() (Shawn Doherty) [RHEL-14715]
  - soc: qcom: geni-se: Add SPI Device mode support for GENI based QuPv3 (Shawn Doherty) [RHEL-14715]
  - i40e: Fix VF VLAN offloading when port VLAN is configured (Ivan Vecera) [RHEL-6382]
  - KVM: arm64: Avoid soft lockups due to I-cache maintenance (Gavin Shan) [RHEL-1859]
  - arm64: tlbflush: Rename MAX_TLBI_OPS (Gavin Shan) [RHEL-1859]
  - KVM: arm64: Drop is_kernel_in_hyp_mode() from __invalidate_icache_guest_page() (Gavin Shan) [RHEL-1859]
  - x86/platform/uv: Use alternate source for socket to node data (Frank Ramsay) [RHEL-11428]
  - ovl: Handle verity during copy-up (Alexander Larsson) [RHEL-2146]
  - ovl: Validate verity xattr when resolving lowerdata (Alexander Larsson) [RHEL-2146]
  - ovl: Add versioned header for overlay.metacopy xattr (Alexander Larsson) [RHEL-2146]
  - ovl: Add framework for verity support (Alexander Larsson) [RHEL-2146]
  - fsverity: rework fsverity_get_digest() again (Alexander Larsson) [RHEL-2146]
  - fsverity: simplify fsverity_get_digest() (Alexander Larsson) [RHEL-2146]
  - fs-verity: define a function to return the integrity protected file digest (Alexander Larsson) [RHEL-2146]
  - ovl: implement lazy lookup of lowerdata in data-only layers (Alexander Larsson) [RHEL-2146]
  - ovl: prepare for lazy lookup of lowerdata inode (Alexander Larsson) [RHEL-2146]
  - ovl: prepare to store lowerdata redirect for lazy lowerdata lookup (Alexander Larsson) [RHEL-2146]
  - ovl: implement lookup in data-only layers (Alexander Larsson) [RHEL-2146]
  - ovl: introduce data-only lower layers (Alexander Larsson) [RHEL-2146]
  - ovl: remove unneeded goto instructions (Alexander Larsson) [RHEL-2146]
  - ovl: move freeing ovl_entry past rcu delay (Alexander Larsson) [RHEL-2146]
  - ovl: deduplicate lowerdata and lowerstack[] (Alexander Larsson) [RHEL-2146]
  - ovl: deduplicate lowerpath and lowerstack[] (Alexander Larsson) [RHEL-2146]
  - ovl: move ovl_entry into ovl_inode (Alexander Larsson) [RHEL-2146]
  - ovl: factor out ovl_free_entry() and ovl_stack_*() helpers (Alexander Larsson) [RHEL-2146]
  - ovl: fetch inode once in ovl_dentry_revalidate_common() (Alexander Larsson) [RHEL-2146]
  - ovl: use ovl_numlower() and ovl_lowerstack() accessors (Alexander Larsson) [RHEL-2146]
  - ovl: use OVL_E() and OVL_E_FLAGS() accessors (Alexander Larsson) [RHEL-2146]
  - ovl: update of dentry revalidate flags after copy up (Alexander Larsson) [RHEL-2146]
  - ovl: let helper ovl_i_path_real() return the realinode (Alexander Larsson) [RHEL-2146]
  - ovl: fix use inode directly in rcu-walk mode (Alexander Larsson) [RHEL-2146]
  - ovl: handle idmappings in ovl_xattr_{g,s}et() (Alexander Larsson) [RHEL-2146]
  - ovl: use ovl_copy_{real,upper}attr() wrappers (Alexander Larsson) [RHEL-2146]
  - ovl: store lower path in ovl_inode (Alexander Larsson) [RHEL-2146]
  - ovl: update ctime when changing fileattr (Alexander Larsson) [RHEL-2146]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-384.el9]
changelog:
  - perf/core: Fix potential NULL deref (Wander Lairson Costa) [RHEL-14984] {CVE-2023-5717}
  - perf: Disallow mis-matched inherited group reads (Wander Lairson Costa) [RHEL-14984] {CVE-2023-5717}
  - page_pool: unlink from napi during destroy (Ivan Vecera) [RHEL-12613]
  - page_pool: allow caching from safely localized NAPI (Ivan Vecera) [RHEL-12613]
  - net: skb: plumb napi state thru skb freeing paths (Ivan Vecera) [RHEL-12613]
  - net: introduce skb_poison_list and use in kfree_skb_list (Ivan Vecera) [RHEL-12613]
  - net: fix kfree_skb_list use of skb_mark_not_on_list (Ivan Vecera) [RHEL-12613]
  - net: kfree_skb_list use kmem_cache_free_bulk (Ivan Vecera) [RHEL-12613]
  - net: skb: move skb_pp_recycle() to skbuff.c (Ivan Vecera) [RHEL-12613]
  - ibmvnic: Ensure login failure recovery is safe from other resets (Mamatha Inamdar) [RHEL-15149]
  - ibmvnic: Do partial reset on login failure (Mamatha Inamdar) [RHEL-15149]
  - ibmvnic: Handle DMA unmapping of login buffs in release functions (Mamatha Inamdar) [RHEL-15149]
  - ibmvnic: Unmap DMA login rsp buffer on send login fail (Mamatha Inamdar) [RHEL-15149]
  - ibmvnic: Enforce stronger sanity checks on login response (Mamatha Inamdar) [RHEL-15149]
  - ibmvnic: remove unused rc variable (Mamatha Inamdar) [RHEL-15149]
  - ibmvnic: Free rwi on reset success (Mamatha Inamdar) [RHEL-15149]
  - selftests: tty: add selftest for tty timestamp updates (Aristeu Rozanski) [RHEL-3902]
  - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-3902]
  - powerpc/rtas_flash: allow user copy to flash block cache objects (Mamatha Inamdar) [2228278]
  - preempt: Put preempt_enable() within an instrumentation*() section. (Eder Zulian) [RHEL-3988]
  - sched/rt: Don't try push tasks if there are none. (Eder Zulian) [RHEL-3988]
  - signal: Add proper comment about the preempt-disable in ptrace_stop(). (Eder Zulian) [RHEL-3988]
  - scsi: scsi_debug: Remove dead code (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Abort commands from scsi_debug_device_reset() (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Fix missing error code in scsi_debug_init() (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop sdebug_queue (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Only allow sdebug_max_queue be modified when no shosts (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Use scsi_host_busy() in delay_store() and ndelay_store() (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Use blk_mq_tagset_busy_iter() in stop_all_queued() (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Use blk_mq_tagset_busy_iter() in sdebug_blk_mq_poll() (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Dynamically allocate sdebug_queued_cmd (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Use scsi_block_requests() to block queues (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Protect block_unblock_all_queues() with mutex (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Change shost list lock to a mutex (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Don't iter all shosts in clear_luns_changed_on_target() (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Fix check for sdev queue full (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Remove redundant driver match function (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Add poll mode deferred completions to statistics (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Get command abort feature working again (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop sdebug_dev_info.num_in_q (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop check for num_in_q exceeding queue depth (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop scsi_debug_host_reset() device NULL pointer check (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop scsi_debug_bus_reset() NULL pointer checks (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop scsi_debug_target_reset() NULL pointer checks (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop scsi_debug_device_reset() NULL pointer checks (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop scsi_debug_abort() NULL pointer checks (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Stop setting devip->sdbg_host twice (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Don't hold driver host struct pointer in host->hostdata[] (Ming Lei) [RHEL-15276]
  - scsi: smartpqi: Change driver version to 2.1.24-046 (Don Brace) [RHEL-2301]
  - scsi: smartpqi: Enhance error messages (Don Brace) [RHEL-2301]
  - scsi: smartpqi: Enhance controller offline notification (Don Brace) [RHEL-2301]
  - scsi: smartpqi: Enhance shutdown notification (Don Brace) [RHEL-2301]
  - scsi: smartpqi: Simplify lun_number assignment (Don Brace) [RHEL-2301]
  - scsi: smartpqi: Rename pciinfo to pci_info (Don Brace) [RHEL-2301]
  - scsi: smartpqi: Rename MACRO to clarify purpose (Don Brace) [RHEL-2301]
  - scsi: smartpqi: Add abort handler (Don Brace) [RHEL-2301]
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [2227299] {CVE-2023-39193}
  - net: xfrm: Fix xfrm_address_filter OOB read (Wander Lairson Costa) [2227305] {CVE-2023-39194}
  - drm/qxl: fix UAF on handle creation (Wander Lairson Costa) [2218334] {CVE-2023-39198}
  - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [2227287] {CVE-2023-39189}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-385.el9]
changelog:
  - s390/qdio: fix do_sqbs() inline assembly constraint (Tobias Huschle) [RHEL-11201]
  - s390/lcs: Convert sysfs sprintf to sysfs_emit (Tobias Huschle) [RHEL-11201]
  - s390/lcs: Convert sprintf to scnprintf (Tobias Huschle) [RHEL-11201]
  - s390/ctcm: Convert sysfs sprintf to sysfs_emit (Tobias Huschle) [RHEL-11201]
  - s390/ctcm: Convert sprintf/snprintf to scnprintf (Tobias Huschle) [RHEL-11201]
  - s390/qeth: Fix vipa deletion (Tobias Huschle) [RHEL-11201]
  - s390/lcs: Remove FDDI option (Tobias Huschle) [RHEL-11201]
  - nd_btt: Make BTT lanes preemptible (Tomas Glozar) [RHEL-9172]
  - clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name (Alessandro Carminati) [RHEL-15417]
  - Revert "rcu: Permit start_poll_synchronize_rcu_expedited() to be invoked early" (Čestmír Kalina) [RHEL-14709]
  - scsi: sd: Remove the number of forward declarations (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Report error list information in debugfs (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Use 32-bit hostnum in scsi_host_lookup() (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Remove unused extern declarations (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Fix legacy /proc parsing buffer overflow (Ewan D. Milne) [RHEL-14312]
  - scsi: sd_zbc: Set zone limits before revalidating zones (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Improve warning message in scsi_device_block() (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Replace scsi_target_block() with scsi_block_targets() (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Don't wait for quiesce in scsi_device_block() (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Don't wait for quiesce in scsi_stop_queue() (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Merge scsi_internal_device_block() and device_block() (Ewan D. Milne) [RHEL-14312]
  - scsi: sg: Increase number of devices (Ewan D. Milne) [RHEL-14312]
  - scsi: sd: sd_zbc: Use PAGE_SECTORS_SHIFT (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Support setting BLK_MQ_F_BLOCKING (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Rework scsi_host_block() (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Only kick the requeue list if necessary (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Use min() instead of open-coding it (Ewan D. Milne) [RHEL-14312]
  - scsi: scsi_transport_fc: Remove unused 'desc_cnt' variable (Ewan D. Milne) [RHEL-14312]
  - scsi: sr: Simplify the sr_open() function (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Improve scsi_vpd_inquiry() checks (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Fix a procfs host directory removal regression (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (Ewan D. Milne) [RHEL-14312]
  - scsi: sd: Update DIX config every time sd_revalidate_disk() is called (Ewan D. Milne) [RHEL-14312]
  - tcp: fix delayed ACKs for MSS boundary condition (Paolo Abeni) [RHEL-14348]
  - tcp: fix quick-ack counting to count actual ACKs of new data (Paolo Abeni) [RHEL-14348]
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Paolo Abeni) [RHEL-14348]
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Paolo Abeni) [RHEL-14348]
  - tcp: gso: really support BIG TCP (Paolo Abeni) [RHEL-14348]
  - tcp: fix mishandling when the sack compression is deferred. (Paolo Abeni) [RHEL-14348]
  - wifi: rtw89: Fix loading of compressed firmware (Jose Ignacio Tornos Martinez) [RHEL-13881]
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Jose Ignacio Tornos Martinez) [RHEL-6358] {CVE-2023-31083}
  - x86/retpoline: Document some thunk handling aspects (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - objtool: Fix return thunk patching in retpolines (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Remove unnecessary semicolon (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/calldepth: Rename __x86_return_skl() to call_depth_return_thunk() (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/nospec: Refactor UNTRAIN_RET[_*] (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/rethunk: Use SYM_CODE_START[_LOCAL]_NOALIGN macros (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Disentangle rethunk-dependent options (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Move retbleed IBPB check into existing 'has_microcode' code block (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/bugs: Remove default case for fully switched enums (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Remove 'pred_cmd' label (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Unexport untraining functions (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Improve i-cache locality for alias mitigation (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix unret validation dependencies (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix vulnerability reporting for missing microcode (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Print mitigation for retbleed IBPB case (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Print actual mitigation if requested mitigation isn't possible (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for (possible) future fixed HW (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86,static_call: Fix static-call vs return-thunk (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/alternatives: Remove faulty optimization (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Don't probe microcode in a guest (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Set CPUID feature bits independently of bug or mitigation status (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix srso_show_state() side effect (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix amd_check_microcode() declaration (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Correct the mitigation status when SMT is disabled (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/static_call: Fix __static_call_fixup() (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - objtool/x86: Fixup frame-pointer vs rethunk (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Explain the untraining sequences a bit more (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu/kvm: Provide UNTRAIN_RET_VM (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Cleanup the untrain mess (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Rename original retbleed methods (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Clean up SRSO return thunk mess (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/alternative: Make custom return thunk unconditional (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - objtool/x86: Fix SRSO mess (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix __x86_return_thunk symbol type (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Disable the mitigation on unaffected configurations (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Waiman Long) [RHEL-8594] {CVE-2023-20588}
  - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Waiman Long) [RHEL-8594] {CVE-2023-20593}
  - driver core: cpu: Fix the fallback cpu_show_gds() name (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86: Move gds_ucode_mitigated() declaration to header (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/speculation: Add cpu_show_gds() prototype (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - driver core: cpu: Make cpu_show_not_affected() static (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix build breakage with the LLVM linker (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - Documentation/srso: Document IBPB aspect and fix formatting (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - driver core: cpu: Unify redundant silly stubs (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Waiman Long) [RHEL-8594] {CVE-2023-20588}
  - x86/srso: Tie SBPB bit setting to microcode patch detection (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add a forgotten NOENDBR annotation (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix return thunks in generated code (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB on VMEXIT (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add SRSO_NO support (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB_BRTYPE support (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - redhat/configs/x86: Enable CONFIG_CPU_SRSO (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add a Speculative RAS Overflow mitigation (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/retbleed: Add __x86_return_thunk alignment checks (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/retbleed: Fix return thunk alignment (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/alternative: Optimize returns patching (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86,objtool: Separate unret validation from unwind hints (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - objtool: Add objtool_types.h (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - objtool: Union instruction::{call_dest,jump_table} (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - objtool: Fix SEGFAULT (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - vmlinux.lds.h: add BOUNDED_SECTION* macros (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - livepatch: Make 'klp_stack_entries' static (Ryan Sullivan) [RHEL-2768]
  - livepatch: Convert stack entries array to percpu (Ryan Sullivan) [RHEL-2768]
  - livepatch: fix ELF typos (Ryan Sullivan) [RHEL-2768]
  - livepatch: Make kobj_type structures constant (Ryan Sullivan) [RHEL-2768]
  - Documentation: livepatch: module-elf-format: Remove local klp_modinfo definition (Ryan Sullivan) [RHEL-2768]
  - module.h: Document klp_modinfo struct using kdoc (Ryan Sullivan) [RHEL-2768]
  - livepatch,x86: Clear relocation targets on a module removal (Ryan Sullivan) [RHEL-2768]
  - x86/module: remove unused code in __apply_relocate_add (Ryan Sullivan) [RHEL-2768]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-386.el9]
changelog:
  - KVM: arm64: selftest: Perform ISB before reading PAR_EL1 (Gavin Shan) [RHEL-16004]
  - KVM: arm64: selftest: Add the missing .guest_prepare() (Gavin Shan) [RHEL-16004]
  - scsi: mpt3sas: Drop redundant pci_enable_pcie_error_reporting() (Tomas Henzl) [RHEL-8247]
  - scsi: mpt3sas: Fix in error path (Tomas Henzl) [RHEL-8247]
  - scsi: mpt3sas: Fix loop logic (Tomas Henzl) [RHEL-8247]
  - scsi: mpt3sas: Remove volatile qualifier (Tomas Henzl) [RHEL-8247]
  - scsi: mpt3sas: Perform additional retries if doorbell read returns 0 (Tomas Henzl) [RHEL-8247]
  - net/ism: Remove redundant pci_clear_master (Tobias Huschle) [RHEL-11199]
  - net/smc: Fix dependency of SMC on ISM (Tobias Huschle) [RHEL-11199]
  - s390/ism: Do not unregister clients with registered DMBs (Tobias Huschle) [RHEL-11199]
  - s390/ism: Fix and simplify add()/remove() callback handling (Tobias Huschle) [RHEL-11199]
  - s390/ism: Fix locking for forwarding of IRQs and events to clients (Tobias Huschle) [RHEL-11199]
  - s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit() (Tobias Huschle) [RHEL-11199]
  - s390/ism: Set DMA coherent mask (Tobias Huschle) [RHEL-11199]
  - net/ism: Remove extra include (Tobias Huschle) [RHEL-11199]
  - net/smc: Introduce explicit check for v2 support (Tobias Huschle) [RHEL-11199]
  - cifs: Fix UAF in cifs_demultiplex_thread() (Scott Mayhew) [RHEL-15170 RHEL-15174] {CVE-2023-1192}
  - scsi: mpi3mr: Split off bus_reset function from host_reset (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: Update driver version to 8.5.0.0.0 (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: Enhance handling of devices removed after controller reset (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: WRITE SAME implementation (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: Add support for more than 1MB I/O (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: Update MPI Headers to version 3.00.28 (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: Invoke soft reset upon TSU or event ack time out (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: Fix the type used for pointers to bitmap (Tomas Henzl) [RHEL-8231]
  - redhat: self-test: Use a more complete SRPM file suffix (Andrew Halaney) [RHEL-15147]
  - redhat: makefile: remove stray rpmbuild --without (Andrew Halaney) [RHEL-15147]
  - redhat: kernel.spec: amend license macro expansion (Eric Chanudet) [RHEL-15147]
  - wireguard: allowedips: expand maximum node depth (Hangbin Liu) [RHEL-13966]
  - wireguard: timers: move to using timer_delete_sync (Hangbin Liu) [RHEL-13966]
  - wireguard: netlink: send staged packets when setting initial private key (Hangbin Liu) [RHEL-13966]
  - wireguard: queueing: use saner cpu selection wrapping (Hangbin Liu) [RHEL-13966]
  - wireguard: timers: cast enum limits members to int in prints (Hangbin Liu) [RHEL-13966]
  - wireguard: allowedips: don't corrupt stack when detecting overflow (Hangbin Liu) [RHEL-13966]
  - x86/speculation: Provide a debugfs file to dump SPEC_CTRL MSRs (Waiman Long) [RHEL-8620]
  - x86/idle: Disable IBRS entering mwait idle and enable it on wakeup (Waiman Long) [RHEL-8620]
  - intel_idle: Add ibrs_off module parameter to force-disable IBRS (Waiman Long) [RHEL-8620]
  - intel_idle: Use __update_spec_ctrl() in intel_idle_ibrs() (Waiman Long) [RHEL-8620]
  - x86/idle: Disable IBRS when CPU is offline to improve single-threaded performance (Waiman Long) [RHEL-8620]
  - x86/speculation: Add __update_spec_ctrl() helper (Waiman Long) [RHEL-8620]
  - redhat/configs: Increase CONFIG_NODES_SHIFT from 6 to 8 for arm64 (Waiman Long) [RHEL-11395]
  - lib: cpu_rmap: Add irq_cpu_rmap_remove to complement irq_cpu_rmap_add (Petr Oros) [RHEL-5076]
  - vc_screen: don't clobber return value in vcs_read (Ricardo Robaina) [2221465] {CVE-2023-3567}
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (Ricardo Robaina) [2221465] {CVE-2023-3567}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-387.el9]
changelog:
  - iommu: Avoid unnecessary cache invalidations (Jerry Snitselaar) [RHEL-10094]
  - mm: slab: Do not create kmalloc caches smaller than arch_slab_minalign() (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: make io_tlb_default_mem local to swiotlb.c (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: optimize get_max_slots() (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: use the calculated number of areas (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Avoid memory allocation in iommu_suspend() (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Avoid constructing invalid range commands (Jerry Snitselaar) [RHEL-10094]
  - iommu: Remove kernel-doc warnings (Jerry Snitselaar) [RHEL-10094]
  - iommu: Avoid locking/unlocking for iommu_probe_device() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Split iommu_group_add_device() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Always destroy the iommu_group during iommu_release_device() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Do not export iommu_device_link/unlink() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Move the iommu driver sysfs setup into iommu_init/deinit_device() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Add iommu_init/deinit_device() paired functions (Jerry Snitselaar) [RHEL-10094]
  - iommu: Simplify the __iommu_group_remove_device() flow (Jerry Snitselaar) [RHEL-10094]
  - iommu: Inline iommu_group_get_for_dev() into __iommu_probe_device() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Use iommu_group_ref_get/put() for dev->iommu_group (Jerry Snitselaar) [RHEL-10094]
  - iommu: Have __iommu_probe_device() check for already probed devices (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Rearrange DTE bit definations (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Remove unsued extern declaration amd_iommu_init_hardware() (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Enable PPR/GA interrupt after interrupt handler setup (Jerry Snitselaar) [RHEL-3655]
  - iommu/amd: Consolidate PPR log enablement (Jerry Snitselaar) [RHEL-3655]
  - iommu/amd: Disable PPR log/interrupt in iommu_disable() (Jerry Snitselaar) [RHEL-3655]
  - iommu/amd: Enable separate interrupt for PPR and GA log (Jerry Snitselaar) [RHEL-3655]
  - iommu/amd: Refactor IOMMU interrupt handling logic for Event, PPR, and GA logs (Jerry Snitselaar) [RHEL-3655]
  - iommu/amd: Handle PPR log overflow (Jerry Snitselaar) [RHEL-3655]
  - iommu/amd: Generalize log overflow handling (Jerry Snitselaar) [RHEL-3655]
  - iommu/vt-d: Fix to convert mm pfn to dma pfn (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Fix to flush cache of PASID directory table (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove rmrr check in domain attaching device path (Jerry Snitselaar) [RHEL-10094]
  - iommu: Prevent RESV_DIRECT devices from blocking domains (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Add set_dev_pasid callback for dma domain (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Prepare for set_dev_pasid callback (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Make prq draining code generic (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove pasid_mutex (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Add domain_flush_pasid_iotlb() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Move global PASID allocation from SVA to core (Jerry Snitselaar) [RHEL-10094]
  - iommu: Generalize PASID 0 for normal DMA w/o PASID (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-qcom: Add SM6375 SMMUv2 (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-qcom: Add SM6350 DPU compatible (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-qcom: Add SM6375 DPU compatible (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-qcom: Sort the compatible list alphabetically (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Change vmid alloc strategy from bitmap to ida (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Allow PCIe devices (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Convert to read_poll_timeout_atomic() (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Don't leak the platform device memory when unloading the module (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Implement hw_info for iommu capability query (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Add coverage for IOMMU_GET_HW_INFO ioctl (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add IOMMU_GET_HW_INFO (Jerry Snitselaar) [RHEL-10094]
  - iommu: Add new iommu op to get iommu hardware information (Jerry Snitselaar) [RHEL-10094]
  - iommu: Move dev_iommu_ops() to private header (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Remove iommufd_ref_to_users() (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Make the mock iommu driver into a real driver (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Add IOMMU_TEST_OP_ACCESS_REPLACE_IOAS coverage (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add iommufd_access_replace() API (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Use iommufd_access_change_ioas in iommufd_access_destroy_object (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add iommufd_access_change_ioas(_id) helpers (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Allow passing in iopt_access_list_id to iopt_remove_access() (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Add a selftest for IOMMU_HWPT_ALLOC (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Return the real idev id from selftest mock_domain (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add IOMMU_HWPT_ALLOC (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Test iommufd_device_replace() (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Make destroy_rwsem use a lock class per object type (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add iommufd_device_replace() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Introduce a new iommu_group_replace_domain() API (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Reorganize iommufd_device_attach into iommufd_device_change_pt (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Fix locking around hwpt allocation (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Allow a hwpt to be aborted after allocation (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add enforced_cache_coherency to iommufd_hw_pagetable_alloc() (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Move putting a hwpt to a helper function (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Make sw_msi_start a group global (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Use the iommufd_group to avoid duplicate MSI setup (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Keep track of each device's reserved regions instead of groups (Jerry Snitselaar) [RHEL-10094]
  - iommu: Export iommu_get_resv_regions() (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Replace the hwpt->devices list with iommufd_group (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add iommufd_group (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Move isolated msi enforcement to iommufd_device_bind() (Jerry Snitselaar) [RHEL-10094]
  - dma-pool: remove a __maybe_unused label in atomic_pool_expand (Jerry Snitselaar) [RHEL-10094]
  - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: bail out of swiotlb_init_late() if swiotlb is already allocated (Jerry Snitselaar) [RHEL-10094]
  - dma-mapping: move arch_dma_set_mask() declaration to header (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: unexport is_swiotlb_active (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Set end correctly when doing batch carry (Jerry Snitselaar) [RHEL-10094]
  - iommufd: IOMMUFD_DESTROY should not increase the refcount (Jerry Snitselaar) [RHEL-10094]
  - iommu/sva: Fix signedness bug in iommu_sva_alloc_pasid() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Fix crash during syfs iommu_groups/N/type (Jerry Snitselaar) [RHEL-10094]
  - drm/nouveau: stop using is_swiotlb_active (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: use the atomic counter of total used slabs if available (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: remove unused field "used" from struct io_tlb_mem (Jerry Snitselaar) [RHEL-10094]
  - dma-remap: use kvmalloc_array/kvfree for larger dma memory remap (Jerry Snitselaar) [RHEL-10094]
  - dma-mapping: fix a Kconfig typo (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Do not access the area pointer after unlocking (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Remove extern from function prototypes (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Use BIT/BIT_ULL macro to define bit fields (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Fix compile error for unused function (Jerry Snitselaar) [RHEL-10026]
  - iommu/amd: Improving Interrupt Remapping Table Invalidation (Jerry Snitselaar) [RHEL-10026]
  - iommu/amd: Do not Invalidate IRT when IRTE caching is disabled (Jerry Snitselaar) [RHEL-10026]
  - iommu/amd: Introduce Disable IRTE Caching Support (Jerry Snitselaar) [RHEL-10026]
  - iommu/amd: Remove the unused struct amd_ir_data.ref (Jerry Snitselaar) [RHEL-10026]
  - iommu/amd: Switch amd_iommu_update_ga() to use modify_irte_ga() (Jerry Snitselaar) [RHEL-10026]
  - iommu/amd: Update copyright notice (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Use page mode macros in fetch_pte() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Tidy the control flow in iommu_group_store_type() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Remove __iommu_group_for_each_dev() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Allow IOMMU_RESV_DIRECT to work on ARM (Jerry Snitselaar) [RHEL-10094]
  - iommu: Consolidate the default_domain setup to one function (Jerry Snitselaar) [RHEL-10094]
  - iommu: Revise iommu_group_alloc_default_domain() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Consolidate the code to calculate the target default domain type (Jerry Snitselaar) [RHEL-10094]
  - iommu: Remove the assignment of group->domain during default domain alloc (Jerry Snitselaar) [RHEL-10094]
  - iommu: Do iommu_group_create_direct_mappings() before attach (Jerry Snitselaar) [RHEL-10094]
  - iommu: Fix iommu_probe_device() to attach the right domain (Jerry Snitselaar) [RHEL-10094]
  - iommu: Replace iommu_group_do_dma_first_attach with __iommu_device_set_domain (Jerry Snitselaar) [RHEL-10094]
  - iommu: Remove iommu_group_do_dma_first_attach() from iommu_group_add_device() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Replace __iommu_group_dma_first_attach() with set_domain (Jerry Snitselaar) [RHEL-10094]
  - iommu: Use __iommu_group_set_domain() in iommu_change_dev_def_domain() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Use __iommu_group_set_domain() for __iommu_attach_group() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Make __iommu_group_set_domain() handle error unwind (Jerry Snitselaar) [RHEL-10094]
  - iommu: Add for_each_group_device() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Replace iommu_group_device_count() with list_count_nodes() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Suppress empty whitespaces in prints (Jerry Snitselaar) [RHEL-10094]
  - iommu: Use flush queue capability (Jerry Snitselaar) [RHEL-10094]
  - iommu: Add a capability for flush queue support (Jerry Snitselaar) [RHEL-10094]
  - iommu/iova: Optimize iova_magazine_alloc() (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove commented-out code (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove two WARN_ON in domain_context_mapping_one() (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Handle the failure case of dmar_reenable_qi() (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove unnecessary (void*) conversions (Jerry Snitselaar) [RHEL-10094]
  - iommu/virtio: Return size mapped for a detached domain (Jerry Snitselaar) [RHEL-10094]
  - iommu/virtio: Detach domain on endpoint release (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Set TTL invalidation hint better (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Document nesting-related errata (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Add explicit feature for nesting (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Document MMU-700 erratum 2812531 (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982 (Jerry Snitselaar) [RHEL-10094]
  - iommu/dma: force bouncing if the size is not cacheline-aligned (Jerry Snitselaar) [RHEL-10094]
  - dma-mapping: force bouncing if the kmalloc() size is not cache-line-aligned (Jerry Snitselaar) [RHEL-10094]
  - powerpc: move the ARCH_DMA_MINALIGN definition to asm/cache.h (Jerry Snitselaar) [RHEL-10094]
  - arm64: enable ARCH_WANT_KMALLOC_DMA_BOUNCE for arm64 (Jerry Snitselaar) [RHEL-10094]
  - mm: slab: reduce the kmalloc() minimum alignment if DMA bouncing possible (Jerry Snitselaar) [RHEL-10094]
  - arm64: allow kmalloc() caches aligned to the smaller cache_line_size() (Jerry Snitselaar) [RHEL-10094]
  - dm-crypt: use ARCH_DMA_MINALIGN instead of ARCH_KMALLOC_MINALIGN (Jerry Snitselaar) [RHEL-10094]
  - drivers/spi: use ARCH_DMA_MINALIGN instead of ARCH_KMALLOC_MINALIGN (Jerry Snitselaar) [RHEL-10094]
  - drivers/usb: use ARCH_DMA_MINALIGN instead of ARCH_KMALLOC_MINALIGN (Jerry Snitselaar) [RHEL-10094]
  - drivers/gpu: use ARCH_DMA_MINALIGN instead of ARCH_KMALLOC_MINALIGN (Jerry Snitselaar) [RHEL-10094]
  - drivers/base: use ARCH_DMA_MINALIGN instead of ARCH_KMALLOC_MINALIGN (Jerry Snitselaar) [RHEL-10094]
  - mm/slab: limit kmalloc() minimum alignment to dma_get_cache_alignment() (Jerry Snitselaar) [RHEL-10094]
  - mm/slab: simplify create_kmalloc_cache() args and make it static (Jerry Snitselaar) [RHEL-10094]
  - dma: allow dma_get_cache_alignment() to be overridden by the arch code (Jerry Snitselaar) [RHEL-10094]
  - mm/slab: decouple ARCH_KMALLOC_MINALIGN from ARCH_DMA_MINALIGN (Jerry Snitselaar) [RHEL-10094]
  - mm: slab: fix comment for ARCH_KMALLOC_MINALIGN (Jerry Snitselaar) [RHEL-10094]
  - dma-mapping: name SG DMA flag helpers consistently (Jerry Snitselaar) [RHEL-10094]
  - scatterlist: add dedicated config for DMA flags (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd/pgtbl_v2: Fix domain max address (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Handle GALog overflows (Jerry Snitselaar) [RHEL-10094]
  - iommu: Make IPMMU_VMSA dependencies more strict (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-qcom: Fix missing adreno_smmu's (Jerry Snitselaar) [RHEL-10094]
  - rhel: configs: Clean up s390 IOMMU configs that no longer exist (Jerry Snitselaar) [RHEL-10094]
  - s390/iommu: get rid of S390_CCW_IOMMU and S390_AP_IOMMU (Jerry Snitselaar) [RHEL-10094]
  - iommu: Spelling s/cpmxchg64/cmpxchg64/ (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu: Drop if with an always false condition (Jerry Snitselaar) [RHEL-10094]
  - iommu: Remove iommu_group_get_by_id() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Make iommu_release_device() static (Jerry Snitselaar) [RHEL-10094]
  - iommu: Remove ioasid infrastructure (Jerry Snitselaar) [RHEL-10094]
  - iommu/ioasid: Rename INVALID_IOASID (Jerry Snitselaar) [RHEL-10094]
  - iommu/sva: Use GFP_KERNEL for pasid allocation (Jerry Snitselaar) [RHEL-10094]
  - iommu/sva: Stop using ioasid_set for SVA (Jerry Snitselaar) [RHEL-10094]
  - iommu/sva: Remove PASID to mm lookup function (Jerry Snitselaar) [RHEL-10094]
  - iommu/sva: Move PASID helpers to sva code (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove virtual command interface (Jerry Snitselaar) [RHEL-10094]
  - iommu: Use sysfs_emit() for sysfs show (Jerry Snitselaar) [RHEL-10094]
  - iommu: Cleanup iommu_change_dev_def_domain() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Replace device_lock() with group->mutex (Jerry Snitselaar) [RHEL-10094]
  - iommu: Move lock from iommu_change_dev_def_domain() to its caller (Jerry Snitselaar) [RHEL-10094]
  - iommu: Same critical region for device release and removal (Jerry Snitselaar) [RHEL-10094]
  - iommu: Split iommu_group_remove_device() into helpers (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Call arm_iommu_release_mapping() in release path (Jerry Snitselaar) [RHEL-10094]
  - iommu: Use of_property_present() for testing DT property presence (Jerry Snitselaar) [RHEL-10094]
  - iommu: Make kobj_type structure constant (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Add 5 level guest page table support (Jerry Snitselaar) [RHEL-10042]
  - iommu/amd: Allocate IOMMU irqs using numa locality info (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Allocate page table using numa locality info (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove BUG_ON in dmar_insert_dev_scope() (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove a useless BUG_ON(dev->is_virtfn) (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove BUG_ON in map/unmap() (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove BUG_ON when domain->pgd is NULL (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove BUG_ON in handling iotlb cache invalidation (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove BUG_ON on checking valid pfn range (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Make size of operands same in bitwise operations (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove PASID supervisor request support (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Use non-privileged mode for all PASIDs (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove extern from function prototypes (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Do not use GFP_ATOMIC when not needed (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove unnecessary checks in iopf disabling path (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Move PRI handling to IOPF feature path (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Move pfsid and ats_qdep calculation to device probe path (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Move iopf code from SVA to IOPF enabling path (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Allow SVA with device-specific IOPF (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-qcom: Limit the SMR groups to 128 (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Explain why ATS stays disabled with bypass (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: remove R-Car H3 ES1.* handling (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: Omit total_used and used_hiwater if !CONFIG_DEBUG_FS (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: track and report io_tlb_used high water marks in debugfs (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: fix debugfs reporting of reserved memory pools (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (Jerry Snitselaar) [RHEL-10094]
  - dma-mapping: provide CONFIG_ARCH_DMA_DEFAULT_COHERENT (Jerry Snitselaar) [RHEL-10094]
  - dma-mapping: provide a fallback dma_default_coherent (Jerry Snitselaar) [RHEL-10094]
  - dma-debug: Use %pa to format phys_addr_t (Jerry Snitselaar) [RHEL-10094]
  - dma-debug: add cacheline to user/kernel space dump messages (Jerry Snitselaar) [RHEL-10094]
  - dma-debug: small dma_debug_entry's comment and variable name updates (Jerry Snitselaar) [RHEL-10094]
  - dma-direct: cleanup parameters to dma_direct_optimal_gfp_mask (Jerry Snitselaar) [RHEL-10094]
  - iommu/sva: Replace pasid_valid() helper with mm_valid_pasid() (Jerry Snitselaar) [RHEL-10094]
  - dma-mapping: benchmark: remove MODULE_LICENSE in non-modules (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Cover domain unmap with huge pages and access (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Set varaiable mock_iommu_device storage-class-specifier to static (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Catch overflow of uptr and length (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Add a selftest for iommufd_device_attach() with a hwpt argument (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Make selftest create a more complete mock device (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Rename the remaining mock device_id's to stdev_id (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Rename domain_id to hwpt_id for FIXTURE iommufd_mock_domain (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Rename domain_id to stdev_id for FIXTURE iommufd_ioas (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Rename the sefltest 'device_id' to 'stdev_id' (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Make iommufd_hw_pagetable_alloc() do iopt_table_add_domain() (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Move iommufd_device to iommufd_private.h (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Move ioas related HWPT destruction into iommufd_hw_pagetable_destroy() (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Consistently manage hwpt_item (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add iommufd_lock_obj() around the auto-domains hwpts (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Assert devices_lock for iommufd_hw_pagetable_has_group() (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Set page size bitmap during V2 domain allocation (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Fix sparse warning (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Remove outdated comment (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Add command-line option to enable different page table (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Add support for using AMD IOMMU v2 page table for DMA-API (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Add support for Guest IO protection (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Initial support for AMD IOMMU v2 page table (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Update sanity check when enable PRI/ATS for IOMMU v1 table (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Refactor amd_iommu_domain_enable_v2 to remove locking (Jerry Snitselaar) [RHEL-10007]
  - iommu/ipmmu-vmsa: Remove ipmmu_utlb_disable() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Remove detach_dev callbacks (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Update to {map,unmap}_pages (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Clean up bus_set_iommu() (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Fix compatible for rcar-gen4 (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Add support for R-Car Gen4 (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Check for error num after setting mask (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Hook up r8a77980 DT matching code (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Add support for r8a779a0 (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Drop IOVA cookie management (Jerry Snitselaar) [RHEL-10094]
  - x86_64: Remove pointless set_64bit() usage (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Fix possible memory leak of 'domain' (Jerry Snitselaar) [RHEL-800]
  - iommu/amd/iommu_v2: Clear pasid state in free path (Jerry Snitselaar) [2223717]
  - iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind (Jerry Snitselaar) [2223717]
  - iommu/amd: Fix DTE_IRQ_PHYS_ADDR_MASK macro (Jerry Snitselaar) [RHEL-800]
  - iommu/amd: Fix domain flush size when syncing iotlb (Jerry Snitselaar) [RHEL-800]
  - iommu/amd: Add missing domain type checks (Jerry Snitselaar) [RHEL-800]
  - iommu/amd: Don't block updates to GATag if guest mode is on (Jerry Snitselaar) [RHEL-800]
  - iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE (Jerry Snitselaar) [RHEL-800]
  - swiotlb: reduce the number of areas to match actual memory pool size (Jerry Snitselaar) [RHEL-800]
  - swiotlb: always set the number of areas before allocating the pool (Jerry Snitselaar) [RHEL-800]
  - redhat: Enable -Werror for s390x and ppc64le, too (Thomas Huth) [RHEL-12454]
  - cachestat: wire up cachestat for other architectures (Thomas Huth) [RHEL-12454]
  - genirq: Allow irq_chip registration functions to take a const irq_chip (Thomas Huth) [RHEL-12454]
  - scsi: ibmvscsi: Avoid multi-field memset() overflow by aiming at srp (Thomas Huth) [RHEL-12454]
  - uaccess: fix type mismatch warnings from access_ok() (Thomas Huth) [RHEL-12454]
  - s390/con3270: use proper type for tasklet function (Thomas Huth) [RHEL-12454]
  - net/smc: Remove left-over label and code from a previous incomplete backport (Thomas Huth) [RHEL-12454]
  - KVM: s390: add tracepoint in gmap notifier (Thomas Huth) [RHEL-11438]
  - KVM: s390: add stat counter for shadow gmap events (Thomas Huth) [RHEL-11438]
  - powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (Mamatha Inamdar) [RHEL-5838]
  - powerpc: Add HOTPLUG_SMT support (Mamatha Inamdar) [RHEL-5838]
  - powerpc/pseries: Initialise CPU hotplug callbacks earlier (Mamatha Inamdar) [RHEL-5838]
  - cpu/SMT: Allow enabling partial SMT states via sysfs (Mamatha Inamdar) [RHEL-5838]
  - cpu/SMT: Create topology_smt_thread_allowed() (Mamatha Inamdar) [RHEL-5838]
  - cpu/SMT: Remove topology_smt_supported() (Mamatha Inamdar) [RHEL-5838]
  - cpu/SMT: Store the current/max number of threads (Mamatha Inamdar) [RHEL-5838]
  - cpu/SMT: Move smt/control simple exit cases earlier (Mamatha Inamdar) [RHEL-5838]
  - cpu/SMT: Move SMT prototypes into cpu_smt.h (Mamatha Inamdar) [RHEL-5838]
  - hwmon: (ina3221) Add support for channel summation disable (Steve Best) [RHEL-1899]
  - virtchnl: Add header dependencies (Ivan Vecera) [RHEL-15261]
  - virtchnl: Add CRC stripping capability (Ivan Vecera) [RHEL-15261]
  - virtchnl: fix fake 1-elem arrays for structures allocated as `nents` (Ivan Vecera) [RHEL-15261]
  - virtchnl: fix fake 1-elem arrays in structures allocated as `nents + 1` (Ivan Vecera) [RHEL-15261]
  - virtchnl: fix fake 1-elem arrays in structs allocated as `nents + 1` - 1 (Ivan Vecera) [RHEL-15261]
  - virtchnl: do structure hardening (Ivan Vecera) [RHEL-15261]
  - virtchnl: update header and increase header clarity (Ivan Vecera) [RHEL-15261]
  - virtchnl: remove unused structure declaration (Ivan Vecera) [RHEL-15261]
  - powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (Mamatha Inamdar) [RHEL-11213]
  - powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (Mamatha Inamdar) [RHEL-11213]
  - powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (Mamatha Inamdar) [RHEL-11213]
  - powerpc/iommu: fix memory leak with using debugfs_lookup() (Mamatha Inamdar) [RHEL-11213]
  - powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (Mamatha Inamdar) [RHEL-11213]
  - pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/ddw: simplify enable_ddw() (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Check if the default window in use before removing it (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Use correct vfree for it_map (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Add of_node_put() before break (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Rename "direct window" to "dma window" (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Make use of DDW for indirect mapping (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Find existing DDW with given property name (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Update remove_dma_window() to accept property name (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Add ddw_list_new_entry() helper (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Replace hard-coded page shift (Mamatha Inamdar) [RHEL-11213]
  - powerpc/kernel/iommu: Add new iommu_table_in_use() helper (Mamatha Inamdar) [RHEL-11213]
  - dt-bindings: usb: qcom,dwc3: allow required-opps (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: gadget: Reset num TRBs before giving back the request (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: gadget: Refactor EP0 forced stall/restart into a separate API (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: gadget: Execute gadget stop after halting the controller (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: gadget: drop dead hibernation code (Desnes Nunes) [RHEL-13058]
  - usb: remove dead code in dwc3_gadget_get_irq (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: gadget: Change condition for processing suspend event (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC (Desnes Nunes) [RHEL-13058]
  - usb: ulpi: Use of_request_module() (Desnes Nunes) [RHEL-13058]
  - of: device: Kill of_device_request_module() (Desnes Nunes) [RHEL-13058]
  - of: Move the request module helper logic to module.c (Desnes Nunes) [RHEL-13058]
  - of: Move of_modalias() to module.c (Desnes Nunes) [RHEL-13058]
  - of: Rename of_modalias_node() (Desnes Nunes) [RHEL-13058]
  - of: move from strlcpy with unused retval to strscpy (Desnes Nunes) [RHEL-13058]
  - of: Update of_device_get_modalias() (Desnes Nunes) [RHEL-13058]
  - of: device: Do not ignore error code in of_device_uevent_modalias (Desnes Nunes) [RHEL-13058]
  - of: device: Ignore modalias of reused nodes (Desnes Nunes) [RHEL-13058]
  - of: Fix modalias string generation (Desnes Nunes) [RHEL-13058]
  - usb: typec: Fix fast_role_swap_current show function (Desnes Nunes) [RHEL-13058]
  - usb: typec: ucsi: Fix command cancellation (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: fix use-after-free on core driver unbind (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: qcom: fix NULL-deref on suspend (Desnes Nunes) [RHEL-13058]
  - USB: serial: option: add Quectel EM061KGL series (Desnes Nunes) [RHEL-13058]
  - usb: typec: tps6598x: Fix broken polling mode after system suspend/resume (Desnes Nunes) [RHEL-13058]
  - usb: usbfs: Use consistent mmap functions (Desnes Nunes) [RHEL-13058]
  - usb: usbfs: Enforce page requirements for mmap (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type (Desnes Nunes) [RHEL-13058]
  - thunderbolt: Do not touch CL state configuration during discovery (Desnes Nunes) [RHEL-13058]
  - thunderbolt: dma_test: Use correct value for absent rings when creating paths (Desnes Nunes) [RHEL-13058]
  - xhci: Fix incorrect tracking of free space on transfer rings (Desnes Nunes) [RHEL-13058]
  - xhci-pci: Only run d3cold avoidance quirk for s2idle (Desnes Nunes) [RHEL-13058]
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Desnes Nunes) [RHEL-13058]
  - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (Desnes Nunes) [RHEL-13058]
  - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (Desnes Nunes) [RHEL-13058]
  - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (Desnes Nunes) [RHEL-13058]
  - usb-storage: fix deadlock when a scsi command timeouts more than once (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: fix a test for error in dwc3_core_init() (Desnes Nunes) [RHEL-13058]
  - usb: typec: tps6598x: Fix fault at module removal (Desnes Nunes) [RHEL-13058]
  - usb: typec: altmodes/displayport: fix pin_assignment_show (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: debugfs: Resume dwc3 before accessing registers (Desnes Nunes) [RHEL-13058]
  - USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: fix gadget mode suspend interrupt handler issue (Desnes Nunes) [RHEL-13058]
  - USB: usbtmc: Fix direction for 0-length ioctl control messages (Desnes Nunes) [RHEL-13058]
  - media: pvrusb2: fix DVB_CORE dependency (Desnes Nunes) [RHEL-13058]
  - USB: sisusbvga: Add endpoint checks (Desnes Nunes) [RHEL-13058]
  - USB: core: Add routines for endpoint checks in old drivers (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: snps,dwc3: Add 'snps,parkmode-disable-hs-quirk' quirk (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: core: add support for disabling High-speed park mode (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: ci-hdrc-usb2: allow multiple PHYs (Desnes Nunes) [RHEL-13058]
  - usb: chipidea: fix missing goto in `ci_hdrc_probe` (Desnes Nunes) [RHEL-13058]
  - usb: typec: ucsi: don't print PPM init deferred errors (Desnes Nunes) [RHEL-13058]
  - usb: typec: tcpm: fix multiple times discover svids error (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: clean up probe declarations (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: refactor clock lookups (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: refactor phy handling (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: clean up core init error handling (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: clean up phy init error handling (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: clean up probe error labels (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: drop dead hibernation code (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: disable autosuspend on unbind (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: fix runtime pm imbalance on unbind (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: fix runtime pm imbalance on probe errors (Desnes Nunes) [RHEL-13058]
  - usb: xhci-mtk: add optional frame count clock (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: mtk-xhci: add an optional frame count clock (Desnes Nunes) [RHEL-13058]
  - usb: xhci: plat: Add USB 3.0 phy support (Desnes Nunes) [RHEL-13058]
  - usb: host: xhci-plat: Use dev_is_pci() helper (Desnes Nunes) [RHEL-13058]
  - xhci: fix debugfs register accesses while suspended (Desnes Nunes) [RHEL-13058]
  - usb: gadget: tegra-xudc: Remove unneeded return variable (Desnes Nunes) [RHEL-13058]
  - usb: gadget: tegra-xudc: Fix crash in vbus_draw (Desnes Nunes) [RHEL-13058]
  - USB: serial: option: add UNISOC vendor and TOZED LT70C product (Desnes Nunes) [RHEL-13058]
  - net: thunderbolt: Fix typos in comments (Desnes Nunes) [RHEL-13058]
  - net: thunderbolt: Fix sparse warnings in tbnet_xmit_csum_and_map() (Desnes Nunes) [RHEL-13058]
  - net: thunderbolt: Fix sparse warnings in tbnet_check_frame() and tbnet_poll() (Desnes Nunes) [RHEL-13058]
  - media: mc-device: remove unnecessary __must_check (Desnes Nunes) [RHEL-13058]
  - media: au0828: remove unnecessary (void*) conversions (Desnes Nunes) [RHEL-13058]
  - USB: core: Fix docs warning caused by wireless_status feature (Desnes Nunes) [RHEL-13058]
  - dt-bindings: Add missing (unevaluated|additional)Properties on child node schemas (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: mediatek,mtk-xhci: drop assigned-clocks (Desnes Nunes) [RHEL-13058]
  - usb: chipidea: imx: avoid unnecessary probe defer (Desnes Nunes) [RHEL-13058]
  - usb: typec: ucsi: acpi: add quirk for ASUS Zenbook UM325 (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: pci: Change PCI device macros (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: tps6598x: make interrupts optional (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: typec-tcpci: convert to DT schema format (Desnes Nunes) [RHEL-13058]
  - usb: typec: tcpm: try to get role switch from tcpc fwnode (Desnes Nunes) [RHEL-13058]
  - USB: core: Add API to change the wireless_status (Desnes Nunes) [RHEL-13058]
  - USB: core: Add wireless_status sysfs attribute (Desnes Nunes) [RHEL-13058]
  - ABI: sysfs-bus-usb: add missing sysfs fields (Desnes Nunes) [RHEL-13058]
  - ABI: sysfs-bus-usb: use a wildcard for interface name on What (Desnes Nunes) [RHEL-13058]
  - ABI: sysfs-bus-usb: better document variable argument (Desnes Nunes) [RHEL-13058]
  - thunderbolt: Introduce usb4_port_sb_opcode_err_to_errno() helper (Desnes Nunes) [RHEL-13058]
  - media: pvrusb2: clean up unneeded complexity in pvrusb2 class logic (Desnes Nunes) [RHEL-13058]
  - usb: move config USB_USS720 to usb's misc Kconfig (Desnes Nunes) [RHEL-13058]
  - usb: gadget: f_ecm: Add suspend/resume and remote wakeup support (Desnes Nunes) [RHEL-13058]
  - usb: gadget: Handle function suspend feature selector (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: Add function suspend and function wakeup support (Desnes Nunes) [RHEL-13058]
  - usb: gadget: Add function wakeup support (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: Add remote wakeup handling (Desnes Nunes) [RHEL-13058]
  - usb: gadget: Properly configure the device for remote wakeup (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: usb-nop-xceiv: add power-domains property (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: ci-hdrc-usb2: convert to DT schema format (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: usbmisc-imx: convert to DT schema (Desnes Nunes) [RHEL-13058]
  - thunderbolt: Make use of SI units from units.h (Desnes Nunes) [RHEL-13058]
  - thunderbolt: Get rid of redundant 'else' (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: host: remove dead code in dwc3_host_get_irq() (Desnes Nunes) [RHEL-13058]
  - usb: pci-quirks: Reduce the length of a spinlock section in usb_amd_find_chipset_info() (Desnes Nunes) [RHEL-13058]
  - xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals (Desnes Nunes) [RHEL-13058]
  - usb: xhci-pci: Set PROBE_PREFER_ASYNCHRONOUS (Desnes Nunes) [RHEL-13058]
  - usb: typec: tps6598x: Add support for polling interrupts status (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: add several registers dump for debugfs (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: snps,dwc3: document HS & SS OF graph ports (Desnes Nunes) [RHEL-13058]
  - usb: typec: ucsi: add PMIC Glink UCSI driver (Desnes Nunes) [RHEL-13058]
  - usb: phy: tegra: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-13058]
  - usb: phy: mxs: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-13058]
  - usb: phy: generic: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: snps,dwc3: correct i.MX8MQ support (Desnes Nunes) [RHEL-13058]
  - USB: serial: quatech2: remove unused qt2_setdevice function (Desnes Nunes) [RHEL-13058]
  - usb: typec: tipd: remove unused tps6598x_write16,32 functions (Desnes Nunes) [RHEL-13058]
  - usb: typec: tcpm: remove unnecessary (void*) conversions (Desnes Nunes) [RHEL-13058]
  - usb: chipidea: debug: remove redundant 'role' debug file (Desnes Nunes) [RHEL-13058]
  - xhci: Move xhci MSI sync function to to xhci-pci (Desnes Nunes) [RHEL-13058]
  - xhci: Call MSI sync function from xhci-pci instead of generic xhci code (Desnes Nunes) [RHEL-13058]
  - xhci: Move functions to cleanup MSI to xhci-pci (Desnes Nunes) [RHEL-13058]
  - xhci: move PCI specific MSI/MSIX cleanup away from generic xhci functions (Desnes Nunes) [RHEL-13058]
  - xhci: Move functions to setup msi to xhci-pci (Desnes Nunes) [RHEL-13058]
  - xhci: Avoid PCI MSI/MSIX interrupt reinitialization at resume (Desnes Nunes) [RHEL-13058]
  - xhci: dbc: Provide sysfs option to configure dbc descriptors (Desnes Nunes) [RHEL-13058]
  - xhci: mem: Join string literals back (Desnes Nunes) [RHEL-13058]
  - xhci: mem: Replace explicit castings with appropriate specifiers (Desnes Nunes) [RHEL-13058]
  - xhci: mem: Use while (i--) pattern to clean up (Desnes Nunes) [RHEL-13058]
  - xhci: mem: Drop useless return:s (Desnes Nunes) [RHEL-13058]
  - xhci: mem: Get rid of redundant 'else' (Desnes Nunes) [RHEL-13058]
  - xhci: mem: Use dma_poll_zalloc() instead of explicit memset() (Desnes Nunes) [RHEL-13058]
  - xhci: mem: Carefully calculate size for memory allocations (Desnes Nunes) [RHEL-13058]
  - redhat/configs: delete ftdi-elan driver config (Desnes Nunes) [RHEL-13058]
  - usb: ftdi-elan: Delete driver (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: Drop unneeded quotes (Desnes Nunes) [RHEL-13058]
  - redhat/configs: delete u132-hcd driver config (Desnes Nunes) [RHEL-13058]
  - usb: host: u132-hcd: Delete driver (Desnes Nunes) [RHEL-13058]
  - usb: host: u132-hcd: Drop if with an always true condition (Desnes Nunes) [RHEL-13058]
  - usb: host: u132-hcd: Various style improvements (Desnes Nunes) [RHEL-13058]
  - media: pvrusb2: VIDEO_PVRUSB2 depends on DVB_CORE to use dvb_* symbols (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: dwc3: Add QCM2290 compatible (Desnes Nunes) [RHEL-13058]
  - usb: misc: usb3503: support usb3803 and bypass mode (Desnes Nunes) [RHEL-13058]
  - usb: misc: usb3503: refactor code to prepare for usb3803 addition (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: smsc,usb3503: Add usb3803 (Desnes Nunes) [RHEL-13058]
  - usb: typec: fusb302: mark OF related data as maybe unused (Desnes Nunes) [RHEL-13058]
  - usb: acpi: Switch to use acpi_evaluate_dsm_typed() (Desnes Nunes) [RHEL-13058]
  - usb: Use of_property_read_bool() for boolean properties (Desnes Nunes) [RHEL-13058]
  - usb: usb251xb: Switch to use dev_err_probe() helper (Desnes Nunes) [RHEL-13058]
  - usb: Use of_property_present() for testing DT property presence (Desnes Nunes) [RHEL-13058]
  - usb: musb: fix error return code in omap2430_probe() (Desnes Nunes) [RHEL-13058]
  - usb: musb: omap2430: Fix probe regression for missing resources (Desnes Nunes) [RHEL-13058]
  - thunderbolt: Refactor DROM reading (Desnes Nunes) [RHEL-13058]
  - thunderbolt: use `tb_eeprom_get_drom_offset` to discover DROM offset (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: snps,dwc3: support i.MX8MQ (Desnes Nunes) [RHEL-13058]
  - usb: xhci: change some trace event __dynamic_array() to __get_buf() (Desnes Nunes) [RHEL-13058]
  - tracing: Acquire buffer from temparary trace sequence (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: change some trace event __dynamic_array() to __get_buf() (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: core: add external vBus supply support for ulpi phy (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: dwc3: Add snps,ulpi-ext-vbus-drv quirk (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: allow evaluated properties in OHCI controllers (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: usb-device: make "compatible" optional (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: snps,dwc3: document extcon property (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: snps,dwc3: Allow power-domains property (Desnes Nunes) [RHEL-13058]
  - usb: host: xhci-tegra: Drop using of_irq_parse_one() (Desnes Nunes) [RHEL-13058]
  - dt-bindings: Fix SPI and I2C bus node names in examples (Desnes Nunes) [RHEL-13058]
  - usb: gadget: Use correct endianness of the wLength field for WebUSB (Desnes Nunes) [RHEL-13058]
  - usb: gadget: add WebUSB landing page support (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: pci: add support for the Intel Meteor Lake-S (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: Fix a typo in field name (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: xilinx: Remove unused of_gpio,h (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: pci: add support for the Intel Meteor Lake-M (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: fix memory leak with using debugfs_lookup() (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: dwc3-imx8mp: add power domain property (Desnes Nunes) [RHEL-13058]
  - ipmi: Explicitly include correct DT includes (Tony Camuso) [RHEL-12707]
  - ipmi_si: fix -Wvoid-pointer-to-enum-cast warning (Tony Camuso) [RHEL-12707]
  - ipmi: fix potential deadlock on &kcs_bmc->lock (Tony Camuso) [RHEL-12707]
  - ipmi_si: fix a memleak in try_smi_init() (Tony Camuso) [RHEL-12707]
  - ipmi: Change request_module to request_module_nowait (Tony Camuso) [RHEL-12707]
  - ipmi:ssif: Fix a memory leak when scanning for an adapter (Tony Camuso) [RHEL-12707]
  - ipmi:ssif: Add check for kstrdup (Tony Camuso) [RHEL-12707]
  - ipmi_watchdog: Fix read syscall not responding to signals during sleep (Tony Camuso) [RHEL-12707]
  - ipmi:ssif: Drop if blocks with always false condition (Tony Camuso) [RHEL-12707]
  - ipmi: fix SSIF not responding under certain cond. (Tony Camuso) [RHEL-12707]
  - ipmi:ssif: Add send_retries increment (Tony Camuso) [RHEL-12707]
  - char:ipmi:Fix spelling mistake "asychronously" -> "asynchronously" (Tony Camuso) [RHEL-12707]
  - ipmi: simplify sysctl registration (Tony Camuso) [RHEL-12707]
  - ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it (Tony Camuso) [RHEL-12707]
  - vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent() (Alex Williamson) [RHEL-14318]
  - vfio: Do not allow !ops->dma_unmap in vfio_pin/unpin_pages() (Alex Williamson) [RHEL-14318]
  - vfio: align capability structures (Alex Williamson) [RHEL-14318]
  - vfio/type1: fix cap_migration information leak (Alex Williamson) [RHEL-14318]
  - vfio/fsl-mc: Use module_fsl_mc_driver macro to simplify the code (Alex Williamson) [RHEL-14318]
  - vfio: Commonize combine_ranges for use in other VFIO drivers (Alex Williamson) [RHEL-14318]
  - kvm/vfio: avoid bouncing the mutex when adding and deleting groups (Alex Williamson) [RHEL-14318]
  - kvm/vfio: ensure kvg instance stays around in kvm_vfio_group_add() (Alex Williamson) [RHEL-14318]
  - docs: vfio: Add vfio device cdev description (Alex Williamson) [RHEL-14318]
  - vfio: Compile vfio_group infrastructure optionally (Alex Williamson) [RHEL-14318]
  - vfio: Move the IOMMU_CAP_CACHE_COHERENCY check in __vfio_register_dev() (Alex Williamson) [RHEL-14318]
  - vfio: Add VFIO_DEVICE_[AT|DE]TACH_IOMMUFD_PT (Alex Williamson) [RHEL-14318]
  - vfio: Add VFIO_DEVICE_BIND_IOMMUFD (Alex Williamson) [RHEL-14318]
  - vfio: Avoid repeated user pointer cast in vfio_device_fops_unl_ioctl() (Alex Williamson) [RHEL-14318]
  - iommufd: Add iommufd_ctx_from_fd() (Alex Williamson) [RHEL-14318]
  - vfio: Test kvm pointer in _vfio_device_get_kvm_safe() (Alex Williamson) [RHEL-14318]
  - vfio: Add cdev for vfio_device (Alex Williamson) [RHEL-14318]
  - vfio: Move device_del() before waiting for the last vfio_device registration refcount (Alex Williamson) [RHEL-14318]
  - vfio: Move vfio_device_group_unregister() to be the first operation in unregister (Alex Williamson) [RHEL-14318]
  - vfio-iommufd: Add detach_ioas support for emulated VFIO devices (Alex Williamson) [RHEL-14318]
  - iommufd/device: Add iommufd_access_detach() API (Alex Williamson) [RHEL-14318]
  - iommufd: Call iopt_area_contig_done() under the lock (Alex Williamson) [RHEL-14318]
  - vfio-iommufd: Add detach_ioas support for physical VFIO devices (Alex Williamson) [RHEL-14318]
  - vfio: Record devid in vfio_device_file (Alex Williamson) [RHEL-14318]
  - vfio-iommufd: Split bind/attach into two steps (Alex Williamson) [RHEL-14318]
  - vfio-iommufd: Move noiommu compat validation out of vfio_iommufd_bind() (Alex Williamson) [RHEL-14318]
  - vfio: Make vfio_df_open() single open for device cdev path (Alex Williamson) [RHEL-14318]
  - vfio: Add cdev_device_open_cnt to vfio_group (Alex Williamson) [RHEL-14318]
  - vfio: Block device access via device fd until device is opened (Alex Williamson) [RHEL-14318]
  - vfio: Pass struct vfio_device_file * to vfio_device_open/close() (Alex Williamson) [RHEL-14318]
  - kvm/vfio: Accept vfio device file from userspace (Alex Williamson) [RHEL-14318]
  - kvm/vfio: Prepare for accepting vfio device fd (Alex Williamson) [RHEL-14318]
  - vfio: Accept vfio device file in the KVM facing kAPI (Alex Williamson) [RHEL-14318]
  - vfio: Refine vfio file kAPIs for KVM (Alex Williamson) [RHEL-14318]
  - vfio: Allocate per device file structure (Alex Williamson) [RHEL-14318]
  - vfio/pci: Allow passing zero-length fd array in VFIO_DEVICE_PCI_HOT_RESET (Alex Williamson) [RHEL-14318]
  - vfio/pci: Copy hot-reset device info to userspace in the devices loop (Alex Williamson) [RHEL-14318]
  - vfio/pci: Extend VFIO_DEVICE_GET_PCI_HOT_RESET_INFO for vfio device cdev (Alex Williamson) [RHEL-14318]
  - vfio: Add helper to search vfio_device in a dev_set (Alex Williamson) [RHEL-14318]
  - vfio: Mark cdev usage in vfio_device (Alex Williamson) [RHEL-14318]
  - iommufd: Add helper to retrieve iommufd_ctx and devid (Alex Williamson) [RHEL-14318]
  - iommufd: Add iommufd_ctx_has_group() (Alex Williamson) [RHEL-14318]
  - iommufd: Reserve all negative IDs in the iommufd xarray (Alex Williamson) [RHEL-14318]
  - vfio/pci: Move the existing hot reset logic to be a helper (Alex Williamson) [RHEL-14318]
  - vfio/pci: Update comment around group_fd get in vfio_pci_ioctl_pci_hot_reset() (Alex Williamson) [RHEL-14318]
  - vfio/mdev: Move the compat_class initialization to module init (Alex Williamson) [RHEL-14318]
  - vfio/fsl: Create Kconfig sub-menu (Alex Williamson) [RHEL-14318]
  - redhat/configs: Disable CONFIG_VFIO_AMBA (Alex Williamson) [RHEL-14318]
  - vfio/platform: Cleanup Kconfig (Alex Williamson) [RHEL-14318]
  - vfio/pci: Cleanup Kconfig (Alex Williamson) [RHEL-14318]
  - vfio/pci-core: Add capability for AtomicOp completer support (Alex Williamson) [RHEL-14318]
  - vfio/pci: Clear VFIO_IRQ_INFO_NORESIZE for MSI-X (Alex Williamson) [RHEL-14318]
  - vfio/pci: Support dynamic MSI-X (Alex Williamson) [RHEL-14318]
  - vfio/pci: Probe and store ability to support dynamic MSI-X (Alex Williamson) [RHEL-14318]
  - vfio/pci: Use bitfield for struct vfio_pci_core_device flags (Alex Williamson) [RHEL-14318]
  - vfio/pci: Update stale comment (Alex Williamson) [RHEL-14318]
  - vfio/pci: Remove interrupt context counter (Alex Williamson) [RHEL-14318]
  - vfio/pci: Use xarray for interrupt context storage (Alex Williamson) [RHEL-14318]
  - vfio/pci: Move to single error path (Alex Williamson) [RHEL-14318]
  - vfio/pci: Prepare for dynamic interrupt context storage (Alex Williamson) [RHEL-14318]
  - vfio/pci: Remove negative check on unsigned vector (Alex Williamson) [RHEL-14318]
  - vfio/pci: Consolidate irq cleanup on MSI/MSI-X disable (Alex Williamson) [RHEL-14318]
  - vfio/ccw: use struct_size() helper (Alex Williamson) [RHEL-14318]
  - vfio/ccw: replace one-element array with flexible-array member (Alex Williamson) [RHEL-14318]
  - vfio/type1: check pfn valid before converting to struct page (Alex Williamson) [RHEL-14318]
  - docs: kvm: vfio: Suggest KVM_DEV_VFIO_GROUP_ADD vs VFIO_GROUP_GET_DEVICE_FD ordering (Alex Williamson) [RHEL-14318]
  - vfio: correct kdoc for ops structures (Alex Williamson) [RHEL-14318]
  - vfio/pci: Add DVSEC PCI Extended Config Capability to user visible list. (Alex Williamson) [RHEL-14318]
  - vfio: Check the presence for iommufd callbacks in __vfio_register_dev() (Alex Williamson) [RHEL-14318]
  - vfio/mdev: Uses the vfio emulated iommufd ops set in the mdev sample drivers (Alex Williamson) [RHEL-14318]
  - vfio-iommufd: Make vfio_iommufd_emulated_bind() return iommufd_access ID (Alex Williamson) [RHEL-14318]
  - vfio-iommufd: No need to record iommufd_ctx in vfio_device (Alex Williamson) [RHEL-14318]
  - iommufd: Create access in vfio_iommufd_emulated_bind() (Alex Williamson) [RHEL-14318]
  - iommu/iommufd: Pass iommufd_ctx pointer in iommufd_get_ioas() (Alex Williamson) [RHEL-14318]
  - nvme: avoid bogus CRTO values (Maurizio Lombardi) [RHEL-11472]
  - nvme-pci: do not set the NUMA node of device if it has none (Maurizio Lombardi) [RHEL-11472]
  - nvme: host: hwmon: constify pointers to hwmon_channel_info (Maurizio Lombardi) [RHEL-11472]
  - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Maurizio Lombardi) [RHEL-11472]
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G (Maurizio Lombardi) [RHEL-11472]
  - scsi: nvme: zns: Set zone limits before revalidating zones (Maurizio Lombardi) [RHEL-11472]
  - nvme: don't reject probe due to duplicate IDs for single-ported PCIe devices (Maurizio Lombardi) [RHEL-11472]
  - nvme-fc: fix race between error recovery and creating association (Maurizio Lombardi) [RHEL-11472]
  - nvme-fc: return non-zero status code when fails to create association (Maurizio Lombardi) [RHEL-11472]
  - nvme: fix parameter check in nvme_fault_inject_init() (Maurizio Lombardi) [RHEL-11472]
  - nvme: warn only once for legacy uuid attribute (Maurizio Lombardi) [RHEL-11472]
  - nvme: forward port sysfs delete fix (Maurizio Lombardi) [RHEL-11472]
  - nvme: skip optional id ctrl csi if it failed (Maurizio Lombardi) [RHEL-11472]
  - nvme-core: use nvme_ns_head_multipath instead of ns->head->disk (Maurizio Lombardi) [RHEL-11472]
  - nvmet-fcloop: Do not wait on completion when unregister fails (Maurizio Lombardi) [RHEL-11472]
  - nvme: Increase block size variable size to 32-bit (Maurizio Lombardi) [RHEL-11472]
  - nvme-fcloop: no need to return from void function (Maurizio Lombardi) [RHEL-11472]
  - nvmet-auth: remove unnecessary break after goto (Maurizio Lombardi) [RHEL-11472]
  - nvmet-auth: remove some dead code (Maurizio Lombardi) [RHEL-11472]
  - nvme: move sysfs code to a dedicated sysfs.c file (Maurizio Lombardi) [RHEL-11472]
  - nvme-fabrics: check hostid using uuid_equal (Maurizio Lombardi) [RHEL-11472]
  - nvme-fabrics: unify common code in admin and io queue connect (Maurizio Lombardi) [RHEL-11472]
  - nvmet: reorder fields in 'struct nvmefc_fcp_req' (Maurizio Lombardi) [RHEL-11472]
  - nvmet: reorder fields in 'struct nvme_dhchap_queue_context' (Maurizio Lombardi) [RHEL-11472]
  - nvmet: reorder fields in 'struct nvmf_ctrl_options' (Maurizio Lombardi) [RHEL-11472]
  - nvme: reorder fields in 'struct nvme_ctrl' (Maurizio Lombardi) [RHEL-11472]
  - nvmet: reorder fields in 'struct nvmet_sq' (Maurizio Lombardi) [RHEL-11472]
  - nvme-fabrics: add queue setup helpers (Maurizio Lombardi) [RHEL-11472]
  - nvme-pci: cleaning up nvme_pci_init_request (Maurizio Lombardi) [RHEL-11472]
  - nvme-rdma: fix typo in comment (Maurizio Lombardi) [RHEL-11472]
  - nvme-tcp: fix a possible UAF when failing to allocate an io queue (Maurizio Lombardi) [RHEL-11472]
  - nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (Maurizio Lombardi) [RHEL-11472]
  - nvme-tcp: fix nvme_tcp_term_pdu to match spec (Maurizio Lombardi) [RHEL-11472]
  - nvme: send Identify with CNS 06h only to I/O controllers (Maurizio Lombardi) [RHEL-11472]
  - nvmet-tcp: Fix a possible UAF in queue intialization setup (John Meneghini) [RHEL-11488 RHEL-11492] {CVE-2023-5178}
  - sched: remove wait bookmarks (Carlos Maiolino) [RHEL-5335]
  - filemap: remove use of wait bookmarks (Carlos Maiolino) [RHEL-5335]
  - ext4: fix rec_len verify error (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unused parameter from ext4_mb_new_blocks_simple() (Carlos Maiolino) [RHEL-5335]
  - ext4: fix wrong unit use in ext4_mb_new_blocks (Carlos Maiolino) [RHEL-5335]
  - ext4: fix wrong unit use in ext4_mb_clear_bb (Carlos Maiolino) [RHEL-5335]
  - ext4: treat stripe in block unit (Carlos Maiolino) [RHEL-5335]
  - ext4: fix wrong unit use in ext4_mb_find_by_goal (Carlos Maiolino) [RHEL-5335]
  - ext4: fix wrong unit use in ext4_mb_normalize_request (Carlos Maiolino) [RHEL-5335]
  - ext4: only check dquot_initialize_needed() when debugging (Carlos Maiolino) [RHEL-5335]
  - Revert "ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled" (Carlos Maiolino) [RHEL-5335]
  - Revert "ext4: remove ac->ac_found > sbi->s_mb_min_to_scan dead check in ext4_mb_check_limits" (Carlos Maiolino) [RHEL-5335]
  - ext4: enable the lazy init thread when remounting read/write (Carlos Maiolino) [RHEL-5335]
  - ext4: fix fsync for non-directories (Carlos Maiolino) [RHEL-5335]
  - ext4: add lockdep annotations for i_data_sem for ea_inode's (Carlos Maiolino) [RHEL-5335]
  - ext4: disallow ea_inodes with extended attributes (Carlos Maiolino) [RHEL-5335]
  - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (Carlos Maiolino) [RHEL-5335]
  - ext4: add EA_INODE checking to ext4_iget() (Carlos Maiolino) [RHEL-5335]
  - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Carlos Maiolino) [RHEL-5335]
  - ext4: add bounds checking in get_max_inline_xattr_value_size() (Carlos Maiolino) [RHEL-5335]
  - ext4: add indication of ro vs r/w mounts in the mount message (Carlos Maiolino) [RHEL-5335]
  - ext4: fix deadlock when converting an inline directory in nojournal mode (Carlos Maiolino) [RHEL-5335]
  - ext4: improve error recovery code paths in __ext4_remount() (Carlos Maiolino) [RHEL-5335]
  - ext4: improve error handling from ext4_dirhash() (Carlos Maiolino) [RHEL-5335]
  - ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled (Carlos Maiolino) [RHEL-5335]
  - ext4: check iomap type only if ext4_iomap_begin() does not fail (Carlos Maiolino) [RHEL-5335]
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Carlos Maiolino) [RHEL-5335]
  - ext4: fix data races when using cached status extents (Carlos Maiolino) [RHEL-5335]
  - ext4: avoid deadlock in fs reclaim with page writeback (Carlos Maiolino) [RHEL-5335]
  - ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Carlos Maiolino) [RHEL-5335]
  - ext4: fix lockdep warning when enabling MMP (Carlos Maiolino) [RHEL-5335]
  - ext4: fix WARNING in mb_find_extent (Carlos Maiolino) [RHEL-5335]
  - ext4: reflect error codes from ext4_multi_mount_protect() to its callers (Carlos Maiolino) [RHEL-5335]
  - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (Carlos Maiolino) [RHEL-5335]
  - ext4: fix i_disksize exceeding i_size problem in paritally written case (Carlos Maiolino) [RHEL-5335]
  - jdb2: Don't refuse invalidation of already invalidated buffers (Carlos Maiolino) [RHEL-5335]
  - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow (Carlos Maiolino) [RHEL-5335]
  - ext4: add two helper functions extent_logical_end() and pa_logical_end() (Carlos Maiolino) [RHEL-5335]
  - ext4: fix rbtree traversal bug in ext4_mb_use_preallocated (Carlos Maiolino) [RHEL-5335]
  - ext4: Remove unused extern variables declaration (Carlos Maiolino) [RHEL-5335]
  - ext4: mballoc: Remove useless setting of ac_criteria (Carlos Maiolino) [RHEL-5335]
  - ext4: try all groups in ext4_mb_new_blocks_simple (Carlos Maiolino) [RHEL-5335]
  - ext4: remove ext4_block_group and ext4_block_group_offset declaration (Carlos Maiolino) [RHEL-5335]
  - ext4: add EXT4_MB_HINT_GOAL_ONLY test in ext4_mb_use_preallocated (Carlos Maiolino) [RHEL-5335]
  - ext4: fix unit mismatch in ext4_mb_new_blocks_simple (Carlos Maiolino) [RHEL-5335]
  - ext4: Remove the logic to trim inode PAs (Carlos Maiolino) [RHEL-5335]
  - ext4: Use rbtrees to manage PAs instead of inode i_prealloc_list (Carlos Maiolino) [RHEL-5335]
  - ext4: Convert pa->pa_inode_list and pa->pa_obj_lock into a union (Carlos Maiolino) [RHEL-5335]
  - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Carlos Maiolino) [RHEL-5335]
  - ext4: Abstract out overlap fix/check logic in ext4_mb_normalize_request() (Carlos Maiolino) [RHEL-5335]
  - ext4: Move overlap assert logic into a separate function (Carlos Maiolino) [RHEL-5335]
  - ext4: Refactor code in ext4_mb_normalize_request() and ext4_mb_use_preallocated() (Carlos Maiolino) [RHEL-5335]
  - ext4: Refactor code related to freeing PAs (Carlos Maiolino) [RHEL-5335]
  - ext4: Stop searching if PA doesn't satisfy non-extent file (Carlos Maiolino) [RHEL-5335]
  - ext4: convert some BUG_ON's in mballoc to use WARN_RATELIMITED instead (Carlos Maiolino) [RHEL-5335]
  - ext4: avoid unnecessary pointer dereference in ext4_mb_normalize_request (Carlos Maiolino) [RHEL-5335]
  - ext4: fix typos in mballoc (Carlos Maiolino) [RHEL-5335]
  - ext4: simplify calculation of blkoff in ext4_mb_new_blocks_simple (Carlos Maiolino) [RHEL-5335]
  - ext4: remove comment code ext4_discard_preallocations (Carlos Maiolino) [RHEL-5335]
  - ext4: remove repeat assignment to ac_f_ex (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unnecessary goto in ext4_mb_mark_diskspace_used (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unnecessary count2 in ext4_free_data_in_buddy (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unnecessary exit_meta_group_info tag (Carlos Maiolino) [RHEL-5335]
  - ext4: use best found when complex scan of group finishs (Carlos Maiolino) [RHEL-5335]
  - ext4: remove ac->ac_found > sbi->s_mb_min_to_scan dead check in ext4_mb_check_limits (Carlos Maiolino) [RHEL-5335]
  - ext4: remove dead check in mb_buddy_mark_free (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unnecessary check in ext4_mb_new_blocks (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unnecessary e4b->bd_buddy_page check in ext4_mb_load_buddy_gfp (Carlos Maiolino) [RHEL-5335]
  - ext4: Remove unnecessary release when memory allocation failed in ext4_mb_init_cache (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unused return value of ext4_mb_try_best_found and ext4_mb_free_metadata (Carlos Maiolino) [RHEL-5335]
  - ext4: add missed brelse in ext4_free_blocks_simple (Carlos Maiolino) [RHEL-5335]
  - ext4: protect pa->pa_free in ext4_discard_allocated_blocks (Carlos Maiolino) [RHEL-5335]
  - ext4: correct start of used group pa for debug in ext4_mb_use_group_pa (Carlos Maiolino) [RHEL-5335]
  - ext4: correct calculation of s_mb_preallocated (Carlos Maiolino) [RHEL-5335]
  - ext4: get correct ext4_group_info in ext4_mb_prefetch_fini (Carlos Maiolino) [RHEL-5335]
  - ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set (Carlos Maiolino) [RHEL-5335]
  - ext4: set goal start correctly in ext4_mb_normalize_request (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unused group parameter in ext4_block_bitmap_csum_set (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unused group parameter in ext4_block_bitmap_csum_verify (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unused group parameter in ext4_inode_bitmap_csum_set (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unused group parameter in ext4_inode_bitmap_csum_verify (Carlos Maiolino) [RHEL-5335]
  - ext4: improve inode table blocks counting in ext4_num_overhead_clusters (Carlos Maiolino) [RHEL-5335]
  - ext4: stop trying to verify just initialized bitmap in ext4_read_block_bitmap_nowait (Carlos Maiolino) [RHEL-5335]
  - ext4: remove stale comment in ext4_init_block_bitmap (Carlos Maiolino) [RHEL-5335]
  - Revert "ext4: remove unnecessary check in ext4_bg_num_gdb_nometa" (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unnecessary check in ext4_bg_num_gdb_nometa (Carlos Maiolino) [RHEL-5335]
  - ext4: call ext4_bg_num_gdb_[no]meta directly in ext4_num_base_meta_clusters (Carlos Maiolino) [RHEL-5335]
  - ext4: correct validation check of inode table in ext4_valid_block_bitmap (Carlos Maiolino) [RHEL-5335]
  - ext4: properly handle error of ext4_init_block_bitmap in ext4_read_block_bitmap_nowait (Carlos Maiolino) [RHEL-5335]
  - ext4: Move mpage_page_done() calls after error handling (Carlos Maiolino) [RHEL-5335]
  - ext4: Move page unlocking out of mpage_submit_page() (Carlos Maiolino) [RHEL-5335]
  - ext4: Don't unlock page in ext4_bio_write_page() (Carlos Maiolino) [RHEL-5335]
  - ext4: Mark page for delayed dirtying only if it is pinned (Carlos Maiolino) [RHEL-5335]
  - ext4: Use nr_to_write directly in mpage_prepare_extent_to_map() (Carlos Maiolino) [RHEL-5335]
  - ext4: Update stale comment about write constraints (Carlos Maiolino) [RHEL-5335]
  - ext4: convert mext_page_double_lock() to mext_folio_double_lock() (Carlos Maiolino) [RHEL-5335]
  - ext4: simplify ext4_readpage_limit() (Carlos Maiolino) [RHEL-5335]
  - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (Carlos Maiolino) [RHEL-5335]
  - ext4: avoid unaccounted block allocation when expanding inode (Carlos Maiolino) [RHEL-5335]
  - ext4: initialize quota before expanding inode in setproject ioctl (Carlos Maiolino) [RHEL-5335]
  - ext4: stop providing .writepage hook (Carlos Maiolino) [RHEL-5335]
  - mm: export buffer_migrate_folio_norefs() (Carlos Maiolino) [RHEL-5335]
  - ext4: switch to using write_cache_pages() for data=journal writeout (Carlos Maiolino) [RHEL-5335]
  - jbd2: switch jbd2_submit_inode_data() to use fs-provided hook for data writeout (Carlos Maiolino) [RHEL-5335]
  - ext4: switch to using ext4_do_writepages() for ordered data writeout (Carlos Maiolino) [RHEL-5335]
  - ext4: move percpu_rwsem protection into ext4_writepages() (Carlos Maiolino) [RHEL-5335]
  - ext4: provide ext4_do_writepages() (Carlos Maiolino) [RHEL-5335]
  - ext4: add support for writepages calls that cannot map blocks (Carlos Maiolino) [RHEL-5335]
  - ext4: drop pointless IO submission from ext4_bio_write_page() (Carlos Maiolino) [RHEL-5335]
  - ext4: remove nr_submitted from ext4_bio_write_page() (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unneeded check of nr_to_submit (Carlos Maiolino) [RHEL-5335]
  - ext4: move keep_towrite handling to ext4_bio_write_page() (Carlos Maiolino) [RHEL-5335]
  - ext4: handle redirtying in ext4_bio_write_page() (Carlos Maiolino) [RHEL-5335]
  - ext4: make ext4_mb_initialize_context return void (Carlos Maiolino) [RHEL-5335]
  - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (Carlos Maiolino) [RHEL-5335]
  - ext4: don't fail GETFSUUID when the caller provides a long buffer (Carlos Maiolino) [RHEL-5335]
  - ext4: dont return EINVAL from GETFSUUID when reporting UUID length (Carlos Maiolino) [RHEL-5335]
  - ext4: fix error code return to user-space in ext4_get_branch() (Carlos Maiolino) [RHEL-5335]
  - ext4: replace kmem_cache_create with KMEM_CACHE (Carlos Maiolino) [RHEL-5335]
  - ext4: correct inconsistent error msg in nojournal mode (Carlos Maiolino) [RHEL-5335]
  - ext4: print file system UUID on mount, remount and unmount (Carlos Maiolino) [RHEL-5335]
  - ext4: init quota for 'old.inode' in 'ext4_rename' (Carlos Maiolino) [RHEL-5335]
  - ext4: simplify fast-commit CRC calculation (Carlos Maiolino) [RHEL-5335]
  - ext4: fix use-after-free in ext4_orphan_cleanup (Carlos Maiolino) [RHEL-5335]
  - ext4: don't allow journal inode to have encrypt flag (Carlos Maiolino) [RHEL-5335]
  - ext4: fix bug_on in __es_tree_search caused by bad quota inode (Carlos Maiolino) [RHEL-5335]
  - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (Carlos Maiolino) [RHEL-5335]
  - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (Carlos Maiolino) [RHEL-5335]
  - ext4: add helper to check quota inums (Carlos Maiolino) [RHEL-5335]
  - ext4: remove trailing newline from ext4_msg() message (Carlos Maiolino) [RHEL-5335]
  - ext4: split ext4_journal_start trace for debug (Carlos Maiolino) [RHEL-5335]
  - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-5335]
  - ext4: remove redundant variable err (Carlos Maiolino) [RHEL-5335]
  - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (Carlos Maiolino) [RHEL-5335]
  - fs/ext4: replace ternary operator with min()/max() and min_t() (Carlos Maiolino) [RHEL-5335]
  - ext4: check and assert if marking an no_delete evicting inode dirty (Carlos Maiolino) [RHEL-5335]
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Florian Westphal) [RHEL-8437] {CVE-2023-42753}
  - arm64: dts: imx8mq: Deduplicate PCIe clock-names property (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mm-verdin: Do not power down eth-phy (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mp: fix address length for LCDIF2 (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mp: Fix LCDIF2 node clock order (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mp: Drop simple-bus from fsl,imx8mp-media-blk-ctrl (Steve Best) [RHEL-2711]
  - Revert "arm64: dts: ls1028a: sl28: get MAC addresses from VPD" (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (Steve Best) [RHEL-2711]
  - arm64: dts: verdin-imx8mp: unify gpio-key node name (Steve Best) [RHEL-2711]
  - arm64: dts: ls1028a: sl28: get MAC addresses from VPD (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mp: Add LCDIF2 & LDB nodes (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mp: use syscon for iomuxc-gpr (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mn: update iomuxc-gpr node name (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mm: correct iomuxc-gpr compatible (Steve Best) [RHEL-2711]
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ricardo Robaina) [RHEL-7186 RHEL-7264] {CVE-2023-3812}
  - serial: fsl_lpuart: Reset prior to registration (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: don't break the on-going transfer when global reset (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: count tty buffer overruns (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: Add i.MXRT1050 support (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: add timeout for wait_event_interruptible in .shutdown() (Steve Best) [RHEL-2715]
  - Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP" (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: do software reset for imx7ulp and imx8qxp (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: enable two stop bits for lpuart32 (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: fix the wrong mapbase value (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: check dma_tx_in_progress in tx dma callback (Steve Best) [RHEL-2715]
  - Bluetooth: hci_sync: Fix handling of HCI_QUIRK_STRICT_DUPLICATE_FILTER (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix hci_link_tx_to RCU lock usage (Bastien Nocera) [RHEL-2530]
  - redhat/configs: Disable NXP Bluetooth driver by default (Bastien Nocera) [RHEL-2530]
  - New configs in net/bluetooth (Bastien Nocera) [RHEL-2530]
  - New configs in drivers/bluetooth (Bastien Nocera) [RHEL-2530]
  - PCI: Add locking to RMW PCI Express Capability Register accessors (Bastien Nocera) [RHEL-2530]
  - Bluetooth: MGMT: Use correct address for memcpy() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_event: call disconnect callback before deleting conn (Bastien Nocera) [RHEL-2530]
  - Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync (Bastien Nocera) [RHEL-2530]
  - virtio_bt: call scheduler when we free unused buffs (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Use kmemdup() to replace kzalloc + memcpy (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (Bastien Nocera) [RHEL-2530]
  - Bluetooth: MGMT: Fix marking SCAN_RSP as not connectable (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_event: fix Set CIG Parameters error status handling (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm: do not mark valid bd_addr as invalid (Bastien Nocera) [RHEL-2530]
  - Bluetooth: fix use-bdaddr-property quirk (Bastien Nocera) [RHEL-2530]
  - Bluetooth: fix invalid-bdaddr quirk for non-persistent setup (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Bastien Nocera) [RHEL-2530 RHEL-2717] {CVE-2023-40283}
  - Bluetooth: L2CAP: Fix use-after-free (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btqca: use le32_to_cpu for ver.soc_id (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add device 6655:8771 to device tables (Bastien Nocera) [RHEL-2530]
  - dt-bindings: net: bluetooth: nxp: Add missing type for "fw-init-baudrate" (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix potential use-after-free when clear keys (Bastien Nocera) [RHEL-2530]
  - Bluetooth: HCI: Introduce HCI_QUIRK_BROKEN_LE_CODED (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: avoid checking uninitialized CIG/CIS ids (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix not allowing valid CIS ID (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix modifying handle while aborting (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: handle bound CIS cleanup via hci_conn (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Notify user space about failed bis connections (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Always allocate unique handles (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Fix not handling ISO_LINK in hci_abort_conn_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Consolidate code for aborting connections (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Support multiple BIGs (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Load FW v2 otherwise FW v1 for RTL8852C (Bastien Nocera) [RHEL-2530]
  - Bluetooth: msft: Extended monitor tracking by address filter (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Correct the length of the HCI command for drop fw (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Add Realtek devcoredump support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Add missing MODULE_FIRMWARE declarations (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: do not emit new LE Create CIS if previous is pending (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_event: Fix parsing of CIS Established Event (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Rework sync_interval to be sync_factor (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Add support for connecting multiple BISes (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: use hci_sync for setting CIG parameters (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Fix bluetooth on Intel Macbook 2014 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link (Bastien Nocera) [RHEL-2530]
  - Bluetooth: SCO: fix sco_conn related locking and validity issues (Bastien Nocera) [RHEL-2530]
  - Bluetooth: coredump: fix building with coredump disabled (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: fix iso_conn related locking and validity issues (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Add missing checks for invalid DCID (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: use correct CIS order in Set CIG Parameters event (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix l2cap_disconnect_req deadlock (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: fix debugfs registration (Bastien Nocera) [RHEL-2530]
  - Bluetooth: fix debugfs registration (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: consider right CIS when removing CIG at cleanup (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btnxpuart: Fix compiler warnings (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Unlink CISes when LE disconnects in hci_conn_del (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix UAF in hci_conn_hash_flush again (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Refcnt drop must be placed last in hci_conn_unlink (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix potential double free caused by hci_conn_unlink (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add WCN6855 devcoredump support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btnxpuart: Enable flow control before checking boot signature (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Cancel sync command before suspend and power off (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Add the support for RTL8851B (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btnxpuart: Fix sparse warnings (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Firmware format v2 support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Devcoredump: Fix storing u32 without specifying byte order issue (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (Bastien Nocera) [RHEL-2530]
  - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (Bastien Nocera) [RHEL-2530]
  - Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add new quirk for broken set random RPA timeout for ATS2851 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix not waiting for HCI_EVT_LE_CIS_ESTABLISHED (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix not matching by CIS ID (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Add support for linking multiple hcon (Bastien Nocera) [RHEL-2530]
  - Bluetooth: vhci: Fix info leak in force_devcd_write() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: mark OF related data as maybe unused (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: remove extra line in hci_le_big_create_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: fix inconsistent indenting (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btnxpuart: No need to check the received bootloader signature (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btnxpuart: Disable Power Save feature on startup (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btnxpuart: Deasset UART break before closing serdev device (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btnxpuart: Add support to download helper FW file for w8997 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm: Add Acer Iconia One 7 B1-750 to the bcm_broken_irq_dmi_table (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm: Add Lenovo Yoga Tablet 2 830 / 1050 to the bcm_broken_irq_dmi_table (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm: Limit bcm43430a0 / bcm43430a1 baudrate to 2000000 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_h5: Complements reliable packet processing logic (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Enable all supported LE PHY by default (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Split bt_iso_qos into dedicated structures (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Add Intel devcoredump support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add btusb devcoredump support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add vhci devcoredump support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add support for hci devcoredump (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Add LE States quirk support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: Add support for QTI Bluetooth chip wcn6855 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: check for NULL in btrtl_set_quirks() (Bastien Nocera) [RHEL-2530]
  - bluetooth: Add device 13d3:3571 to device tables (Bastien Nocera) [RHEL-2530]
  - bluetooth: Add device 0bda:887b to device tables (Bastien Nocera) [RHEL-2530]
  - Bluetooth: NXP: select CONFIG_CRC8 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: NXP: Add protocol support for NXP Bluetooth chipsets (Bastien Nocera) [RHEL-2530]
  - dt-bindings: net: bluetooth: Add NXP bluetooth support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_ldisc: Fix tty_set_termios() return value assumptions (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Improve support for Actions Semi ATS2851 based devices (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: add support for the RTL8723CS (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add new quirk for broken local ext features page 2 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btmtkuart: mark OF related data as maybe unused (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: mark OF related data as maybe unused (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btmrvl_sdio: mark OF related data as maybe unused (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_ll: drop of_match_ptr for ID table (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Delay identity address updates (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Remove duplicate statement (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Convert MSFT filter HCI cmd to hci_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Don't wait peer's reply when powering off (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add VID/PID 0489/e0e4 for MediaTek MT7922 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_h5: btrtl: Add support for RTL8821CS (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add new PID/VID 04ca:3801 for MT7663 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Fix smatch warning (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_core: Make hci_conn_hash_add append to the list (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Add support for RTL8852BS (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_mrvl: Add serdev support for 88W8997 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_mrvl: use maybe_unused macro for device tree ids (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Do not require hardcoded interface numbers (Bastien Nocera) [RHEL-2530]
  - Bluetooth: MGMT: Use BIT macro when defining bitfields (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Set ISO Data Path on broadcast sink (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix possible UAF (Bastien Nocera) [RHEL-2530]
  - Bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt (Bastien Nocera) [RHEL-2530]
  - Bluetooth: SCO: Fix possible circular locking dependency on sco_connect_cfm (Bastien Nocera) [RHEL-2530]
  - bluetooth: btbcm: Fix logic error in forming the board name. (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix race condition in hidp_session_thread (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix printing errors if LE Connection times out (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (Bastien Nocera) [RHEL-2530]
  - Bluetooth: HCI: Fix global-out-of-bounds (Bastien Nocera) [RHEL-2530 RHEL-2556] {CVE-2023-28866}
  - Bluetooth: mgmt: Fix MGMT add advmon with RSSI command (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Fix responding with wrong PDU type (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btqcomsmd: Fix command timeout after setting BD address (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btinel: Check ACPI handle for NULL before accessing (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Remove "Power-on" check from Mesh feature (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix race condition in hci_cmd_sync_clear (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Iterate only bluetooth device ACPI entries (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: fix timestamped HCI ISO data packet parsing (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Remove detection of ISO packets over bulk (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_core: Detect if an ACL packet is in fact an ISO packet (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Resume adv with no RPA when active scan (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Set Per Platform Antenna Gain(PPAG) (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Make sure LE create conn cancel is sent when timeout (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Free potentially unfreed SCO connection (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: get wakeup status from serdev device handle (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Fix potential user-after-free (Bastien Nocera) [RHEL-2530]
  - Bluetooth: MGMT: add CIS feature bits to controller information (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds (Bastien Nocera) [RHEL-2530]
  - Bluetooth: HCI: Replace zero-length arrays with flexible-array members (Bastien Nocera) [RHEL-2530]
  - Bluetooth: qca: Fix sparse warnings (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add new PID/VID 0489:e0f2 for MT7921 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix issue with Actions Semi ATS2851 based devices (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Use crypto_wait_req (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix possible deadlock in rfcomm_sk_state_change (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Fix possible circular locking dependency (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_event: Fix Invalid wait context (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Fix possible circular locking dependency (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: fix memory leak in hci_update_adv_data() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: Fix driver shutdown on closed serdev (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix memory leaks (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix a buffer overflow in mgmt_mesh_add() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Wait for HCI_OP_WRITE_AUTH_PAYLOAD_TO to complete (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Avoid circular locking dependency (Bastien Nocera) [RHEL-2530]
  - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Fix existing sparce warnings (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Fix existing sparce warning (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Fix new sparce warnings (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add a new PID/VID 13d3/3549 for RTL8822CU (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add a new VID/PID 0489/e0f2 for MT7922 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm4377: Fix missing pci_disable_device() on error in bcm4377_probe() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add Realtek 8761BUV support ID 0x2B89:0x8761 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm4377: Add new driver for BCM4377 PCIe boards (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add quirk to disable MWS Transport Configuration (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add quirk to disable extended scanning (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_event: Ignore reserved bits in LE Extended Adv Report (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm: Add CYW4373A0 support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Use kzalloc instead of kmalloc/memset (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add more device IDs for WCN6855 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix EALREADY and ELOOP cases in bt_status() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add CONFIG_BT_LE_L2CAP_ECRED (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Default CONFIG_BT_HCIBTUSB_POLL_SYNC=y (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add CONFIG_BT_HCIBTUSB_POLL_SYNC (Bastien Nocera) [RHEL-2530]
  - virtio_bt: Fix alignment in configuration struct (Bastien Nocera) [RHEL-2530]
  - Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_core: fix error handling in hci_register_dev() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Use kzalloc instead of kmalloc/memset (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: only assign wakeup with serial port support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: use HCI dst_type values also for BIS (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Ignore zero length of USB packets on ALT 6 for specific chip (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Add btrealtek data struct (Bastien Nocera) [RHEL-2530]
  - Bluetooth: virtio_bt: fix device removal (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Fix not able to set force_static_address (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Fix not setting static address (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Work around SCO over USB HCI design defect (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Introduce generic USB reset (Bastien Nocera) [RHEL-2530]
  - btusb: Avoid reset of ISOC endpoint alt settings to zero (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: Fix the teardown problem for real (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix crash when replugging CSR fake controllers (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix not cleanup led when bt_init fails (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix support for Read Local Supported Codecs V2 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Remove codec id field in vendor codec definition (Bastien Nocera) [RHEL-2530]
  - Bluetooth: silence a dmesg error message in hci_request.c (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: add missing hci_dev_put() in iso_listen_bis() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add debug message for CSR controllers (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Fix CSR clones again by re-adding ERR_DATA_REPORTING quirk (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Bastien Nocera) [RHEL-2530]
  - Bluetooth: virtio_bt: Use skb_put to set length (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Fix not indicating power state (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Fix user-after-free (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Call shutdown for HCI_USER_CHANNEL (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_core: Fix not handling link timeouts propertly (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_event: Make sure ISO events don't affect non-ISO connections (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_debugfs: Fix not checking conn->debugfs (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (Bastien Nocera) [RHEL-2530]
  - Bluetooth: MGMT: fix zalloc-simple.cocci warnings (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: allow advertise when scan without RPA (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add a new VID/PID 0e8d/0608 for MT7921 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add a new PID/VID 13d3/3583 for MT7921 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Add support for Magnetor (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add a new PID/VID 13d3/3578 for MT7921 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add experimental wrapper for MGMT based mesh (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Implement support for Mesh (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add BT device 0cb8:c549 from RTW8852AE to tables (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add RTL8761BUV device (Edimax BT-8500) (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: RTL8761BUV consistent naming (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3592 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Move hci_abort_conn to hci_conn.c (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Normalize HCI_OP_READ_ENC_KEY_SIZE cmdcmplt (Bastien Nocera) [RHEL-2530]
  - Bluetooth: convert hci_update_adv_data to hci_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: move hci_get_random_address() to hci_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Delete unreferenced hci_request code (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Move Adv Instance timer to hci_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Convert SCO configure_datapath to hci_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Delete unused hci_req_stop_discovery() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Rework le_scan_restart for hci_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Convert le_scan_disable timeout to hci_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: clean up error pointer checking (Bastien Nocera) [RHEL-2530]
  - regmap: Account for register length in SMBus I/O limits (Mark Langsdorf) [RHEL-1023]
  - regmap: Drop initial version of maximum transfer length fixes (Mark Langsdorf) [RHEL-1023]
  - regmap: spi-avmm: Fix regmap_bus max_raw_write (Mark Langsdorf) [RHEL-1023]
  - drivers: base: cacheinfo: Update cpu_map_populated during CPU Hotplug (Mark Langsdorf) [RHEL-1023]
  - drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug (Mark Langsdorf) [RHEL-1023]
  - firmware_loader: Fix a NULL vs IS_ERR() check (Mark Langsdorf) [RHEL-1023]
  - driver core: class: properly reference count class_dev_iter() (Mark Langsdorf) [RHEL-1023]
  - regmap: Account for register length when chunking (Mark Langsdorf) [RHEL-1023]
  - device property: make device_property functions take const device * (Mark Langsdorf) [RHEL-1023]
  - driver core: update comments in device_rename() (Mark Langsdorf) [RHEL-1023]
  - driver core: Don't require dynamic_debug for initcall_debug probe timing (Mark Langsdorf) [RHEL-1023]
  - firmware_loader: rework crypto dependencies (Mark Langsdorf) [RHEL-1023]
  - firmware_loader: Strip off \n from customized path (Mark Langsdorf) [RHEL-1023]
  - cacheinfo: Adjust includes to remove of_device.h (Mark Langsdorf) [RHEL-1023]
  - of: Move CPU node related functions to their own file (Mark Langsdorf) [RHEL-1023]
  - regmap: allow upshifting register addresses before performing operations (Mark Langsdorf) [RHEL-1023]
  - PM: core: Remove unnecessary (void *) conversions (Mark Langsdorf) [RHEL-1023]
  - regmap: Pass irq_drv_data as a parameter for set_type_config() (Mark Langsdorf) [RHEL-1023]
  - tty: make tty_class a static const structure (Mark Langsdorf) [RHEL-1023]
  - driver core: class: remove struct class_interface * from callbacks (Mark Langsdorf) [RHEL-1023]
  - driver core: class: mark the struct class in struct class_interface constant (Mark Langsdorf) [RHEL-1023]
  - driver core: class: make class_register() take a const * (Mark Langsdorf) [RHEL-1023]
  - driver core: class: mark class_release() as taking a const * (Mark Langsdorf) [RHEL-1023]
  - pktcdvd: simplify the class_pktcdvd logic (Mark Langsdorf) [RHEL-1023]
  - driver core: remove incorrect comment for device_create* (Mark Langsdorf) [RHEL-1023]
  - regmap: Factor out single value register syncing (Mark Langsdorf) [RHEL-1023]
  - driver core: class: fix slab-use-after-free Read in class_register() (Mark Langsdorf) [RHEL-1023]
  - driver core: make sysfs_dev_char_kobj static (Mark Langsdorf) [RHEL-1023]
  - driver core: make sysfs_dev_block_kobj static (Mark Langsdorf) [RHEL-1023]
  - driver core: class: remove dev_kobj from struct class (Mark Langsdorf) [RHEL-1023]
  - driver core: clean up the logic to determine which /sys/dev/ directory to use (Mark Langsdorf) [RHEL-1023]
  - driver core: class: remove subsystem private pointer from struct class (Mark Langsdorf) [RHEL-1023]
  - driver core: create class_is_registered() (Mark Langsdorf) [RHEL-1023]
  - driver core: core: move to use class_to_subsys() (Mark Langsdorf) [RHEL-1023]
  - regmap: Removed compressed cache support (Mark Langsdorf) [RHEL-1023]
  - firmware_loader: Add debug message with checksum for FW file (Mark Langsdorf) [RHEL-1023]
  - redhat/configs: enable the new firmware loader debug logging (Mark Langsdorf) [RHEL-1023]
  - base: soc: populate machine name in soc_device_register if empty (Mark Langsdorf) [RHEL-1023]
  - driver core: class.c: convert to only use class_to_subsys (Mark Langsdorf) [RHEL-1023]
  - driver core: class: implement class_get/put without the private pointer. (Mark Langsdorf) [RHEL-1023]
  - zram: fix up permission for the hot_add sysfs file (Mark Langsdorf) [RHEL-1023]
  - driver core: class: mark the struct class for sysfs callbacks as constant (Mark Langsdorf) [RHEL-1023]
  - driver core: Add CONFIG_FW_DEVLINK_SYNC_STATE_TIMEOUT (Mark Langsdorf) [RHEL-1023]
  - redhat/configs: disable the new fw_devlink option (Mark Langsdorf) [RHEL-1023]
  - driver core: bus: constify class_unregister/destroy() (Mark Langsdorf) [RHEL-1023]
  - driver core: Add a comment to set_primary_fwnode() on nullifying (Mark Langsdorf) [RHEL-1023]
  - driver core: move sysfs_dev_char_kobj out of class.h (Mark Langsdorf) [RHEL-1023]
  - driver core: class: fix documentation for class_create() (Mark Langsdorf) [RHEL-1023]
  - regmap: Support paging for buses with reg_read()/reg_write() (Mark Langsdorf) [RHEL-1023]
  - regmap: Clarify error for unknown cache types (Mark Langsdorf) [RHEL-1023]
  - regmap: Handle sparse caches in the default sync (Mark Langsdorf) [RHEL-1023]
  - regmap: add a helper to translate the register address (Mark Langsdorf) [RHEL-1023]
  - kobject.h remove extern from function prototypes (Greg Kroah-Hartman) [RHEL-1023]
  - driver core: device.h: remove extern from function prototypes (Mark Langsdorf) [RHEL-1023]
  - driver core: physical_location.h remove extern from function prototypes (Mark Langsdorf) [RHEL-1023]
  - driver core: base.h: remove extern from function prototypes (Mark Langsdorf) [RHEL-1023]
  - driver core: driver.h: remove extern from function prototypes (Mark Langsdorf) [RHEL-1023]
  - driver core: bus.h: remove extern from function prototypes (Mark Langsdorf) [RHEL-1023]
  - driver core: class.h: remove extern from function prototypes (Mark Langsdorf) [RHEL-1023]
  - driver core: class: use lock_class_key already present in struct subsys_private (Mark Langsdorf) [RHEL-1023]
  - device property: Constify a few fwnode APIs (Mark Langsdorf) [RHEL-1023]
  - device property: constify fwnode_get_phy_mode() argument (Mark Langsdorf) [RHEL-1023]
  - driver core: bus: constify bus_get() (Mark Langsdorf) [RHEL-1023]
  - driver core: bus: constify driver_find() (Mark Langsdorf) [RHEL-1023]
  - driver core: bus: constify bus_rescan_devices() (Mark Langsdorf) [RHEL-1023]
  - driver core: bus: constantify bus_register() (Mark Langsdorf) [RHEL-1023]
  - driver core: bus: mark the struct bus_type for sysfs callbacks as constant (Mark Langsdorf) [RHEL-1023]
  - workqueue: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - ACPI: LPIT: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - cpu/hotplug: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - EDAC/sysfs: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - x86/umwait: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - x86/microcode: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - irqchip/mbigen: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - s390/smp: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - s390/topology: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - powerpc/fsl: fix compiler warning in fsl_wakeup_sys_init() (Mark Langsdorf) [RHEL-1023]
  - powerpc/fsl: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - powerpc/pseries: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - powerpc/powernv: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - powerpc/sysfs: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - arm64: cpufeature: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - platform/x86: ibm_rtl: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - cpufreq: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - cpuidle: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - driver core: bus: move dev_root out of struct bus_type (Mark Langsdorf) [RHEL-1023]
  - driver core: device: make device_create*() take a const struct class * (Mark Langsdorf) [RHEL-1023]
  - driver core: device: mark struct class in struct device as constant (Mark Langsdorf) [RHEL-1023]
  - driver core: device: make device_destroy() take a const class * (Mark Langsdorf) [RHEL-1023]
  - driver core: class: make class_create/remove_file*() options const (Mark Langsdorf) [RHEL-1023]
  - driver core: class: make class_find_device*() options const (Mark Langsdorf) [RHEL-1023]
  - driver core: class: make class_for_each_device() options const (Mark Langsdorf) [RHEL-1023]
  - driver core: class: make class_dev_iter_init() options const (Mark Langsdorf) [RHEL-1023]
  - driver core: class: remove module * from class_create() (Mark Langsdorf) [RHEL-1023]
  - driver core: class: remove struct module owner out of struct class (Mark Langsdorf) [RHEL-1023]
  - drivers: remove struct module * setting from struct class (Mark Langsdorf) [RHEL-1023]
  - driver core: class: specify the module owner in __class_register() (Mark Langsdorf) [RHEL-1023]
  - regmap: cache: Silence checkpatch warning (Mark Langsdorf) [RHEL-1023]
  - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Mark Langsdorf) [RHEL-1023]
  - devres: Pass unique name of the resource to devm_add_action() (Mark Langsdorf) [RHEL-1023]
  - device property: Clarify description of returned value in some functions (Mark Langsdorf) [RHEL-1023]
  - driver core: Make state_synced device attribute writeable (Mark Langsdorf) [RHEL-1023]
  - driver core: Add fw_devlink.sync_state command line param (Mark Langsdorf) [RHEL-1023]
  - driver core: class: fix block class problem when removing CONFIG_SYSFS_DEPRECATED* (Mark Langsdorf) [RHEL-1023]
  - driver core: remove CONFIG_SYSFS_DEPRECATED and CONFIG_SYSFS_DEPRECATED_V2 (Mark Langsdorf) [RHEL-1023]
  - regmap-irq: Add no_status support (Mark Langsdorf) [RHEL-1023]
  - regmap-irq: Remove unused mask_invert flag (Mark Langsdorf) [RHEL-1023]
  - regmap-irq: Remove unused type_invert flag (Mark Langsdorf) [RHEL-1023]
  - mfd: rohm-bd718x7: Drop useless mask_invert flag on irqchip (Mark Langsdorf) [RHEL-1023]
  - genirq: Allow irq_chip registration functions to take a const irq_chip (Mark Langsdorf) [RHEL-1023]
  - PM: domains: fix memory leak with using debugfs_lookup() (Mark Langsdorf) [RHEL-1023]
  - driver core: make kobj_type structures constant (Mark Langsdorf) [RHEL-1023]
  - kobject: kset_uevent_ops: make uevent() callback take a const * (Mark Langsdorf) [RHEL-1023]
  - i3c: fix device.h kernel-doc warnings (Mark Langsdorf) [RHEL-1023]
  - i3c: move dev_to_i3cdev() to use container_of_const() (Mark Langsdorf) [RHEL-1023]
  - mcb: move to_mcb_device() to use container_of_const() (Mark Langsdorf) [RHEL-1023]
  - drivers: hv: move device_to_hv_device to use container_of_const() (Mark Langsdorf) [RHEL-1023]
  - platform/x86: wmi: move dev_to_wblock() and dev_to_wdev to use container_of_const() (Mark Langsdorf) [RHEL-1023]
  - vio: move to_vio_dev() to use container_of_const() (Mark Langsdorf) [RHEL-1023]
  - firewire: move fw_device() and fw_unit() to use container_of_const() (Mark Langsdorf) [RHEL-1023]
  - platform/surface: aggregator: move to_ssam_device() to use container_of_const() (Mark Langsdorf) [RHEL-1023]
  - driver core: fixup for "driver core: make struct bus_type.uevent() take a const *" (Mark Langsdorf) [RHEL-1023]
  - driver core: make struct bus_type.uevent() take a const * (Mark Langsdorf) [RHEL-1023]
  - driver core: make struct device_type.uevent() take a const * (Mark Langsdorf) [RHEL-1023]
  - kobject: make kobject_namespace take a const * (Mark Langsdorf) [RHEL-1023]
  - kobject: kset_uevent_ops: make name() callback take a const * (Mark Langsdorf) [RHEL-1023]
  - kobject: kset_uevent_ops: make filter() callback take a const * (Mark Langsdorf) [RHEL-1023]
  - kobject: make kobject_get_ownership() take a constant kobject * (Mark Langsdorf) [RHEL-1023]
  - kobject: make get_ktype() take a const pointer (Mark Langsdorf) [RHEL-1023]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-388.el9]
changelog:
  - scsi: qedi: Remove unused declarations (Nilesh Javali) [RHEL-9868]
  - scsi: qedi: Fix firmware halt over suspend and resume (Nilesh Javali) [RHEL-9868]
  - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (Nilesh Javali) [RHEL-9868]
  - scsi: qedi: Replace all non-returning strlcpy with strscpy (Nilesh Javali) [RHEL-9868]
  - scsi: qedi: Fix use after free bug in qedi_remove() (Nilesh Javali) [RHEL-9868]
  - scsi: qedi: Remove unneeded version.h include (Nilesh Javali) [RHEL-9868]
  - scsi: qla2xxx: Fix system crash due to bad pointer access (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix double free of dsd_list during driver load (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Correct endianness for rqstlen and rsplen (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix unused variable warning in qla2xxx_process_purls_pkt() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix spelling mistake "tranport" -> "transport" (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix nvme_fc_rcv_ls_req() undefined error (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Update version to 10.02.09.100-k (Nilesh Javali) [RHEL-9867]
  - Revert "scsi: qla2xxx: Fix buffer overrun" (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Remove unsupported ql2xenabledif option (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Error code did not return to upper layer (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Add logs for SFP temperature monitoring (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix firmware resource tracking (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Flush mailbox commands on chip reset (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Add Unsolicited LS Request and Response Support for NVMe (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Allow 32-byte CDBs (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Move resource to allow code reuse (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Remove unused declarations (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Update version to 10.02.08.500-k (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: fix inconsistent TMF timeout (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix TMF leak through (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Turn off noisy message log (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix session hang in gnl (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix erroneous link up failure (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix command flush during TMF (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Limit TMF to 8 per function (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Adjust IOCB resource on qpair create (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix deletion race condition (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Silence a static checker warning (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Update version to 10.02.08.400-k (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Correct the index of array (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Pointer may be dereferenced (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix buffer overrun (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Avoid fcport pointer dereference (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix potential NULL pointer dereference (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Array index may go out of bound (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Drop useless LIST_HEAD (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Replace one-element array with DECLARE_FLEX_ARRAY() helper (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix end of loop test (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix NULL pointer dereference in target mode (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Update version to 10.02.08.300-k (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Wait for io return on terminate rport (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix mem access after free (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix hang in task management (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix task management cmd failure (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Multi-que support for TMF (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Remove default fabric ops callouts (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Add option to disable FC2 Target support (Nilesh Javali) [RHEL-9867]
  - net: add missing includes and forward declarations under net/ (Ivan Vecera) [RHEL-15262]
  - igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15192] {CVE-2023-45871}
  - selftests: mptcp: display simult in extra_msg (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: drop mptcp_connect var (Paolo Abeni) [RHEL-15036]
  - mptcp: define more local variables sk (Paolo Abeni) [RHEL-15036]
  - mptcp: move sk assignment statement ahead (Paolo Abeni) [RHEL-15036]
  - mptcp: use mptcp_get_ext helper (Paolo Abeni) [RHEL-15036]
  - mptcp: use mptcp_check_fallback helper (Paolo Abeni) [RHEL-15036]
  - mptcp: drop useless ssk in pm_subflow_check_next (Paolo Abeni) [RHEL-15036]
  - mptcp: userspace pm send RM_ADDR for ID 0 (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: fix wait_rm_addr/sf parameters (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: run userspace pm tests slower (Paolo Abeni) [RHEL-15036]
  - mptcp: refactor sndbuf auto-tuning (Paolo Abeni) [RHEL-15036]
  - mptcp: ignore notsent_lowat setting at the subflow level (Paolo Abeni) [RHEL-15036]
  - mptcp: consolidate sockopt synchronization (Paolo Abeni) [RHEL-15036]
  - mptcp: use copy_from_iter helpers on transmit (Paolo Abeni) [RHEL-15036]
  - mptcp: give rcvlowat some love (Paolo Abeni) [RHEL-15036]
  - tcp: define initial scaling factor value as a macro (Paolo Abeni) [RHEL-15036]
  - mptcp: use plain bool instead of custom binary enum (Paolo Abeni) [RHEL-15036]
  - mptcp: properly account fastopen data (Paolo Abeni) [RHEL-15036]
  - mptcp: add a new sysctl for make after break timeout (Paolo Abeni) [RHEL-15036]
  - net: mptcp: use policy generated by YAML spec (Paolo Abeni) [RHEL-15036]
  - net: mptcp: rename netlink handlers to mptcp_pm_nl_<blah>_{doit,dumpit} (Paolo Abeni) [RHEL-15036]
  - uapi: mptcp: use header file generated from YAML spec (Paolo Abeni) [RHEL-15036]
  - Documentation: netlink: add a YAML spec for mptcp (Paolo Abeni) [RHEL-15036]
  - net: mptcp: convert netlink from small_ops to ops (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: no RST when rm subflow/addr (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid sending RST when closing the initial subflow (Paolo Abeni) [RHEL-15036]
  - mptcp: more conservative check for zero probes (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: correctly check for no RST (Paolo Abeni) [RHEL-15036]
  - mptcp: userspace pm allow creating id 0 subflow (Paolo Abeni) [RHEL-15036]
  - mptcp: fix delegated action races (Paolo Abeni) [RHEL-15036]
  - mptcp: fix dangling connection hang-up (Paolo Abeni) [RHEL-15036]
  - mptcp: rename timer related helper to less confusing names (Paolo Abeni) [RHEL-15036]
  - mptcp: process pending subflow error on close (Paolo Abeni) [RHEL-15036]
  - mptcp: move __mptcp_error_report in protocol.c (Paolo Abeni) [RHEL-15036]
  - mptcp: fix bogus receive window shrinkage with multiple subflows (Paolo Abeni) [RHEL-15036]
  - mptcp: annotate data-races around msk->rmem_fwd_alloc (Paolo Abeni) [RHEL-15036]
  - mptcp: register default scheduler (Paolo Abeni) [RHEL-15036]
  - mptcp: use get_retrans wrapper (Paolo Abeni) [RHEL-15036]
  - mptcp: use get_send wrapper (Paolo Abeni) [RHEL-15036]
  - mptcp: add scheduler wrappers (Paolo Abeni) [RHEL-15036]
  - mptcp: add scheduled in mptcp_subflow_context (Paolo Abeni) [RHEL-15036]
  - mptcp: add sched in mptcp_sock (Paolo Abeni) [RHEL-15036]
  - mptcp: add a new sysctl scheduler (Paolo Abeni) [RHEL-15036]
  - mptcp: add struct mptcp_sched_ops (Paolo Abeni) [RHEL-15036]
  - mptcp: drop last_snd and MPTCP_RESET_SCHEDULER (Paolo Abeni) [RHEL-15036]
  - mptcp: refactor push_pending logic (Paolo Abeni) [RHEL-15036]
  - bpf: Add update_socket_protocol hook (Paolo Abeni) [RHEL-15036]
  - mptcp: Remove unnecessary test for __mptcp_init_sock() (Paolo Abeni) [RHEL-15036]
  - mptcp: get rid of msk->subflow (Paolo Abeni) [RHEL-15036]
  - mptcp: change the mpc check helper to return a sk (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid ssock usage in mptcp_pm_nl_create_listen_socket() (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid additional indirection in sockopt (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid unneeded indirection in mptcp_stream_accept() (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid additional indirection in mptcp_poll() (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid additional indirection in mptcp_listen() (Paolo Abeni) [RHEL-15036]
  - mptcp: mptcp: avoid additional indirection in mptcp_bind() (Paolo Abeni) [RHEL-15036]
  - net: factor out inet{,6}_bind_sk helpers (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid subflow socket usage in mptcp_get_port() (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid additional __inet_stream_connect() call (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid unneeded mptcp_token_destroy() calls (Paolo Abeni) [RHEL-15036]
  - net: annotate data-races around sock->ops (Paolo Abeni) [RHEL-15036]
  - mptcp: fix disconnect vs accept race (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid bogus reset on fallback close (Paolo Abeni) [RHEL-15036]
  - mptcp: fix the incorrect judgment for msk->cb_flags (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace_pm: unmute unexpected errors (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: pm_nl_ctl: always look for errors (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: colored results (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: rework detailed report (Paolo Abeni) [RHEL-15036]
  - net: annotate data-races around sk->sk_mark (Paolo Abeni) [RHEL-15036]
  - mptcp: more accurate NL event generation (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: only check for ip6tables if needed (Paolo Abeni) [RHEL-15036]
  - mptcp: fix rcv buffer auto-tuning (Paolo Abeni) [RHEL-15036]
  - tcp: get rid of sysctl_tcp_adv_win_scale (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace_pm: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: simult flows: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: diag: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: pm_netlink: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: lib: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace_pm: reduce dup code around printf (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace_pm: uniform results printing (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace_pm: fix shellcheck warnings (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace pm: don't stop if error (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: don't stop if error (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: add speed env var (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: add fullmesh env var (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: add fastclose env var (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: set all env vars as local ones (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: pm_nl_ctl: fix 32-bit support (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: depend on SYN_COOKIES (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace_pm: report errors with 'remove' tests (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace_pm: use correct server port (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: return error if wrong mark (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: use 'iptables-legacy' if available (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: fail if nft supposed to work (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: fix comment typo (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: add pm_nl_set_endpoint helper (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: drop sflags parameter (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: drop addr_nr_ns1/2 parameters (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: drop test_linkfail parameter (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: set FAILING_LINKS in run_tests (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: check subflow and addr infos (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: test userspace pm out of transfer (Paolo Abeni) [RHEL-15036]
  - mptcp: pass addr to mptcp_pm_alloc_anno_list (Paolo Abeni) [RHEL-15036]
  - mptcp: consolidate transition to TCP_CLOSE in mptcp_do_fastclose() (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip check if MIB counter not supported (part 2) (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: add MPTCP_FULL_INFO testcase (Paolo Abeni) [RHEL-15036]
  - mptcp: introduce MPTCP_FULL_INFO getsockopt (Paolo Abeni) [RHEL-15036]
  - mptcp: add subflow unique id (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: explicitly tests aggregate counters (Paolo Abeni) [RHEL-15036]
  - mptcp: track some aggregate data counters (Paolo Abeni) [RHEL-15036]
  - mptcp: move snd_una update earlier for fallback socket (Paolo Abeni) [RHEL-15036]
  - mptcp: drop legacy code around RX EOF (Paolo Abeni) [RHEL-15036]
  - mptcp: consolidate fallback and non fallback state machine (Paolo Abeni) [RHEL-15036]
  - mptcp: Reorder fields in 'struct mptcp_pm_add_entry' (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip mixed tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: uniform listener tests (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip PM listener tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip MPC backups tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip fail tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip userspace PM tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip fullmesh flag tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip backup if set flag on ID not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip implicit tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: support RM_ADDR for used endpoints or not (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip Fastclose tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: support local endpoint being tracked or not (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip test if iptables/tc cmds fail (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip check if MIB counter not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: helpers to skip tests (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: use 'iptables-legacy' if available (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: lib: skip if not below kernel version (Paolo Abeni) [RHEL-15036]
  - mptcp: unify pm set_flags interfaces (Paolo Abeni) [RHEL-15036]
  - mptcp: unify pm get_flags_and_ifindex_by_id (Paolo Abeni) [RHEL-15036]
  - mptcp: unify pm get_local_id interfaces (Paolo Abeni) [RHEL-15036]
  - mptcp: export local_address (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace pm: skip PM listener events tests if unavailable (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace pm: skip if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace pm: skip if 'ip' tool is unavailable (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: skip TCP_INQ checks if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: skip getsockopt checks if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: relax expected returned size (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: pm nl: skip fullmesh flag checks if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: pm nl: remove hardcoded default limits (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: diag: skip inuse tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: diag: skip listen tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: skip TFO tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: skip disconnect tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: skip transp tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: lib: skip if missing symbol (Paolo Abeni) [RHEL-15036]
  - mptcp: update userspace pm infos (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: update userspace pm subflow tests (Paolo Abeni) [RHEL-15036]
  - mptcp: add address into userspace pm list (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: update userspace pm addr tests (Paolo Abeni) [RHEL-15036]
  - mptcp: only send RM_ADDR in nl_cmd_remove (Paolo Abeni) [RHEL-15036]
  - mptcp: add annotations around sk->sk_shutdown accesses (Paolo Abeni) [RHEL-15036]
  - mptcp: fix data race around msk->first access (Paolo Abeni) [RHEL-15036]
  - mptcp: consolidate passive msk socket initialization (Paolo Abeni) [RHEL-15036]
  - mptcp: add annotations around msk->subflow accesses (Paolo Abeni) [RHEL-15036]
  - mptcp: fix connect timeout handling (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace pm: skip if MPTCP is not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: skip if MPTCP is not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: simult flows: skip if MPTCP is not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: diag: skip if MPTCP is not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip if MPTCP is not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: pm nl: skip if MPTCP is not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: skip if MPTCP is not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: avoid using 'cmp --bytes' (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: centralize stats dumping (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: add explicit check for new mibs (Paolo Abeni) [RHEL-15036]
  - mptcp: introduces more address related mibs (Paolo Abeni) [RHEL-15036]
  - mptcp: refactor mptcp_stream_accept() (Paolo Abeni) [RHEL-15036]
  - inet: factor out locked section of inet_accept() in a new helper (Paolo Abeni) [RHEL-15036]
  - net: factor out __inet_listen_sk() helper (Paolo Abeni) [RHEL-15036]
  - mptcp: preserve const qualifier in mptcp_sk() (Paolo Abeni) [RHEL-15036]
  - mptcp: annotate lockless accesses to sk->sk_err (Paolo Abeni) [RHEL-15036]
  - tcp: enforce receive buffer memory limits by allowing the tcp window to shrink (Felix Maurer) [RHEL-11592]
  - tcp: adjust rcv_ssthresh according to sk_reserved_mem (Felix Maurer) [RHEL-11592]
  - macsec: Don't rely solely on the dst MAC address to identify destination MACsec device (Sabrina Dubroca) [RHEL-14698]
  - net: ipv4: fix return value check in esp_remove_trailer (Sabrina Dubroca) [RHEL-14517]
  - net: ipv6: fix return value check in esp_remove_trailer (Sabrina Dubroca) [RHEL-14517]
  - net: xfrm: skip policies marked as dead while reinserting policies (Sabrina Dubroca) [RHEL-14517]
  - xfrm: don't skip free of empty state in acquire policy (Sabrina Dubroca) [RHEL-14517]
  - xfrm: delete offloaded policy (Sabrina Dubroca) [RHEL-14517]
  - ip_vti: fix potential slab-use-after-free in decode_session6 (Sabrina Dubroca) [RHEL-14517]
  - ip6_vti: fix slab-use-after-free in decode_session6 (Sabrina Dubroca) [RHEL-14517]
  - xfrm: fix slab-use-after-free in decode_session6 (Sabrina Dubroca) [RHEL-14517]
  - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Sabrina Dubroca) [RHEL-14517]
  - net: ipv4: Use kfree_sensitive instead of kfree (Sabrina Dubroca) [RHEL-14517]
  - tipc: fix a potential deadlock on &tx->lock (Xin Long) [RHEL-14731]
  - tipc: stop tipc crypto on failure in tipc_node_create (Xin Long) [RHEL-14731]
  - tipc: check return value of pskb_trim() (Xin Long) [RHEL-14731]
  - net: skb_queue_purge_reason() optimizations (Antoine Tenart) [RHEL-14554]
  - net: add skb_queue_purge_reason and __skb_queue_purge_reason (Antoine Tenart) [RHEL-14554]
  - tcp: add TCP_OLD_SEQUENCE drop reason (Antoine Tenart) [RHEL-14554]
  - net: skbuff: update and rename __kfree_skb_defer() (Antoine Tenart) [RHEL-14554]
  - devlink: Hold devlink lock on health reporter dump get (Davide Caratti) [RHEL-14526]
  - selftests/bpf: Update bpf_clone_redirect expected return code (Davide Caratti) [RHEL-14526]
  - bpf: Clarify error expectations from bpf_clone_redirect (Davide Caratti) [RHEL-14526]
  - veth: Update XDP feature set when bringing up device (Davide Caratti) [RHEL-14526]
  - ethtool: plca: fix plca enable data type while parsing the value (Davide Caratti) [RHEL-14526]
  - af_unix: Fix data-race around unix_tot_inflight. (Davide Caratti) [RHEL-14526]
  - af_unix: Fix data-races around user->unix_inflight. (Davide Caratti) [RHEL-14526]
  - veth: Fixing transmit return status for dropped packets (Davide Caratti) [RHEL-14526]
  - net: fib: avoid warn splat in flow dissector (Davide Caratti) [RHEL-14526]
  - net/packet: annotate data-races around tp->status (Davide Caratti) [RHEL-14526]
  - net: dcb: choose correct policy to parse DCB_ATTR_BCN (Davide Caratti) [RHEL-14526]
  - llc: Don't drop packet from non-root netns. (Davide Caratti) [RHEL-14526]
  - net: af_key: fix sadb_x_filter validation (Davide Caratti) [RHEL-14526]
  - netlink: Correct offload_xstats size (Paolo Abeni) [RHEL-14364]
  - net: prevent address rewrite in kernel_bind() (Paolo Abeni) [RHEL-14364]
  - net: prevent rewrite of msg_name in sock_sendmsg() (Paolo Abeni) [RHEL-14364]
  - net: fix possible store tearing in neigh_periodic_work() (Paolo Abeni) [RHEL-14364]
  - neigh: make sure used and confirmed times are valid (Paolo Abeni) [RHEL-14364]
  - net/core: Fix ETH_P_1588 flow dissector (Paolo Abeni) [RHEL-14364]
  - skbuff: skb_segment, Call zero copy functions before using skbuff frags (Paolo Abeni) [RHEL-14364]
  - net: use sk_forward_alloc_get() in sk_get_meminfo() (Paolo Abeni) [RHEL-14364]
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Paolo Abeni) [RHEL-14364]
  - net: prevent skb corruption on frag list segmentation (Paolo Abeni) [RHEL-14364]
  - netlink: do not hard code device address lenth in fdb dumps (Paolo Abeni) [RHEL-14364]
  - net: fix UaF in netns ops registration error path (Paolo Abeni) [RHEL-14364]
  - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (Paolo Abeni) [RHEL-14364]
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-14233]
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-14233]
  - net/sched: fix a qdisc modification with ambiguous command request (Davide Caratti) [RHEL-14233]
  - bonding: Return pointer to data after pull on skb (Hangbin Liu) [RHEL-13964]
  - selftests: bonding: create directly devices in the target namespaces (Hangbin Liu) [RHEL-13964]
  - selftests: bonding: add macvlan over bond testing (Hangbin Liu) [RHEL-13964]
  - selftest: bond: add new topo bond_topo_2d1c.sh (Hangbin Liu) [RHEL-13964]
  - bonding: fix macvlan over alb bond support (Hangbin Liu) [RHEL-13964]
  - selftests: bonding: do not set port down before adding to bond (Hangbin Liu) [RHEL-13964]
  - selftests: bonding: remove redundant delete action of device link1_1 (Hangbin Liu) [RHEL-13964]
  - bonding: remove unnecessary NULL check in bond_destructor (Hangbin Liu) [RHEL-13964]
  - bonding: use bond_set_slave_arr to simplify code (Hangbin Liu) [RHEL-13964]
  - bonding: add modifier to initialization function and exit function (Hangbin Liu) [RHEL-13964]
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Hangbin Liu) [RHEL-13964]
  - bonding: support balance-alb with openvswitch (Hangbin Liu) [RHEL-13964]
  - bonding: Always assign be16 value to vlan_proto (Hangbin Liu) [RHEL-13964]
  - selftests: bonding: delete unnecessary line (Hangbin Liu) [RHEL-13964]
  - bonding: add software tx timestamping support (Hangbin Liu) [RHEL-13964]
  - selftests/bpf: Add selftest for bpf_task_under_cgroup() in sleepable prog (Viktor Malik) [RHEL-9957]
  - bpf: Fix missed rcu read lock in bpf_task_under_cgroup() (Viktor Malik) [RHEL-9957]
  - selftests/bpf: precision tracking test for BPF_NEG and BPF_END (Viktor Malik) [RHEL-9957]
  - bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END (Viktor Malik) [RHEL-9957]
  - redhat: update self-test data (Viktor Malik) [RHEL-9957]
  - redhat: ignore BPFTOOLVERSION/bpftoolversion in self-test create-data.sh (Viktor Malik) [RHEL-9957]
  - bpftool: Specify XDP Hints ifname when loading program (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Fix flaky cgroup_iter_sleepable subtest (Viktor Malik) [RHEL-9957]
  - libbpf: Set close-on-exec flag on gzopen (Viktor Malik) [RHEL-9957]
  - selftests/bpf: fix static assert compilation issue for test_cls_*.c (Viktor Malik) [RHEL-9957]
  - bpf, cpumap: Handle skb as well when clean up ptr_ring (Viktor Malik) [RHEL-9957]
  - bpf, cpumap: Make sure kthread is running before map update returns (Viktor Malik) [RHEL-9957]
  - bpf: Disable preemption in bpf_event_output (Viktor Malik) [RHEL-9957]
  - bpf: Disable preemption in bpf_perf_event_output (Viktor Malik) [RHEL-9957]
  - bpf, arm64: Fix BTI type used for freplace attached functions (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add more tests for check_max_stack_depth bug (Viktor Malik) [RHEL-9957]
  - bpf: Repeat check_max_stack_depth for async callbacks (Viktor Malik) [RHEL-9957]
  - bpf: Fix subprog idx logic in check_max_stack_depth (Viktor Malik) [RHEL-9957]
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add selftest for check_stack_max_depth bug (Viktor Malik) [RHEL-9957]
  - bpf: Fix max stack depth check for async callbacks (Viktor Malik) [RHEL-9957]
  - bpf, btf: Warn but return no error for NULL btf from __register_btf_kfunc_id_set() (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Set the default value of consumer_cnt as 0 (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Ensure that next_cpu() returns a valid CPU number (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Output the correct error code for pthread APIs (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Use producer_cnt to allocate local counter array (Viktor Malik) [RHEL-9957]
  - bpf: Keep BPF_PROG_LOAD permission checks clear of validations (Viktor Malik) [RHEL-9957]
  - bpf: Centralize permissions checks for all BPF map types (Viktor Malik) [RHEL-9957]
  - bpf: Inline map creation logic in map_create() function (Viktor Malik) [RHEL-9957]
  - bpf: Move unprivileged checks into map_create() and bpf_prog_load() (Viktor Malik) [RHEL-9957]
  - bpf: Remove in_atomic() from bpf_link_put(). (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Verify that check_ids() is used for scalars in regsafe() (Viktor Malik) [RHEL-9957]
  - bpf: Verify scalar ids mapping in regsafe() using check_ids() (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Check if mark_chain_precision() follows scalar ids (Viktor Malik) [RHEL-9957]
  - bpf: Use scalar ids in mark_chain_precision() (Viktor Malik) [RHEL-9957]
  - bpf/docs: Update documentation for new cpumask kfuncs (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Update bpf_cpumask_any* tests to use bpf_cpumask_any_distribute* (Viktor Malik) [RHEL-9957]
  - bpf: Replace bpf_cpumask_any* with bpf_cpumask_any_distribute* (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add test for new bpf_cpumask_first_and() kfunc (Viktor Malik) [RHEL-9957]
  - bpf: Add bpf_cpumask_first_and() kfunc (Viktor Malik) [RHEL-9957]
  - bpf: Hide unused bpf_patch_call_args (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Fix invalid pointer check in get_xlated_program() (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add missing prototypes for several test kfuncs (Viktor Malik) [RHEL-9957]
  - bpf: Factor out a common helper free_all() (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Fix check_mtu using wrong variable type (Viktor Malik) [RHEL-9957]
  - bpf: Cleanup unused function declaration (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add missing selftests kconfig options (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add test for non-NULLable PTR_TO_BTF_IDs (Viktor Malik) [RHEL-9957]
  - bpf: Teach verifier that trusted PTR_TO_BTF_ID pointers are non-NULL (Viktor Malik) [RHEL-9957]
  - bpf: Replace open code with for allocated object check (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Test table ID fib lookup BPF helper (Viktor Malik) [RHEL-9957]
  - bpf: Add table ID to bpf_fib_lookup BPF helper (Viktor Malik) [RHEL-9957]
  - bpf: Replace all non-returning strlcpy with strscpy (Viktor Malik) [RHEL-9957]
  - bpf/tests: Use struct_size() (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add a test where map key_type_id with decl_tag type (Viktor Malik) [RHEL-9957]
  - bpf: Silence a warning in btf_type_id_size() (Viktor Malik) [RHEL-9957]
  - bpf: Fix bad unlock balance on freeze_mutex (Viktor Malik) [RHEL-9957]
  - libbpf: Ensure FD >= 3 during bpf_map__reuse_fd() (Viktor Malik) [RHEL-9957]
  - libbpf: Ensure libbpf always opens files with O_CLOEXEC (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Check whether to run selftest (Viktor Malik) [RHEL-9957]
  - libbpf: Change var type in datasec resize func (Viktor Malik) [RHEL-9957]
  - bpf: drop unnecessary bpf_capable() check in BPF_MAP_FREEZE command (Viktor Malik) [RHEL-9957]
  - libbpf: Selftests for resizing datasec maps (Viktor Malik) [RHEL-9957]
  - libbpf: Add capability for resizing datasec maps (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add path_fd-based BPF_OBJ_PIN and BPF_OBJ_GET tests (Viktor Malik) [RHEL-9957]
  - libbpf: Add opts-based bpf_obj_pin() API and add support for path_fd (Viktor Malik) [RHEL-9957]
  - bpf: Support O_PATH FDs in BPF_OBJ_PIN and BPF_OBJ_GET commands (Viktor Malik) [RHEL-9957]
  - libbpf: Start v1.3 development cycle (Viktor Malik) [RHEL-9957]
  - bpf: Validate BPF object in BPF_OBJ_PIN before calling LSM (Viktor Malik) [RHEL-9957]
  - bpf: Add kfunc filter function to 'struct btf_kfunc_id_set' (Viktor Malik) [RHEL-9957]
  - bpftool: Show target_{obj,btf}_id in tracing link info (Viktor Malik) [RHEL-9957]
  - bpf: Show target_{obj,btf}_id in tracing link fdinfo (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Make bpf_dynptr_is_rdonly() prototyype consistent with kernel (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Fix dynptr/test_dynptr_is_null (Viktor Malik) [RHEL-9957]
  - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log (Viktor Malik) [RHEL-9957]
  - bpf, docs: Shift operations are defined to use a mask (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Remove extern from kfuncs declarations (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Allow to use kfunc from testmod.ko in test_verifier (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Load bpf_testmod for verifier test (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Use un/load_bpf_testmod functions in tests (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Do not unload bpf_testmod in load_bpf_testmod (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Use only stdout in un/load_bpf_testmod functions (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Move test_progs helpers to testing_helpers object (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Move kfunc exports to bpf_testmod/bpf_testmod_kfunc.h (Viktor Malik) [RHEL-9957]
  - libbpf: Store zero fd to fd_array for loader kfunc relocation (Viktor Malik) [RHEL-9957]
  - bpftool: Support bpffs mountpoint as pin path for prog loadall (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Fix s390 sock_field test failure (Viktor Malik) [RHEL-9957]
  - selftests/bpf: improve netcnt test robustness (Viktor Malik) [RHEL-9957]
  - bpf: fix calculation of subseq_idx during precision backtracking (Viktor Malik) [RHEL-9957]
  - bpf: Fix memleak due to fentry attach failure (Viktor Malik) [RHEL-9957]
  - bpf: Remove bpf trampoline selector (Viktor Malik) [RHEL-9957]
  - bpf, arm64: Support struct arguments in the BPF trampoline (Viktor Malik) [RHEL-9957]
  - bpftool: JIT limited misreported as negative value on aarch64 (Viktor Malik) [RHEL-9957]
  - bpf: Document EFAULT changes for sockopt (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Correctly handle optlen > 4096 (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Update EFAULT {g,s}etsockopt selftests (Viktor Malik) [RHEL-9957]
  - bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen (Viktor Malik) [RHEL-9957]
  - libbpf: fix offsetof() and container_of() to work with CO-RE (Viktor Malik) [RHEL-9957]
  - bpf: Address KCSAN report on bpf_lru_list (Viktor Malik) [RHEL-9957]
  - bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole flags for v1.25 (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Accept mem from dynptr in helper funcs (Viktor Malik) [RHEL-9957]
  - bpf: verifier: Accept dynptr mem as mem in helpers (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Check overflow in optional buffer (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Test allowing NULL buffer in dynptr slice (Viktor Malik) [RHEL-9957]
  - bpf: Allow NULL buffers in bpf_dynptr_slice(_rw) (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add testcase for bpf_task_under_cgroup (Viktor Malik) [RHEL-9957]
  - bpf: Add bpf_task_under_cgroup() kfunc (Viktor Malik) [RHEL-9957]
  - samples/bpf: Fix buffer overflow in tcp_basertt (Viktor Malik) [RHEL-9957]
  - bpf, docs: Update llvm_relocs.rst with typo fixes (Viktor Malik) [RHEL-9957]
  - selftests/bpf: revert iter test subprog precision workaround (Viktor Malik) [RHEL-9957]
  - selftests/bpf: add precision propagation tests in the presence of subprogs (Viktor Malik) [RHEL-9957]
  - bpf: support precision propagation in the presence of subprogs (Viktor Malik) [RHEL-9957]
  - bpf: fix mark_all_scalars_precise use in mark_chain_precision (Viktor Malik) [RHEL-9957]
  - bpf: fix propagate_precision() logic for inner frames (Viktor Malik) [RHEL-9957]
  - bpf: maintain bitmasks across all active frames in __mark_chain_precision (Viktor Malik) [RHEL-9957]
  - bpf: improve precision backtrack logging (Viktor Malik) [RHEL-9957]
  - bpf: encapsulate precision backtracking bookkeeping (Viktor Malik) [RHEL-9957]
  - bpf: mark relevant stack slots scratched for register read instructions (Viktor Malik) [RHEL-9957]
  - veristat: add -t flag for adding BPF_F_TEST_STATE_FREQ program flag (Viktor Malik) [RHEL-9957]
  - bpf: Print a warning only if writing to unprivileged_bpf_disabled. (Viktor Malik) [RHEL-9957]
  - bpf: Emit struct bpf_tcp_sock type in vmlinux BTF (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Test_progs can read test lists from file (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Extract insert_test from parse_test_list (Viktor Malik) [RHEL-9957]
  - libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add fexit_sleep to DENYLIST.aarch64 (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Fix selftest test_global_funcs/global_func1 failure with latest clang (Viktor Malik) [RHEL-9957]
  - bpftool: Dump map id instead of value for map_of_maps types (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Update the aarch64 tests deny list (Viktor Malik) [RHEL-9957]
  - bpftool: Show map IDs along with struct_ops links. (Viktor Malik) [RHEL-9957]
  - docs/bpf: Add LRU internals description and graph (Viktor Malik) [RHEL-9957]
  - docs/bpf: Add table to describe LRU properties (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add test case to assert precise scalar path pruning (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add tests for dynptr convenience helpers (Viktor Malik) [RHEL-9957]
  - bpf: Add bpf_dynptr_clone (Viktor Malik) [RHEL-9957]
  - bpf: Add bpf_dynptr_size (Viktor Malik) [RHEL-9957]
  - bpf: Add bpf_dynptr_is_null and bpf_dynptr_is_rdonly (Viktor Malik) [RHEL-9957]
  - bpf: Add bpf_dynptr_adjust (Viktor Malik) [RHEL-9957]
  - Add CONFIG_ADDRESS_MASKING to RHEL configs collection (Chris von Recklinghausen) [RHEL-11561]
  - selftests/x86/lam: Zero out buffer for readlink() (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm: Remove unused current_untag_mask() (Chris von Recklinghausen) [RHEL-11561]
  - tools headers disabled-features: Sync with the kernel sources (Chris von Recklinghausen) [RHEL-11561]
  - tools headers UAPI: Sync arch prctl headers with the kernel sources (Chris von Recklinghausen) [RHEL-11561]
  - x86: mm: remove 'sign' games from LAM untagged_addr*() macros (Chris von Recklinghausen) [RHEL-11561]
  - x86: uaccess: move 32-bit and 64-bit parts into proper <asm/uaccess_N.h> header (Chris von Recklinghausen) [RHEL-11561]
  - x86-64: make access_ok() independent of LAM (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm/iommu/sva: Do not allow to set FORCE_TAGGED_SVA bit from outside (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm/iommu/sva: Fix error code for LAM enabling failure due to SVA (Chris von Recklinghausen) [RHEL-11561]
  - selftests/x86/lam: Add test cases for LAM vs thread creation (Chris von Recklinghausen) [RHEL-11561]
  - selftests/x86/lam: Add ARCH_FORCE_TAGGED_SVA test cases for linear-address masking (Chris von Recklinghausen) [RHEL-11561]
  - selftests/x86/lam: Add inherit test cases for linear-address masking (Chris von Recklinghausen) [RHEL-11561]
  - selftests/x86/lam: Add io_uring test cases for linear-address masking (Chris von Recklinghausen) [RHEL-11561]
  - selftests/x86/lam: Add mmap and SYSCALL test cases for linear-address masking (Chris von Recklinghausen) [RHEL-11561]
  - selftests/x86/lam: Add malloc and tag-bits test cases for linear-address masking (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm/iommu/sva: Make LAM and SVA mutually exclusive (Chris von Recklinghausen) [RHEL-11561]
  - mm: Expose untagging mask in /proc/$PID/status (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm: Provide arch_prctl() interface for LAM (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm: Reduce untagged_addr() overhead for systems without LAM (Chris von Recklinghausen) [RHEL-11561]
  - x86/uaccess: Provide untagged_addr() and remove tags before address check (Chris von Recklinghausen) [RHEL-11561]
  - mm: Introduce untagged_addr_remote() (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm: Handle LAM on context switch (Chris von Recklinghausen) [RHEL-11561]
  - x86: CPUID and CR3/CR4 flags for Linear Address Masking (Chris von Recklinghausen) [RHEL-11561]
  - x86: Allow atomic MM_CONTEXT flags setting (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm: Rework address range check in get_user() and put_user() (Chris von Recklinghausen) [RHEL-11561]
  - mm: export dump_mm() (Chris von Recklinghausen) [RHEL-11561]
  - tools headers cpufeatures: Sync with the kernel sources (Chris von Recklinghausen) [RHEL-11561]
  - tools headers UAPI: Sync x86 arch prctl headers with the kernel sources (Chris von Recklinghausen) [RHEL-11561]


