# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 2.3.6-2
changelog:
  - Bump version to 2.3.6-2
  - Resolves: rhbz#2225532 - 389-ds-base FTBFS with rust-1.71.0
  - Resolves: rhbz#2218209 - useradd: invalid user ID '389:389': installing 389-ds-base in container fails to create the dirsrv user
  - Resolves: rhbz#2207691 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2179278 - dirsrv failed to start after reboot because "dirsrv" did not have access on /run/dirsrv


author: Simon Pichugin <spichugi@redhat.com> - 2.3.6-3
changelog:
  - Bump version to 2.3.6-3
  - Resolves: rhbz#2236163 - Regression: replication can't be enabled for consumer or hub role


author: James Chapman <jachapma@redhat.com> - 2.4.4-1
changelog:
  - Bump version to 2.4.4-1
  - Resolves: RHEL-15907 - Rebase 389-ds-base-2.4 in RHEL 9.4
  - Resolves: RHEL-16830 - ns-slapd crash in slapi_attr_basetype


author: James Chapman <jachapma@redhat.com> - 2.4.5-1
changelog:
  - Bump version to 2.4.5-1
  - Resolves: RHEL-15907 - Rebase 389-ds-base in RHEL 9.4
  - Resolves: RHEL-5142  - RFE Disable Transparent Huge Pages when using large caches
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix
  - Resolves: RHEL-5133  - RFE Provide a history for 'LastLoginTime'
  - Resolves: RHEL-16984 - RFE inChain Matching Rule


author: James Chapman <jachapma@redhat.com> - 2.4.5-2
changelog:
  - Bump version to 2.4.5-2
  - Resolves: RHEL-15907 - Rebase 389-ds-base in RHEL 9.4
  - Resolves: RHEL-5142  - RFE Disable Transparent Huge Pages when using large caches
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix
  - Resolves: RHEL-5133  - RFE Provide a history for 'LastLoginTime'
  - Resolves: RHEL-16984 - RFE inChain Matching Rule


author: Simon Pichugin <spichugi@redhat.com> - 2.4.5-4
changelog:
  - Bump version to 2.4.5-4
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix


author: Viktor Ashirov <vashirov@redhat.com> - 2.4.5-6
changelog:
  - Bump version to 2.4.5-6
  - Resolves: RHEL-30588 - [RFE] allows plugins to log multi-factor authentication notification


author: James Chapman <jachapma@redhat.com> - 2.5.1-1
changelog:
  - Bump version to 2.5.1-1
  - Resolves: RHEL-31777 - Rebase 389-ds-base.2.5.1 in RHEL 9.5
  - Resolves: RHEL-33348 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ requ


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Stanislas FAYE <sfaye@redhat.com>
changelog:
  - Update to 1.46.0 release
  - Fix DHCPv4 lease can't be renewed after it expires (RHEL-24127)
  - Support the MACsec offload mode (RHEL-24337)
  - Support creating generic devices via external "device-handler" dispatcher (RHEL-1567)
  - Support changing the eswitch mode (RHEL-1441)


author: Gris Ge <fge@redhat.com> - 1.47.3-1
changelog:
  - Upgrade to 1.47.3 release (development)
  - Support rollback on global DNS (RHEL-23446)
  - Support VLAN over OVS interface which holds the same name as OVS bridge (RHEL-26753)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.47.4-1
changelog:
  - Fix LLDP support for interfaces attached to OVS bridges. (RHEL-1418)
  - Fix NMCI crashes on ovs_mtu and bond tests. (RHEL-30348)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.2.18-2
changelog:
  - Support point-to-point IPSec tunnel (RHEL-20690)
  - Fix crash in libreswan_nmstate_iface_dpd_rsa (RHEL-21221)
  - Support configuring IPSec mode with 'type' (RHEL-21554)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1
changelog:
  - Rebase to 2.7.0.6-1 [bz#2083464]
  - Adding restart_if implementation for RHEL [bz#2081944]
  - Resolves: bz#2083464
    ([Azure][RHEL-9]Rebase WALinuxAgent to v2.7.0.6)
  - Resolves: bz#2081944
    ([Azure][WALA][9.0] WALA provisions VM failed because of no "ifdown")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-2
changelog:
  - wla-redhat-Fix-command-sequence-for-restarting-net-inter.patch [bz#2098233]
  - Resolves: bz#2098233
    ([Azure][WALA][RHEL-9] [9.1] walinuxagent kills network during boot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2114830]
  - wla-Update-Log-Collector-default-in-Comments-and-Readme-.patch [bz#2093965]
  - Resolves: bz#2114830
    ([Azure][WALA][RHEL-9.1] Provisioning failed if no ifcfg-eth0)
  - Resolves: bz#2093965
    ([Azure][WALA][RHEL-9] The description of "Logs.Collect" is incorrect)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-4
changelog:
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-5
changelog:
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-6
changelog:
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-7
changelog:
  - wla-redhat-Azure-CVM-specific-udev-rules.patch [bz#2162668]
  - Resolves: bz#2162668
    (Add support for importing remotely sealed TPM2 objects)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-8
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [bz#2165042]
  - Resolves: bz#2165042
    ([9.0.z] /dev/disk/azure/ is created as symlink to sr0 or sda and not as a directory[Azure])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-9
changelog:
  - wla-redhat-Adjust-tpm2_createprimary-key-attributes-to-m.patch [bz#2167322]
  - Resolves: bz#2167322
    (Adjust TPM primary key creation parameters to match Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-10
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-7273]
  - Resolves: RHEL-7273
    ([Azure][WALA] Consider to disable Log collector)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.8.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.8.0
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.9.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0
  - Related: Jira:RHEL-2112


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Radovan Sroka <rsroka@redhat.com> - 0.16-23
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606


author: Jaroslav Kysela <perex@perex.cz> - 2.2.5-2
changelog:
  - add sof-rpl-rt711-l0-rt1316-l12-rt714-l3.tplg for Dell SKU 0BDA
  - add xz compression support (with CRC32)


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.5-1
changelog:
  - bootupd: Use --write-uuid (walters)
    Related: RHEL-17205
  - bootloader: Detect bootupd and skip regular install (vslavik)
    Related: RHEL-17205
  - ostree: Use bootupd if installed by payload (vslavik)
    Resolves: RHEL-17205
  - bootloader: Create an installation task for collecting kernel arguments
    (vponcova)
    Related: RHEL-17205
  - bootloader: Add the collect_arguments method (vponcova)
    Related: RHEL-17205
  - bootloader: Remove the install_boot_loader function (vponcova)
    Related: RHEL-17205
  - Apply the bootloader options before the installation (vponcova)
    Related: RHEL-17205


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.6-1
changelog:
  - Disable bug reporting to Bugzilla from anaconda (kkoukiou)
    Resolves: RHEL-24419
  - Fixed file-write operation to a public directory (ataf)
    Resolves: RHEL-23345


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.4.7-1
changelog:
  - Lower log file permission in /tmp (jkonecny)
    Resolves: RHEL-23345
  - Add utility function to set file mode (jkonecny)
    Related: RHEL-23345


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.1-1
changelog:
  - anaconda-diskroot: wait before dying on media check fail (awilliam)
    Resolves: RHEL-4790
  - Add ping tool to Dracut (jkonecny)
    Resolves: RHEL-5719
  - gui:Fix index error for _remove_treeinfo_repositories() (liuwenyu.0311)
    Resolves: RHEL-29561


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.3-1
changelog:
  - Fix Source0 in spec to point to upstream source URL (kkoukiou)
  - Do not try to load sha256 module in intramfs (rvykydal)
    Resolves: RHEL-4747
  - Do not try to load the floppy kernel module (jstodola)
    Resolves: RHEL-4747
  - anaconda-modprobe: don't try and load cramfs (awilliam)
    Resolves: RHEL-4747


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.5-1
changelog:
  - Update translations from Weblate for rhel-9
  - Do not rewrite logs in rescue mode (jstodola)
    Resolves: RHEL-4794
  - Write a warning rescue selinux (akankovs)
    Resolves: RHEL-14005
  - Fix kickstart --dhcpclass option application (rvykydal)
    Resolves: RHEL-30406


author: Nick Clifton <nickc@redhat.com> - 11.04-1
changelog:
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.


author: Nick Clifton <nickc@redhat.com> - 11.12-1
changelog:
  - Annocheck: Add code to handle another glibc function built without LTO.
  - GCC Plugin: Do not run if other plugins are active.  (#2175768)
  - Annocheck: Add code to handle glibc functions built without LTO.
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate dbeuginfo files.
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Libannocheck: Fix bug causing infinite looping when running tests.
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)


author: Nick Clifton <nickc@redhat.com> - 12.07-1
changelog:
  - Annocheck: Fix lto testing.  (#2177140)
  - gcc-plugin: generate warnings about misspelt -D_FORTIFY_SOURCE and/or -D_GLIBCXX_ASSERTIONS options.
  - gcc-plugin: use a bigger buffer for constructing notes.
  - llvm-plugin: Fix detection of optimization level.  Improve test.
  - clang-plugin: Improve test.
  - configure: More improvements.
  - annocheck: Fix seg-fault when checking for glibc components in string format notes.
  - configure: Simplify.
  - gcc plugin: Add filenames to string notes.  Allow use of ANNOBIN environment variable.
  - llvm plugin: Add workaround for building with LLVM-16.
  - clang plugin: Fix for building with Clang-16.
  - gcc plugin: Keep ELF notes at protocol version 3.
  - Protocol Version 4: String format notes.
  - Annocheck: Update message for LTO tests.  (#2177140)


author: Nick Clifton <nickc@redhat.com> - 12.09-1
changelog:
  - Annocheck: Fix detection of missing plugin options.  (#2189492)
  - Fix generation of auto-generated files.
  - Fix covscan reported errors.


author: Nick Clifton <nickc@redhat.com> - 12.12-1
changelog:
  - Rebuild against LLVM-16.  (#2212739)
  - Annocheck: Check for string notes in separate debug info files.  (#2211694)
  - Annocheck: Add support for el10 and rhel-10 profiles.  (RHEL-526)
  - Annocheck: Suppress more tests for Rust binaries.


author: Nick Clifton <nickc@redhat.com> - 12.28-1
changelog:
  - Tests: Fix obsoleted syntax in plans/ci.fmf  (RHEL-12194)
  - Spec File: Use SPDX licensing.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - LLVM Plugin: Fix building with LLVM version 17.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.
  - Annocheck: Remove dependency upon binutils-devel.
  - Annocheck: Add detection of known parts of libstdc++-nonshared.a that contain gaps.  (#2217864)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifron <nickc@redhat.com> - 12.31-1
changelog:
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-3
changelog:
  - Spec: add functionality to build from a commit hash
  - Use latest 1.3.0 to add flexibility to AD integration functionality
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.4.1-1
changelog:
  - Update BuiildRequires to use ansible-core on RHEL > 8.8
  - Move RHEL related code into an include for spec readability
  - Update role to version 1.4.1 to add customizable storage paths
    Resolves: RHEL-529


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Dimitri Savineau <dsavinea@redhat.com> - 2.14.2-4
changelog:
  - rebuild with python 3.11 (rhbz#2169466)
  - remove bundled dependencies from requirements file (rhbz#2152615)
  - add bundled version of resolvelib
  - use PyPi sources
  - remove straightplugin
  - add missing obsoletes constraint


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204510)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.7-1
changelog:
  - ansible-core 2.14.7 release (rhbz#2221820)
  - rebuild with python 3.9 (rhbz#2221820)
  - remove bundled packaging, pyparsing and resolvelib.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.9-1
changelog:
  - ansible-core 2.14.9 release (rhbz#2232432)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.14-1
changelog:
  - ansible-core 2.14.14 release (RHEL-23783)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22124)


author: Thomas Woerner <twoerner@redhat.com> - 1.8.4-1
changelog:
  - Update to version 1.8.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.4
    Resolves: RHBZ#2125592
  - 'ansible-doc' -l lists most idm modules as 'UNDOCUMENTED'
    Resolves: RHBZ#2125603
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2125616
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2069184


author: Thomas Woerner <twoerner@redhat.com> - 1.9.0-1
changelog:
  - Update to version 1.9.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.0
    Related: RHBZ#2125592
  - pwpolicy: Add support for password check and grace limit
    Resolves: RHBZ#2127911
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2127446
  - ipaclient: No kinit on controller for deployment using OTP
    Resolves: RHBZ#2127887
  - ipaclient: Configure DNS resolver
    Resolves: RHBZ#2127895
  - New netgroup management module
    Resolves: RHBZ#2127910
  - sudorule: Add support for 'hostmask' parameter
    Resolves: RHBZ#2127913
  - ipaconfig: Fix fail_json calls
    Resolves: RHBZ#2134375
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2134505
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132731


author: Thomas Woerner <twoerner@redhat.com> - 1.9.1-1
changelog:
  - Update to version 1.9.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.1
    Resolves: RHBZ#2125592
  - pwpolicy: Allow clearing policy values
    Resolves: RHBZ#2150334
  - Use netgroup_find instead of netgroup_show to workaround IPA bug
    Resolves: RHBZ#2144725


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-1
changelog:
  - Update to version 1.9.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.2
    Resolves: RHBZ#2125592
  - ipabackup: Use ipabackup_item again in copy_backup_to_server
    Resolves: RHBZ#2165953


author: Thomas Woerner <twoerner@redhat.com> - 1.10.0-1
changelog:
  - Update to version 1.10.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
    Resolves: RHBZ#2170373
  - ipareplica/server: Enable removal from domain with undeployment
    Resolves: RHBZ#2127903
  - ipagroup: Allow multiple group management
    Resolves: RHBZ#2175763
  - ipaserver: Allow deployments with random serial numbers
    Resolves: RHBZ#2127905
  - ipagroup: Fix ensuring external group members (without trust-ad)
    Resolves: RHBZ#2183822
  - ipaclient: Add subid option to select the sssd profile with-subid
    Resolves: RHBZ#2175767
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#2127883
  - ipaclient: Keep server affinity while deploying as long as possible
    Resolves: RHBZ#2175757


author: Thomas Woerner <twoerner@redhat.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
    Resolves: RHBZ#2170373
  - Multiple service management
    Resolves: RHBZ#2175771
  - New ipacert module
    Resolves: RHBZ#2127907
  - Fix maxsequence handling in ipapwpolicy module
    Resolves: RHBZ#2214294


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Resolves: RHBZ#2170373
  - ipaautomountmap: add support for indirect maps
    Resolves: RHBZ#2050176
  - ipauser: Add support to modify GECOS field
    Resolves: RHBZ#2169372
  - ipauser: Add support for parameter "street"
    Resolves: RHBZ#2215531
  - ipauser: Add support for SMB attributes
    Resolves: RHBZ#2215533
  - ipauser: Support for External IdP attributes
    Resolves: RHBZ#2215536
  - Fix handling of ipapwpolicy attributes usercheck and dictcheck
    Resolves: RHBZ#2215542
  - Update authtypes authind
    Resolves: RHBZ#2215538


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Resolves: RHEL-13744
  - New idoverridegroup management module.
    Resolves: RHEL-16937
  - New idoverrideuser management module.
    Resolves: RHEL-16942
  - New idview management module.
    Resolves: RHEL-16934
  - New idp management module.
    Resolves: RHEL-16939
  - idoverride{user,group}: Fix delete_continue with state absent
    Resolves: RHEL-16680


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13744
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4962
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13758
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17954
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17957
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-19123
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19130
  - Idempotency fixes
    Resolves: RHEL-19132
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19134
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19136


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Tom Deseyn <tom.deseyn@gmail.com> - 8.0.103-3
changelog:
  - We disable checking the signature of the last certificate in a chain if the certificate is supposedly self-signed.
    A side effect of not checking the self-signature of such a certificate is that disabled or unsupported message
    digests used for the signature are not treated as fatal errors.
  - Resolves: RHEL-28344


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-102
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062824 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-103
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2071725 - Default systemd service config blocks audit watch rules in some directories [rhel-9.1.0]


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-2
changelog:
  - Parse auto_reset_crashkernel in kdump
    resolves: rhbz#2042772
  - Add new directives and options for chrony


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-4
changelog:
  - Fix parsing of /usr/lib/tmpfiles.d/provision.conf
  - Fix parsing of /etc/kernel/cmdline
    resolves: rhbz#2155136, rhbz#2159282


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080239)
  - backup-restore now works correctly (RHBZ #2070541)
  - add with-subid to sssd profile (RHBZ #2075192)
  - add with-gssapi to sssd profile (RHBZ #2077893)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - update translations (RHBZ #2139642)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151145)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Jerome Marchand <jmarchan@redhat.com> - 0.28.0-1
changelog:
  - Rebase to v0.28.0 (RHEL-9976)
  - Rebuild with LLVM 17 (RHEL-10591)
  - Fix bpf-biosnoop out of bound access (RHEL-8664)
  - Fix kvmexit missing VM exit reasons and statistics (RHEL-8702)
  - Fix multi-word array type handling (RHEL-8674)
  - Fix tcpstates -Y (RHEL-8490)
  - Fix bio tools (RHEL-8553)


author: Jerome Marchand <jmarchan@redhat.com> - 0.28.0-5
changelog:
  - Fix libbpf bio tools (RHEL-19368)
  - Add S390x support to libbpf-tools (RHEL-16325)
  - Power enhancements(RHEL-11477)


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.0-3
changelog:
  - Really prevent the loading of compromised headers (RHEL-28769, CVE-2024-2314)
  - Add python3-pyelftools dependency (RHEL-36583)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-6
changelog:
  - Bound the amount of work performed for delegations (CVE-2022-2795)
  - Add /usr/lib64/named to bind-chroot (#2129466)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-9
changelog:
  - Prevent flooding with UPDATE requests (CVE-2022-3094)
  - Handle RRSIG queries when server-stale is active (CVE-2022-3736)
  - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)


author: Yara Ahmad <yahmad@redhat.com> - 2.35.2-40
changelog:
  - Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (#2164701)


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-7
changelog:
  - Fix setting kickstart data
    Resolves: rhbz#2174296
  - Do not set memory limit for LUKS2 when running in FIPS mode
    Resolves: rhbz#2193096


author: Jan Pokorny <japokorn@redhat.com> - 3.6.0-9
changelog:
  Backport iSCSI initiator name related fixes:
  - Allow changing iSCSI initiator name after setting it
    Resolves: rhbz#2221935
  - Add a basic test case for the iscsi module
    Resolves: rhbz#2221935
  - tests: Use blivet-specific prefix for targetcli backing files
    Resolves: rhbz#2221935
  - iscsi: Save firmware initiator name to /etc/iscsi/initiatorname.iscsi
    Resolves: rhbz#2221932
  - tests: Improve iscsi_test.ISCSITestCase
    Resolves: rhbz#2221935


author: Tomas Bzatek <tbzatek@redhat.com> - 3.6.0-10
changelog:
  - nvme: Require additional rpms for dracut
    Resolves: RHEL-2855
  - nvme: Align HostNQN and HostID format to TP-4126
    Resolves: RHEL-1254


author: Tomas Bzatek <tbzatek@redhat.com> - 3.6.0-11
changelog:
  - nvme: Retrieve HostNQN from a first active fabrics connection
  - tests: Add a simple unit test for the NVMe module
    Resolves: RHEL-11541


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-14
changelog:
  - Do not add new PVs to the LVM devices file if it doesn't exist and VGs are present
    Resolves: RHEL-473


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-15
changelog:
  - Backport fixes for Stratis support needed for storage role
    Resolves: RHEL-35382
  - Add support for resizing PVs to the size of the underlying block device
    Resolves: RHEL-35386


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-27
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Bryan Gurney <bgurney@redhat.com> - 1.6.1-2
changelog:
  - Add issues resolved by release 1.6.1
  - Resolves: RHEL-36001
  - Resolves: RHEL-36664
  - Resolves: RHEL-36667
  - Resolves: RHEL-36691


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Colin Walters <walters@verbum.org> - 0.2.11-2
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.11
    Resolves: https://issues.redhat.com/browse/RHEL-5273


author: Colin Walters <walters@verbum.org> - 0.2.15-2
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.15
    Related: https://issues.redhat.com/browse/RHEL-14388


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0 (rhbz#2121920)
  - Rebuild for LLVM 15 (rhbz#2118995)
  - Download the cereal library (not packaged into RHEL9)
  - Fixed several tools (rhbz#1975148, rhbz#2088577, rhbz#2128208, rhbz#2073675,
    rhbz#2073770)
  - Resolve conflicts between bpftrace and bcc manpages (rhbz#2075076)


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-2
changelog:
  - Fix missing kprobe attachpoints for bio* tools (s390x, ppc64le)
  - Rebuild for libbpf 1.0.0
  - Resolves: rhbz#2157829
  - Related: rhbz#2157592


author: Viktor Malik <vmalik@redhat.com> - 0.17.0-1
changelog:
  - Rebase on bpftrace 0.17.0 (RHEL-286)
  - Fix runqlat.bt, tcpdrop.bt, and undump.bt on aarch64 (rhbz#2170838)


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/70b792d)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/f843563)
  - Related: RHEL-2112


author: Jerry James <loganjerry@gmail.com> - 1.10.14-1
changelog:
  - Version 1.10.14
  - Remove no longer needed no-unixsocket.patch
  - Add workaround for compiling tests with JDK 11


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Camilla Conte <cconte@redhat.com> - 23.4-4
changelog:
  - 0008-fix-clean-stop-warning-when-running-clean-command-47.patch [RHEL-21531]
  - Resolves: RHEL-21531


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-5
changelog:
  - ci-Revert-Use-grep-for-faster-parsing-of-cloud-config-i.patch [RHEL-22255]
  - Resolves: RHEL-22255
    ([Azure][RHEL-9] cloud-init-23.4 cannot read "- Azure" datasource_list format)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-6
changelog:
  - ci-fix-Add-types-to-network-v1-schema-4841.patch [RHEL-21324]
  - Resolves: RHEL-21324
    ([rhel-9] The schema WARNING info for network-config.json is not suitable in cloud-init-23.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7
changelog:
  - ci-Retain-exit-code-in-cloud-init-status-for-recoverabl.patch [RHEL-28549]
  - Resolves: RHEL-28549
    ([RHEL 9.4] cloud-init 23.4 returns 2 on recoverable errors instead of 0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-8
changelog:
  - ci-fix-Correct-v2-NetworkManager-route-rendering-4637.patch [RHEL-20964]
  - ci-feat-apply-global-DNS-to-interfaces-in-network-manag.patch [RHEL-20964]
  - ci-fix-Undeprecate-network-in-schema-route-definition-5.patch [RHEL-29709]
  - Resolves: RHEL-20964
    ([rhel-9]cloud-init fails to configure DNS/search domains for network-config v1)
  - Resolves: RHEL-29709
    (Suggest to backport patch ff40d1a to undeprecate 'network' in schema route definition)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-9
changelog:
  - ci-fix-Fall-back-to-cached-local-ds-if-no-valid-ds-foun.patch [RHEL-32846]
  - Resolves: RHEL-32846
    ([cloud-init][ESXi]VMware datasource resets on every boot causing it to lose network configuration [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-10
changelog:
  - ci-Remove-dependency-on-python3-httpretty.patch [RHEL-33973]
  - Resolves: RHEL-33973
    ([RFE] Remove dependency on python3-httpretty)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-11
changelog:
  - ci-fix-Always-use-single-datasource-if-specified-5098.patch [RHEL-36255]
  - Resolves: RHEL-36255
    ([rhel-9.5] DataSourceNoCloudNet not configurable via config files)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-12
changelog:
  - ci-fix-cloudstack-Use-parsed-lease-file-for-virtual-rou.patch [RHEL-40217]
  - Resolves: RHEL-40217
    ([Cloud-init] CloudstackDataSource cannot work with NetworkManager)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-13
changelog:
  - ci-feat-sysconfig-Add-DNS-from-interface-config-to-reso.patch [RHEL-17961]
  - ci-fix-jsonschema-Add-missing-sudo-definition-5418.patch [RHEL-44337]
  - ci-doc-update-examples-to-reflect-alternative-ways-to-p.patch [RHEL-44337]
  - ci-fix-dhcp-Guard-against-FileNotFoundError-and-NameErr.patch [RHEL-44598]
  - ci-fix-Address-TIOBE-abstract-interpretation-issues-486.patch [RHEL-44598]
  - ci-Update-pylint-version-to-support-python-3.12-5338.patch [RHEL-44598]
  - Resolves: RHEL-17961
    ([RHEL-9] cloud-init fails to configure DNS search domains)
  - Resolves: RHEL-44337
    ([rhel-9] fix `SUDO` configuration schema for users and groups)
  - Resolves: RHEL-44598
    (fix pylint error and support python 3.12)


author: Packit <hello@packit.dev> - 311-1
changelog:
  - Allow pasting multiple SSH keys at once in Create VM dialog
  - Fix detaching host device for running VMs


author: Packit <hello@packit.dev> - 312-1
changelog:
  - Accounts: support lastlog2 and make the page faster
  - Storage: Various Anaconda mode fixes
  - Fix package build if cockpit-bridge package is installed


author: Packit <hello@packit.dev> - 314-1
changelog:
  - Diagnostic reports: Fix command injection vulnerability with crafted report names
  - Storage: Improvements to read-only encrypted filesystems


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 89-1
changelog:
  - Use binary http channel for podman socket for non-UTF-8 robustness
  - Stop using obsolete cockpit.utf8_{de,en}coder() API
  - Fix tests for CentOS/RHEL 10


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Drop moment.js dependency
  - Tests: Assert pause state with a later command in rec1
  - CI: Update image to ubuntu 20.04


author: Justin Stephenson <jstephen@redhat.com> - 13-1
changelog:
  - Play after rewind in testFastforwardControls
  - Set TZ to avoid CI failures with testFilter* tests
  - testZoomSpeedControls incorrectly checks scale
  - Fix testSessionRecordingConf
  - Read TMT_TEST_DATA variable for LOGS in browser.sh
  - Fix node-modules in run-test.sh
  - Install sssd-proxy in test browser.sh
  - Add Files path for test recordings
  - FMF: Run tests together
  - Add executable bit to browser shell scripts
  - FMF: Fix minor typo in plans
  - Add FMF tests and test scripts
  - Read existing sssd conf domains and services
  - Makefile: Update Cockpit lib to 269bf89276c679a03befc8a04244addd
  - Remove CentOS condition in testZoomSpeedControls
  - Add accessible name label for Progress component
  - Remove 'enable_files_domain' from SSSD Config
  - SSSD config changes
  - testFastforwardControls update after player-restart
  - Switch wait_present to wait_visible
  - ESLint error and warning fixes
  - Fix stylelint errors
  - Dependency updates
  - Bring up to date with cockpit starter kit
  - Config: Switch SSSD files provider to Proxy provider
  - Update fedora license in spec file
  - Makefile: Bump test API to 267
  - Makefile: drop installing cockpit-ws/cockpit-packagekit
  - src: load translations via po.js
  - .semaphore: update TEST_OS to Fedora 36
  - webpack.config.js: update compression plugin to succeed build
  - Makefile: Adjust to changed rpmspec -q behaviour
  - Use standard "translate" marker in HTML
  - Update dependencies excluding Patternfly
  - Remove unneeded tlog UID code


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2063148
  - Disable FIPS mode; it does not work and will not be certified
    Resolves: rhbz#2013669


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Phil Sutter <psutter@redhat.com> - 1.4.5-15
changelog:
  - conntrack: fix compiler warnings
  - src: fix strncpy -Wstringop-truncation warnings
  - connntrack: Fix for memleak when parsing -j arg
  - Drop pointless assignments
  - Don't call exit() from signal handler
  - read_config_yy: Drop extra argument from dlog() call
  - helpers: ftp: Avoid ugly casts
  - Fix potential buffer overrun in snprintf() calls
  - cache: Fix features array allocation
  - hash: Flush tables when destroying


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.221.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.222.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.222.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.224.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.224.0
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:2.226.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.226.0
  - Remove dependency on policycoreutils-python-utils
  - Related: Jira:RHEL-2112
  - Related: Jira:RHEL-18316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.227.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.227.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.228.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.228.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.1
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.230.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.230.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.231.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.231.0
  - Related: RHEL-27608


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179960
  - Resolves: #2187333
  - Resolves: #2187376
  - Resolves: #2203705
  - Resolves: #2207519


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
  - Resolves: RHEL-28855


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-3
changelog:
  - Resolves: rhbz#2024652
  - Resolves: rhbz#2024657

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2024652)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2024652)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024657)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024657)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Vladis Dronov <vdronov@redhat.com> - 15.9-10
changelog:
  - Bring in important patches from the upstream (39fb38..eaea31 in a git repo)
  - Fix the upstream tarball URL
  - Remove outdated patch files


author: Vladis Dronov <vdronov@redhat.com> - 15.9-14
changelog:
  - Add distrubution patches which were not upstreamed (bz 2072635)
  - Add self-tests
  - Add OSCI harness


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - 2217177 - Delays printing to lpd when reserved ports are exhausted
  - 2217284 - The command "cancel -x <job>" does not remove job files
  - 2217954 - Enlarge backlog queue for listen() in cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-23
changelog:
  - RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
  - RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-14
changelog:
  - RHEL-19201 redhat-lsb unnecessary pulls in cups and avahi dependencies
  - RHEL-16026 Cups Browsed does not correctly pull printer location and description information from print server


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-7
changelog:
  - Resolves: #2096149 - Fatal error when running "squatter -r user"
  - Resolves: #2096885 - Enhanced TMT testing for centos-stream


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Eugene Syromiatnikov <esyr@redhat.com> - 3.6-13
changelog:
  - Change "Requires: genisoimage" dependency to "Requires: /usr/bin/mkisofs"
    to enable xorriso-provided drop-in replacement implementation usage.


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Resolves: RHEL-22429


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-2
changelog:
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22429


author: Timothy Redaelli <tredaelli@redhat.com> - 21.11.2-1
changelog:
  - Rebase to 21.11.2 (#2126159)
  - Includes fixes for CVE-2022-2132 (#2107173) and CVE-2022-28199 (#2123616)


author: Pavel Valena <pvalena@redhat.com> - 057-20.git20221213
changelog:
  - refactor(url-lib): write curl output directly to file
  - fix(dracut-initramfs-restore.sh): initramfs detection not
  - fix(90kernel-modules): install blk modules using symbol
  - fix(squash): build ld cache for squash loader
  - test(16-DMSQUASH): make it pass on arch
  - feat(dmsquash-live): add new dmsquash-live-autooverlay module


author: Pavel Valena <pvalena@redhat.com> - 057-38.git20230725
changelog:
  - fix(dracut.sh): use dynamically uefi's sections offset
  - fix(dracut.sh): handle imagebase for uefi
  - fix(dracut.sh): use gawk for strtonum
  - fix(rngd): install system service file
  - fix(nvmf): nvme list-subsys prints the address using commas
  - fix(nvmf): don't try to validate network connections in
  - fix(nvmf): no need to load the nvme module
  - fix(nvmf): don't create did-setup file
  - fix(nvmf): don't use "finished" queue for autoconnect
  - fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes
  - fix(nvmf): avoid calling "exit" in a cmdline hook
  - fix(nvmf): run cmdline hook before parse-ip-opts.sh
  - feat(nvmf): set rd.neednet=1 if tcp records encountered
  - fix(nvmf): install 8021q module unconditionally
  - fix(nvmf): support /etc/nvme/config.json
  - feat(nvmf): add code for parsing the NBFT


author: Pavel Valena <pvalena@redhat.com> - 057-43.git20230816
changelog:
  - feat(spec): include modules for IMA
  - fix(dracut): there can be \ at the end on line in awk script
  - fix(rngd): spacing
  - fix(integrity): do not enable EVM if there is no key
  - fix(fips): include openssl's fips.so and openssl.cnf


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Viktor Malik <vmalik@redhat.com> - 1.25-1
changelog:
  - Resolves: rhbz#2190484
  - Build with system libbpf
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Hui Wang <huwang@redhat.com> - 1:4.20-4
changelog:
  - Drop unnecessary javax16.api.jar
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-4
changelog:
  - edk2-OvmfPkg-ResetVector-Fix-assembler-bit-test-flag-chec.patch [RHEL-9943]
  - Resolves: RHEL-9943
    ([EDK2][AMDSERVER Bug] OvmfPkg/ResetVector: Fix assembler bit test flag check [rhel-9.3.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-1
changelog:
  - Rebase to edk2-stable202311 [RHEL-12323]
  - Switch to OpenSSL 3.0 [RHEL-49]
  - Resolves: RHEL-12323
    (Rebase EDK2 for RHEL 9.4)
  - Resolves: RHEL-49
    (consume / bundle RHEL-9 OpenSSL (version 3.0.x) in RHEL-9 edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-2
changelog:
  - edk2-OvmfPkg-RiscVVirt-use-gEfiAuthenticatedVariableGuid-.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariableG.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variables.patch [RHEL-20963]
  - Resolves: RHEL-20963
    ([rhel9] guest fails to boot due to ASSERT error)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-3
changelog:
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch [RHEL-21155]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch [RHEL-21155]
  - edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21155]
  - Resolves: RHEL-21155
    (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-4
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-add-casts-to-UINTN-and-UINT3.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-clarify-block-write-logic-fi.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-a-loop-for-NorFlashWrite.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-allow-larger-writes-without-.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-ValidateFvHeader-unwritten-s.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-move-DoErase-code-block-into.patch [RHEL-20963]
  - Resolves: RHEL-20963
    ([rhel9] guest fails to boot due to ASSERT error)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-5
changelog:
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411-2.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-411-3.patch [RHEL-21157]
  - edk2-SecurityPkg-Updating-SecurityFixes.yaml-after-symbol.patch [RHEL-21157]
  - edk2-OvmfPkg-Sec-Setup-MTRR-early-in-the-boot-process.patch [RHEL-21704]
  - edk2-MdePkg-ArchitecturalMsr.h-add-defines-for-MTRR-cache.patch [RHEL-21704]
  - edk2-UefiCpuPkg-MtrrLib.h-use-cache-type-defines-from-Arc.patch [RHEL-21704]
  - edk2-OvmfPkg-Sec-use-cache-type-defines-from-Architectura.patch [RHEL-21704]
  - Resolves: RHEL-21157
    (CVE-2022-36764 edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-9])
  - Resolves: RHEL-21704
    (vGPU VM take several minutes to show tianocore logo if firmware is ovmf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-6
changelog:
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Un.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p2.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p3.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p4.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Adds-a-SecurityFix.yaml-file.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Updating-SecurityFixes.yaml.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - Resolves: RHEL-21841
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-9])
  - Resolves: RHEL-21843
    (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-9])
  - Resolves: RHEL-21845
    (CVE-2023-45231 edk2: Out of Bounds read when handling a ND Redirect message with truncated options [rhel-9])
  - Resolves: RHEL-21847
    (CVE-2023-45232 edk2: Infinite loop when parsing unknown options in the Destination Options header [rhel-9])
  - Resolves: RHEL-21849
    (TRIAGE CVE-2023-45233 edk2: Infinite loop when parsing a PadN option in the Destination Options header [rhel-9])
  - Resolves: RHEL-21851
    (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message [rhel-9])
  - Resolves: RHEL-21853
    (TRIAGE CVE-2023-45235 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240214-2
changelog:
  - edk2-OvmfPkg-PlatformPei-log-a-warning-when-memory-is-tig.patch [RHEL-22202]
  - edk2-OvmfPkg-PlatformPei-consider-AP-stacks-for-pei-memor.patch [RHEL-22202]
  - edk2-OvmfPkg-PlatformPei-rewrite-page-table-calculation.patch [RHEL-22202]
  - edk2-OvmfPkg-PlatformPei-log-pei-memory-cap-details.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p2.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p3.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p4.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p5.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-return-early-in-GetBspNumber.patch [RHEL-22202]
  - Resolves: RHEL-22202
    ([EDK2] Support booting with 4096 vcpus)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-1
changelog:
  - Rebase to edk2-stable202405
  - Bumo openssl to 8e5beb77088b
  - Resolves: RHEL-32486
    (rebase to edk2-stable202405 [rhel-9])
  - Resolves: RHEL-36446
    (edk2: enable MOR [rhel-9])
  - Resolves: RHEL-21653
    (CVE-2023-6237 edk2: openssl: Excessive time spent checking invalid RSA public keys [rhel-9])
  - Resolves: RHEL-21150
    (CVE-2023-6129 edk2: mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC)
  - Resolves: RHEL-22490
    (CVE-2024-0727 edk2: openssl: denial of service via null dereference [rhel-9])


author: Felix Kolwa <fkolwa@redhat.com> - 1.35.1-7
changelog:
  - Bump revision number to 7.
  - Pull in changes from Major Hayden:
    - Skip version check test
      Opened upstream bug:
          https://github.com/aws/efs-utils/issues/194
    - Disable automatic version check


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Milan Crha <mcrha@redhat.com> - 3.40.4-10
changelog:
  - Related: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Radovan Sroka <rsroka@redhat.com> - 1.0.3-3
changelog:
  RHEL 9 BETA
  - SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm
  Resolves: rhbz#1932225
  Resolves: rhbz#1977731


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-101
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespaces in trust files
  - use full paths in trust files
  Resolves: rhbz#2032408
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#2015307
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014449


author: Radovan Sroka <rsroka@redhat.com> - 1.1-100
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#2032408
  - introduce rules.d
  Resolves: rhbz#2054740
  - remove pretrans scriptlet
  Resolve: rhbz#2051481


author: Radovan Sroka <rsroka@redhat.com> - 1.1-104
changelog:
  RHEL 9.1.0 ERRATUM
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
  Resolves: rhbz#2069123
  - Faulty handling of static applications
  Resolves: rhbz#2096457


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-102
changelog:
  RHEL 9.1.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100041
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2097385
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070655
  - Introduce ppid rule attribute
  Resolves: rhbz#2102558
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111244
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111938
  - Remove dnf plugin
  Resolves: rhbz#2113959
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2115849


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-104
changelog:
  RHEL 9.2.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2097077
  - fapolicyd ineffective with systemd DynamicUser=yes
  Resolves: rhbz#2136802
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2160517
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2160518
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: RHEL-192


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-100
changelog:
  RHEL 9.3.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-430
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-621
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-624
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-623
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-622
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-627
  - fapolicyd-cli --update then mount/umount twice causes fapolicyd daemon to block (state 'D')
  Resolves: RHEL-817
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-730
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-816


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18139
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20917
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-21345


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-66
changelog:
  - Add missing licenses to spec-file
    Resolves: RHEL-27929
  - ha-cloud-support: fix aliyun-cli
    Resolves: RHEL-28097


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-69
changelog:
  - ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
    gcp-vpc-move-route's stop-action
    Resolves: RHEL-29649


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-70
changelog:
  - fence_aliyun: add credentials file support, filter parameter, and
    optimize log output
    Resolves: RHEL-31488, RHEL-31485, RHEL-31483


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-73
changelog:
  - fence_vmware_rest: detect if the API user has sufficient rights to
    manage the fence device
    Resolves: RHEL-25256


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Antonio Torres <antorres@redhat.com> - 3.0.21-34
changelog:
  - Use GID / UID 95 as it's reserved for FreeRADIUS (https://pagure.io/setup/blob/07f8debf03dfb0e5ed36051c13c86c8cd00cd241/f/uidgid#_107)
    Resolves: #2095403


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-12
changelog:
  - Resolves: RHEL-3541 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-2
changelog:
  - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15918 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Michal Schorm <mschorm@redhat.com> - 26.4.8-2
changelog:
  - Switch from SCONS build tooling to CMAKE build tooling
  - Use upstream variants of Systemd service file and Systemd service file wrapper srcipt


author: Lukas Javorsky <ljavorsk@redhat.com> - 26.4.9-2
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Nick Clifton <nickc@redhat.com> - 10.73-2
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 11.08-4
changelog:
  - Fix building with Clang-16.  (#2216918)
  - Re-enable building with LTO.  (#2166579)
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)
  - Annocheck: Improve handling of tool versions.
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)
  - Rename gcc plugin to gts-annobin.  (#2111977)
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.14-1
changelog:
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217814)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Marek Polacek <polacek@redhat.com> 13.2.1-4
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/110488, ada/111434, c++/99631, c++/111471, c++/111485, c++/111493,
  	c++/111512, fortran/68155, fortran/92586, fortran/111674,
  	libstdc++/108046, libstdc++/111050, libstdc++/111102,
  	libstdc++/111511, middle-end/111699, modula2/111510, target/111121,
  	target/111411, tree-optimization/110315, tree-optimization/110386,
  	tree-optimization/111331, tree-optimization/111519


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-14-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.52-1
changelog:
  - Initial import of sources.
  - Compared to GTS-13 annobin (12.32) the improvements are:
  - Annocheck: Add OpenSSL Engine test.  (PTG-319)
  - Annocheck: Test for gaps even when only one note is present.
  - Annocheck: Skip AArch64 branch protection test for GO binaries.
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.
  - Annocheck: Update heuristics for detecting glibc code in executables.  (RHEL-30579)
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Spec File: Override fortification level and set it to 3.
  - Annocheck: Improve detection of -mbranch-protection option.
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - GCC Plugin: Fix bug extracing the value of target specific command line options.
  - Configure: Remove check for FrontendPluginRegistry.h header as it is stored in a non-standard location on Debian systems.
  - Debuginfod test: Allow for the libdwfl library silently contacting the debuginfod server.
  - LLVM Plugin: Use llvm-config to get the correct paths and options for building executables.
  - Clang Plugin: Likewise.
  - Enable silent rules for most building.
  - Annocheck: Correctly extract DWARF attributes from DT_REL files.
  - Annocheck: Improve heuristics for locating debug info files.  (#2267097)
  - Configure: Harmonize configure options.    
  - Clang Plugin: Fix building with Clang 18.  (#31414)
  - GCC Plugin: Add support for MIPS specific target functions.
  - GCC Plugin: Use .dc.a for address expressions in 64-bit ELF format notes.
  - Spec File: Remove a workaround for ppc64le.
  - Annocheck: Improve heuristic for skipping LTO and FORTIFY tests.  (#2264000)
  - Annocheck: Also skip property note test for i686 binaries. (#2258571)
  - Annocheck: Also skip the entry point test for i686 binaries. (#2258571)
  - GCC Plugin: Do not use section groups with string format notes.
  - Annocheck: Disable cf-protection test for i686 architecture. (#2258571)
  - Spec File: Disable hard gcc check in order to allow builds with new version of gcc.
  - Spec File: Do not install annocheck.1.gz when annocheck is disabled.
  - Annocheck: Improve detection of FIPS compliant GO binaries.
  - GCC Plugin: Fix recording of the -Wimplicit-int and -Wimplicit-function-declaration warnings.  Add active checks for when they are deliberately disabled.
  - Tests: Fix implicit-values test so that it will compile with gcc 14+.


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Remove gdb-6.5-BEA-testsuite.patch, as it was upstreamed and
    will make its way back with the next rebase.


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Guinevere Larsen <blarsen@redhat.com> - 14.2-1.el9
changelog:
  - Rebase to gdb-14.2 and update all bug references
    (Resolves: RHEL-39554)
    (Resolves: RHEL-39553)
    (Resolves: RHEL-10550)
    (Resolves: RHEL-39555)
    (Resolves: RHEL-39585)
    (Resolves: RHEL-36211)


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Ray Strode <rstrode@redhat.com> - 40.1-15
changelog:
  - Fix accountsservice user templates
    Resolves: #2062827
  - Properly force Xorg on matrox cards
    Related: #2074013
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2074014


author: Ray Strode <rstrode@redhat.com> - 40.1-23
changelog:
  - Make /var/log/gdm tmpfiles.d snippet match files manifest
    to fix installability test
    Related: RHEL-19410


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Patsy Griffin <patsy@redhat.com> - 2.34-113
changelog:
  - CVE-2024-33601 glibc: netgroup cache may terminate daemon on
    memory allocation failure (RHEL-34272)
  - CVE-2024-33602 glibc: netgroup cache assumes NSS callback 
    uses in-buffer strings (RHEL-34274)


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Felipe Borges <feborges@redhat.com> - 40.0-25
changelog:
  - Backport translations for Multitasking panel
  - Make Multitasking panel capable of handling Right-to-Left locales
    Resolves: #2105228


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: David Benoit <dbenoit@redhat.com> 3.0.9-9
changelog:
  - Delete remove-fedora-dependency-automation.patch
  - Bundle golist in /usr/libexec
  - Related: rhbz#2043107


author: Alejandro Sáez <asm@redhat.com> - 1.21.7-1
changelog:
  - Rebase to Go 1.21.7
  - Set GOTOOLCHAIN to local
  - Resolves: RHEL-24334
  - Resolves: RHEL-18364
  - Resolves: RHEL-18365


author: Alejandro Sáez <asm@redhat.com> - 1.22.3-1
changelog:
  - Rebase to 1.22.3
  - Removes re-enable-cgo.patch
  - Resolves: RHEL-35634
  - Resolves: RHEL-35883
  - Resolves: RHEL-10068
  - Resolves: RHEL-34924


author: Archana Ravindar <aravinda@redhat.com> - 1.22.4-1
changelog:
  - Rebase to Go1.22.4 that includes fixes for CVE-2024-24789 and CVE-2024-24790
  - Resolves: RHEL-40156


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Akira TAGOH <tagoh@redhat.com> - 20201206-1
changelog:
  - Updates to 20201206.
    Resolves: rhbz#1899847
  - Refactoring spec file.
  - Fix invalid metainfo files.
    Resolves: rhbz#1830709


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Stan Cox <scox@redhat.com> 9.2.10-3
changelog:
  - bumps exporter-toolkit to v0.7.3, sanitize-url@npm to 6.0.2, skip problematic s390 tests, License AGPL-3.0-only.


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-10
changelog:
  - Resolves RHEL-7505
  - Adds a selinux policy for grafana
  - Resolves RHEL-12666
  - fix CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-13
changelog:
  - Resolves RHEL-19296
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-2
changelog:
  - Fixes patch 1002 for update to golang-fips
  - Remove unused code under apsl-1.1 and apsl-1.2 licenses
  - Resolves RHEL-33655


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.0.0-4
changelog:
  - update to 5.0.0 tagged upstream community sources, see CHANGELOG
  - install plugin in /usr/share and create symlink from /var using
    systemd-tmpfiles to work on rpm-ostree based distributions
  - revert the breaking change (change of internal plugin IDs) of upstream v5.0.0,
    i.e. there are no breaking changes when performing this upgrade
  - enable Go modules in build process
  - make vendor and webpack tarballs reproducible
  - drop makefile in favor of create_bundles.sh script


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.1.1-1
changelog:
  - update to 5.1.1 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.14.0-1
changelog:
  - Release 0.14.0 (Peter Robinson)
  - Updated testing documentation (Jose Noguera)
  - README updated with TOC and improved explanations (Jose Noguera)
  - Add watchdog-triggered boot check #2 (Jose Noguera)
  - Update specfile and README to reflect changes in subpackage layout. (Jose Noguera)
  - Ensure all required health checks are run #52 (Jose Noguera)


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow
  - Patch CVE-2023-44446: MXF demuxer use-after-free
  - Resolves: RHEL-17030, RHEL-17039


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-4
changelog:
  - CVE-2023-40474: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40475: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40476: Integer overflow in H.265 video parser
  - ZDI-CAN-22300: buffer overflow vulnerability
  - Resolves: RHEL-19501, RHEL-19505, RHEL-19506, RHEL-20201


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-6
changelog:
  - Fixes for CVE-2022-1920, CVE-2022-1921, CVE-2022-1922, CVE-2022-1923,
    CVE-2022-1924, CVE-2022-1925, CVE-2022-2122
    Resolves: rhbz#2131034, rhbz#2131039, rhbz#2131045, rhbz#2131049,
              rhbz#2131054, rhbz#2131060, rhbz#2131064


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - CVE-2023-37327: integer overflow leading to heap overwrite in FLAC
    image tag handling
  - Resolves: RHEL-19471


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.48.2-5
changelog:
  - Rebase to guestfs-tools 1.48.2
    resolves: rhbz#2059286
  - Default to --selinux-relabel in various tools
    resolves: rhbz#2075718, rhbz#2089748
  - Add lvm system.devices cleanup operation to virt-sysprep
    resolves: rhbz#2072493
  - Refactor virt-customize --install, --update options in common submodule
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2102721
  - Fix virt-sysprep and LUKS-on-LVM guests
    resolves: rhbz#2106286


author: Richard W.M. Jones <rjones@redhat.com> - 1.48.2-8
changelog:
  - Support Rocky Linux in virt-customize
    resolves: rhbz#2133443
  - Disable OpenSUSE repo in virt-builder
    resolves: rhbz#2145160


author: Richard W.M. Jones <rjones@redhat.com> - 1.50.1-1
changelog:
  - Rebase to guestfs-tools 1.50.1
    resolves: rhbz#2168626
  - Fix virt-drivers inspection of RHEL 9.2 guests
    resolves: rhbz#2184963


author: Laszlo Ersek <lersek@redhat.com> - 1.50.1-3
changelog:
  - let virt-inspector recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable "make check"; we now use "-cpu max" (libguestfs 30f74f38bd6e)
    resolves: rhbz#2209280


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-2
changelog:
  - Rebase to guestfs-tools 1.51.6
  - Implement --key all:...
    resolves: RHEL-19030
  - Fix crash because of off-by-one error
    resolves: RHEL-19062
  - Fix virt-customize --chown invalid format
    resolves: RHEL-21899


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.1
  - Related: Jira:RHEL-2112


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Davide Caratti <dcaratti@redhat.com> - 2.9-15
changelog:
  - Disable 'badfuncs' in rpminspect tests
  - Build with -fPIE, and enable verbose build log
  - enable CONFIG_SUITEB192


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-11
changelog:
  - Resolves: #2162500 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write
    of zero byte
  - Resolves: #2162486 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
  - Resolves: #2162510 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request
    smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-1
changelog:
  - Resolves: #2184403 - rebase httpd to 2.4.57
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-2
changelog:
  - Resolves: #2186645 - Fix issue found by covscan in httpd package
  - Resolves: #2173295 - Include Apache httpd module mod_authnz_fcgi


author: Joe Orton <jorton@redhat.com> - 2.4.57-6
changelog:
  - Resolves: RHEL-5071 - mod_dav_fs: add DavLockDBType
  - mod_dav_fs: add global mutex around lockdb interaction


author: Joe Orton <jorton@redhat.com> - 2.4.57-8
changelog:
  - mod_xml2enc: fix media type handling
    Resolves: RHEL-17686
  - mod_dav: add DavBasePath
    Resolves: RHEL-6600


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.40.20190303git
changelog:
  - hpvd-hypervkvpd.service-ordering-fixes.patch [bz#2103188]
  - Resolves: bz#2103188
    ([Hyper-V][RHEL-9] hypervkvpd.service service ordering)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.41.20190303git
changelog:
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [bz#2122115]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [bz#2139457]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [bz#2139457]
  - Resolves: bz#2122115
    ([Hyper-V][RHEL-9] Cannot set gateway properly when set static IPADDR0,NETMASK0,GATEWAY in ifcfg-eth0)
  - Resolves: bz#2139457
    ([Hyper-V][RHEL9.2] Update Hyper-V-Daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.42.20190303git
changelog:
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931]
  - Resolves: bz#2218931
    ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.43.20190303git
changelog:
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902]
  - Resolves: RHEL-9902
    ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.2.1-1
changelog:
  - Rebase to JSS 5.2.1
  - Bug 2100807 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.3.0-0.3.beta2
changelog:
  - Rebase to JSS 5.3.0-beta2
  - Bug 2017098 - pki pkcs12-cert-add command failing with 'Unable to validate PKCS #12 file: Digests do not match' exception


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.4.beta3
changelog:
  - Rebase to PKI 11.2.0-beta3
  - Bug #2062808 Drop SHA-1 use from authentication challenges [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-1
changelog:
  - Rebase to PKI 11.2.0
  - Bug #2084639 ipa cert-request ssl error
  - Bug #2099312 SKI field is not reflected back in generated CSR
  - Bug #2095197 PKI cert-fix operation failing


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.1-1
changelog:
  - Rebase to PKI 11.2.1
  - Bug #2107336 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-0.2.beta1
changelog:
  - Rebase to PKI 11.3.0-beta1
  - Bug #1849834 - [RFE] Provide EST Responder (RFC 7030)
  - Bug #1883477 - [RFE] Automatic expired certificate purging
  - Bug #2091999 - Error displayed should be user friendly in case RSNv3 certificate serial number collision
  - Bug #2106452 - softhsm2: Unable to create cert: Private key not found
  - Bug #2106459 - CVE-2022-2393 pki-core: Improper authentication/authorization with caServerKeygen_DirUserCert profile


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-1
changelog:
  - Rebase to PKI 11.3.0
  - Bug #2091993 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug #2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-6
changelog:
  - Resolves: RHEL-23627 IPA stops working if HTTP/... service principal was created before FreeIPA 4.4.0 and never modified
  - Resolves: RHEL-23625 sidgen plugin does not ignore staged users
  - Resolves: RHEL-23621 session cookie can't be read
  - Resolves: RHEL-22372 Gating-DL1 test failure in test_integration/test_dns_locations.py::TestDNSLocations::()::test_ipa_ca_records
  - Resolves: RHEL-21809 CA less servers are failing to be added in topology segment for domain suffix
  - Resolves: RHEL-17996 Memory leak in IdM's KDC


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-7
changelog:
  - Resolves: RHEL-25260 tier-1-upstream-dns-locations failed on RHEL8.8 gating
  - Resolves: RHEL-25738 ipa-kdb: Cannot determine if PAC generator is available
  - Resolves: RHEL-25815 Backport latest test fixes in python3-ipatests


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-8
changelog:
  - Resolves: RHEL-12143 'ipa vault-add is failing with ipa: ERROR: an internal error has occurred in FIPS mode
  - Resolves: RHEL-25738 ipa-kdb: Cannot determine if PAC generator is available


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-9
changelog:
  - Resolves: RHEL-28258 vault fails on non-fips client if server is in FIPS mode
  - Resolves: RHEL-26154 ipa: freeipa: specially crafted HTTP requests potentially lead to DoS or data exposure


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-10
changelog:
  - Resolves: RHEL-23377 Enforce OTP for ldap bind (in some scenarios)
  - Resolves: RHEL-29745 Unable to re-add broken AD trust - NT_STATUS_INVALID_PARAMETER
  - Resolves: RHEL-30905 Backport latest test fixes in ipa


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-1
changelog:
  - Resolves: RHEL-39140 Rebase ipa to the latest 4.12 version for RHEL 9.5
  - Resolves: RHEL-34757 The change for preventing deletion of the admin user caused a regression in disable
  - Resolves: RHEL-30553 Depend on nfsv4-client-utils or nfs-utils
  - Resolves: RHEL-29762 IPA sidgen fails to create SID for manually set ID for a new range [rhel-9.5.0]
  - Resolves: RHEL-26261 Fix replica connection check for use with AD administrator
  - Resolves: RHEL-18062 ipa ca-show NAME --certificate-out=file creates empty file when NAME does not exist
  - Resolves: RHEL-12149 traceback in ipaserver/dcerpc.py
  - Resolves: RHEL-4810 [RFE] FreeIPA-to-FreeIPA migration
  - Resolves: RHEL-4807 [RFE] Support in IPA for HSM boxes


author: Julien Rische <jrische@redhat.com> - 4.12.0-4
changelog:
  - Resolves: RHEL-29928 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  - Resolves: RHEL-29691 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service


author: Rob Crittenden <rcritten@redhat.com> - 0.9-7
changelog:
  - debug='True' in ipahealthcheck.conf doesn't enable debug output (#2079861)
  - Validate value formats in the ipahealthcheck.conf file (#2079739)
  - Validate output_type options from ipahealthcheck.conf file (#2079698)


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Sutter <psutter@redhat.com> [1.8.10-1.el9]
changelog:
  - spec: Support for _excludedocs macro in alternatives installation (Phil Sutter) [RHEL-5810]
  - Rebase onto version 1.8.10 (Phil Sutter) [RHEL-14147]


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2.
  - Drop custom maven-compiler-plugin overrides in favor of upstream settings.


author: Marian Koncek <mkoncek@redhat.com> - 2.3.3-4
changelog:
  - Avoid possible NullPointerException
  - Resolves: rhbz#1993889
  - Load native library from the correct location
  - Resolves: rhbz#1994935


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Resolves: rhbz#2077006


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u352-b07 (EA)
  - Update release notes for shenandoah-8u352-b07.
  - Switch to EA mode for 8u352 pre-release builds.
  - Rebase FIPS patch against 8u352-b07
  - Resolves: rhbz#2130623


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-3
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
  - Related: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-5
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121268


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.5+1
  - Update release notes to 17.0.5+1
  - Switch to EA mode for 17.0.5 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130622


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-2
changelog:
  - Update to jdk-17.0.5+8 (GA)
  - Update release notes to 17.0.5+8 (GA)
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-5
changelog:
  - Update FIPS support to bring in latest changes
  - * Add nss.fips.cfg support to OpenJDK tree
  - * RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode
  - * Remove forgotten dead code from RH2020290 and RH2104724
  - Drop local nss.fips.cfg.in handling now this is handled in the patched OpenJDK build
  - Resolves: rhbz#2118493


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.1-0.3.ea
changelog:
  - Update to jdk-17.0.6+1
  - Update release notes to 17.0.6+1
  - Switch to EA mode for 17.0.6 pre-release builds.
  - Re-enable EA upstream status check now it is being actively maintained.
  - Drop JDK-8294357 (tzdata2022d) & JDK-8295173 (tzdata2022e) local patches which are now upstream
  - Drop JDK-8275535 local patch now this has been accepted and backported upstream
  - Bump tzdata requirement to 2022e now the package is available in RHEL
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.3.ea
changelog:
  - Update to jdk-17.0.6+9
  - Update release notes to 17.0.6+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150198


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Update FIPS support to bring in latest changes
  - * OJ1357: Fix issue on FIPS with a SecurityManager in place
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Update to jdk-17.0.6.0+10
  - Update release notes to 17.0.6.0+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Petra Alice Mikova <pmikova@redhat.com> - 1:18.0.2.0.9-1
changelog:
  - Update to ea version of jdk18
  - Add new slave jwebserver and corresponding manpage
  - Adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch
  - Related: RHEL-12998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:18.0.2.0.9-1
changelog:
  - Update to jdk-18.0.2 release
  - Support JVM variant zero following JDK-8273494 no longer installing Zero's libjvm.so in the server directory
  - Rebase FIPS patches from fips-18u branch
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Drop now unused fresh_libjvm, build_hotspot_first, bootjdk and buildjdkver variables, as we don't build a JDK here
  - Drop tzdata patches added for 17.0.7 which will eventually appear in the upstream tarball when we reach OpenJDK 21
  - Disable tzdata tests until we are on the latest JDK and things are back in sync
  - Use empty nss.fips.cfg until it is again available via the FIPS patch
  - Related: RHEL-12998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:19.0.1.0.10-1
changelog:
  - Update to jdk-19.0.2 release
  - Update release notes to 19.0.2
  - Rebase FIPS patches from fips-19u branch
  - Remove references to sample directory removed by JDK-8284999
  - Add local patch JDK-8295447 (javac NPE) which was accepted into 19u upstream but not in the GA tag
  - Add local patches for JDK-8296239 & JDK-8299439 (Croatia Euro update) which are present in 8u, 11u & 17u releases
  - Related: RHEL-12998


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Kairui Song <kasong@redhat.com> - 006-4.20210721gitd046d22
changelog:
  - Update to latest git snapshot (20210721). Resolves: bz1937035, bz1959203
  - Apply RHEL only patch to enable kdump by default


author: Kairui Song <kasong@redhat.com> - 006-5.20210805gitce26db0
changelog:
  - Update to latest git snapshot, automated installation won't be blocked. Resolves: bz1986969
  - Update RHEL only patch, fix inst.kdump_addon=0 not working issue. Resolves: bz1986942


author: Kairui Song <kasong@redhat.com> - 006-7.20210812git5b74c1d
changelog:
  - Update to latest git snapshot, fix kdump spoke is incomplete after luks device is deleted. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-8.20210818git400359b
changelog:
  - Update to latest git snapshot, fix installation failure when reuse old partition. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-9.20210819git2026d20
changelog:
  - Update to latest git snapshot, fix encryption warning still present after disabling encryption. Resolves: bz1937035


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-460.el9]
changelog:
  - powerpc/64s: Fix unrecoverable MCE calling async handler from NMI (Mamatha Inamdar) [RHEL-37688] {CVE-2021-47429}
  - misc: rtsx: do clear express reg every SD_INT (David Arcari) [RHEL-33706]
  - misc: rtsx: Fix rts5264 driver status incorrect when card removed (David Arcari) [RHEL-33706]
  - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37426] {CVE-2024-35959}
  - can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible() (Jose Ignacio Tornos Martinez) [RHEL-38417] {CVE-2021-47457}
  - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38115] {CVE-2023-52703}
  - net: hns3: do not allow call hns3_nic_net_open repeatedly (Jose Ignacio Tornos Martinez) [RHEL-37707] {CVE-2021-47400}
  - ice: use irq_update_affinity_hint() (Michal Schmidt) [RHEL-35293]
  - arm64: mm: Don't remap pgtables for allocate vs populate (Eric Chanudet) [RHEL-32699]
  - arm64: mm: Batch dsb and isb when populating pgtables (Eric Chanudet) [RHEL-32699]
  - arm64: mm: Don't remap pgtables per-cont(pte|pmd) block (Eric Chanudet) [RHEL-32699]
  - cgroup: Remove duplicated cgroup_local_stat_show() and cpu_local_stat_show() functions (Waiman Long) [RHEL-36683]
  - Revert "Revert "Merge: cgroup: Backport upstream cgroup commits up to v6.8"" (Waiman Long) [RHEL-36683]
  - x86/tdx: Fix unexpected end of section warning around __tdx_hypercall_failed() (Joe Lawrence) [RHEL-36224]
  - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-36209]
  - net: tipc: remove redundant 'bool' from CONFIG_TIPC_{MEDIA_UDP,CRYPTO} (Xin Long) [RHEL-36209]
  - tipc: node: remove Excess struct member kernel-doc warnings (Xin Long) [RHEL-36209]
  - tipc: socket: remove Excess struct member kernel-doc warning (Xin Long) [RHEL-36209]
  - tipc: Remove some excess struct member documentation (Xin Long) [RHEL-36209]
  - tipc: Remove redundant call to TLV_SPACE() (Xin Long) [RHEL-36209]
  - redhat/configs: Update for ARM_SMMU_V3_KUNIT_TEST (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Make the kunit into a module (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Add unit tests for arm_smmu_write_entry (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Build the whole CD in arm_smmu_make_s1_cd() (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Move the CD generation for SVA into a function (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Allocate the CD table entry in advance (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Make arm_smmu_alloc_cd_ptr() (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Consolidate clearing a CD table entry (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Move the CD generation for S1 domains into a function (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Make CD programming use arm_smmu_write_entry() (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Add an ops indirection to the STE code (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Free MSIs in case of ENOMEM (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu: Convert to domain_alloc_paging() (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Add a type for the CD entry (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Do not ATC invalidate the entire domain (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Do not allow a SVA domain to be set on the wrong PASID (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Retire disable_bypass parameter (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Decouple igfx_off from graphic identity mapping (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Fix compilation error (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Enable Guest Translation after reading IOMMU feature register (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Add config needed for iommufd_fail_nth (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - selftests/iommu: fix the config fragment (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Add mock IO hugepages tests (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Refactor dirty bitmap tests (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Test u64 unaligned bitmaps (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove caching mode check before device TLB flush (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove private data use in fault message (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove debugfs use of private data field (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Allocate DMAR fault interrupts locally (Jerry Snitselaar) [RHEL-28780]
  - iommu: Pass domain to remove_dev_pasid() op (Jerry Snitselaar) [RHEL-28780]
  - iommu: Undo pasid attachment only for the devices that have succeeded (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Use try_cmpxchg64{,_local}() in iommu.c (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove redundant assignment to variable err (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Add SVA domain support (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Initial SVA support for AMD IOMMU (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Add support for enable/disable IOPF (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Add IO page fault notifier handler (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Add support for page response (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Define per-IOMMU iopf_queue (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Enable PCI features based on attached domain capability (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Setup GCR3 table in advance if domain is SVA capable (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce iommu_dev_data.max_pasids (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Fix PPR interrupt processing logic (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Move PPR-related functions into ppr.c (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Add support for enabling/disabling IOMMU features (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce per device DTE update function (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Rename amd_iommu_v2_supported() as amd_iommu_pasid_supported() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Add ops->domain_alloc_sva() (Jerry Snitselaar) [RHEL-28780]
  - redhat/configs: Clean up CONFIG_AMD_IOMMU_V2 (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Enhance def_domain_type to handle untrusted device (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Add missing IOMMUFD_DRIVER kconfig for the selftest (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: do not set total_used to 0 in swiotlb_create_debugfs_files() (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Fix WARN_ON in iommu probe path (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Allocate local memory for page request queue (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Fix wrong use of pasid config (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Fix possible irq lock inversion dependency issue (Jerry Snitselaar) [RHEL-28780]
  - iommu: Validate the PASID in iommu_attach_device_pasid() (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Fix access for STE.SHCFG (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Add cpu_to_le64() around STRTAB_STE_0_V (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Jerry Snitselaar) [RHEL-28780]
  - iommu/dma: Force swiotlb_max_mapping_size on an untrusted device (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: Honour dma_alloc_coherent() alignment in swiotlb_alloc() (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: Enforce page alignment in swiotlb_alloc() (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: Fix double-allocation of slots due to broken alignment handling (Jerry Snitselaar) [RHEL-28780]
  - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: add debugfs to track swiotlb transient pool usage (Jerry Snitselaar) [RHEL-28780]
  - iommu/dma: Document min_align_mask assumption (Jerry Snitselaar) [RHEL-28780]
  - iommu: re-use local fwnode variable in iommu_ops_from_fwnode() (Jerry Snitselaar) [RHEL-28780]
  - iommu: constify fwnode in iommu_ops_from_fwnode() (Jerry Snitselaar) [RHEL-28780]
  - iommu: constify of_phandle_args in xlate (Jerry Snitselaar) [RHEL-28780]
  - iommu: constify pointer to bus_type (Jerry Snitselaar) [RHEL-28780]
  - iommu: Make iommu_report_device_fault() return void (Jerry Snitselaar) [RHEL-28780]
  - iommu: Make iopf_group_response() return void (Jerry Snitselaar) [RHEL-28780]
  - iommu: Track iopf group instead of last fault (Jerry Snitselaar) [RHEL-28780]
  - iommu: Improve iopf_queue_remove_device() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Use refcount for fault data access (Jerry Snitselaar) [RHEL-28780]
  - iommu: Refine locking for per-device fault data management (Jerry Snitselaar) [RHEL-28780]
  - iommu: Separate SVA and IOPF (Jerry Snitselaar) [RHEL-28780]
  - iommu: Make iommu_queue_iopf() more generic (Jerry Snitselaar) [RHEL-28780]
  - iommu: Prepare for separating SVA and IOPF (Jerry Snitselaar) [RHEL-28780]
  - iommu: Merge iommu_fault_event and iopf_fault (Jerry Snitselaar) [RHEL-28780]
  - iommu: Remove iommu_[un]register_device_fault_handler() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Merge iopf_device_param into iommu_fault_param (Jerry Snitselaar) [RHEL-28780]
  - iommu: Cleanup iopf data structure definitions (Jerry Snitselaar) [RHEL-28780]
  - iommu: Remove unrecoverable fault data (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Remove unrecoverable faults reporting (Jerry Snitselaar) [RHEL-28780]
  - iommu: Move iommu fault data to linux/iommu.h (Jerry Snitselaar) [RHEL-28780]
  - iommu/iova: use named kmem_cache for iova magazines (Jerry Snitselaar) [RHEL-28780]
  - iommu/iova: Reorganise some code (Jerry Snitselaar) [RHEL-28780]
  - iommu/iova: Tidy up iova_cache_get() failure (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Fix sleeping in atomic context (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Mark interrupt as managed (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce per-device domain ID to fix potential TLB aliasing issue (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove unused GCR3 table parameters from struct protection_domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Rearrange device flush code (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove unused flush pasid functions (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Refactor GCR3 table helper functions (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Refactor protection_domain helper functions (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Refactor attaching / detaching device functions (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Refactor helper function for setting / clearing GCR3 (Jerry Snitselaar) [RHEL-28780]
  - iommu: Introduce iommu_group_mutex_assert() (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Rearrange GCR3 table setup code (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Add support for device based TLB invalidation (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Use protection_domain.flags to check page table mode (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce per-device GCR3 table (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce struct protection_domain.pd_mode (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce get_amd_iommu_from_dev() (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Enable Guest Translation before registering devices (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Pass struct iommu_dev_data to set_dte_entry() (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove EXPORT_SYMBOL for perf counter related functions (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove redundant error check in amd_iommu_probe_device() (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove duplicate function declarations from amd_iommu.h (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove unused APERTURE_* macros (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove unused IOVA_* macro (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove unused PPR_* macros (Jerry Snitselaar) [RHEL-28780]
  - iommu: Fix compilation without CONFIG_IOMMU_INTEL (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove scalabe mode in domain_context_clear_one() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove scalable mode context entry setup from attach_dev (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Setup scalable mode context entry in probe path (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Fix NULL domain on device release (Jerry Snitselaar) [RHEL-28780 RHEL-29357]
  - iommu: Add static iommu_ops->release_domain (Jerry Snitselaar) [RHEL-28780 RHEL-29357]
  - iommu/vt-d: Improve ITE fault handling if target device isn't present (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected (Jerry Snitselaar) [RHEL-28780]
  - PCI: Make pci_dev_is_disconnected() helper public for other drivers (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Use device rbtree in iopf reporting path (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Use rbtree to track iommu probed devices (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Merge intel_svm_bind_mm() into its caller (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove initialization for dynamically heap-allocated rcu_head (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove treatment for revoking PASIDs with pending page faults (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Use kcalloc() instead of kzalloc() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove INTEL_IOMMU_BROKEN_GFX_WA (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Convert to domain_alloc_paging() (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Pass arm_smmu_domain and arm_smmu_device to finalize (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Use the identity/blocked domain during release (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Add a global static BLOCKED domain (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Add a global static IDENTITY domain (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Check that the RID domain is S1 in SVA (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Remove arm_smmu_master->domain (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Pass smmu_domain to arm_enable/disable_ats() (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Put writing the context descriptor in the right order (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Do not change the STE twice during arm_smmu_attach_dev() (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Compute the STE only once for each master (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Hold arm_smmu_asid_lock during all of attach_dev (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Build the whole STE in arm_smmu_make_s2_domain_ste() (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Move the STE generation for S1 and S2 domains into functions (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Consolidate the STE generation for abort/bypass (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Make STE programming independent of the callers (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-qcom: Add X1E80100 MDSS compatible (Jerry Snitselaar) [RHEL-28780]
  - iommu/ipmmu-vmsa: Minor cleanups (Jerry Snitselaar) [RHEL-28780]
  - iommu/msm-iommu: don't limit the driver too much (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Don't check map/unmap pairing with HUGE_PAGES (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Fix protection fault in iommufd_test_syz_conv_iova (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Fix mock_dev_num bug (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Fix iopt_access_list_id overwrite bug (Jerry Snitselaar) [RHEL-28780]
  - iommu/sva: Fix SVA handle sharing in multi device case (Jerry Snitselaar) [RHEL-28780]
  - iommu/sva: Restore SVA handle sharing (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Do not use GFP_KERNEL under as spinlock (Jerry Snitselaar) [RHEL-28780]
  - Revert "iommu/arm-smmu: Convert to domain_alloc_paging()" (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Fix constant-out-of-range warning (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Set SSADE when attaching to a parent with dirty tracking (Jerry Snitselaar) [RHEL-28780 RHEL-29359]
  - iommu/vt-d: Add missing dirty tracking set for parent domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Wrap the dirty tracking loop to be a helper (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove domain parameter for intel_pasid_setup_dirty_tracking() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add missing device iotlb flush for parent domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Update iotlb in nested domain attach (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add missing iotlb flush for parent domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add __iommu_flush_iotlb_psi() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Track nested domains in parent (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Reject non-zero data_type if no data_len is provided (Jerry Snitselaar) [RHEL-28780]
  - iommufd/iova_bitmap: Consider page offset for the pages to be pinned (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Hugepage mock domain support (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Refactor mock_domain_read_and_clear_dirty() (Jerry Snitselaar) [RHEL-28780]
  - iommufd/iova_bitmap: Handle recording beyond the mapped pages (Jerry Snitselaar) [RHEL-28780]
  - iommufd/iova_bitmap: Switch iova_bitmap::bitmap to an u8 array (Jerry Snitselaar) [RHEL-28780]
  - iommufd/iova_bitmap: Bounds check mapped::pages access (Jerry Snitselaar) [RHEL-28780]
  - drm/tegra: Do not assume that a NULL domain means no DMA IOMMU (Jerry Snitselaar) [RHEL-28780]
  - iommu: Allow ops->default_domain to work when !CONFIG_IOMMU_DMA (Jerry Snitselaar) [RHEL-28780]
  - dma-debug: fix kernel-doc warnings (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: check alloc_size before the allocation of a new memory pool (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Check the bus type during probe (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add iotlb flush for nested domain (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add data structure for Intel VT-d stage-1 cache invalidation (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Add coverage for IOMMU_HWPT_INVALIDATE ioctl (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Add IOMMU_TEST_OP_MD_CHECK_IOTLB test op (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Add mock_domain_cache_invalidate_user support (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu: Add iommu_copy_struct_from_user_array helper (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add IOMMU_HWPT_INVALIDATE (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu: Add cache_invalidate_user op (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/sva: Fix memory leak in iommu_sva_bind_device() (Jerry Snitselaar) [RHEL-28780]
  - iommu/dma: Trace bounce buffer usage when mapping buffers (Jerry Snitselaar) [RHEL-28780]
  - iommu/tegra: Use tegra_dev_iommu_get_stream_id() in the remaining places (Jerry Snitselaar) [RHEL-28780]
  - acpi: Do not return struct iommu_ops from acpi_iommu_configure_id() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Mark dev_iommu_priv_set() with a lockdep (Jerry Snitselaar) [RHEL-28780]
  - iommu: Mark dev_iommu_get() with lockdep (Jerry Snitselaar) [RHEL-28780]
  - iommu/of: Use -ENODEV consistently in of_iommu_configure() (Jerry Snitselaar) [RHEL-28780]
  - iommmu/of: Do not return struct iommu_ops from of_iommu_configure() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Remove struct iommu_ops *iommu from arch_setup_dma_ops() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Set owner token to SVA domain (Jerry Snitselaar) [RHEL-28780]
  - iommu: Support mm PASID 1:n with sva domains (Jerry Snitselaar) [RHEL-28780 RHEL-29105]
  - mm: Deprecate pasid field (Jerry Snitselaar) [RHEL-28780 RHEL-29105]
  - mm: Add structure to keep sva information (Jerry Snitselaar) [RHEL-28780 RHEL-29105]
  - iommu: Add mm_get_enqcmd_pasid() helper function (Jerry Snitselaar) [RHEL-28780 RHEL-29105]
  - iommu/vt-d: Remove mm->pasid in intel_sva_bind_mm() (Jerry Snitselaar) [RHEL-28780 RHEL-29105]
  - iommu: Change kconfig around IOMMU_SVA (Jerry Snitselaar) [RHEL-28780 RHEL-29105]
  - iommu: Extend LPAE page table format to support custom allocators (Jerry Snitselaar) [RHEL-28780]
  - iommu/io-pgtable: Move Apple DART support to its own file (Jerry Snitselaar) [RHEL-28780]
  - iommu: Allow passing custom allocators to pgtable drivers (Jerry Snitselaar) [RHEL-28780]
  - iommu: Clean up open-coded ownership checks (Jerry Snitselaar) [RHEL-28780]
  - iommu: Retire bus ops (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu: Don't register fwnode for legacy binding (Jerry Snitselaar) [RHEL-28780]
  - iommu: Decouple iommu_domain_alloc() from bus ops (Jerry Snitselaar) [RHEL-28780]
  - iommu: Validate that devices match domains (Jerry Snitselaar) [RHEL-28780]
  - iommu: Decouple iommu_present() from bus ops (Jerry Snitselaar) [RHEL-28780]
  - iommu: Factor out some helpers (Jerry Snitselaar) [RHEL-28780]
  - iommu: Map reserved memory as cacheable if device is coherent (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd/pgtbl_v2: Invalidate updated page ranges only (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Make domain_flush_pages as global function (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Consolidate amd_iommu_domain_flush_complete() call (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Refactor device iotlb invalidation code (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Refactor IOMMU tlb invalidation code (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Add support to invalidate multiple guest pages (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove redundant passing of PDE bit (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove redundant domain flush from attach_device() (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Rename iommu_flush_all_caches() -> amd_iommu_flush_all_caches() (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Do not flush IRTE when only updating isRun and destination fields (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Set variable amd_dirty_ops to static (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Move inline helpers to header files (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove unused vcmd interfaces (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove unused parameter of intel_pasid_setup_pass_through() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Refactor device_to_iommu() to retrieve iommu directly (Jerry Snitselaar) [RHEL-28780]
  - iommu/virtio: Add ops->flush_iotlb_all and enable deferred flush (Jerry Snitselaar) [RHEL-28780]
  - iommu/virtio: Make use of ops->iotlb_sync_map (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu: Convert to domain_alloc_paging() (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu: Pass arm_smmu_domain to internal functions (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu: Implement IOMMU_DOMAIN_BLOCKED (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu: Convert to a global static identity domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu: Reorganize arm_smmu_domain_add_master() (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Remove ARM_SMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Master cannot be NULL in arm_smmu_write_strtab_ent() (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Add a type for the STE (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: disable stall for quiet_cd (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-qcom: Add QCM2290 MDSS compatible (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-qcom: Add missing GMU entry to match table (Jerry Snitselaar) [RHEL-28780]
  - dma-debug: make dma_debug_add_bus take a const pointer (Jerry Snitselaar) [RHEL-28780]
  - dma-mapping: clear dev->dma_mem to NULL after freeing it (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: reduce area lock contention for non-primary IO TLB pools (Jerry Snitselaar) [RHEL-28780]
  - dma-mapping: don't store redundant offsets (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Do not UAF during iommufd_put_object() (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Add iommufd_ctx to iommufd_put_object() (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Fix _test_mock_dirty_bitmaps() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Fix printk arg in of_iommu_get_resv_regions() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Set variable intel_dirty_ops to static (Jerry Snitselaar) [RHEL-28780]
  - iommu: Flow ERR_PTR out from __iommu_domain_alloc() (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: fix out-of-bounds TLB allocations with CONFIG_SWIOTLB_DYNAMIC (Jerry Snitselaar) [RHEL-28780]
  - dma-mapping: fix dma_addressing_limited() if dma_range_map can't cover all system RAM (Jerry Snitselaar) [RHEL-28780]
  - dma-mapping: move dma_addressing_limited() out of line (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: do not free decrypted pages if dynamic (Jerry Snitselaar) [RHEL-28780]
  - s390/pci: prepare is_passed_through() for dma-iommu (Jerry Snitselaar) [RHEL-28780]
  - iommu/dma: Use a large flush queue and timeout for shadow_on_flush (Jerry Snitselaar) [RHEL-28780]
  - iommu/dma: Allow a single FQ in addition to per-CPU FQs (Jerry Snitselaar) [RHEL-28780]
  - iommu/s390: Disable deferred flush for ISM devices (Jerry Snitselaar) [RHEL-28780]
  - s390/pci: Fix reset of IOMMU software counters (Jerry Snitselaar) [RHEL-28780]
  - s390/pci: Use dma-iommu layer (Jerry Snitselaar) [RHEL-28780]
  - s390/pci: convert high_memory to physical address (Jerry Snitselaar) [RHEL-28780]
  - iommu: Allow .iotlb_sync_map to fail and handle s390's -ENOMEM return (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Convert to alloc_domain_paging() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Use ops->blocked_domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Update the definition of the blocking domain (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Refactor spapr_tce_platform_iommu_attach_dev() (Jerry Snitselaar) [RHEL-28780]
  - powerpc/pseries/iommu: DLPAR add doesn't completely initialize pci_controller (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Fix the missing iommu_group_put() during platform domain attach (Jerry Snitselaar) [RHEL-28780]
  - powerpc: iommu: Bring back table group release_ownership() call (Jerry Snitselaar) [RHEL-28780]
  - iommu: Move IOMMU_DOMAIN_BLOCKED global statics to ops->blocked_domain (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Do not do platform domain attach atctions after probe (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Setup a default domain and remove set_platform_dma_ops (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Only build sPAPR access functions on pSeries (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Remove iommu_del_device() (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Add iommu_ops to report capabilities and allow blocking domains (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Add "borrowing" iommu_table_group_ops (Jerry Snitselaar) [RHEL-28780]
  - powerpc/pci_64: Init pcibios subsys a bit later (Jerry Snitselaar) [RHEL-28780]
  - iommu: change iommu_map_sgtable to return signed values (Jerry Snitselaar) [RHEL-28780]
  - iommu: Fix return code in iommu_group_alloc_default_domain() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Do not use IOMMU_DOMAIN_DMA if CONFIG_IOMMU_DMA is not enabled (Jerry Snitselaar) [RHEL-28780]
  - iommu: Improve map/unmap sanity checks (Jerry Snitselaar) [RHEL-28780]
  - iommu: Retire map/unmap ops (Jerry Snitselaar) [RHEL-28780]
  - iommu/tegra-smmu: Update to {map,unmap}_pages (Jerry Snitselaar) [RHEL-28780]
  - iommu/ipmmu-vmsa: Convert to generic_single_device_group() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Add generic_single_device_group() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Remove useless group refcounting (Jerry Snitselaar) [RHEL-28780]
  - iommu: Convert remaining simple drivers to domain_alloc_paging() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Convert simple drivers with DOMAIN_DMA to domain_alloc_paging() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Add ops->domain_alloc_paging() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Add __iommu_group_domain_alloc() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Require a default_domain for all iommu drivers (Jerry Snitselaar) [RHEL-28780]
  - iommu/ipmmu: Add an IOMMU_IDENTITIY_DOMAIN (Jerry Snitselaar) [RHEL-28780]
  - iommu: Remove ops->set_platform_dma_ops() (Jerry Snitselaar) [RHEL-28780]
  - iommu/tegra-smmu: Support DMA domains in tegra (Jerry Snitselaar) [RHEL-28780]
  - iommu/tegra-smmu: Implement an IDENTITY domain (Jerry Snitselaar) [RHEL-28780]
  - iommu: Allow an IDENTITY domain as the default_domain in ARM32 (Jerry Snitselaar) [RHEL-28780]
  - iommu: Reorganize iommu_get_default_domain_type() to respect def_domain_type() (Jerry Snitselaar) [RHEL-28780]
  - iommu/tegra-gart: Remove tegra-gart (Jerry Snitselaar) [RHEL-28780]
  - iommu: Add IOMMU_DOMAIN_PLATFORM for S390 (Jerry Snitselaar) [RHEL-28780]
  - iommu: Add IOMMU_DOMAIN_PLATFORM (Jerry Snitselaar) [RHEL-28780]
  - iommu: Add iommu_ops->identity_domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove DMA_FQ type from domain allocation path (Jerry Snitselaar) [RHEL-28780]
  - Revert "iommu: Fix false ownership failure on AMD systems with PASID activated" (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove unused EXPORT_SYMBOLS (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove amd_iommu_device_info() (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove PPR support (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove iommu_v2 module (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Initialize iommu_device->max_pasids (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Enable device ATS/PASID/PRI capabilities independently (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce iommu_dev_data.flags to track device capabilities (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce iommu_dev_data.ppr (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Rename ats related variables (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Modify logic for checking GT and PPR features (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Consolidate feature detection and reporting logic (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Miscellaneous clean up when free domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Do not set amd_iommu_pgtable in pass-through mode (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce helper functions for managing GCR3 table (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Refactor protection domain allocation code (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Consolidate logic to allocate protection domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Consolidate timeout pre-define to amd_iommu_type.h (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove unused amd_io_pgtable.pt_root variable (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: debugfs: Support dumping a specified page table (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: debugfs: Create/remove debugfs file per {device, pasid} (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: debugfs: Dump entry pointing to huge page (Jerry Snitselaar) [RHEL-28780]
  - iommu/virtio: Add __counted_by for struct viommu_request and use struct_size() (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3-sva: Remove bond refcount (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3-sva: Remove unused iommu_sva handle (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Rename cdcfg to cd_table (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Update comment about STE liveness (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Cleanup arm_smmu_domain_finalise (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Move CD table to arm_smmu_master (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Refactor write_ctx_desc (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: move stall_enabled to the cd table (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Encapsulate ctx_desc_cfg init in alloc_cd_tables (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Replace s1_cfg with cdtab_cfg (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Move ctx_desc out of s1_cfg (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-qcom: Add SM7150 SMMUv2 (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-qcom: Add SDM670 MDSS compatible (Jerry Snitselaar) [RHEL-28780]
  - iommu/tegra-smmu: Drop unnecessary error check for for debugfs_create_dir() (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Organize the mock domain alloc functions closer to Joerg's tree (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Fix page-size check in iommufd_test_dirty() (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add iopt_area_alloc() (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Fix missing update of domains_itree after splitting iopt_area (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Disallow read-only mappings to nest parent domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add nested domain allocation (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Set the nested domain to a device (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Make domain attach helpers to be extern (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add helper to setup pasid nested translation (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add helper for nested domain allocation (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Extend dmar_domain to support nested domain (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Add data structure for Intel VT-d stage-1 domain allocation (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Enhance capability check for nested parent domain allocation (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Add coverage for IOMMU_HWPT_ALLOC with nested HWPTs (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Add nested domain allocation for mock domain (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu: Add iommu_copy_struct_from_user helper (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add a nested HW pagetable object (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu: Pass in parent domain with user_data to domain_alloc_user op (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Share iommufd_hwpt_alloc with IOMMUFD_OBJ_HWPT_NESTED (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Derive iommufd_hwpt_paging from iommufd_hw_pagetable (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/device: Wrap IOMMUFD_OBJ_HWPT_PAGING-only configurations (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Rename IOMMUFD_OBJ_HW_PAGETABLE to IOMMUFD_OBJ_HWPT_PAGING (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu: Add IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Only enforce cache coherency in iommufd_hw_pagetable_alloc (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Test IOMMU_HWPT_GET_DIRTY_BITMAP_NO_CLEAR flag (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Test out_capabilities in IOMMU_GET_HW_INFO (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Test IOMMU_HWPT_GET_DIRTY_BITMAP (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Test IOMMU_HWPT_SET_DIRTY_TRACKING (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Test IOMMU_HWPT_ALLOC_DIRTY_TRACKING (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Expand mock_domain with dev_flags (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/vt-d: Access/Dirty bit support for SS domains (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/amd: Access/Dirty bit support in IOPTEs (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/amd: Add domain_alloc_user based domain allocation (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add a flag to skip clearing of IOPTE dirty (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Add capabilities to IOMMU_GET_HW_INFO (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add IOMMU_HWPT_GET_DIRTY_BITMAP (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add IOMMU_HWPT_SET_DIRTY_TRACKING (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add a flag to enforce dirty tracking on attach (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu: Add iommu_domain ops for dirty tracking (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Correct IOMMU_HWPT_ALLOC_NEST_PARENT description (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Rework TEST_LENGTH to test min_size explicitly (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add domain_alloc_user op (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Add domain_alloc_user() support in iommu mock (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Support allocating nested parent domain (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Flow user flags for domain allocation to domain_alloc_user() (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Use the domain_alloc_user() op for domain allocation (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu: Add new iommu op to create domains owned by userspace (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Iterate idev_ids in mock_domain's alloc_hwpt test (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Fix spelling errors in comments (Jerry Snitselaar) [RHEL-28780]
  - dma-debug: Fix a typo in a debugging eye-catcher (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: rewrite comment explaining why the source is preserved on DMA_FROM_DEVICE (Jerry Snitselaar) [RHEL-28780]
  - net: fec: use dma_alloc_noncoherent for data cache enabled coldfire (Jerry Snitselaar) [RHEL-28780]
  - dma-direct: warn when coherent allocations aren't supported (Jerry Snitselaar) [RHEL-28780]
  - dma-direct: simplify the use atomic pool logic in dma_direct_alloc (Jerry Snitselaar) [RHEL-28780]
  - dma-direct: add a CONFIG_ARCH_HAS_DMA_ALLOC symbol (Jerry Snitselaar) [RHEL-28780]
  - dma-direct: add dependencies to CONFIG_DMA_GLOBAL_POOL (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: do not try to allocate a TLB bigger than MAX_ORDER pages (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: fix the check whether a device has used software IO TLB (Jerry Snitselaar) [RHEL-28780]
  - dma-contiguous: fix the Kconfig entry for CONFIG_DMA_NUMA_CMA (Jerry Snitselaar) [RHEL-28780]
  - iommu: Explicitly include correct DT includes (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: move slot allocation explanation comment where it belongs (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: search the software IO TLB only if the device makes use of it (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: allocate a new memory pool when existing pools are full (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: determine potential physical address limit (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: if swiotlb is full, fall back to a transient memory pool (Jerry Snitselaar) [RHEL-28780]
  - redhat/configs: add file for SWIOTLB_DYNAMIC (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: add a flag whether SWIOTLB is allowed to grow (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: separate memory pool data from other allocator data (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: add documentation and rename swiotlb_do_find_slots() (Jerry Snitselaar) [RHEL-28780]
  - redhat/configs: Add CONFIG_DMA_NUMA_CMA and remove CONFIG_DMA_PERNUMA_CMA (Jerry Snitselaar) [RHEL-28780]
  - dma-contiguous: support numa CMA for specified node (Jerry Snitselaar) [RHEL-28780]
  - dma-contiguous: support per-numa CMA for all architectures (Jerry Snitselaar) [RHEL-28780]
  - of: Fix "dma-ranges" handling for bus controllers (Jerry Snitselaar) [RHEL-28780]
  - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30492] {CVE-2023-52626}
  - sched/numa: Fix mm numa_scan_seq based unconditional scan (Phil Auld) [RHEL-10049]
  - sched/numa: Complete scanning of inactive VMAs when there is no alternative (Phil Auld) [RHEL-10049]
  - sched/numa: Complete scanning of partial VMAs regardless of PID activity (Phil Auld) [RHEL-10049]
  - sched/numa: Move up the access pid reset logic (Phil Auld) [RHEL-10049]
  - sched/numa: Trace decisions related to skipping VMAs (Phil Auld) [RHEL-10049]
  - sched/numa: Rename vma_numab_state::access_pids[] => ::pids_active[], ::next_pid_reset => ::pids_active_reset (Phil Auld) [RHEL-10049]
  - sched/numa: Document vma_numab_state fields (Phil Auld) [RHEL-10049]
  - sched/numa: use hash_32 to mix up PIDs accessing VMA (Phil Auld) [RHEL-10049]
  - sched/numa: implement access PID reset logic (Phil Auld) [RHEL-10049]
  - selftests/livepatch: fix and refactor new dmesg message code (Ryan Sullivan) [RHEL-31518]
  - docs: automarkup: linkify git revs (Ryan Sullivan) [RHEL-31518]
  - livepatch: Fix missing newline character in klp_resolve_symbols() (Ryan Sullivan) [RHEL-31518]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-461.el9]
changelog:
  - powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE (Mamatha Inamdar) [RHEL-39788] {CVE-2024-36926}
  - thermal/debugfs: Fix two locking issues with thermal zone debug (David Arcari) [RHEL-40008] {CVE-2024-36961}
  - thermal/debugfs: Free all thermal zone debug memory on zone removal (David Arcari) [RHEL-39875] {CVE-2024-36956}
  - thermal/debugfs: Prevent use-after-free from occurring after cdev removal (David Arcari) [RHEL-39774] {CVE-2024-36932}
  - s390/qeth: Fix typo 'weed' in comment (Tobias Huschle) [RHEL-23681]
  - s390/qeth: replace deprecated strncpy with strscpy (Tobias Huschle) [RHEL-23681]
  - s390/ctcm: replace deprecated strncpy with strscpy (Tobias Huschle) [RHEL-23681]
  - s390/qeth: Fix kernel panic after setting hsuid (Tobias Huschle) [RHEL-23681]
  - s390/ism: Properly fix receive message buffer allocation (Tobias Huschle) [RHEL-23681]
  - s390/qeth: handle deferred cc1 (Tobias Huschle) [RHEL-23681]
  - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Tobias Huschle) [RHEL-23681]
  - s390/ism: ism driver implies smc protocol (Tobias Huschle) [RHEL-23681]
  - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-23682]
  - s390/qdio: handle deferred cc1 (Tobias Huschle) [RHEL-23680]
  - scsi: zfcp: Replace strlcpy() with strscpy() (Tobias Huschle) [RHEL-23680]
  - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (Tobias Huschle) [RHEL-23680]
  - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37422] {CVE-2024-35960}
  - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36922] {CVE-2024-35835}
  - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37093] {CVE-2023-52667}
  - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38226] {CVE-2023-52878}
  - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-36684]
  - net: hns3: fix kernel crash when 1588 is received on HIP08 devices (Ken Cox) [RHEL-33213] {CVE-2024-26881}
  - fsverity: use register_sysctl_init() to avoid kmemleak warning (Andrey Albershteyn) [RHEL-36258]
  - ethtool: netlink: Add missing ethnl_ops_begin/complete (Ivan Vecera) [RHEL-36217]
  - ethtool: reformat kerneldoc for struct ethtool_fec_stats (Ivan Vecera) [RHEL-36217]
  - ethtool: reformat kerneldoc for struct ethtool_link_settings (Ivan Vecera) [RHEL-36217]
  - Documentation: networking: add missing PLCA messages from the message list (Ivan Vecera) [RHEL-36217]
  - net: partial revert of the "Make timestamping selectable: series (Ivan Vecera) [RHEL-36217]
  - net: ethtool: ts: Let the active time stamping layer be selectable (Ivan Vecera) [RHEL-36217]
  - net: ethtool: ts: Update GET_TS to reply the current selected timestamp (Ivan Vecera) [RHEL-36217]
  - net: Change the API of PHY default timestamp to MAC (Ivan Vecera) [RHEL-36217]
  - net: Replace hwtstamp_source by timestamping layer (Ivan Vecera) [RHEL-36217]
  - net: ethtool: Add a command to list available time stamping layers (Ivan Vecera) [RHEL-36217]
  - net: ethtool: Add a command to expose current time stamping layer (Ivan Vecera) [RHEL-36217]
  - net_tstamp: Add TIMESTAMPING SOFTWARE and HARDWARE mask (Ivan Vecera) [RHEL-36217]
  - net: phy: micrel: fix ts_info value in case of no phc (Ivan Vecera) [RHEL-36217]
  - net: Make dev_set_hwtstamp_phylib accessible (Ivan Vecera) [RHEL-36217]
  - net: macb: Convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Ivan Vecera) [RHEL-36217]
  - net: ethtool: Refactor identical get_ts_info implementations. (Ivan Vecera) [RHEL-36217]
  - net: phy: Remove the call to phy_mii_ioctl in phy_hwstamp_get/set (Ivan Vecera) [RHEL-36217]
  - net: Convert PHYs hwtstamp callback to use kernel_hwtstamp_config (Ivan Vecera) [RHEL-36217]
  - net: omit ndo_hwtstamp_get() call when possible in dev_set_hwtstamp_phylib() (Ivan Vecera) [RHEL-36217]
  - net: remove phy_has_hwtstamp() -> phy_mii_ioctl() decision from converted drivers (Ivan Vecera) [RHEL-36217]
  - net: fec: delete fec_ptp_disable_hwts() (Ivan Vecera) [RHEL-36217]
  - net: fec: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Ivan Vecera) [RHEL-36217]
  - net: bonding: convert to ndo_hwtstamp_get() / ndo_hwtstamp_set() (Ivan Vecera) [RHEL-36217]
  - net: macvlan: convert to ndo_hwtstamp_get() / ndo_hwtstamp_set() (Ivan Vecera) [RHEL-36217]
  - net: vlan: convert to ndo_hwtstamp_get() / ndo_hwtstamp_set() (Ivan Vecera) [RHEL-36217]
  - net: ethtool: Fix documentation of ethtool_sprintf() (Ivan Vecera) [RHEL-36217]
  - Revert "ethtool: Fix mod state of verbose no_mask bitset" (Ivan Vecera) [RHEL-36217]
  - ethtool: Fix mod state of verbose no_mask bitset (Ivan Vecera) [RHEL-36217]
  - ipv6: also use netdev_hold() in ip6_route_check_nh() (Ivan Vecera) [RHEL-36217]
  - net: create device lookup API with reference tracking (Ivan Vecera) [RHEL-36217]
  - net_tstamp: add SOF_TIMESTAMPING_OPT_ID_TCP (Ivan Vecera) [RHEL-36217]
  - fbcon: always restore the old font data in fbcon_do_set_font() (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Fix incorrect printed function name in fbcon_prepare_logo() (Jocelyn Falempe) [RHEL-23295]
  - hid/picolcd_fb: Set FBINFO_VIRTFB flag (Jocelyn Falempe) [RHEL-23295]
  - fbdev: remove I2C_CLASS_DDC support (Jocelyn Falempe) [RHEL-23295]
  - fbdev/intelfb: Remove driver (Jocelyn Falempe) [RHEL-23295]
  - video/logo: use %u format specifier for unsigned int values (Jocelyn Falempe) [RHEL-23295]
  - video/sticore: Store ROM device in STI struct (Jocelyn Falempe) [RHEL-23295]
  - fbdev: flush deferred IO before closing (Jocelyn Falempe) [RHEL-23295]
  - fbdev: flush deferred work in fb_deferred_io_fsync() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: amba-clcd: Delete the old CLCD driver (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove support for Carillo Ranch driver (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove default file-I/O implementations (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Warn on incorrect framebuffer access (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Move default fb_mmap code into helper function (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Push pgprot_decrypted() into mmap implementations (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Rename FB_SYS_FOPS token to FB_SYSMEM_FOPS (Jocelyn Falempe) [RHEL-23295]
  - fbdev/cyber2000fb: Initialize fb_ops with fbdev macros (Jocelyn Falempe) [RHEL-23295]
  - fbdev/wm8505fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vt8500lcdfb: Initialize fb_ops with fbdev macros (Jocelyn Falempe) [RHEL-23295]
  - fbdev/clps711x-fb: Initialize fb_ops with fbdev macros (Jocelyn Falempe) [RHEL-23295]
  - fbdev/ps3fb: Initialize fb_ops with fbdev macros (Jocelyn Falempe) [RHEL-23295]
  - fbdev/au1200fb: Initialize fb_ops with fbdev macros (Jocelyn Falempe) [RHEL-23295]
  - fbdev/udlfb: Select correct helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/smscufx: Select correct helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sh_mobile_lcdcfb: Initialize fb_ops with fbdev macros (Jocelyn Falempe) [RHEL-23295]
  - fbdev/arcfb: Use generator macros for deferred I/O (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vfb: Initialize fb_ops with fbdev macros (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Use dev_err_probe (Jocelyn Falempe) [RHEL-23295]
  - fbdev: offb: Simplify offb_init_fb() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: stifb: Make the STI next font pointer a 32-bit signed offset (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vt8623fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/viafb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vga16fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vermilionfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/tridentfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/tgafb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/tdfxfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sunxvr500: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/stifb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sm712fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sm501fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sisfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/savagefb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sa1100fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/s3fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/s1d13xxxfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/rivafb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/radeon: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pvr2fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pm3fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pm2fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/nvidiafb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/neofb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/matroxfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/intelfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/imsttfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/i810fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/hpfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/hitfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/hgafb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/gbefb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/ep93xx-fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/dnfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/cyber2000fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/controlfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/cobalt-lcd: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/cirrusfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/au1100fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/atyfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/atafb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/arkfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/amifb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/amba-clcd: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/68328fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Provide I/O-memory helpers as module (Jocelyn Falempe) [RHEL-23295]
  - hid/picolcd: Use fb_ops helpers for deferred I/O (Jocelyn Falempe) [RHEL-23295]
  - console: fix up ARM screen_info reference (Jocelyn Falempe) [RHEL-23295]
  - vga16fb: drop powerpc support (Jocelyn Falempe) [RHEL-23295]
  - dummycon: limit Arm console size hack to footbridge (Jocelyn Falempe) [RHEL-23295]
  - fbdev: core: syscopyarea: fix sloppy typing (Jocelyn Falempe) [RHEL-23295]
  - fbdev: core: cfbcopyarea: fix sloppy typing (Jocelyn Falempe) [RHEL-23295]
  - fbdev: uvesafb: Remove uvesafb_exec() prototype from include/video/uvesafb.h (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Disable PWM on shutdown, suspend and remove (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Replace fb_pgprotect() with pgprot_framebuffer() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Avoid file argument in fb_pgprotect() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: mmp: Annotate struct mmp_path with __counted_by (Jocelyn Falempe) [RHEL-23295]
  - drm: fix up fbdev Kconfig defaults (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Update fbdev source file paths (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Clean up include statements in fbmem.c (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Remove empty internal helpers from fb_logo.c (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Move logo functions into separate source file (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Unexport logo helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Fix style of code for boot-up logo (Jocelyn Falempe) [RHEL-23295]
  - fbdev/hyperv_fb: Use fb_ops helpers for deferred I/O (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Add Kconfig macro FB_IOMEM_HELPERS_DEFERRED (Jocelyn Falempe) [RHEL-23295]
  - fbdev: ssd1307fb: Use bool for ssd1307fb_deviceinfo flags (Jocelyn Falempe) [RHEL-23295]
  - fbdev: mx3fb: Remove the driver (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Use list_for_each_entry() helper (Jocelyn Falempe) [RHEL-23295]
  - fbdev/tcx: Use initializer macro for struct fb_ops (Jocelyn Falempe) [RHEL-23295]
  - fbdev/p9100: Use initializer macro for struct fb_ops (Jocelyn Falempe) [RHEL-23295]
  - fbdev/leo: Use initializer macro for struct fb_ops (Jocelyn Falempe) [RHEL-23295]
  - fbdev/cg3: Use initializer macro for struct fb_ops (Jocelyn Falempe) [RHEL-23295]
  - fbdev/cg14: Use initializer macro for struct fb_ops (Jocelyn Falempe) [RHEL-23295]
  - fbdev/bw2: Use initializer macro for struct fb_ops (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sbus: Add initializer macros and Kconfig tokens for SBUS support (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sbus: Build sbuslib.o if CONFIG_FB_SBUS has been selected (Jocelyn Falempe) [RHEL-23295]
  - hid/picolcd: Remove flag FBINFO_FLAG_DEFAULT from fbdev driver (Jocelyn Falempe) [RHEL-23295]
  - backlight: led_bl: Remove redundant of_match_ptr() (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Drop ret variable in brightness change function (Jocelyn Falempe) [RHEL-23295]
  - fbdev: kyro: Remove unused declarations (Jocelyn Falempe) [RHEL-23295]
  - fbdev/xilinxfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vesafb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/valkyriefb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/uvesafb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sunxvr2500: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sunxvr1000: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sstfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/simplefb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sh7760fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/s3cfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/q40fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pxafb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pxa168fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pmagb-b-fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pmag-ba-fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pmag-aa-fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/platinumfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/offb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/ocfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/mx3fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/mb862xxfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/maxinefb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/macfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/kyro: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/imxfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/i740fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/gxt4500: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/grvga: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/goldfishfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/g364fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/fsl-diu-fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/fm2fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/efifb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/da8xx-fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/chipsfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/carminefb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/aty128fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/atmel_lcdfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/asiliantfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/acornfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Make fbcon_registered_fb and fbcon_num_registered_fb static (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Align deferred I/O with naming of helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Use _DMAMEM_ infix for DMA-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Use _SYSMEM_ infix for system-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Use _IOMEM_ infix for I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Harmonize some comments in <linux/fb.h> (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove FB_DEFAULT_SYS_OPS (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove FBINFO_DEFAULT and FBINFO_FLAG_DEFAULT (Jocelyn Falempe) [RHEL-23295]
  - fbdev: ssd1307fb: Print the PWM's label instead of its number (Jocelyn Falempe) [RHEL-23295]
  - backlight: gpio_backlight: Drop output GPIO direction check for initial power state (Jocelyn Falempe) [RHEL-23295]
  - video: logo: LOGO should depend on FB_CORE i.s.o. FB (Jocelyn Falempe) [RHEL-23295]
  - Revert "fbcon: Use kzalloc() in fbcon_prepare_logo()" (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Catch errors when changing brightness (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Initialize PWM state on first brightness change (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Add fb_ops init macros for framebuffers in DMA-able memory (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Document that framebuffer_alloc() returns zero'ed data (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove FBINFO_FLAG_DEFAULT from framebuffer_alloc()'ed structs (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove FBINFO_FLAG_DEFAULT from kzalloc()'ed structs (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Split frame buffer support in FB and FB_CORE symbols (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Move core fbdev symbols to a separate Kconfig file (Jocelyn Falempe) [RHEL-23295]
  - video: Add auxiliary display drivers to Graphics support menu (Jocelyn Falempe) [RHEL-23295]
  - fbcon: remove unused display (p) from fbcon_redraw() (Jocelyn Falempe) [RHEL-23295]
  - vgacon: cache vc_cell_height in vgacon_cursor() (Jocelyn Falempe) [RHEL-23295]
  - vgacon: let vgacon_doresize() return void (Jocelyn Falempe) [RHEL-23295]
  - vgacon: remove unused xpos from vgacon_set_cursor_size() (Jocelyn Falempe) [RHEL-23295]
  - vgacon: remove unneeded forward declarations (Jocelyn Falempe) [RHEL-23295]
  - vgacon: switch vgacon_scrolldelta() and vgacon_restore_screen() (Jocelyn Falempe) [RHEL-23295]
  - fbdev/xen-fbfront: Select FB_SYS_HELPERS_DEFERRED (Jocelyn Falempe) [RHEL-23295]
  - fbdev/ssd1307fb: Generate deferred I/O ops (Jocelyn Falempe) [RHEL-23295]
  - fbdev/ssd1307fb: Select FB_SYS_HELPERS_DEFERRED (Jocelyn Falempe) [RHEL-23295]
  - fbdev/metronomefb: Select FB_SYS_HELPERS_DEFERRED (Jocelyn Falempe) [RHEL-23295]
  - fbdev/hecubafb: Select FB_SYS_HELPERS_DEFERRED (Jocelyn Falempe) [RHEL-23295]
  - fbdev/broadsheetfb: Select FB_SYS_HELPERS_DEFERRED (Jocelyn Falempe) [RHEL-23295]
  - redhat/configs: Enable FB_DEVICE (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Make support for userspace interfaces configurable (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Rework fb init code (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Move file-I/O code into separate file (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Move procfs code to separate file (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Add fb_device_{create,destroy}() (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Move framebuffer and backlight helpers into separate files (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Pass Linux device to pm_vt_switch_*() functions (Jocelyn Falempe) [RHEL-23295]
  - backlight/gpio_backlight: Rename field 'fbdev' to 'dev' (Jocelyn Falempe) [RHEL-23295]
  - backlight/gpio_backlight: Compare against struct fb_info.device (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Rename fb_mem*() helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Move framebuffer I/O helpers into <asm/fb.h> (Jocelyn Falempe) [RHEL-23295]
  - arch/x86: Include <asm/fb.h> in fbdev source file (Jocelyn Falempe) [RHEL-23295]
  - arch/x86: Implement <asm/fb.h> with generic helpers (Jocelyn Falempe) [RHEL-23295]
  - arch/powerpc: Implement <asm/fb.h> with generic helpers (Jocelyn Falempe) [RHEL-23295]
  - arch/arm64: Implement <asm/fb.h> with generic helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Prepare generic architecture helpers (Jocelyn Falempe) [RHEL-23295]
  - backlight: led_bl: Take led_access lock when required (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fix potential OOB read in fast_imageblit() (Jocelyn Falempe) [RHEL-23295]
  - video: backlight: lp855x: Get PWM for PWM mode during probe (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Add Kconfig options to select different fb_ops helpers (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Fix null-ptr-deref in soft_cursor (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Remove unneeded checks for valid GPIOs (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fbmem: mark get_fb_unmapped_area() static (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Include <linux/fb.h> instead of <asm/fb.h> (Jocelyn Falempe) [RHEL-23295]
  - fbdev/matrox: Remove trailing whitespaces (Jocelyn Falempe) [RHEL-23295]
  - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Validate info->screen_{base, buffer} in fb_ops implementations (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Don't re-validate info->state in fb_ops implementations (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Use screen_buffer in fb_sys_{read,write}() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: vga16fb: Convert to platform remove callback returning void (Jocelyn Falempe) [RHEL-23295]
  - fbdev: vesafb: Convert to platform remove callback returning void (Jocelyn Falempe) [RHEL-23295]
  - fbdev: simplefb: Convert to platform remove callback returning void (Jocelyn Falempe) [RHEL-23295]
  - fbdev: offb: Convert to platform remove callback returning void (Jocelyn Falempe) [RHEL-23295]
  - fbdev: efifb: Convert to platform remove callback returning void (Jocelyn Falempe) [RHEL-23295]
  - video: Move HP PARISC STI core code to shared location (Jocelyn Falempe) [RHEL-23295]
  - video/aperture: Provide a VGA helper for gma500 and internal use (Jocelyn Falempe) [RHEL-23295]
  - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (Jocelyn Falempe) [RHEL-23295]
  - video/aperture: Fix typos in comments (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Mark OF related data as maybe unused (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Convert to platform remove callback returning void (Jocelyn Falempe) [RHEL-23295]
  - backlight: led_bl: Convert to platform remove callback returning void (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Use of_property_read_bool() for boolean properties (Jocelyn Falempe) [RHEL-23295]
  - drivers: video: logo: add SPDX comment, remove GPL notice in pnmtologo.c (Jocelyn Falempe) [RHEL-23295]
  - drivers: video: logo: fix code style issues in pnmtologo.c (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Make fb_modesetting_disabled() static inline (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Fix incorrect page mapping clearance at fb_deferred_io_release() (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Don't rely on a disabled PWM emiting inactive state (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Configure pwm only once per backlight toggle (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Drop support for legacy PWM probing (Jocelyn Falempe) [RHEL-23295]
  - backlight: backlight: Fix doc for backlight_device_get_by_name (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Fix invalid page access after closing deferred I/O devices (Jocelyn Falempe) [RHEL-23295]
  - fbdev: remove w100fb driver (Jocelyn Falempe) [RHEL-23295]
  - fbdev: remove tmiofb driver (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove unused struct fb_deferred_io .first_io field (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fbmon: fix function name in kernel-doc (Jocelyn Falempe) [RHEL-23295]
  - fbdev: remove s3c2410 framebuffer (Jocelyn Falempe) [RHEL-23295]
  - drm/fbdev: Remove aperture handling and FBINFO_MISC_FIRMWARE (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vga16fb: Do not use struct fb_info.apertures (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vesafb: Do not use struct fb_info.apertures (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vesafb: Remove trailing whitespaces (Jocelyn Falempe) [RHEL-23295]
  - fbdev/simplefb: Do not use struct fb_info.apertures (Jocelyn Falempe) [RHEL-23295]
  - fbdev/offb: Do not use struct fb_info.apertures (Jocelyn Falempe) [RHEL-23295]
  - fbdev/offb: Allocate struct offb_par with framebuffer_alloc() (Jocelyn Falempe) [RHEL-23295]
  - fbdev/efifb: Do not use struct fb_info.apertures (Jocelyn Falempe) [RHEL-23295]
  - fbdev/efifb: Add struct efifb_par for driver data (Jocelyn Falempe) [RHEL-23295]
  - Revert "fbcon: don't lose the console font across generic->chip driver switch" (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Remove trailing whitespaces (Jocelyn Falempe) [RHEL-23295]
  - fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB (Jocelyn Falempe) [RHEL-23295]
  - fbdev: make offb driver tristate (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fbcon: release buffer when fbcon_do_set_font() failed (Jocelyn Falempe) [RHEL-23295]
  - fbdev: uvesafb: don't build on UML (Jocelyn Falempe) [RHEL-23295]
  - fbdev: matroxfb: Convert to i2c's .probe_new() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: omapfb: connector-analog-tv: remove support for platform data (Jocelyn Falempe) [RHEL-23295]
  - fbdev: omapfb: panel-dpi: remove support for platform data (Jocelyn Falempe) [RHEL-23295]
  - fbdev: omapfb: panel-sony-acx565akm: remove support for platform data (Jocelyn Falempe) [RHEL-23295]
  - fbdev: ssd1307fb: Drop duplicate NULL checks for PWM APIs (Jocelyn Falempe) [RHEL-23295]
  - fbdev: ssd1307fb: Drop optional dependency (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Convert to i2c's .probe_new() (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Use kzalloc() in fbcon_prepare_logo() (Jocelyn Falempe) [RHEL-23295]
  - Revert "drm/fb-helper: Schedule deferred-I/O worker after writing to framebuffer" (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Add support for the nomodeset kernel parameter (Jocelyn Falempe) [RHEL-23295]
  - drm/fb-helper: Schedule deferred-I/O worker after writing to framebuffer (Jocelyn Falempe) [RHEL-23295]
  - fbdev: MIPS supports iomem addresses (Jocelyn Falempe) [RHEL-23295]
  - fbdev: vga16fb: Add missing MODULE_DEVICE_TABLE() entry (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fbcon: Properly revert changes when vc_resize() failed (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Move fbdev drivers from strlcpy to strscpy (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fbcon: Destroy mutex on freeing struct fb_info (Jocelyn Falempe) [RHEL-23295]
  - fbdev: ssd1307fb: Fix repeated words in comments (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: offb: Include missing linux/platform_device.h (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Make registered_fb[] private to fbmem.c (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vga16fb: Auto-generate module init/exit code (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vga16fb: Create EGA/VGA devices in sysfb code (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove trailing whitespaces (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Switch to atomic PWM API (Jocelyn Falempe) [RHEL-23295]
  - Revert "drivers/video/backlight/platform_lcd.c: add support for device tree based probe" (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Use fbcon_info_from_console() in fbcon_modechange_possible() (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: simplefb: Check before clk_put() not needed (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Fix accelerated fbdev scrolling while logo is still shown (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Remove obsolete reference to initmem_freed (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: radeon: Fix spelling typo in comment (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Prevent possible use-after-free in fb_release() (Jocelyn Falempe) [RHEL-23295]
  - Revert "fbdev: Prevent probing generic drivers if a FB is already registered" (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Rename pagelist to pagereflist for deferred I/O (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Refactor implementation of page_mkwrite (Jocelyn Falempe) [RHEL-23295]
  - fbcon: replace snprintf in show functions with sysfs_emit (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: aty/matrox/...: Prepare cleanup of powerpc's asm/prom.h (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Fix cfb_imageblit() for arbitrary image widths (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Fix sys_imageblit() for arbitrary image widths (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: offb: fix warning comparing pointer to 0 (Jocelyn Falempe) [RHEL-23295]
  - backlight: backlight: Slighly simplify devm_of_find_backlight() (Jocelyn Falempe) [RHEL-23295]
  - drm/exynos: fimd: add BGR support for exynos4/5 (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Improve performance of cfb_imageblit() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove trailing whitespaces from cfbimgblt.c (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Improve performance of sys_imageblit() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Improve performance of sys_fillrect() (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Avoid 'cap' set but not used warning (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Avoid open coded arithmetic in memory allocation (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fbmem: Fix the implicit type casting (Jocelyn Falempe) [RHEL-23295]
  - redhat/configs: disable FRAMEBUFFER_CONSOLE_LEGACY_ACCELERATION (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Add option to enable legacy hardware acceleration (Jocelyn Falempe) [RHEL-23295]
  - Revert "fbcon: Disable accelerated scrolling" (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() (Jocelyn Falempe) [RHEL-23295]
  - video: fbmem: use swap() to make code cleaner in fb_rotate_logo() (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: ssd1307fb: Make use of the helper function dev_err_probe() (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen (Jocelyn Falempe) [RHEL-23295]
  - video: vga16fb: Fix logic that checks for the display standard (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Add support ACPI enumeration (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Add dev helper variable to lp855x_probe() (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Move device_config setting out of lp855x_configure() (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: replace snprintf in show functions with sysfs_emit (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fbmem: Fix double free of 'fb_info->pixmap.addr' (Jocelyn Falempe) [RHEL-23295]
  - backlight: Propagate errors from get_brightness() (Jocelyn Falempe) [RHEL-23295]
  - video: backlight: Drop maximum brightness override for brightness zero (Jocelyn Falempe) [RHEL-23295]
  - fbmem: don't allow too huge resolutions (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Improve bootloader/kernel device handover (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: ssd1307fb: Cache address ranges (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: ssd1307fb: Optimize screen updates (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: ssd1307fb: Extract ssd1307fb_set_{col,page}_range() (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: ssd1307fb: Simplify ssd1307fb_update_display() (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: ssd1307fb: Propagate errors via ssd1307fb_update_display() (Jocelyn Falempe) [RHEL-23295]
  - fbmem: Convert from atomic_t to refcount_t on fb_info->count (Jocelyn Falempe) [RHEL-23295]
  - scsi: lpfc: Copyright updates for 14.4.0.1 patches (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Update lpfc version to 14.4.0.1 (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Define types in a union for generic void *context3 ptr (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Define lpfc_dmabuf type for ctx_buf ptr (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Define lpfc_nodelist type for ctx_ndlp ptr (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Use a dedicated lock for ras_fwlog state (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Avoid -Wstringop-overflow warning (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Replace hbalock with ndlp lock in lpfc_nvme_unregister_port() (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Remove IRQF_ONESHOT flag from threaded IRQ handling (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Remove unnecessary log message in queuecommand path (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Correct size for cmdwqe/rspwqe for memset() (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Correct size for wqe for memset() (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Replace deprecated strncpy() with strscpy() (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Copyright updates for 14.4.0.0 patches (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Update lpfc version to 14.4.0.0 (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Update lpfc version to 14.2.0.17 (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Move determination of vmid_flag after VMID reinitialization completes (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Reinitialize an NPIV's VMID data structures after FDISC (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Change VMID driver load time parameters to read only (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Change lpfc_vport load_flag member into a bitmask (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Change lpfc_vport fc_flag member into a bitmask (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Protect vport fc_nodes list with an explicit spin lock (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Change nlp state statistic counters into atomic_t (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Move handling of reset congestion statistics events (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Save FPIN frequency statistics upon receipt of peer cgn notifications (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Fix failure to delete vports when discovery is in progress (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Remove D_ID swap log message from trace event logger (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Use sg_dma_len() API to get struct scatterlist's length (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Remove reftag check in DIF paths (Dick Kennedy) [RHEL-24508]
  - lpfc: Use the proper SCSI midlayer interfaces for PI (Dick Kennedy) [RHEL-24508]
  - lpfc: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Fix reftag generation sizing errors (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list() (Dick Kennedy) [RHEL-24508]
  - x86/coco: Use CC_VENDOR_INTEL for Hyper-V/TDX (Vitaly Kuznetsov) [RHEL-38910]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-462.el9]
changelog:
  - nvmet: fix ns enable/disable possible hang (Maurizio Lombardi) [RHEL-37676]
  - nvme: fix reconnection fail due to reserved tag allocation (Maurizio Lombardi) [RHEL-36896] {CVE-2024-27435}
  - Revert "xen/x2apic: enable x2apic mode when supported for HVM" (Vitaly Kuznetsov) [RHEL-34602]
  - ext4: dax - remove tech preview tag (Bill O'Donnell) [RHEL-39889]
  - redhat: remove the merge subtrees script (Derek Barbosa)
  - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa)
  - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa)
  - redhat: redhat/Makefile: remove dist-maint-update target (Derek Barbosa)
  - nfp: flower: handle acti_netdevs allocation failure (Ken Cox) [RHEL-35158] {CVE-2024-27046}
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35816] {CVE-2024-26974}
  - crypto: qat - specify firmware files for 402xx (Vladis Dronov) [RHEL-35816]
  - crypto: qat - validate slices count returned by FW (Vladis Dronov) [RHEL-35816]
  - crypto: qat - improve error logging to be consistent across features (Vladis Dronov) [RHEL-35816]
  - crypto: qat - improve error message in adf_get_arbiter_mapping() (Vladis Dronov) [RHEL-35816]
  - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-24063]
  - crypto: qat - Fix spelling mistake "Invalide" -> "Invalid" (Vladis Dronov) [RHEL-35816]
  - crypto: qat - Avoid -Wflex-array-member-not-at-end warnings (Vladis Dronov) [RHEL-35816]
  - crypto: qat - implement interface for live migration (Vladis Dronov) [RHEL-35816]
  - crypto: qat - add interface for live migration (Vladis Dronov) [RHEL-35816]
  - crypto: qat - add bank save and restore flows (Vladis Dronov) [RHEL-35816]
  - crypto: qat - expand CSR operations for QAT GEN4 devices (Vladis Dronov) [RHEL-35816]
  - crypto: qat - rename get_sla_arr_of_type() (Vladis Dronov) [RHEL-35816]
  - crypto: qat - relocate CSR access code (Vladis Dronov) [RHEL-35816]
  - crypto: qat - move PFVF compat checker to a function (Vladis Dronov) [RHEL-35816]
  - crypto: qat - relocate and rename 4xxx PF2VM definitions (Vladis Dronov) [RHEL-35816]
  - crypto: qat - adf_get_etr_base() helper (Vladis Dronov) [RHEL-35816]
  - powerpc/eeh: Permanently disable the removed device (Mamatha Inamdar) [RHEL-35642]
  - powerpc/eeh: Use a goto for recovery failures (Mamatha Inamdar) [RHEL-35642]
  - powerpc/eeh: Small refactor of eeh_handle_normal_event() (Mamatha Inamdar) [RHEL-35642]
  - REDHAT: Fix values in Makefile being redefined (Lucas Zampieri)
  - selftests/net/lib: no need to record ns name if it already exist (Ivan Vecera) [RHEL-36219]
  - netlink: specs: Add missing bridge linkinfo attrs (Ivan Vecera) [RHEL-36219]
  - net: bridge: switchdev: Ensure deferred event delivery on unoffload (Ivan Vecera) [RHEL-36219]
  - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: Fix bridge locked port test flakiness (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: Suppress grep warnings (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: Fix bridge MDB test flakiness (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: Fix layer 2 miss test flakiness (Ivan Vecera) [RHEL-36219]
  - selftests: net: Fix bridge backup port test flakiness (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: List helper scripts in TEST_FILES Makefile variable (Ivan Vecera) [RHEL-36219]
  - selftests: net: Add missing matchall classifier (Ivan Vecera) [RHEL-36219]
  - bridge: mcast: fix disabled snooping after long uptime (Ivan Vecera) [RHEL-36219]
  - selftests/net/lib: update busywait timeout value (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: Remove executable bits from lib.sh (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: Avoid failures to source net/lib.sh (Ivan Vecera) [RHEL-36219]
  - bridge: cfm: fix enum typo in br_cc_ccm_tx_parse (Ivan Vecera) [RHEL-36219]
  - selftests: vxlan_mdb: Add MDB bulk deletion test (Ivan Vecera) [RHEL-36219]
  - selftests: bridge_mdb: Add MDB bulk deletion test (Ivan Vecera) [RHEL-36219]
  - vxlan: mdb: Add MDB bulk deletion support (Ivan Vecera) [RHEL-36219]
  - bridge: mdb: Add MDB bulk deletion support (Ivan Vecera) [RHEL-36219]
  - bridge: add MDB state mask uAPI attribute (Ivan Vecera) [RHEL-36219]
  - selftests/net: convert test_bridge_neigh_suppress.sh to run it in unique namespace (Ivan Vecera) [RHEL-36219]
  - selftests/net: convert test_bridge_backup_port.sh to run it in unique namespace (Ivan Vecera) [RHEL-36219]
  - selftests/net: add lib.sh (Ivan Vecera) [RHEL-36219]
  - docs: bridge: add other features (Ivan Vecera) [RHEL-36219]
  - docs: bridge: add netfilter doc (Ivan Vecera) [RHEL-36219]
  - docs: bridge: add switchdev doc (Ivan Vecera) [RHEL-36219]
  - docs: bridge: add multicast doc (Ivan Vecera) [RHEL-36219]
  - docs: bridge: add VLAN doc (Ivan Vecera) [RHEL-36219]
  - docs: bridge: add STP doc (Ivan Vecera) [RHEL-36219]
  - docs: bridge: Add kAPI/uAPI fields (Ivan Vecera) [RHEL-36219]
  - net: bridge: add document for IFLA_BRPORT enum (Ivan Vecera) [RHEL-36219]
  - net: bridge: add document for IFLA_BR enum (Ivan Vecera) [RHEL-36219]
  - docs: bridge: update doc format to rst (Ivan Vecera) [RHEL-36219]
  - net: bridge: fill in MODULE_DESCRIPTION() (Ivan Vecera) [RHEL-36219]
  - selftests: vxlan_mdb: Use MDB get instead of dump (Ivan Vecera) [RHEL-36219]
  - selftests: bridge_mdb: Use MDB get instead of dump (Ivan Vecera) [RHEL-36219]
  - rtnetlink: Add MDB get support (Ivan Vecera) [RHEL-36219]
  - vxlan: mdb: Add MDB get support (Ivan Vecera) [RHEL-36219]
  - bridge: mcast: Add MDB get support (Ivan Vecera) [RHEL-36219]
  - vxlan: mdb: Factor out a helper for remote entry size calculation (Ivan Vecera) [RHEL-36219]
  - vxlan: mdb: Adjust function arguments (Ivan Vecera) [RHEL-36219]
  - bridge: mcast: Rename MDB entry get function (Ivan Vecera) [RHEL-36219]
  - bridge: mcast: Factor out a helper for PG entry size calculation (Ivan Vecera) [RHEL-36219]
  - bridge: mcast: Account for missing attributes (Ivan Vecera) [RHEL-36219]
  - bridge: mcast: Dump MDB entries even when snooping is disabled (Ivan Vecera) [RHEL-36219]
  - br_netfilter: use single forward hook for ip and arp (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: bridge_fdb_learning_limit: Add a new selftest (Ivan Vecera) [RHEL-36219]
  - net: bridge: Set strict_start_type for br_policy (Ivan Vecera) [RHEL-36219]
  - net: bridge: Add netlink knobs for number / max learned FDB entries (Ivan Vecera) [RHEL-36219]
  - net: bridge: Track and limit dynamically learned FDB entries (Ivan Vecera) [RHEL-36219]
  - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry (Ivan Vecera) [RHEL-36219]
  - selftests: net: Add bridge backup port and backup nexthop ID test (Ivan Vecera) [RHEL-36219]
  - bridge: Add backup nexthop ID support (Ivan Vecera) [RHEL-36219]
  - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33164] {CVE-2024-26907}
  - powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT (Mark Langsdorf) [RHEL-32447]
  - powerpc: Don't include lppaca.h in paca.h (Mark Langsdorf) [RHEL-32447]
  - cpuidle: dt: Replace deprecated strncpy() with strscpy() (Mark Langsdorf) [RHEL-32447]
  - cpuidle: teo: Avoid unnecessary variable assignments (Mark Langsdorf) [RHEL-32447]
  - cpuidle: menu: Skip tick_nohz_get_sleep_length() call in some cases (Mark Langsdorf) [RHEL-32447]
  - cpuidle: teo: Gather statistics regarding whether or not to stop the tick (Mark Langsdorf) [RHEL-32447]
  - cpuidle: teo: Skip tick_nohz_get_sleep_length() call in some cases (Mark Langsdorf) [RHEL-32447]
  - cpuidle: teo: Do not call tick_nohz_get_sleep_length() upfront (Mark Langsdorf) [RHEL-32447]
  - cpuidle: psci: Move enabling OSI mode after power domains creation (Mark Langsdorf) [RHEL-32447]
  - cpuidle: dt_idle_genpd: Add helper function to remove genpd topology (Mark Langsdorf) [RHEL-32447]
  - cpuidle: teo: Drop utilized from struct teo_cpu (Mark Langsdorf) [RHEL-32447]
  - cpuidle: teo: Avoid stopping the tick unnecessarily when bailing out (Mark Langsdorf) [RHEL-32447]
  - cpuidle: teo: Update idle duration estimate when choosing shallower state (Mark Langsdorf) [RHEL-32447]
  - cpuidle: Adjust includes to remove of_device.h (Mark Langsdorf) [RHEL-32447]
  - cpuidle: Use of_property_present() for testing DT property presence (Mark Langsdorf) [RHEL-32447]
  - nvme-fabrics: prevent overriding of existing host (John Meneghini) [RHEL-30850]
  - tee: amdtee: fix use-after-free vulnerability in amdtee_close_session (David Arcari) [RHEL-24997]
  - tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta' (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Update sps power thermals according to the platform-profiles (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support to get sps default APTS index values (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support to get APTS index numbers for static slider (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support to notify sbios heart beat event (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support to get sbios requests in PMF driver (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Disable debugfs support for querying power thermals (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Differentiate PMF ACPI versions (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add debugging message for missing policy data (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Remove smart_pc_status enum (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fix possible out-of-bound memory accesses (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Use struct for cookie header (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Do not use readl() for policy buffer access (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fix return value of amd_pmf_start_policy_engine() (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add missing __iomem attribute to policy_base (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fix missing error code in amd_pmf_init_smart_pc() (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fix a potential race with policy binary sideload (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fixup error handling for amd_pmf_init_smart_pc() (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fix a suspend hang on Framework 13 (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fix TEE enact command failure after suspend and resume (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fix memory leak in amd_pmf_get_pb_data() (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Get ambient light information from AMD SFH driver (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Get Human presence information from AMD SFH driver (David Arcari) [RHEL-24997]
  - HID: amd_sfh: Add a new interface for exporting ALS data (David Arcari) [RHEL-24997]
  - HID: amd_sfh: Add a new interface for exporting HPD data (David Arcari) [RHEL-24997]
  - HID: amd_sfh: rename float_to_int() to amd_sfh_float_to_int() (David Arcari) [RHEL-24997]
  - HID: amd_sfh: Add light chromaticity for SFH1.1 (David Arcari) [RHEL-24997]
  - HID: amd_sfh: Add light chromaticity support (David Arcari) [RHEL-24997]
  - HID: amd_sfh: Add support for SFH1.1 light color temperature (David Arcari) [RHEL-24997]
  - HID: amd_sfh: Add support for light color temperature (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Return a status code only as a constant in two functions (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Return directly after a failed apmf_if_call() in apmf_sbios_heartbeat_notify() (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: dump policy binary data (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add capability to sideload of policy binary (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add facility to dump TA inputs (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Make source_as_str() as non-static (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support to update system state (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support update p3t limit (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support to get inputs from other subsystems (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: change amd_pmf_init_features() call sequence (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support for PMF Policy Binary (David Arcari) [RHEL-24997]
  - redhat/configs: enable AMDTEE (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Change return type of amd_pmf_set_dram_addr() (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support for PMF-TA interaction (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add PMF TEE interface (David Arcari) [RHEL-24997]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-463.el9]
changelog:
  - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38315] {CVE-2023-52791}
  - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38315] {CVE-2023-52791}
  - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36996] {CVE-2024-35801}
  - platform/x86: p2sb: On Goldmont only cache P2SB and SPI devfn BAR (Steve Best) [RHEL-31058]
  - xen-netfront: Add missing skb_mark_for_recycle (Vitaly Kuznetsov) [RHEL-36573] {CVE-2024-27393}
  - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS (Steve Best) [RHEL-37368] {CVE-2024-35983}
  - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37467] {CVE-2024-36000}
  - ice: fix uninitialized dplls mutex usage (Petr Oros) [RHEL-36283]
  - ice: fix pin phase adjust updates on PF reset (Petr Oros) [RHEL-36283]
  - ice: fix dpll periodic work data updates on PF reset (Petr Oros) [RHEL-36283]
  - ice: fix dpll and dpll_pin data access on PF reset (Petr Oros) [RHEL-36283]
  - ice: fix dpll input pin phase_adjust value updates (Petr Oros) [RHEL-36283]
  - ice: fix connection state of DPLL and out pin (Petr Oros) [RHEL-36283]
  - ice: Add automatic VF reset on Tx MDD events (Petr Oros) [RHEL-36317]
  - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35828] {CVE-2024-21823}
  - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35828] {CVE-2024-21823}
  - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35828] {CVE-2024-21823}
  - scsi: lpfc: Copyright updates for 14.4.0.2 patches (Dick Kennedy) [RHEL-35858]
  - scsi: lpfc: Update lpfc version to 14.4.0.2 (Dick Kennedy) [RHEL-35858]
  - scsi: lpfc: Add support for 32 byte CDBs (Dick Kennedy) [RHEL-35858]
  - scsi: lpfc: Change lpfc_hba hba_flag member into a bitmask (Dick Kennedy) [RHEL-35858]
  - scsi: lpfc: Introduce rrq_list_lock to protect active_rrq_list (Dick Kennedy) [RHEL-35858]
  - scsi: lpfc: Clear deferred RSCN processing flag when driver is unloading (Dick Kennedy) [RHEL-35858]
  - scsi: lpfc: Update logging of protection type for T10 DIF I/O (Dick Kennedy) [RHEL-35858]
  - scsi: lpfc: Change default logging level for unsolicited CT MIB commands (Dick Kennedy) [RHEL-35858]
  - mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled (Aristeu Rozanski) [RHEL-35090 RHEL-35091] {CVE-2024-26987}
  - selftest/bpf: Test the read of vsyscall page under x86-64 (Rafael Aquini) [RHEL-33168] {CVE-2024-26906}
  - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33168] {CVE-2024-26906}
  - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33168] {CVE-2024-26906}
  - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32940]
  - arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD (Mark Salter) [RHEL-31321] {CVE-2024-26670}
  - arm64: Rename ARM64_WORKAROUND_2966298 (Mark Salter) [RHEL-31321] {CVE-2024-26670}
  - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: Preserve PM domain votes in system suspend (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: Enable virtual power domain devices (Mark Langsdorf) [RHEL-32446]
  - PM: sleep: Add helpers to allow a device to remain powered-on (Mark Langsdorf) [RHEL-32446]
  - cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: Introduce cpufreq for ipq95xx (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: Enable cpufreq for ipq53xx (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: add support for IPQ8074 (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: add support for IPQ8064 (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: also accept operating-points-v2-krait-cpu (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: drop pvs_ver for format a fuses (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: add support for IPQ6018 (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: Add MSM8909 (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: Simplify driver data allocation (Mark Langsdorf) [RHEL-32446]
  - cpufreq: arm: Kconfig: Add i.MX7 to supported SoC for ARM_IMX_CPUFREQ_DT (Mark Langsdorf) [RHEL-32446]
  - cpufreq: stats: Fix buffer overflow detection in trans_stats() (Mark Langsdorf) [RHEL-32446]
  - cpufreq: ARM_BRCMSTB_AVS_CPUFREQ cannot be used with ARM_SCMI_CPUFREQ (Mark Langsdorf) [RHEL-32446]
  - cpufreq: ti-cpufreq: Add opp support for am62p5 SoCs (Mark Langsdorf) [RHEL-32446]
  - cpufreq: dt-platdev: add am62p5 to blocklist (Mark Langsdorf) [RHEL-32446]
  - cpufreq: userspace: Move is_managed indicator into per-policy structure (Mark Langsdorf) [RHEL-32446]
  - cpufreq: userspace: Use fine-grained mutex in userspace governor (Mark Langsdorf) [RHEL-32446]
  - cpufreq: conservative: Simplify the condition of storing 'down_threshold' (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Replace deprecated strncpy() with strscpy() (Mark Langsdorf) [RHEL-32446]
  - cpufreq: dt: platdev: Add MSM8909 to blocklist (Mark Langsdorf) [RHEL-32446]
  - cpufreq: pmac32: Use of_property_read_reg() to parse "reg" (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Add QCM6490 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Support per-policy performance boost (Mark Langsdorf) [RHEL-32446]
  - cpufreq: pcc: Fix the potentinal scheduling delays in target_index() (Mark Langsdorf) [RHEL-32446]
  - cpufreq: governor: Free dbs_data directly when gov->init() fails (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Avoid printing kernel addresses in cpufreq_resume() (Mark Langsdorf) [RHEL-32446]
  - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() (Mark Langsdorf) [RHEL-32446]
  - cpufreq: tegra194: add online/offline hooks (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-cpufreq-hw: add support for 4 freq domains (Mark Langsdorf) [RHEL-32446]
  - cpufreq: stats: Improve the performance of cpufreq_stats_create_table() (Mark Langsdorf) [RHEL-32446]
  - cpufreq: cppc: Set fie_disabled to FIE_DISABLED if fails to create kworker_fie (Mark Langsdorf) [RHEL-32446]
  - cpufreq: cppc: cppc_cpufreq_get_rate() returns zero in all error cases. (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Prefer to print cpuid in MIN/MAX QoS register error message (Mark Langsdorf) [RHEL-32446]
  - cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug (Mark Langsdorf) [RHEL-32446]
  - cpufreq: blocklist MSM8998 in cpufreq-dt-platdev (Mark Langsdorf) [RHEL-32446]
  - cpufreq: omap: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: raspberrypi: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: tegra186: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qoriq: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: acpi: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: kirkwood: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: pcc-cpufreq: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: davinci: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: imx-cpufreq-dt: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: brcmstb-avs-cpufreq: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: tegra194: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: vexpress: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: scpi: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: imx6q: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-cpufreq-hw: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: dt: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Explicitly include correct DT includes (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Make CONFIG_CPUFREQ_DT_PLATDEV depend on OF (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-cpufreq-hw: Use dev_err_probe() when failing to get icc paths (Mark Langsdorf) [RHEL-32446]
  - cpufreq: dt-platdev: Support building as module (Mark Langsdorf) [RHEL-32446]
  - redhat/configs: add default values for CONFIG_CPUFREQ_DT_PLATDEV (Mark Langsdorf) [RHEL-32446]
  - cpufreq: dt-platdev: Blacklist ti,am62a7 SoC (Mark Langsdorf) [RHEL-32446]
  - cpufreq: ti-cpufreq: Add support for AM62A7 (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: use helper to get SMEM SoC ID (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: use SoC ID-s from bindings (Mark Langsdorf) [RHEL-32446]
  - soc: qcom: smem: introduce qcom_smem_get_soc_id() (Mark Langsdorf) [RHEL-32446]
  - soc: qcom: smem: Switch to EXPORT_SYMBOL_GPL() (Mark Langsdorf) [RHEL-32446]
  - soc: qcom: socinfo: move SMEM item struct and defines to a header (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add IDs for SM8475 family (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: add SoC ID for QCM8550 and QCS8550 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add SoC ID for SM8650 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add IDs for IPQ8174 family (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add Soc ID for SM7150P (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add SoC ID for SM7125 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: drop the IPQ5019 SoC ID (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: add SoC ID for SM4450 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: add SoC ID for IPQ5300 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: add SoC ID for IPQ5312 and IPQ5302 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add IDs for IPQ5018 family (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add Soc ID for SM7150 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add IDs for QRB4210 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add IDs for IPQ9574 and its variants (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add IDs for QCM2290/QRB2210 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add IDs for IPQ5332 and its variant (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add Soc IDs for IPQ8064 and variants (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add a bunch of older SoCs (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add QRD board ID (Mark Langsdorf) [RHEL-32446]
  - cpufreq: imx6q: don't warn for disabling a non-existing frequency (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Adjust includes to remove of_device.h (Mark Langsdorf) [RHEL-32446]
  - Merge tag 'devicetree-for-6.4-2' of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux (Mark Langsdorf) [RHEL-32446]
  - cpufreq: dt-platdev: Add JH7110 SOC to the allowlist (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Add SM7225 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-32446]
  - arch/x86: Fix XSAVE check for x86_64-v2 check (Prarit Bhargava) [RHEL-22439]
  - arch/x86: mark x86_64-v1 and x86_64-v2 processors as deprecated (Prarit Bhargava) [RHEL-22439]
  - scsi: qla2xxx: Update version to 10.02.09.200-k (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Delay I/O Abort on PCI error (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Change debug message during driver unload (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Fix double free of fcport (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Fix command flush on cable pull (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: NVME|FCP prefer flag not being honored (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Update manufacturer detail (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Split FCE|EFT trace control (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Fix N2N stuck connection (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Prevent command send on chip reset (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Use FIELD_GET() to extract PCIe capability fields (Nilesh Javali) [RHEL-25184]
  - workqueue: Shorten events_freezable_power_efficient name (Audra Mitchell) [RHEL-3534]
  - workqueue.c: Increase workqueue name length (Audra Mitchell) [RHEL-3534]
  - net/mlx5e: Tidy up IPsec NAT-T SA discovery (Amir Tzin) [RHEL-24465]
  - Revert "net/mlx5e: Check the number of elements before walk TC rhashtable" (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Fix peer flow lists handling (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Disable IPsec offload support if not FW steering (Amir Tzin) [RHEL-24465]
  - net/mlx5: Refactor mlx5_flow_destination->rep pointer to vport num (Amir Tzin) [RHEL-24465]
  - mlx5/core: E-Switch, Create ACL FT for eswitch manager in switchdev mode (Amir Tzin) [RHEL-24465]
  - net/mlx5: Return correct EC_VF function ID (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Decrease num_block_tc when unblock tc offload (Amir Tzin) [RHEL-24465]
  - net/mlx5: Devcom, only use devcom after NULL check in mlx5_devcom_send_event() (Amir Tzin) [RHEL-24465]
  - net/mlx5: Fix mlx5_cmd_update_root_ft() error flow (Amir Tzin) [RHEL-24465]
  - net/mlx5: DR, Fix peer domain namespace setting (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Fix overrun reported by coverity (Amir Tzin) [RHEL-24465]
  - RDMA/mlx5: Change the key being sent for MPV device affiliation (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Check the number of elements before walk TC rhashtable (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Reduce eswitch mode_lock protection context (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Support IPsec upper TCP protocol selector (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Add IPsec and ASO syndromes check in HW (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Allow IPsec soft/hard limits in bytes (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Support IPsec upper protocol selector field offload for RX (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Remove exposure of IPsec RX flow steering struct (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Unify esw and normal IPsec status table creation/destruction (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Don't modify the peer sent-to-vport rules for IPSec offload (Amir Tzin) [RHEL-24465]
  - net/mlx5: Handle IPsec steering upon master unbind/bind (Amir Tzin) [RHEL-24465]
  - net/mlx5: Configure IPsec steering for ingress RoCEv2 MPV traffic (Amir Tzin) [RHEL-24465]
  - net/mlx5: Configure IPsec steering for egress RoCEv2 MPV traffic (Amir Tzin) [RHEL-24465]
  - net/mlx5: Add create alias flow table function to ipsec roce (Amir Tzin) [RHEL-24465]
  - net/mlx5: Implement alias object allow and create functions (Amir Tzin) [RHEL-24465]
  - net/mlx5: Add alias flow table bits (Amir Tzin) [RHEL-24465]
  - net/mlx5: Store devcom pointer inside IPsec RoCE (Amir Tzin) [RHEL-24465]
  - net/mlx5: Register mlx5e priv to devcom in MPV mode (Amir Tzin) [RHEL-24465]
  - RDMA/mlx5: Send events from IB driver about device affiliation state (Amir Tzin) [RHEL-24465]
  - net/mlx5: Implement devlink port function cmds to control ipsec_packet (Amir Tzin) [RHEL-24458 RHEL-24465 RHEL-6311]
  - net/mlx5: Implement devlink port function cmds to control ipsec_crypto (Amir Tzin) [RHEL-24458 RHEL-24465 RHEL-6311]
  - net/mlx5: Provide an interface to block change of IPsec capabilities (Amir Tzin) [RHEL-24458 RHEL-24465 RHEL-6311]
  - net/mlx5: Add IFC bits to support IPsec enable/disable (Amir Tzin) [RHEL-24458 RHEL-24465 RHEL-6311]
  - net/mlx5e: Rewrite IPsec vs. TC block interface (Amir Tzin) [RHEL-24458 RHEL-24465 RHEL-6311]
  - net/mlx5: Drop extra layer of locks in IPsec (Amir Tzin) [RHEL-24458 RHEL-24465 RHEL-6311]
  - net/mlx5: Store vport in struct mlx5_devlink_port and use it in port ops (Amir Tzin) [RHEL-24465]
  - net/mlx5: Check vhca_resource_manager capability in each op and add extack msg (Amir Tzin) [RHEL-24465]
  - net/mlx5: Relax mlx5_devlink_eswitch_get() return value checking (Amir Tzin) [RHEL-24465]
  - net/mlx5: Return -EOPNOTSUPP in mlx5_devlink_port_fn_migratable_set() directly (Amir Tzin) [RHEL-24465]
  - net/mlx5: Reduce number of vport lookups passing vport pointer instead of index (Amir Tzin) [RHEL-24465]
  - net/mlx5: Embed struct devlink_port into driver structure (Amir Tzin) [RHEL-24465]
  - net/mlx5: Don't register ops for non-PF/VF/SF port and avoid checks in ops (Amir Tzin) [RHEL-24465]
  - net/mlx5: Remove no longer used mlx5_esw_offloads_sf_vport_enable/disable() (Amir Tzin) [RHEL-24465]
  - net/mlx5: Introduce mlx5_eswitch_load/unload_sf_vport() and use it from SF code (Amir Tzin) [RHEL-24465]
  - net/mlx5: Allow mlx5_esw_offloads_devlink_port_register() to register SFs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Push devlink port PF/VF init/cleanup calls out of devlink_port_register/unregister() (Amir Tzin) [RHEL-24465]
  - net/mlx5: Push out SF devlink port init and cleanup code to separate helpers (Amir Tzin) [RHEL-24465]
  - net/mlx5: Rework devlink port alloc/free into init/cleanup (Amir Tzin) [RHEL-24465]
  - net/mlx5: Rename devlink port ops struct for PFs/VFs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Remove VPORT_UPLINK handling from devlink_port.c (Amir Tzin) [RHEL-24465]
  - net/mlx5: Call mlx5_esw_offloads_rep_load/unload() for uplink port directly (Amir Tzin) [RHEL-24465]
  - net/mlx5: Give esw_offloads_load/unload_rep() "mlx5_" prefix (Amir Tzin) [RHEL-24465]
  - net/mlx5: Make mlx5_eswitch_load/unload_vport() static (Amir Tzin) [RHEL-24465]
  - net/mlx5: Make mlx5_esw_offloads_rep_load/unload() static (Amir Tzin) [RHEL-24465]
  - net/mlx5: Remove pointless devlink_rate checks (Amir Tzin) [RHEL-24465]
  - net/mlx5: Don't check vport->enabled in port ops (Amir Tzin) [RHEL-24465]
  - net/mlx5: Don't query MAX caps twice (Amir Tzin) [RHEL-24451 RHEL-24465]
  - net/mlx5: Remove unused MAX HCA capabilities (Amir Tzin) [RHEL-24451 RHEL-24465]
  - net/mlx5: Remove unused CAPs (Amir Tzin) [RHEL-24451 RHEL-24465]
  - net/mlx5: Adjust mlx5_query_hca_caps() to upstream (Amir Tzin) [RHEL-24465]
  - net/mlx5: Expose max possible SFs via devlink resource (Amir Tzin) [RHEL-24451 RHEL-24465]
  - net/mlx5e: E-Switch, Allow devcom initialization on more vports (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Register devcom device with switch id key (Amir Tzin) [RHEL-24465]
  - net/mlx5: Devcom, Infrastructure changes (Amir Tzin) [RHEL-24465]
  - net/mlx5: Use shared code for checking lag is supported (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Support IPsec NAT-T functionality (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Check for IPsec NAT-T support (Amir Tzin) [RHEL-24465]
  - net/mlx5: Add relevant capabilities bits to support NAT-T (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Make TC and IPsec offloads mutually exclusive on a netdev (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Add get IPsec offload stats for uplink representor (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Modify and restore TC rules for IPSec TX rules (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Make IPsec offload work together with eswitch and TC (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5: Compare with old_dest param to modify rule destination (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Support IPsec packet offload for TX in switchdev mode (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Refactor IPsec TX tables creation (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Handle IPsec offload for RX datapath in switchdev mode (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Support IPsec packet offload for RX in switchdev mode (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Refactor IPsec RX tables creation and destruction (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Prepare IPsec packet offload for switchdev mode (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Change the parameter of IPsec RX skb handle function (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Add function to get IPsec offload namespace (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5: DR, update query of HCA caps for EC VFs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Fix the macro for accessing EC VF vports (Amir Tzin) [RHEL-24465]
  - net/mlx5: Fix devlink controller number for ECVF (Amir Tzin) [RHEL-24465]
  - net/mlx5: Fix UAF in mlx5_eswitch_cleanup() (Amir Tzin) [RHEL-24465]
  - net/mlx5: Fix SFs kernel documentation error (Amir Tzin) [RHEL-24465]
  - net/mlx5: Bridge, set debugfs access right to root-only (Amir Tzin) [RHEL-24465]
  - net/mlx5: Bridge, expose FDB state via debugfs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Bridge, pass net device when linking vport to bridge (Amir Tzin) [RHEL-24465]
  - net/mlx5: Create eswitch debugfs root directory (Amir Tzin) [RHEL-24465]
  - net/mlx5: Light probe local SFs (Amir Tzin) [RHEL-24417 RHEL-24465]
  - net/mlx5: Move esw multiport devlink param to eswitch code (Amir Tzin) [RHEL-24417 RHEL-24465]
  - net/mlx5: Split function_setup() to enable and open functions (Amir Tzin) [RHEL-24417 RHEL-24465]
  - net/mlx5: Enable 4 ports VF LAG (Amir Tzin) [RHEL-24409 RHEL-24465]
  - net/mlx5: LAG, block multiport eswitch LAG in case ldev have more than 2 ports (Amir Tzin) [RHEL-24409 RHEL-24465]
  - net/mlx5: LAG, block multipath LAG in case ldev have more than 2 ports (Amir Tzin) [RHEL-24409 RHEL-24465]
  - net/mlx5: LAG, change mlx5_shared_fdb_supported() to static (Amir Tzin) [RHEL-24409 RHEL-24465]
  - net/mlx5: LAG, generalize handling of shared FDB (Amir Tzin) [RHEL-24409 RHEL-24465]
  - net/mlx5: LAG, check if all eswitches are paired for shared FDB (Amir Tzin) [RHEL-24409 RHEL-24465]
  - {net/RDMA}/mlx5: introduce lag_for_each_peer (Amir Tzin) [RHEL-24409 RHEL-24465]
  - RDMA/mlx5: Free second uplink ib port (Amir Tzin) [RHEL-24409 RHEL-24465]
  - net/mlx5e: E-Switch, Fix shared fdb error flow (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Pass other_vport flag if vport is not 0 (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Use xarray for devcom paired device index (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Add peer fdb miss rules for vport manager or ecpf (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Use vhca_id for device index in vport rx rules (Amir Tzin) [RHEL-24465]
  - net/mlx5: Lag, Remove duplicate code checking lag is supported (Amir Tzin) [RHEL-24465]
  - net/mlx5: Set max number of embedded CPU VFs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Update SRIOV enable/disable to handle EC/VFs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Query correct caps for min msix vectors (Amir Tzin) [RHEL-24465]
  - net/mlx5: Use correct vport when restoring GUIDs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Add new page type for EC VF pages (Amir Tzin) [RHEL-24465]
  - net/mlx5: Add/remove peer miss rules for EC VFs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Add management of EC VF vports (Amir Tzin) [RHEL-24465]
  - mlx5/core: E-Switch, Allocate ECPF vport if it's an eswitch manager (Amir Tzin) [RHEL-24465]
  - net/mlx5: Update vport caps query/set for EC VFs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Enable devlink port for embedded cpu VF vports (Amir Tzin) [RHEL-24465]
  - net/mlx5: mlx5_ifc updates for embedded CPU SRIOV (Amir Tzin) [RHEL-24465]
  - net/mlx5: Simplify unload all rep code (Amir Tzin) [RHEL-24465]
  - net/mlx5: Skip inline mode check after mlx5_eswitch_enable_locked() failure (Amir Tzin) [RHEL-24465]
  - net/mlx5: Devcom, extend mlx5_devcom_send_event to work with more than two devices (Amir Tzin) [RHEL-24465]
  - net/mlx5: Devcom, introduce devcom_for_each_peer_entry (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-switch, mark devcom as not ready when all eswitches are unpaired (Amir Tzin) [RHEL-24465]
  - net/mlx5: Devcom, Rename paired to ready (Amir Tzin) [RHEL-24465]
  - net/mlx5: DR, handle more than one peer domain (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-switch, generalize shared FDB creation (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-switch, Handle multiple master egress rules (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-switch, refactor FDB miss rule add/remove (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-switch, enlarge peer miss group table (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Handle offloads flows per peer (Amir Tzin) [RHEL-24465]
  - net/mlx5e: en_tc, re-factor query route port (Amir Tzin) [RHEL-24465]
  - net/mlx5e: rep, store send to vport rules per peer (Amir Tzin) [RHEL-24465]
  - net/mlx5e: tc, Refactor peer add/del flow (Amir Tzin) [RHEL-24465]
  - net/mlx5e: en_tc, Extend peer flows to a list (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Initialize E-Switch for eswitch manager (Amir Tzin) [RHEL-24465]
  - net/mlx5: devlink, Only show PF related devlink warning when needed (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-Switch, Use metadata matching for RoCE loopback rule (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-Switch, Use RoCE version 2 for loopback traffic (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Add a check that log_max_l2_table is valid (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch: move debug print of adding mac to correct place (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Check device is PF when stopping esw offloads (Amir Tzin) [RHEL-24465]
  - net/mlx5: Remove redundant vport_group_manager cap check (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Use metadata for vport matching in send-to-vport rules (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Allow get vport api if esw exists (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Update when to set other vport context (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Remove redundant __func__ arg from fs_err() calls (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Remove flow_source check for metadata matching (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-Switch, Remove redundant check (Amir Tzin) [RHEL-24465]
  - net/mlx5: Remove redundant esw multiport validate function (Amir Tzin) [RHEL-24465]
  - RDMA/mlx5: Handles RoCE MACsec steering rules addition and deletion (Amir Tzin) [RHEL-22227]
  - net/mlx5: Add RoCE MACsec steering infrastructure in core (Amir Tzin) [RHEL-22227]
  - net/mlx5: Configure MACsec steering for ingress RoCEv2 traffic (Amir Tzin) [RHEL-22227]
  - net/mlx5: Configure MACsec steering for egress RoCEv2 traffic (Amir Tzin) [RHEL-22227]
  - net/mlx5: Add MACsec priorities in RDMA namespaces (Amir Tzin) [RHEL-22227]
  - RDMA/mlx5: Implement MACsec gid addition and deletion (Amir Tzin) [RHEL-22227]
  - net/mlx5: Maintain fs_id xarray per MACsec device inside macsec steering (Amir Tzin) [RHEL-22227]
  - net/mlx5: Remove netdevice from MACsec steering (Amir Tzin) [RHEL-22227]
  - net/mlx5e: Move MACsec flow steering and statistics database from ethernet to core (Amir Tzin) [RHEL-22227]
  - net/mlx5e: Rename MACsec flow steering functions/parameters to suit core naming style (Amir Tzin) [RHEL-22227]
  - net/mlx5: Remove dependency of macsec flow steering on ethernet (Amir Tzin) [RHEL-22227]
  - net/mlx5e: Move MACsec flow steering operations to be used as core library (Amir Tzin) [RHEL-22227]
  - RDMA/mlx5: Return the firmware result upon destroying QP/RQ (Amir Tzin) [RHEL-22227]
  - RDMA/mlx5: Handle DCT QP logic separately from low level QP interface (Amir Tzin) [RHEL-22227]
  - RDMA/mlx5: Reduce QP table exposure (Amir Tzin) [RHEL-22227]
  - net/mlx5: Nullify qp->dbg pointer post destruction (Amir Tzin) [RHEL-22227]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-464.el9]
changelog:
  - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38438] {CVE-2021-47497}
  - kernel: watch_queue: copy user-array safely (Steve Best) [RHEL-38238] {CVE-2023-52824}
  - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37739 RHEL-37740] {CVE-2021-47432}
  - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37739 RHEL-37740] {CVE-2021-47432}
  - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33098] {CVE-2024-26843}
  - workqueue: Drain BH work items on hot-unplugged CPUs (Waiman Long) [RHEL-25103]
  - workqueue: Control intensive warning threshold through cmdline (Waiman Long) [RHEL-25103]
  - workqueue: Make @flags handling consistent across set_work_data() and friends (Waiman Long) [RHEL-25103]
  - workqueue: Remove clear_work_data() (Waiman Long) [RHEL-25103]
  - workqueue: Factor out work_grab_pending() from __cancel_work_sync() (Waiman Long) [RHEL-25103]
  - workqueue: Clean up enum work_bits and related constants (Waiman Long) [RHEL-25103]
  - workqueue: Introduce work_cancel_flags (Waiman Long) [RHEL-25103]
  - workqueue: Use variable name irq_flags for saving local irq flags (Waiman Long) [RHEL-25103]
  - workqueue: Reorganize flush and cancel[_sync] functions (Waiman Long) [RHEL-25103]
  - workqueue: Rename __cancel_work_timer() to __cancel_timer_sync() (Waiman Long) [RHEL-25103]
  - workqueue: Use rcu_read_lock_any_held() instead of rcu_read_lock_held() (Waiman Long) [RHEL-25103]
  - workqueue: Cosmetic changes (Waiman Long) [RHEL-25103]
  - workqueue, irq_work: Build fix for !CONFIG_IRQ_WORK (Waiman Long) [RHEL-25103]
  - workqueue: Fix queue_work_on() with BH workqueues (Waiman Long) [RHEL-25103]
  - async: Use a dedicated unbound workqueue with raised min_active (Waiman Long) [RHEL-25103]
  - workqueue: Implement workqueue_set_min_active() (Waiman Long) [RHEL-25103]
  - workqueue: Fix kernel-doc comment of unplug_oldest_pwq() (Waiman Long) [RHEL-25103]
  - workqueue: Bind unbound workqueue rescuer to wq_unbound_cpumask (Waiman Long) [RHEL-25103]
  - kernel/workqueue: Let rescuers follow unbound wq cpumask changes (Waiman Long) [RHEL-25103]
  - workqueue: Enable unbound cpumask update on ordered workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Link pwq's into wq->pwqs from oldest to newest (Waiman Long) [RHEL-25103]
  - workqueue: Don't implicitly make UNBOUND workqueues w/ @max_active==1 ordered (Waiman Long) [RHEL-25103]
  - workqueue: Skip __WQ_DESTROYING workqueues when updating global unbound cpumask (Waiman Long) [RHEL-25103]
  - workqueue: fix a typo in comment (Waiman Long) [RHEL-25103]
  - Revert "workqueue: make wq_subsys const" (Waiman Long) [RHEL-25103]
  - workqueue: Implement BH workqueues to eventually replace tasklets (Waiman Long) [RHEL-25103]
  - workqueue: Factor out init_cpu_worker_pool() (Waiman Long) [RHEL-25103]
  - workqueue: Update lock debugging code (Waiman Long) [RHEL-25103]
  - workqueue: make wq_subsys const (Waiman Long) [RHEL-25103]
  - workqueue: Fix pwq->nr_in_flight corruption in try_to_grab_pending() (Waiman Long) [RHEL-25103]
  - workqueue: Avoid premature init of wq->node_nr_active[].max (Waiman Long) [RHEL-25103]
  - workqueue: Don't call cpumask_test_cpu() with -1 CPU in wq_update_node_max_active() (Waiman Long) [RHEL-25103]
  - tools/workqueue/wq_dump.py: Add node_nr/max_active dump (Waiman Long) [RHEL-25103]
  - workqueue: Implement system-wide nr_active enforcement for unbound workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Introduce struct wq_node_nr_active (Waiman Long) [RHEL-25103]
  - workqueue: Move pwq_dec_nr_in_flight() to the end of work item handling (Waiman Long) [RHEL-25103]
  - workqueue: RCU protect wq->dfl_pwq and implement accessors for it (Waiman Long) [RHEL-25103]
  - workqueue: Make wq_adjust_max_active() round-robin pwqs while activating (Waiman Long) [RHEL-25103]
  - workqueue: Move nr_active handling into helpers (Waiman Long) [RHEL-25103]
  - workqueue: Replace pwq_activate_inactive_work() with [__]pwq_activate_work() (Waiman Long) [RHEL-25103]
  - workqueue: Factor out pwq_is_empty() (Waiman Long) [RHEL-25103]
  - workqueue: Move pwq->max_active to wq->max_active (Waiman Long) [RHEL-25103]
  - workqueue: Break up enum definitions and give names to the types (Waiman Long) [RHEL-25103]
  - workqueue: Drop unnecessary kick_pool() in create_worker() (Waiman Long) [RHEL-25103]
  - tools/workqueue/wq_dump.py: Clean up code and drop duplicate information (Waiman Long) [RHEL-25103]
  - workqueue: mark power efficient workqueue as unbounded if nohz_full enabled (Waiman Long) [RHEL-25103]
  - workqueue: Add rcu lock check at the end of work item execution (Waiman Long) [RHEL-25103]
  - kernel/workqueue: Bind rescuer to unbound cpumask for WQ_UNBOUND (Waiman Long) [RHEL-25103]
  - tools/workqueue: Add rescuers printing to wq_dump.py (Waiman Long) [RHEL-25103]
  - Revert "workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()" (Waiman Long) [RHEL-25103]
  - Documentation/core-api: fix spelling mistake in workqueue (Waiman Long) [RHEL-25103]
  - Documentation/core-api : fix typo in workqueue (Waiman Long) [RHEL-25103]
  - async: Split async_schedule_node_domain() (Waiman Long) [RHEL-25103]
  - workqueue: Provide one lock class key per work_on_cpu() callsite (Waiman Long) [RHEL-25103]
  - workqueue: fix -Wformat-truncation in create_worker (Waiman Long) [RHEL-25103]
  - workqueue: Use the kmem_cache_free() instead of kfree() to release pwq (Waiman Long) [RHEL-25103]
  - workqueue: doc: Fix function and sysfs path errors (Waiman Long) [RHEL-25103]
  - workqueue: Fix UAF report by KASAN in pwq_release_workfn() (Waiman Long) [RHEL-25103]
  - workqueue: Fix missed pwq_release_worker creation in wq_cpu_intensive_thresh_init() (Waiman Long) [RHEL-25103]
  - workqueue: Removed double allocation of wq_update_pod_attrs_buf (Waiman Long) [RHEL-25103]
  - workqueue: fix data race with the pwq->stats[] increment (Waiman Long) [RHEL-25103]
  - workqueue: Rename rescuer kworker (Waiman Long) [RHEL-25103]
  - workqueue: Make default affinity_scope dynamically updatable (Waiman Long) [RHEL-25103]
  - workqueue: Add "Affinity Scopes and Performance" section to documentation (Waiman Long) [RHEL-25103]
  - workqueue: Implement non-strict affinity scope for unbound workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Add workqueue_attrs->__pod_cpumask (Waiman Long) [RHEL-25103]
  - workqueue: Factor out need_more_worker() check and worker wake-up (Waiman Long) [RHEL-25103]
  - workqueue: Factor out work to worker assignment and collision handling (Waiman Long) [RHEL-25103]
  - workqueue: Add multiple affinity scopes and interface to select them (Waiman Long) [RHEL-25103]
  - workqueue: Modularize wq_pod_type initialization (Waiman Long) [RHEL-25103]
  - workqueue: Add tools/workqueue/wq_dump.py which prints out workqueue configuration (Waiman Long) [RHEL-25103]
  - workqueue: Generalize unbound CPU pods (Waiman Long) [RHEL-25103]
  - workqueue: Factor out clearing of workqueue-only attrs fields (Waiman Long) [RHEL-25103]
  - workqueue: Factor out actual cpumask calculation to reduce subtlety in wq_update_pod() (Waiman Long) [RHEL-25103]
  - workqueue: Initialize unbound CPU pods later in the boot (Waiman Long) [RHEL-25103]
  - workqueue: Move wq_pod_init() below workqueue_init() (Waiman Long) [RHEL-25103]
  - workqueue: Rename NUMA related names to use pod instead (Waiman Long) [RHEL-25103]
  - workqueue: Rename workqueue_attrs->no_numa to ->ordered (Waiman Long) [RHEL-25103]
  - workqueue: Make unbound workqueues to use per-cpu pool_workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Call wq_update_unbound_numa() on all CPUs in NUMA node on CPU hotplug (Waiman Long) [RHEL-25103]
  - workqueue: Make per-cpu pool_workqueues allocated and released like unbound ones (Waiman Long) [RHEL-25103]
  - workqueue: Use a kthread_worker to release pool_workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Remove module param disable_numa and sysfs knobs pool_ids and numa (Waiman Long) [RHEL-25103]
  - workqueue: Relocate worker and work management functions (Waiman Long) [RHEL-25103]
  - workqueue: Rename wq->cpu_pwqs to wq->cpu_pwq (Waiman Long) [RHEL-25103]
  - workqueue: Not all work insertion needs to wake up a worker (Waiman Long) [RHEL-25103]
  - workqueue: Cleanups around process_scheduled_works() (Waiman Long) [RHEL-25103]
  - workqueue: Drop the special locking rule for worker->flags and worker_pool->flags (Waiman Long) [RHEL-25103]
  - workqueue: use LIST_HEAD to initialize cull_list (Waiman Long) [RHEL-25103]
  - workqueue: Warn attempt to flush system-wide workqueues. (Waiman Long) [RHEL-25103]
  - workqueue: Scale up wq_cpu_intensive_thresh_us if BogoMIPS is below 4000 (Waiman Long) [RHEL-25103]
  - workqueue: Fix cpu_intensive_thresh_us name in help text (Waiman Long) [RHEL-25103]
  - soc: qcom: qmi: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - dm integrity: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - scsi: NCR5380: Use default @max_active for hostdata->work_q (Waiman Long) [RHEL-25103]
  - crypto: octeontx2: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - xen/pvcalls: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - virt: acrn: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - net: octeontx2: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - net: thunderx: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - greybus: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - powerpc, workqueue: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Disable per-cpu CPU hog detection when wq_cpu_intensive_thresh_us is 0 (Waiman Long) [RHEL-25103]
  - workqueue: Fix WARN_ON_ONCE() triggers in worker_enter_idle() (Waiman Long) [RHEL-25103]
  - workqueue: Track and monitor per-workqueue CPU time usage (Waiman Long) [RHEL-25103]
  - redhat/configs: Add CONFIG_WQ_CPU_INTENSIVE_REPORT (Waiman Long) [RHEL-25103]
  - workqueue: Report work funcs that trigger automatic CPU_INTENSIVE mechanism (Waiman Long) [RHEL-25103]
  - workqueue: Automatically mark CPU-hogging work items CPU_INTENSIVE (Waiman Long) [RHEL-25103]
  - workqueue: Improve locking rule description for worker fields (Waiman Long) [RHEL-25103]
  - workqueue: Move worker_set/clr_flags() upwards (Waiman Long) [RHEL-25103]
  - workqueue: Re-order struct worker fields (Waiman Long) [RHEL-25103]
  - workqueue: Add pwq->stats[] and a monitoring script (Waiman Long) [RHEL-25103]
  - Further upgrade queue_work_on() comment (Waiman Long) [RHEL-25103]
  - workqueue: clean up WORK_* constant types, clarify masking (Waiman Long) [RHEL-25103]
  - workqueue: Introduce show_freezable_workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Print backtraces from CPUs with hung CPU bound workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-25103]
  - workqueue: Interrupted create_worker() is not a repeated event (Waiman Long) [RHEL-25103]
  - workqueue: Warn when a new worker could not be created (Waiman Long) [RHEL-25103]
  - workqueue: Fix hung time report of worker pools (Waiman Long) [RHEL-25103]
  - workqueue: Simplify a pr_warn() call in wq_select_unbound_cpu() (Waiman Long) [RHEL-25103]
  - scsi: message: fusion: Avoid flush_scheduled_work() usage (Waiman Long) [RHEL-25103]
  - scsi: message: fusion: Remove unused sas_persist_task work (Waiman Long) [RHEL-25103]
  - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-25103]
  - workqueue: Add a new flag to spot the potential UAF error (Waiman Long) [RHEL-25103]
  - workqueue: Make queue_rcu_work() use call_rcu_hurry() (Waiman Long) [RHEL-25103]
  - treewide: Drop WARN_ON_FUNCTION_MISMATCH (Waiman Long) [RHEL-25103]
  - Input: psmouse-smbus - avoid flush_scheduled_work() usage (Waiman Long) [RHEL-25103]
  - workqueue: Convert the type of pool->nr_running to int (Waiman Long) [RHEL-25103]
  - workqueue: Use wake_up_worker() in wq_worker_sleeping() instead of open code (Waiman Long) [RHEL-25103]
  - Revert "module, async: async_synchronize_full() on module init iff async is used" (Waiman Long) [RHEL-25103]
  - workqueue: Upgrade queue_work_on() comment (Waiman Long) [RHEL-25103]
  - workqueue: doc: Call out the non-reentrance conditions (Waiman Long) [RHEL-25103]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-465.el9]
changelog:
  - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38236] {CVE-2023-52775}
  - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26494] {CVE-2023-52451}
  - octeontx2-af: avoid off-by-one read from userspace (Kamal Heib) [RHEL-39873] {CVE-2024-36957}
  - iommu/amd: Fix panic accessing amd_iommu_enable_faulting (Jerry Snitselaar) [RHEL-37320 RHEL-40344]
  - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-38596]
  - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38715] {CVE-2021-47548}
  - watchdog: rti: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-40150]
  - watchdog: rti-wdt:using the pm_runtime_resume_and_get to simplify the code (Andrew Halaney) [RHEL-40150]
  - watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking (Andrew Halaney) [RHEL-40150]
  - watchdog: rti_wdt: Fix calculation and evaluation of preset heartbeat (Andrew Halaney) [RHEL-40150]
  - watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function (Andrew Halaney) [RHEL-40150]
  - watchdog: rti-wdt: Make use of the helper function devm_platform_ioremap_resource() (Andrew Halaney) [RHEL-40150]
  - clk: Get runtime PM before walking tree for clk_summary (Andrew Halaney) [RHEL-35062]
  - clk: Get runtime PM before walking tree during disable_unused (Andrew Halaney) [RHEL-35062] {CVE-2024-27004}
  - clk: Initialize struct clk_core kref earlier (Andrew Halaney) [RHEL-35062]
  - clk: Don't hold prepare_lock when calling kref_put() (Andrew Halaney) [RHEL-35062]
  - clk: Remove prepare_lock hold assertion in __clk_release() (Andrew Halaney) [RHEL-35062]
  - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38289] {CVE-2023-52834}
  - scsi: ufs: ti-j721e: Expose device tree aliases (Andrew Halaney) [RHEL-39999]
  - scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV (Andrew Halaney) [RHEL-39999]
  - redhat/configs: Enable CONFIG_BLK_CGROUP_IOCOST (Waiman Long) [RHEL-38879]
  - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39662]
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39662]
  - stackdepot: respect __GFP_NOLOCKDEP allocation flag (Waiman Long) [RHEL-38628]
  - lib/stackdepot: off by one in depot_fetch_stack() (Waiman Long) [RHEL-38628]
  - lib/stackdepot: fix first entry having a 0-handle (Waiman Long) [RHEL-38628]
  - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38260] {CVE-2023-52864}
  - platform/x86: wmi: remove unnecessary initializations (David Arcari) [RHEL-38260] {CVE-2023-52864}
  - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-38547]
  - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-38547]
  - mlxbf_gige: call request_irq() after NAPI initialized (Kamal Heib) [RHEL-37179] {CVE-2024-35907}
  - mlxbf_gige: stop PHY during open() error paths (Kamal Heib) [RHEL-37179]
  - fork: defer linking file vma until vma is fully initialized (Rafael Aquini) [RHEL-35022] {CVE-2024-27022}
  - platform/x86/intel-uncore-freq: Don't present root domain on error (David Arcari) [RHEL-38558]
  - platform/x86/intel-uncore-freq: Increase minor number support (David Arcari) [RHEL-38558]
  - x86/cpu/topology: Rename topology_max_die_per_package() (David Arcari) [RHEL-38558]
  - platform/x86/intel-uncore-freq: Process read/write blocked feature status (David Arcari) [RHEL-38558]
  - mlxbf_gige: stop interface during shutdown (Kamal Heib) [RHEL-37244] {CVE-2024-35885}
  - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38442] {CVE-2021-47495}
  - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38442] {CVE-2021-47495}
  - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37430] {CVE-2024-35958}
  - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37327] {CVE-2024-35944}
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37327] {CVE-2024-35944}
  - x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type (Steve Best) [RHEL-36906] {CVE-2023-52659}
  - powerpc/mm: Align memory_limit value specified using mem= kernel parameter (Joel Savitz) [RHEL-8591]
  - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37113 RHEL-37114] {CVE-2024-35947}
  - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29500] {CVE-2024-26638}
  - cpufreq: amd-pstate: Fix the inconsistency in max frequency units (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: remove global header file (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: fix the highest frequency issue which limits performance (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: remove unused variable lowest_nonlinear_freq (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: fix code format problems (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing (David Arcari) [RHEL-34751]
  - x86/CPU/AMD: Add ZenX generations flags (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: get transition delay and latency value from ACPI tables (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Bail out if min/max/nominal_freq is 0 (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Remove amd_get_{min,max,nominal,lowest_nonlinear}_freq() (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Document the units for freq variables in amd_cpudata (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Document *_limit_* fields in struct amd_cpudata (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: adjust min/max limit perf (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Fix min_perf assignment in amd_pstate_adjust_perf() (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Update amd-pstate preferred core ranking dynamically (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Enable amd-pstate preferred core support (David Arcari) [RHEL-34751]
  - ACPI: CPPC: Add helper to get the highest performance value (David Arcari) [RHEL-34751]
  - cpufreq/amd-pstate: Fix setting scaling max/min freq values (David Arcari) [RHEL-34751]
  - cpufreq/amd-pstate: Only print supported EPP values for performance governor (David Arcari) [RHEL-34751]
  - cpufreq/amd-pstate: Fix scaling_min_freq and scaling_max_freq update (David Arcari) [RHEL-34751]
  - cpufreq/amd-pstate: Fix the return value of amd_pstate_fast_switch() (David Arcari) [RHEL-34751]
  - Merge DRM changes from upstream v6.8..v6.9 (Dave Airlie) [RHEL-24102]
  - Merge DRM changes from upstream v6.7..v6.8 (Dave Airlie) [RHEL-24102]
  - redhat/configs: add new configs from drm backport (Dave Airlie) [RHEL-24102]
  - Partial revert: "file: convert to SLAB_TYPESAFE_BY_RCU" for i915 (Dave Airlie) [RHEL-24102]
  - Revert "drm/ttm: dynamically allocate the drm-ttm_pool shrinker" (Dave Airlie) [RHEL-24102]
  - Revert "drm/i915: dynamically allocate the i915_gem_mm shrinker" (Dave Airlie) [RHEL-24102]
  - Merge DRM changes from upstream v6.6..v6.7 (Dave Airlie) [RHEL-24102]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-466.el9]
changelog:
  - cpu/hotplug: Don't offline the last non-isolated CPU (David Arcari) [RHEL-38274] {CVE-2023-52831}
  - cpu/hotplug: Prevent self deadlock on CPU hot-unplug (David Arcari) [RHEL-38274] {CVE-2023-52831}
  - efi: fix panic in kdump kernel (Steve Best) [RHEL-36998] {CVE-2024-35800}
  - mm/secretmem: fix GUP-fast succeeding on secretmem folios (Waiman Long) [RHEL-37271 RHEL-37272] {CVE-2024-35872}
  - secretmem: convert page_is_secretmem() to folio_is_secretmem() (Waiman Long) [RHEL-37271 RHEL-37272] {CVE-2024-35872}
  - NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking (Scott Mayhew) [RHEL-24133]
  - mtd: mtdpart: Don't create platform device that'll never probe (Rupinderjit Singh) [RHEL-22420]
  - mtd: call of_platform_populate() for MTD partitions (Rupinderjit Singh) [RHEL-22420]
  - bus: imx-weim: make symbol 'weim_of_notifier' static (Rupinderjit Singh) [RHEL-22420]
  - treewide: Fix probing of devices in DT overlays (Rupinderjit Singh) [RHEL-22420]
  - bus: imx-weim: add DT overlay support for WEIM bus (Rupinderjit Singh) [RHEL-22420]
  - of: property: fw_devlink: Fix stupid bug in remote-endpoint parsing (Rupinderjit Singh) [RHEL-22420]
  - of: property: Improve finding the supplier of a remote-endpoint property (Rupinderjit Singh) [RHEL-22420]
  - soc: renesas: Move away from using OF_POPULATED for fw_devlink (Rupinderjit Singh) [RHEL-22420]
  - driver core: Fix device_link_flag_is_sync_state_only() (Rupinderjit Singh) [RHEL-22420]
  - driver core: fw_devlink: Improve logs for cycle detection (Rupinderjit Singh) [RHEL-22420]
  - driver core: fw_devlink: Improve detection of overlapping cycles (Rupinderjit Singh) [RHEL-22420]
  - of: property: Simplify of_link_to_phandle() (Rupinderjit Singh) [RHEL-22420]
  - platform/mellanox: nvsw-sn2201: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/mellanox: mlxreg-lc: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/mellanox: mlxreg-io: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform: mellanox: mlxreg-hotplug: Extend condition for notification callback processing (Mark Langsdorf) [RHEL-33550]
  - platform/mellanox: mlxreg-lc: Make error handling flow consistent (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Handle events during suspend after resume completion (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_uart: properly fix race condition (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: Separate host command and irq disable (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: fix compilation warning (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_proto: Mark outdata as const (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_typec_vdm: Mark port_amode_ops const (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Use dev_err_probe() more (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Use semi-colons instead of commas (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Add Displayport Alternatemode 2.1 Support (Mark Langsdorf) [RHEL-33550]
  - platform/chrome/wilco_ec: telemetry: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome/wilco_ec: debugfs: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome/wilco_ec: core: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_usbpd_notify: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_usbpd_logger: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_vbc: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_sysfs: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lightbar: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_debugfs: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_chardev: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: wilco_ec: Annotate struct ec_event_queue with __counted_by (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Configure Retimer cable type (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: chromeos_acpi: print hex string for ACPI_TYPE_BUFFER (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: chromeos_acpi: support official HID GOOG0016 (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: Remove EC panic shutdown timeout (Mark Langsdorf) [RHEL-33550]
  - platform: Explicitly include correct DT includes (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_spi: Use %*ph for printing hexdump of a small buffer (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: Move host command to prepare/complete (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Report EC panic as uevent (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: wilco_ec: remove return value check of debugfs_create_dir() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_debugfs: fix kernel-doc warning (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Separate logic for getting panic info (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: remove unneeded label and if-condition (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (Mark Langsdorf) [RHEL-33550]
  - platform/olpc: olpc-xo175-ec: Use SPI device ID data to bind device (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Fix spelling mistake (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_typec_vdm: Add Attention support (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_typec_vdm: Fix VDO copy (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_uart: fix negative type promoted to high (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Use per-device lockdep key (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: fix kernel-doc warnings for panic notifier (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: initialize the buf variable (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Fix panic notifier registration (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_typec_vdm: Add VDM send support (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_typec_vdm: Add VDM reply support (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Add initial VDM support (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Alter module name with hyphens (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Move structs to header (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Update port DP VDO (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Set port alt mode drvdata (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Stash port driver info (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Shutdown on EC Panic (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Poll EC log on EC panic (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_uart: fix race condition (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_uart: Add DT enumeration support (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_uart: Add transport layer (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: use sysfs_emit_at() instead of scnprintf() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: use sysfs_emit() instead of scnprintf() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Set parent of partner PD object (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Convert to i2c's .probe_new() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: Force synchronous probe (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: Mark PROBE_PREFER_ASYNCHRONOUS (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lightbar: Set PROBE_PREFER_ASYNCHRONOUS (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_spi: Set PROBE_PREFER_ASYNCHRONOUS (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: Move mec_init to device probe (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: Use kstrtobool() instead of strtobool() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc_mec: remove cros_ec_lpc_mec_destroy() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: add a driver for HPS (Mark Langsdorf) [RHEL-33550]
  - redhat/configs: enable HPS driver as a module (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Notify the PM of wake events during resume (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Register partner PDOs (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Correct alt mode index (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Expose suspend_timeout_ms in debugfs (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: fix double-free in chromeos_laptop_prepare() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: fix memory corruption in ioctl (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: fix kernel-doc warning for suspend_timeout_ms (Mark Langsdorf) [RHEL-33550]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-467.el9]
changelog:
  - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26588] {CVE-2023-52463}
  - keys: Fix overwrite of key expiration on instantiation (David Howells) [RHEL-39708] {CVE-2024-36031}
  - cpufreq: intel_pstate: Fix unchecked HWP MSR access (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: fix struct cpudata::epp_cached kernel-doc (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: hide unused intel_pstate_cpu_oob_ids[] (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Update the maximum CPU frequency consistently (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Replace three global.turbo_disabled checks (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Use __ro_after_init for three variables (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Wait for canceled delayed work to complete (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Simplify spinlock locking (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (David Arcari) [RHEL-39731]
  - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37281] {CVE-2024-35925}
  - block: fix module reference leakage from bdev_open_by_dev error path (Ming Lei) [RHEL-37000] {CVE-2024-35859}
  - net/mlx4_core: replace deprecated strncpy with strscpy (Benjamin Poirier) [RHEL-24474]
  - IB/mlx4: Fix the size of a buffer in add_port_entries() (Benjamin Poirier) [RHEL-24474]
  - mlx4: Delete custom device management logic (Benjamin Poirier) [RHEL-24474]
  - mlx4: Connect the infiniband part to the auxiliary bus (Benjamin Poirier) [RHEL-24474]
  - mlx4: Connect the ethernet part to the auxiliary bus (Benjamin Poirier) [RHEL-24474]
  - mlx4: Register mlx4 devices to an auxiliary virtual bus (Benjamin Poirier) [RHEL-24474]
  - mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (Benjamin Poirier) [RHEL-24474]
  - mlx4: Move the bond work to the core driver (Benjamin Poirier) [RHEL-24474]
  - mlx4: Get rid of the mlx4_interface.activate callback (Benjamin Poirier) [RHEL-24474]
  - mlx4: Replace the mlx4_interface.event callback with a notifier (Benjamin Poirier) [RHEL-24474]
  - mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (Benjamin Poirier) [RHEL-24474]
  - mlx4: Rename member mlx4_en_dev.nb to netdev_nb (Benjamin Poirier) [RHEL-24474]
  - mlx4: Get rid of the mlx4_interface.get_dev callback (Benjamin Poirier) [RHEL-24474]
  - RDMA/mlx4: Copy union directly (Benjamin Poirier) [RHEL-24474]
  - net/mlx4: Remove many unnecessary NULL values (Benjamin Poirier) [RHEL-24474]
  - RDMA/mlx: Remove unnecessary variable initializations (Benjamin Poirier) [RHEL-24474]
  - net/mlx4: clean up a type issue (Benjamin Poirier) [RHEL-24474]
  - RDMA/mlx4: Make check for invalid flags stricter (Benjamin Poirier) [RHEL-24474]
  - net/mlx4: Use bitmap_weight_and() (Benjamin Poirier) [RHEL-24474]
  - RDMA/mlx: Calling qp event handler in workqueue context (Benjamin Poirier) [RHEL-24474]
  - sched/topology: Optimize topology_span_sane() (Phil Auld) [RHEL-39277]
  - cpumask: Add for_each_cpu_from() (Phil Auld) [RHEL-39277]
  - mm/slub, kunit: Use inverted data to corrupt kmem cache (Nico Pache) [RHEL-38018]
  - drop_monitor: replace spin_lock by raw_spin_lock (Wander Lairson Costa) [RHEL-1016]
  - redhat/configs: Add CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - KVM: x86: Add BHI_NO (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28203 RHEL-28209]
  - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28203 RHEL-28209]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-468.el9]
changelog:
  - qede: fix firmware halt over suspend and resume (John Meneghini) [RHEL-14143]
  - mm/vmalloc: eliminated the lock contention from twice to once (Aristeu Rozanski) [RHEL-28501]
  - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33111] {CVE-2024-26840}
  - redhat: include resolve_btfids in kernel-devel (Viktor Malik) [RHEL-40707]
  - nvme: fix namespace removal list (Maurizio Lombardi) [RHEL-40472]
  - nvme: use srcu for iterating namespace list (Maurizio Lombardi) [RHEL-40472]
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39837] {CVE-2024-36904}
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Guillaume Nault) [RHEL-39845] {CVE-2024-36902}
  - rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (Davide Caratti) [RHEL-36874] {CVE-2024-27414}
  - net: dev_addr_lists: move locking out of init/exit in kunit (Hangbin Liu) [RHEL-21442]
  - net: annotate writes on dev->mtu from ndo_change_mtu() (Ivan Vecera) [RHEL-39583]
  - geneve: fix header validation in geneve[6]_xmit_skb (Antoine Tenart) [RHEL-37386] {CVE-2024-35973}
  - icmp: prevent possible NULL dereferences from icmp_build_probe() (Antoine Tenart) [RHEL-37002] {CVE-2024-35857}
  - netdevsim: add selftest for forwarding skb between connected ports (Petr Oros) [RHEL-38987]
  - netdevsim: add ndo_get_iflink() implementation (Petr Oros) [RHEL-38987]
  - netdevsim: forward skbs from one connected port to another (Petr Oros) [RHEL-38987]
  - netdevsim: allow two netdevsim ports to be connected (Petr Oros) [RHEL-38987]
  - selftests: net: Correct couple of spelling mistakes (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: be less selective for FW for the devlink test (Petr Oros) [RHEL-38987]
  - net: netdevsim: constify the struct device_type usage (Petr Oros) [RHEL-38987]
  - netdevsim: make nsim_bus const (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: stop using ifconfig (Petr Oros) [RHEL-38987]
  - netdevsim: avoid potential loop in nsim_dev_trap_report_work() (Petr Oros) [RHEL-38987]
  - netdevsim: add Makefile for selftests (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: fix the udp_tunnel_nic test (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: correct expected FEC strings (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: sprinkle more udevadm settle (Petr Oros) [RHEL-38987]
  - netdevsim: Don't accept device bound programs (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: use suitable existing dummy file for flash test (Petr Oros) [RHEL-38987]
  - netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() (Petr Oros) [RHEL-38987]
  - xdp: reflect tail increase for MEM_TYPE_XSK_BUFF_POOL (Petr Oros) [RHEL-38863]
  - ice: update xdp_rxq_info::frag_size for ZC enabled Rx queue (Petr Oros) [RHEL-38863]
  - intel: xsk: initialize skb_frag_t::bv_offset in ZC drivers (Petr Oros) [RHEL-38863]
  - ice: remove redundant xdp_rxq_info registration (Petr Oros) [RHEL-38863]
  - ice: work on pre-XDP prog frag count (Petr Oros) [RHEL-38863]
  - xsk: fix usage of multi-buffer BPF helpers for ZC XDP (Petr Oros) [RHEL-38863]
  - xsk: make xsk_buff_pool responsible for clearing xdp_buff::flags (Petr Oros) [RHEL-38863]
  - xsk: recycle buffer in case Rx queue was full (Petr Oros) [RHEL-38863]
  - net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (Kamal Heib) [RHEL-34192] {CVE-2024-26858}
  - netlabel: fix RCU annotation for IPv4 options on socket creation (Davide Caratti) [RHEL-31390]
  - net: fix sk_memory_allocated_{add|sub} vs softirqs (Paolo Abeni) [RHEL-34070]
  - tcp: sk_forced_mem_schedule() optimization (Paolo Abeni) [RHEL-34070]
  - net: make SK_MEMORY_PCPU_RESERV tunable (Paolo Abeni) [RHEL-34070]
  - rcu: Restrict access to RCU CPU stall notifiers (Waiman Long) [RHEL-34076]
  - rcu: Add RCU CPU stall notifier (Waiman Long) [RHEL-34076]
  - rcu/exp: Handle RCU expedited grace period kworker allocation failure (Waiman Long) [RHEL-34076]
  - rcu/exp: Fix RCU expedited parallel grace period kworker allocation failure recovery (Waiman Long) [RHEL-34076]
  - rcu: Break rcu_node_0 --> &rq->__lock order (Waiman Long) [RHEL-34076]
  - rcu/tree: Defer setting of jiffies during stall reset (Waiman Long) [RHEL-34076]
  - rcutorture: Add test of RCU CPU stall notifiers (Waiman Long) [RHEL-34076]
  - rcu: Eliminate check_cpu_stall() duplicate code (Waiman Long) [RHEL-34076]
  - rcu: Don't redump the stalled CPU where RCU GP kthread last ran (Waiman Long) [RHEL-34076]
  - rcu: Delete a redundant check in rcu_check_gp_kthread_starvation() (Waiman Long) [RHEL-34076]
  - rcu-tasks: Make rcu_tasks_lazy_ms static (Waiman Long) [RHEL-34076]
  - rcu-tasks: Pull sampling of ->percpu_dequeue_lim out of loop (Waiman Long) [RHEL-34076]
  - rcu-tasks: Add printk()s to localize boot-time self-test hang (Waiman Long) [RHEL-34076]
  - refscale: Print out additional module parameters (Waiman Long) [RHEL-34076]
  - refscale: Fix misplaced data re-read (Waiman Long) [RHEL-34076]
  - srcu: Only accelerate on enqueue time (Waiman Long) [RHEL-34076]
  - srcu: Fix callbacks acceleration mishandling (Waiman Long) [RHEL-34076]
  - rcu: Conditionally build CPU-hotplug teardown callbacks (Waiman Long) [RHEL-34076]
  - rcu: Assume rcu_report_dead() is always called locally (Waiman Long) [RHEL-34076]
  - rcu: Assume IRQS disabled from rcu_report_dead() (Waiman Long) [RHEL-34076]
  - rcu: Use rcu_segcblist_segempty() instead of open coding it (Waiman Long) [RHEL-34076]
  - rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects (Waiman Long) [RHEL-34076]
  - srcu: Fix srcu_struct node grpmask overflow on 64-bit systems (Waiman Long) [RHEL-34076]
  - rcu: Eliminate rcu_gp_slow_unregister() false positive (Waiman Long) [RHEL-34076]
  - rcu: Dump memory object info if callback function is invalid (Waiman Long) [RHEL-34076]
  - rcu: Add sysfs to provide throttled access to rcu_barrier() (Waiman Long) [RHEL-34076]
  - rcu/tree: Remove superfluous return from void call_rcu* functions (Waiman Long) [RHEL-34076]
  - srcu: Fix error handling in init_srcu_struct_fields() (Waiman Long) [RHEL-34076]
  - rcutorture: Traverse possible cpu to set maxcpu in rcu_nocb_toggle() (Waiman Long) [RHEL-34076]
  - rcutorture: Replace schedule_timeout*() 1-jiffy waits with HZ/20 (Waiman Long) [RHEL-34076]
  - torture: Move rcutorture_sched_setaffinity() out of rcutorture (Waiman Long) [RHEL-34076]
  - rcu: Include torture_sched_setaffinity() declaration (Waiman Long) [RHEL-34076]
  - rcutorture: Stop right-shifting torture_random() return values (Waiman Long) [RHEL-34076]
  - rcutorture: Dump grace-period state upon rtort_pipe_count incidents (Waiman Long) [RHEL-34076]
  - refscale: Add a "jiffies" test (Waiman Long) [RHEL-34076]
  - rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() (Waiman Long) [RHEL-34076]
  - rcuscale: fix building with RCU_TINY (Waiman Long) [RHEL-34076]
  - rcuscale: Add RCU Tasks Rude testing (Waiman Long) [RHEL-34076]
  - rcuscale: Measure RCU Tasks Trace grace-period kthread CPU time (Waiman Long) [RHEL-34076]
  - rcuscale: Measure grace-period kthread CPU time (Waiman Long) [RHEL-34076]
  - rcuscale: Print out full set of kfree_rcu parameters (Waiman Long) [RHEL-34076]
  - rcuscale: Print out full set of module parameters (Waiman Long) [RHEL-34076]
  - rcuscale: Add minruntime module parameter (Waiman Long) [RHEL-34076]
  - rcuscale: Fix gp_async_max typo: s/reader/writer/ (Waiman Long) [RHEL-34076]
  - rcuscale: Permit blocking delays between writers (Waiman Long) [RHEL-34076]
  - rcu-tasks: Fix boot-time RCU tasks debug-only deadlock (Waiman Long) [RHEL-34076]
  - rcu-tasks: Permit use of debug-objects with RCU Tasks flavors (Waiman Long) [RHEL-34076]
  - rcu-tasks: Cancel callback laziness if too many callbacks (Waiman Long) [RHEL-34076]
  - rcu-tasks: Add kernel boot parameters for callback laziness (Waiman Long) [RHEL-34076]
  - rcu-tasks: Remove redundant #ifdef CONFIG_TASKS_RCU (Waiman Long) [RHEL-34076]
  - rcu-tasks: Treat only synchronous grace periods urgently (Waiman Long) [RHEL-34076]
  - rcu: Make the rcu_nocb_poll boot parameter usable via boot config (Waiman Long) [RHEL-34076]
  - rcu: Mark __rcu_irq_enter_check_tick() ->rcu_urgent_qs load (Waiman Long) [RHEL-34076]
  - rcu: Clarify rcu_is_watching() kernel-doc comment (Waiman Long) [RHEL-34076]
  - rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale (Waiman Long) [RHEL-34076]
  - rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup() (Waiman Long) [RHEL-34076]
  - rcu-tasks: Clarify the cblist_init_generic() function's pr_info() output (Waiman Long) [RHEL-34076]
  - rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() (Waiman Long) [RHEL-34076]
  - rcu/nocb: Make shrinker iterate only over NOCB CPUs (Waiman Long) [RHEL-34076]
  - rcu/nocb: Recheck lazy callbacks under the ->nocb_lock from shrinker (Waiman Long) [RHEL-34076]
  - rcu/nocb: Fix shrinker race against callback enqueuer (Waiman Long) [RHEL-34076]
  - rcu/nocb: Protect lazy shrinker against concurrent (de-)offloading (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Make drain_page_cache() take early return if cache is disabled (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Make fill page cache start from krcp->nr_bkv_objs (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Do not run a page work if a cache is disabled (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Use consistent krcp when growing kfree_rcu() page cache (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Invoke debug_rcu_bhead_unqueue() after checking bnode->gp_snap (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Add debug check for GP complete for kfree_rcu_cpu list (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Add debug to check grace periods (Waiman Long) [RHEL-34076]
  - rcu-tasks: Stop rcu_tasks_invoke_cbs() from using never-onlined CPUs (Waiman Long) [RHEL-34076]
  - rcu: Make rcu_cpu_starting() rely on interrupts being disabled (Waiman Long) [RHEL-34076]
  - rcu: Mark rcu_cpu_kthread() accesses to ->rcu_cpu_has_work (Waiman Long) [RHEL-34076]
  - rcu: Mark additional concurrent load from ->cpu_no_qs.b.exp (Waiman Long) [RHEL-34076]
  - rcu: Employ jiffies-based backstop to callback time limit (Waiman Long) [RHEL-34076]
  - rcu: Check callback-invocation time limit for rcuc kthreads (Waiman Long) [RHEL-34076]
  - rcutorture: Verify NUM_ACTIVE_RCU_POLL_OLDSTATE (Waiman Long) [RHEL-34076]
  - rcutorture: Verify NUM_ACTIVE_RCU_POLL_FULL_OLDSTATE (Waiman Long) [RHEL-34076]
  - rcu-tasks: Make grace-period-age message human-readable (Waiman Long) [RHEL-34076]
  - rcu: Synchronize ->qsmaskinitnext in rcu_boost_kthread_setaffinity() (Waiman Long) [RHEL-34076]
  - rcu/nocb: Add CPU number to CPU-{,de}offload failure messages (Waiman Long) [RHEL-34076]
  - rcutorture: Fix ksoftirqd boosting timing and iteration (Waiman Long) [RHEL-34076]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-469.el9]
changelog:
  - arm64: mm: Make hibernation aware of KFENCE (Maxim Levitsky) [RHEL-7225]
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38200] {CVE-2023-52809}
  - pinctrl: core: delete incorrect free in pinctrl_enable() (David Arcari) [RHEL-39758] {CVE-2024-36940}
  - x86/coco: Require seeding RNG with RDRAND on CoCo systems (Lenny Szubowicz) [RHEL-37269] {CVE-2024-35875}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34969] {CVE-2024-26961}
  - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37721] {CVE-2021-47385}
  - redhat/configs: add CONFIG_CSD_LOCK_WAIT_DEBUG_DEFAULT (Leonardo Bras) [RHEL-13876]
  - trace,smp: Add tracepoints for scheduling remotelly called functions (Leonardo Bras) [RHEL-13876]
  - trace,smp: Add tracepoints around remotelly called functions (Leonardo Bras) [RHEL-13876]
  - trace,smp: Trace all smp_function_call*() invocations (Leonardo Bras) [RHEL-13876]
  - locking/csd_lock: Remove added data from CSD lock debugging (Leonardo Bras) [RHEL-13876]
  - trace,smp: Add tracepoints for scheduling remotelly called functions (Leonardo Bras) [RHEL-13876]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-4
changelog:
  - Update spec file to use %verify(not md5 size mode mtime) for files updated in %post scriptlets
    Resolves: RHEL-475


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Laszlo Ersek <lersek@redhat.com> - 1:1.46.1-2
changelog:
  - Add detection support for Rocky Linux
    resolves: rhbz#2030709
  - Resolve conflict between manual and libvirt-assigned PCI addresses
    resolves: rhbz#2034160


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-2
changelog:
  - Rebase to new stable branch version 1.48.4
    resolves: rhbz#2059285
  - Disable 5-level page tables when using -cpu max
    resolves: rhbz#2084568
  - SELinux relabelling should not stop on ext4 immutable bits
    resolves: rhbz#1794518
  - Ignore "iface" in add-drive variants
    resolves: rhbz#1844341
  - Lift protocol limit on guestfs_readdir()
    resolves: rhbz#1674392
  - Check return values from librpm calls (2089623)
  - Document limitations of encrypted RBD disks
    resolves: rhbz#2033247
  - Fix lvm-set-filter failed in guestfish with the latest lvm2 package
    resolves: rhbz#1965941
  - Enable PHP bindings
    resolves: rhbz#2097718
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2101281
  - Add clevis-luks to BRs, required for Clevis & Tang
    related: rhbz#1809453
  - Add zstd support to guestfs_file_architecture
    resolves: rhbz#2117004


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-4
changelog:
  - New API: guestfs_inspect_get_build_id
  - Add support for detecting Windows >= 10, returned through osinfo
    resolves: rhbz#2012658


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-4
changelog:
  - Rebase libguestfs to 1.50.1
    resolves: rhbz#2168625
  - Use q35 machine type for libguestfs appliance
    resolves: rhbz#2168578
  - Run SELinux relabelling in parallel [for virt-v2v]
    resolves: rhbz#2190276


author: Laszlo Ersek <lersek@redhat.com> - 1:1.50.1-5
changelog:
  - let "guestfish -i" recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable quickcheck; we now use "-cpu max" (upstream 30f74f38bd6e)
    resolves: rhbz#2209279


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Michel Normand <normand@linux.vnet.ibm.com> 1.1.0-5
changelog:
  - Add remove_2_backslashes_in_shell_call.patch
    Add remove_eng_inc_in_version_pl.patch
    to avoid f33 build failure


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-6
changelog:
  - tests: Use DO_TEST_CAPS_*_ABI_UPDATE() for ppc64 (rhbz#2196178)
  - tests: Switch to firmware autoselection for hvf (rhbz#2196178)
  - tests: Use virt-4.0 machine type for aarch64 (rhbz#2196178)
  - tests: Consistently use /path/to/guest_VARS.fd (rhbz#2196178)
  - tests: Turn abi-update.xml into a symlink (rhbz#2196178)
  - tests: Rename firmware-auto-efi-nvram-path (rhbz#2196178)
  - qemu: Fix return value for qemuFirmwareFillDomainLegacy() (rhbz#2196178)
  - qemu: Fix lookup against stateless/combined pflash (rhbz#2196178)
  - tests: Add some more DO_TEST*ABI_UPDATE* macros (rhbz#2196178)
  - tests: Add more tests for firmware selection (rhbz#2196178)
  - tests: Update firmware descriptor files (rhbz#2196178)
  - tests: Drop tags from BIOS firmware descriptor (rhbz#2196178)
  - tests: Include microvm in firmwaretest (rhbz#2196178)
  - qemu: Don't overwrite NVRAM template for legacy firmware (rhbz#2196178)
  - qemu: Generate NVRAM path in more cases (rhbz#2196178)
  - qemu: Filter firmware based on loader.readonly (rhbz#2196178)
  - qemu: Match NVRAM template extension for new domains (rhbz#2196178)
  - conf: Don't default to raw format for loader/NVRAM (rhbz#2196178)
  - tests: Rename firmware-auto-efi-format-loader-qcow2-nvram-path (rhbz#2196178)
  - tests: Reintroduce firmware-auto-efi-format-mismatch (rhbz#2196178)
  - rpm: Reorder scriptlets (rhbz#2210058)
  - rpm: Reduce use of with_modular_daemons (rhbz#2210058)
  - rpm: Remove custom libvirtd restart logic (rhbz#2210058)
  - rpm: Introduce new macros for handling of systemd units (rhbz#2210058)
  - rpm: Switch to new macros for handling of systemd units (rhbz#2210058)
  - rpm: Delete unused macros (rhbz#2210058)


author: Jiri Denemark <jdenemar@redhat.com> - 9.9.0-1
changelog:
  - Rebased to libvirt-9.9.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-7525, rhbz#RHEL-7570, rhbz#RHEL-7542, rhbz#RHEL-7568, rhbz#RHEL-7545
      rhbz#RHEL-3231, rhbz#RHEL-7382, rhbz#RHEL-7345, rhbz#RHEL-1717, rhbz#RHEL-7528
      rhbz#RHEL-1833, rhbz#RHEL-7569, rhbz#RHEL-4432, rhbz#RHEL-974, rhbz#RHEL-4994
      rhbz#RHEL-7419


author: Jiri Denemark <jdenemar@redhat.com> - 9.10.0-1
changelog:
  - Rebased to libvirt-9.10.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-16878, rhbz#RHEL-14611, rhbz#RHEL-7384, rhbz#RHEL-16870, rhbz#RHEL-18439
      rhbz#RHEL-16751, rhbz#RHEL-4452, rhbz#RHEL-17841, rhbz#RHEL-15288, rhbz#RHEL-7040


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-1
changelog:
  - Rebased to libvirt-10.0.0 (RHEL-15267)
  - The rebase also fixes the following bugs:
      RHEL-18782, RHEL-735, RHEL-18165, RHEL-4607, RHEL-700
      RHEL-7100, RHEL-15480, RHEL-7416, RHEL-20609, RHEL-7570
      RHEL-20444, RHEL-17596, RHEL-7569


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-2
changelog:
  - tests: Add hostcpudata for machine with CPU clusters (RHEL-7043)
  - conf: Report CPU clusters in capabilities XML (RHEL-7043)
  - conf: Allow specifying CPU clusters (RHEL-7043)
  - qemu: Introduce QEMU_CAPS_SMP_CLUSTERS (RHEL-7043)
  - qemu: Use CPU clusters for guests (RHEL-7043)
  - tests: Add test case for CPU clusters (RHEL-7043)
  - qemu: Make monitor aware of CPU clusters (RHEL-7043)
  - tests: Verify handling of CPU clusters in QMP data (RHEL-7043)
  - build: Make daemons depend on generated *_protocol.[ch] (RHEL-15267)
  - domain_validate: Check for domain address conflicts fully (RHEL-4452)
  - qemu_hotplug: Don't lose 'created' flag in qemuDomainChangeNet() (RHEL-22714)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-3
changelog:
  - remote_driver: Restore special behavior of remoteDomainGetBlockIoTune() (RHEL-22800)
  - conf: Introduce dynamicMemslots attribute for virtio-mem (RHEL-15316)
  - qemu_capabilities: Add QEMU_CAPS_DEVICE_VIRTIO_MEM_PCI_DYNAMIC_MEMSLOTS capability (RHEL-15316)
  - qemu_validate: Check capability for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_command: Generate cmd line for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_snapshot: fix detection if non-leaf snapshot isn't in active chain (RHEL-23212)
  - qemu_snapshot: create: refactor external snapshot detection (RHEL-22797)
  - qemu_snapshot: create: don't require disk-only flag for offline external snapshot (RHEL-22797)
  - remoteDispatchAuthPolkit: Fix lock ordering deadlock if client closes connection during auth (RHEL-20337)
  - util: virtportallocator: Add VIR_DEBUG statements for port allocations and release (RHEL-21543)
  - qemu: migration: Properly handle reservation of manually specified NBD port (RHEL-21543)
  - qemuMigrationDstStartNBDServer: Refactor cleanup (RHEL-21543)
  - virPCIVPDResourceIsValidTextValue: Adjust comment to reflect actual code (RHEL-22314)
  - util: pcivpd: Refactor virPCIVPDResourceIsValidTextValue (RHEL-22314)
  - virNodeDeviceCapVPDFormatCustom*: Escape unsanitized strings (RHEL-22314)
  - virNodeDeviceCapVPDFormat: Properly escape system-originated strings (RHEL-22314)
  - schema: nodedev: Adjust allowed characters in 'vpdFieldValueFormat' (RHEL-22314)
  - tests: Test the previously mishandled PCI VPD characters (RHEL-22314)
  - Don't overwrite error message from 'virXPathNodeSet' (RHEL-22314)
  - tests: virpcivpdtest: Remove 'testVirPCIVPDReadVPDBytes' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDReadVPDBytes' (RHEL-22314)
  - util: pcivpd: Unexport virPCIVPDParseVPDLargeResourceFields (RHEL-22314)
  - tests: virpcivpd: Remove 'testVirPCIVPDParseVPDStringResource' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDParseVPDLargeResourceString' (RHEL-22314)
  - virPCIVPDResourceGetKeywordPrefix: Fix logging (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceCustomUpsertValue (RHEL-22314)
  - conf: virNodeDeviceCapVPDParse*: Remove pointless NULL checks (RHEL-22314)
  - virpcivpdtest: testPCIVPDResourceBasic: Remove tests for uninitialized 'ro'/'rw' section (RHEL-22314)
  - util: virPCIVPDResourceUpdateKeyword: Remove impossible checks (RHEL-22314)
  - conf: node_device: Refactor 'virNodeDeviceCapVPDParseCustomFields' to fix error reporting (RHEL-22314)
  - virNodeDeviceCapVPDParseXML: Fix error reporting (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceUpdateKeyword (RHEL-22314)
  - virPCIDeviceHasVPD: Refactor "debug" messages (RHEL-22314)
  - virPCIDeviceGetVPD: Fix multiple error handling bugs (RHEL-22314)
  - virPCIDeviceGetVPD: Handle errors in callers (RHEL-22314)
  - virPCIVPDReadVPDBytes: Refactor error handling (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceString: Properly report errors (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Merge logic conditions (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Remove impossible 'default' switch case (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor processing of read data (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor return logic (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Report proper errors (RHEL-22314)
  - virPCIVPDParse: Do reasonable error reporting (RHEL-22314)
  - virt-admin: Add warning when connection to default daemon fails (RHEL-23170)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-4
changelog:
  - Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
  - qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
  - qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
  - domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-5
changelog:
  - cpu: x86: Add support for adding features to existing CPU models (RHEL-25995)
  - qemu: domain: Check arch in qemuDomainMakeCPUMigratable (RHEL-25995)
  - conf: cpu: Introduce virCPUDefListFeatures (RHEL-25995)
  - qemu: domain: Drop added features from migratable CPU (RHEL-25995)
  - Add vmx-* features to Broadwell* (RHEL-25995)
  - Add vmx-* features to Cascadelake* (RHEL-25995)
  - Add vmx-* features to Conroe (RHEL-25995)
  - Add vmx-* features to Cooperlake (RHEL-25995)
  - Add vmx-* features to core{,2}duo (RHEL-25995)
  - Add vmx-* features to Haswell* (RHEL-25995)
  - Add vmx-* features to Icelake* (RHEL-25995)
  - Add vmx-* features to IvyBridge* (RHEL-25995)
  - Add vmx-* features to kvm* (RHEL-25995)
  - Add vmx-* features to Nehalem* (RHEL-25995)
  - Add vmx-* features to Penryn (RHEL-25995)
  - Add vmx-* features to SandyBridge* (RHEL-25995)
  - Add vmx-* features to SapphireRapids (RHEL-25995)
  - Add vmx-* features to Skylake* (RHEL-25995)
  - Add vmx-* features to Snowridge (RHEL-25995)
  - Add vmx-* features to Westmere* (RHEL-25995)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-7
changelog:
  - qemu: virtiofs: do not crash if cgroups are missing
  - qemu: virtiofs: set correct label when creating the socket
  - qemu: virtiofs: error out if getting the group or user name fails
  - Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)
  - qemu: Fix migration with custom XML (RHEL-30622)


author: Jiri Denemark <jdenemar@redhat.com> - 10.3.0-1
changelog:
  - Rebased to libvirt-10.3.0 (RHEL-29642)
  - The rebase also fixes the following bugs:
      RHEL-25993, RHEL-7101, RHEL-7461, RHEL-16333, RHEL-7343
      RHEL-28808, RHEL-32880, RHEL-35879, RHEL-34112, RHEL-30373
      RHEL-23416, RHEL-23608, RHEL-26276, RHEL-22728


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-python-8.5.0 (rhbz#2060316)
  - The rebase also fixes the following bugs:
      rhbz#2092752


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Dan Horák <dan[at]danny.cz> - 2.2.0-10
changelog:
  - build with libzfcphbaapi as standalone library to avoid dependency on obsolete libhbaapi (#1922413)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Brian C. Lane <bcl@redhat.com> 34.9.16-1
changelog:
  - Makefile: Add local-srpm target to create a .src.rpm from HEAD (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix s390x support (bcl)
    Related: rhbz#2088631
  - mkksiso: Remove use of os.path.join (bcl)
    Related: rhbz#2088631
  - Makefile: Add mkksiso to coverage report (bcl)
    Related: rhbz#2088631
  - setup.py: Install mkksiso to /usr/bin (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix grub2 editing error (bcl)
    Related: rhbz#2088631
  - mkksiso: Rewrite to use xorriso features (bcl)
    Resolves: rhbz#2088631


author: Brian C. Lane <bcl@redhat.com> 34.9.17-1
changelog:
  - minimal.ks: Add include for architecture specific packages (bcl)
    Related: rhbz#2051548
  - livemedia.ks: Add include for architecture specific packages (bcl)
    Resolves: rhbz#2051548
  - tests: Add tests for mkksiso (bcl)
    Related: rhbz#2037015
  - mkksiso: Add kernel cmdline customization support (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Move kickstart to --ks KICKSTART (bcl)
    Related: rhbz#2037015
  - mkksiso: Add helper functions for kernel cmdline modifications (bcl)
    Related: rhbz#2037015
  - lorax.spec: Fix changelog order (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.18-1
changelog:
  - mkksiso: Set u+rw permission on extracted files and directories (bcl)
    Related: rhbz#2088631
  - lorax.spec: Fix changelog (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.19-1
changelog:
  - mkksiso: Optionally support 3 arguments or --ks (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Add -U to xorriso on ppc64le (bcl)
    Resolves: rhbz#2109665
  - mkksiso: Fix passing -iso-level to xorriso (bcl)
    Related: rhbz#2109665


author: Brian C. Lane <bcl@redhat.com> 34.9.20-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042057
  - templates: Update path to license files (bcl)
    Related: rhbz#2042057
  - templates: Update boot timeout to 5s (bcl)
    Related: rhbz#2042057


author: Brian C. Lane <bcl@redhat.com> 34.9.23-1
changelog:
  - rsyslog.conf: Set WorkDirectory to /var/lib/rsyslog (bcl)
    Resolves: rhbz#2158731
  - lorax.spec: fix changelog entry for 2132511 (bcl)
    Related: rhbz#2132511


author: Brian C. Lane <bcl@redhat.com> - 9.0-35
changelog:
  - Makefile: Making it easier to create releases (bcl)
    Related: rhbz#2071074
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2071074


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.31-0.1.beta
changelog:
  - New version
    Resolves: rhbz#1758783
  - Dropped no-scp, no-optimization, compile-fix, crash-fix patches (all upstreamed)
  - Dropped fgnu89-inline patch (probably not needed)


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.2
changelog:
  - Set version to 105.0.2
  - Fix wrong requires
  - Fix missing patch0002
  - Remove extra Summary
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.3
changelog:
  - Set version to 105.0.3
  - BZ#2090250 - mingw-qemu-ga-win: Add Provides: bundled() to rpm packages [rhel-9]


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


