# changelog

author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.47.4-1
changelog:
  - Fix LLDP support for interfaces attached to OVS bridges. (RHEL-1418)
  - Fix NMCI crashes on ovs_mtu and bond tests. (RHEL-30348)


author: Beniamino Galvani <bgalvani@redhat.com> 1:1.48.2-1
changelog:
  - Update to 1.48.2 release
  - Save connection timestamps when shutting down (RHEL-35539)
  - Fix regression with OpenVPN dynamic challenge (RHEL-43720)


author: Stanislas Faye <sfaye@redhat.com> 1:1.48.4-1
changelog:
  - Update to 1.48.4 release
  - Support matching a OVS system interface by MAC address (RHEL-34617)
  - When looking up the system hostname from the reverse DNS lookup of
    addresses configured on interfaces, NetworkManager now takes into
    account the content of /etc/hosts (RHEL-33435)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.48.6-1
changelog:
  - Wait until link is ready before activating for ovs-interface (RHEL-49796)
  - Fix rollback on OVS checkpoint (RHEL-31972)
  - Assert that the auto-activate list is empty on dispose (RHEL-44345)


author: Tomas Orsava <torsava@redhat.com> - 5.4.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: Jerry Snitselaar <jsnitsel@redhat.com> - 4.1.6-2
changelog:
  - Fix faulty logic in dsa_user_test_runner device clean up.
  - Adds a couple of test clean ups as well.
  Resolves: RHEL-32451


author: Al Stone <ahs3@redhat.com> - 20200925-1
changelog:
  - Update to 20200925 source tree
  - Completely revamp the old big-endian patches (maintainability was the goal).
    This results in a much larger patch set, but each patch is more clearly used
    for a specific purpose.
  - The acpinames command has been deprecated upstream; acpiexec provides 
    replacement functionality.


author: Dean Nelson <dnelson@redhat.com> - 20210604-1
changelog:
  - Update to 20210604 source tree.
  - Bring the big-endian patches up-to-date with what has been submitted
    upstream by Al Stone <ahs3@redhat.com> (not accepted currently).


author: Al Stone <ahs3@redhat.com> - 20210604-2
changelog:
  - Running 'iasl -T all' would segfault when dumping the PHAT template;
    fixed AcpiDmDumpPhat() by removing unnecessary assignments from patch
  - Borrowed a patch from upstream to fix Unicode usage in WPBTs


author: Dean Nelson <dnelson@redhat.com> - 20210604-4
changelog:
  - Add in big-endian patches for PRMT, RGRT and SVKL tables.
  - Fix big-endian related prmt.asl compiler errors.


author: Dean Nelson <dnelson@redhat.com> - 20210604-5
changelog:
  - Backport 19b11f91660b ("Add the subtable CFMWS to the CEDT table").
  - Backport d9798f5275bb ("Fix Compile issue with CEDT and add template").
  - Backport 0914618b553d ("Automated cleanup; No functional changes").
  - Backport 7021087eedb0 ("Remove a duplicate of ACPI_SIG_CEDT").
  - Add in big-endian patch for CEDT tble.


author: Sumit Bose <sbose@redhat.com> - 0.9.0-6
changelog:
  - Include the latest upstream patches with use-ldaps fixes, man page
    improvements and a new sub-command to create managed service accounts


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-102
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062824 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-103
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2071725 - Default systemd service config blocks audit watch rules in some directories [rhel-9.1.0]


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove %systemd_preun from %preun scriptlet, as it was causing troubles when removing audit
    Related: RHEL-14896


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080239)
  - backup-restore now works correctly (RHBZ #2070541)
  - add with-subid to sssd profile (RHBZ #2075192)
  - add with-gssapi to sssd profile (RHBZ #2077893)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - update translations (RHBZ #2139642)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151145)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-38
changelog:
  - bz2170287 - Autofs reports can't connect to sssd, retry for 10
    seconds when real problem is empty LDAP object
    - improve handling of ENOENT in sss setautomntent().
    - dont immediately call function when waiting.
  - Resolves: rhbz#2170287


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-50
changelog:
  - bz2179753 - deadlock while reading amd maps
    - fix return status of mount_autofs().
    - don't close lookup at umount.
    - fix deadlock in lookups.
    - dont delay expire.
    - make amd mapent search function name clear.
    - rename statemachine() to signal_handler().
    - make signal handling consistent.
    - fix incorrect print format specifiers in get_pkt().
    - eliminate last remaining state_pipe usage.
    - add function master_find_mapent_by_devid().
    - use device id to locate autofs_point when setting log priotity.
    - add command pipe handling functions.
    - switch to application wide command pipe.
    - get rid of unused field submnt_count.
    - fix mount tree startup reconnect.
    - fix unterminated read in handle_cmd_pipe_fifo_message() (Coverity).
  - Resolves: rhbz#2179753


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-51
changelog:
  - bz2210161 - autofs fails to start with combination of +auto.master and
    local direct map lookups after upgrading to 5.1.4-93.el8
    - fix memory leak in sasl_do_kinit() (Coverity).
    - fix fix mount tree startup reconnect.
  - Resolves: rhbz#2210161


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-52
changelog:
  - bz2210899 - amd map format netgoup selector function not working
    - fix use_ignore_mount_option description.
    - include addtional log info for mounts.
    - fix amd selector function matching.
    - get rid entry thid field.
    - continue expire immediately after submount check.
    - add buffer length checks to autofs mount_mount().
    - eliminate realpath from mount of submount.
    - eliminate root param from autofs mount and umount.
    - remove redundant fstat from do_mount_direct().
    - get rid of strlen call in handle_packet_missing_direct().
    - remove redundant stat call in lookup_ghost().
    - set mapent dev and ino before adding to index.
    - change to use printf functions in amd parser.
    - dont call umount_subtree_mounts() on parent at umount.
    - dont take parent source lock at mount shutdown.
    - eliminate buffer usage from handle_mounts_cleanup().
    - fix possible use after free in handle_mounts_exit().
    - make submount cleanup the same as top level mounts.
    - add soucre parameter to module functions.
    - add ioctlfd open helper.
    - make open files limit configurable.
  - Resolves: rhbz#2210899


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-53
changelog:
  - bz2215661 - The sss lookup modules handles error return incorrectly in
    some cases
    - fix some sss error return cases.
  - Resolves: rhbz#2215661


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-54
changelog:
  - bz2223236 - When looking up included maps, sometimes autofs does not
    consult all the included files in order
    - fix incorrect matching of cached wildcard key.
  - Resolves: rhbz#2223236


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-55
changelog:
  - bz2223252 - filesystems mount and expire immediately
    - fix expire retry looping.
    - correct day in changelog entry for revision 53.
  - Resolves: rhbz#2223252


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-56
changelog:
  - RHEL-13083 - autofs attempts to mount nonexistant ".hidden" filesystems
    - allow -null map in indirect maps.
  - Resolves: RHEL-13083


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-57
changelog:
  - RHEL-13084 - multi mount detection fails for share with blank+dash causing
    SEGV crash
    - fix multi-mount check.
  - Resolves: RHEL-13084


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-58
changelog:
  - RHEL-19731 - SIGSEGV using hierarchical map entries on reload with
    autofs-5.1.4-109
    - fix get parent multi-mount check in try_remount().
    - fix deadlock in remount.
  - Resolves: RHEL-19731


author: Siteshwar Vashisht <svashisht@redhat.com> - 5.1.8-9
changelog:
  - Fix a performance regression while using large number of environment variables
    Resolves: RHEL-20020


author: Yara Ahmad <yahmad@redhat.com> - 2.35.2-40
changelog:
  - Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (#2164701)


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-482.el9]
changelog:
  - i40e: fix: remove needless retries of NVM update (CKI Backport Bot) [RHEL-36692]
  - i2c: smbus: Support up to 8 SPD EEPROMs (David Arcari) [RHEL-47257]
  - net/mlx5: Add a timeout to acquire the command queue semaphore (Benjamin Poirier) [RHEL-44225] {CVE-2024-38556}
  - spi: fix null pointer dereference within spi_sync (Andrew Halaney) [RHEL-39777] {CVE-2024-36930}
  - spi: Fix null dereference on suspend (Andrew Halaney) [RHEL-38218] {CVE-2023-52749}
  - Revert "sched/fair: Make sure to try to detach at least one movable task" (Phil Auld) [RHEL-45194]
  - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37064] {CVE-2023-52683}
  - netfilter: nft_fib: allow from forward/input without iif selector (Florian Westphal) [RHEL-36316]
  - netfilter: nft_fib: reverse path filter for policy-based routing on iif (Florian Westphal) [RHEL-36316]
  - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-6118]
  - PM / devfreq: Fix buffer overflow in trans_stat_show (Mark Salter) [RHEL-29457] {CVE-2023-52614}
  - nvme: find numa distance only if controller has valid numa id (John Meneghini) [RHEL-35806]
  - HID: amd_sfh: Handle "no sensors" in PM operations (Benjamin Tissoires) [RHEL-23851]
  - HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors (Benjamin Tissoires) [RHEL-23851]
  - HID: mcp-2221: cancel delayed_work only when CONFIG_IIO is enabled (Benjamin Tissoires) [RHEL-23851]
  - HID: nintendo: Fix N64 controller being identified as mouse (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: wacom: fix confidence tests (Benjamin Tissoires) [RHEL-23851]
  - HID: wacom: Add additional tests of confidence behavior (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: fix failing tablet button tests (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: fix ruff linter complains (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: fix mypy complains (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: tablets: be stricter for some transitions (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: tablets: add a secondary barrel switch test (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: tablets: convert the primary button tests (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: tablets: add variants of states with buttons (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: tablets: define the elements of PenState (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: tablets: set initial data for tilt/twist (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: tablets: do not set invert when the eraser is used (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: tablets: move move_to function to PenDigitizer (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: tablets: move the transitions to PenState (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: tablets: remove unused class (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: base: allow for multiple skip_if_uhdev (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: vmtest.sh: allow finer control on the build steps (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: vmtest.sh: update vm2c and container (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: force using our compiled libbpf headers (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: do not manually call headers_install (Benjamin Tissoires) [RHEL-23851]
  - selftests/hid: ensure we can compile the tests on kernels pre-6.3 (Benjamin Tissoires) [RHEL-23851]
  - Input: powermate - fix use-after-free in powermate_config_complete (Benjamin Tissoires) [RHEL-23851 RHEL-28076] {CVE-2023-52475}
  - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails (Benjamin Tissoires) [RHEL-23851]
  - Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal (Benjamin Tissoires) [RHEL-23851]
  - Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID (Benjamin Tissoires) [RHEL-23851]
  - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID (Benjamin Tissoires) [RHEL-23851]
  - Input: atkbd - use ab83 as id when skipping the getid command (Benjamin Tissoires) [RHEL-23851]
  - Input: atkbd - skip ATKBD_CMD_GETID in translated mode (Benjamin Tissoires) [RHEL-23851]
  - Input: allocate keycode for Display refresh rate toggle (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Revert to await reset ACK before reading report descriptor (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-dj: allow mice to use all types of reports (Benjamin Tissoires) [RHEL-23851]
  - HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc (Benjamin Tissoires) [RHEL-23851]
  - HID: input: avoid polling stylus battery on Chromebook Pompom (Benjamin Tissoires) [RHEL-23851]
  - HID: amd_sfh: Avoid disabling the interrupt (Benjamin Tissoires) [RHEL-23851]
  - HID: amd_sfh: Update HPD sensor structure elements (Benjamin Tissoires) [RHEL-23851]
  - HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd (Benjamin Tissoires) [RHEL-23851]
  - HID: nvidia-shield: Add missing null pointer checks to LED initialization (Benjamin Tissoires) [RHEL-23851]
  - HID: nvidia-shield: Introduce thunderstrike_destroy() (Benjamin Tissoires) [RHEL-23851]
  - HID: nvidia-shield: Fix some missing function calls() in the probe error handling path (Benjamin Tissoires) [RHEL-23851]
  - HID: rmi: remove #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-23851]
  - HID: multitouch: remove #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-23851]
  - HID: usbhid: remove #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-23851]
  - HID: core: remove #ifdef CONFIG_PM from hid_driver (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid-of: fix NULL-deref on failed power up (Benjamin Tissoires) [RHEL-23851 RHEL-31600] {CVE-2024-26717}
  - HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: elan: Add ili2901 timing (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Turn missing reset ack into a warning (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[] (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: fix handling of unpopulated devices (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: elan: Add ili9882t timing (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: add more DRM dependencies (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Do panel follower work on the system_wq (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Support being a panel follower (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Suspend i2c-hid devices in remove (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Make suspend and resume into helper functions (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Rearrange probe() to power things up later (Benjamin Tissoires) [RHEL-23851]
  - HID: i2c-hid: Switch to SYSTEM_SLEEP_PM_OPS() (Benjamin Tissoires) [RHEL-23851]
  - Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table (Benjamin Tissoires) [RHEL-23851]
  - Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU (Benjamin Tissoires) [RHEL-23851]
  - Input: synaptics-rmi4 - use sysfs_emit() to instead of scnprintf() (Benjamin Tissoires) [RHEL-23851]
  - Input: mouse - use sysfs_emit[_at]() instead of scnprintf() (Benjamin Tissoires) [RHEL-23851]
  - Input: use sysfs_emit() instead of scnprintf() (Benjamin Tissoires) [RHEL-23851]
  - Input: i8042 - add nomux quirk for Acer P459-G2-M (Benjamin Tissoires) [RHEL-23851]
  - Input: psmouse - enable Synaptics InterTouch for ThinkPad L14 G1 (Benjamin Tissoires) [RHEL-23851]
  - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (Benjamin Tissoires) [RHEL-23851 RHEL-38304] {CVE-2023-52840}
  - Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport (Benjamin Tissoires) [RHEL-23851]
  - Input: leds - annotate struct input_leds with __counted_by (Benjamin Tissoires) [RHEL-23851]
  - Input: evdev - annotate struct evdev_client with __counted_by (Benjamin Tissoires) [RHEL-23851]
  - Input: synaptics-rmi4 - replace deprecated strncpy (Benjamin Tissoires) [RHEL-23851]
  - Input: Annotate struct ff_device with __counted_by (Benjamin Tissoires) [RHEL-23851]
  - HID: bpf: make bus_type const in struct hid_bpf_ops (Benjamin Tissoires) [RHEL-23851]
  - HID: Reorder fields in 'struct hid_input' (Benjamin Tissoires) [RHEL-23851]
  - HID: Add introduction about HID for non-kernel programmers (Benjamin Tissoires) [RHEL-23851]
  - HID: wacom: generic: Avoid reporting a serial of '0' to userspace (Benjamin Tissoires) [RHEL-23851]
  - HID: multitouch: Add required quirk for Synaptics 0xcddc device (Benjamin Tissoires) [RHEL-23851]
  - HID: wacom: Do not register input devices until after hid_hw_start (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: Do not flood kernel log (Benjamin Tissoires) [RHEL-23851]
  - HID: bpf: use __bpf_kfunc instead of noinline (Benjamin Tissoires) [RHEL-23851]
  - HID: bpf: actually free hdev memory after attaching a HID-BPF program (Benjamin Tissoires) [RHEL-23851]
  - HID: bpf: remove double fdget() (Benjamin Tissoires) [RHEL-23851]
  - HID: hidraw: fix a problem of memory leak in hidraw_release() (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: add support for Logitech G Pro X Superlight 2 (Benjamin Tissoires) [RHEL-23851]
  - HID: hid-steam: Fix cleanup in probe() (Benjamin Tissoires) [RHEL-23851]
  - HID: hid-steam: remove pointless error message (Benjamin Tissoires) [RHEL-23851]
  - HID: make ishtp_cl_bus_type const (Benjamin Tissoires) [RHEL-23851]
  - HID: make hid_bus_type const (Benjamin Tissoires) [RHEL-23851]
  - HID: hid-steam: Add gamepad-only mode switched to by holding options (Benjamin Tissoires) [RHEL-23851]
  - HID: hid-steam: Better handling of serial number length (Benjamin Tissoires) [RHEL-23851]
  - HID: hid-steam: Update list of identifiers from SDL (Benjamin Tissoires) [RHEL-23851]
  - HID: hid-steam: Make client_opened a counter (Benjamin Tissoires) [RHEL-23851]
  - HID: hid-steam: Clean up locking (Benjamin Tissoires) [RHEL-23851]
  - HID: hid-steam: Disable watchdog instead of using a heartbeat (Benjamin Tissoires) [RHEL-23851]
  - HID: hid-steam: Avoid overwriting smoothing parameter (Benjamin Tissoires) [RHEL-23851]
  - HID: magicmouse: fix kerneldoc for struct magicmouse_sc (Benjamin Tissoires) [RHEL-23851]
  - HID: sensor-hub: Enable hid core report processing for all devices (Benjamin Tissoires) [RHEL-23851]
  - HID: wacom: Correct behavior when processing some confidence == false touches (Benjamin Tissoires) [RHEL-23851]
  - HID: nintendo: Prevent divide-by-zero on code (Benjamin Tissoires) [RHEL-23851]
  - HID: nintendo: fix initializer element is not constant error (Benjamin Tissoires) [RHEL-23851]
  - HID: nintendo: add support for nso controllers (Benjamin Tissoires) [RHEL-23851]
  - HID: apple: Add "hfd.cn" and "WKB603" to the list of non-apple keyboards (Benjamin Tissoires) [RHEL-23851]
  - HID: lenovo: Restrict detection of patched firmware only to USB cptkbd (Benjamin Tissoires) [RHEL-23851]
  - HID: Add quirk for Labtec/ODDOR/aikeec handbrake (Benjamin Tissoires) [RHEL-23851]
  - HID: uhid: replace deprecated strncpy with strscpy (Benjamin Tissoires) [RHEL-23851]
  - HID: wacom: Remove AES power_supply after extended inactivity (Benjamin Tissoires) [RHEL-23851]
  - HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad (Benjamin Tissoires) [RHEL-23851]
  - HID: hid-asus: reset the backlight brightness level on resume (Benjamin Tissoires) [RHEL-23851]
  - HID: hid-asus: add const to read-only outgoing usb buffer (Benjamin Tissoires) [RHEL-23851]
  - Revert "HID: logitech-dj: Add support for a new lightspeed receiver iteration" (Benjamin Tissoires) [RHEL-23851]
  - HID: add ALWAYS_POLL quirk for Apple kb (Benjamin Tissoires) [RHEL-23851]
  - HID: glorious: fix Glorious Model I HID report (Benjamin Tissoires) [RHEL-23851]
  - HID: fix HID device resource race between HID core and debugging support (Benjamin Tissoires) [RHEL-23851]
  - HID: apple: add Jamesdonkey and A3R to non-apple keyboards list (Benjamin Tissoires) [RHEL-23851]
  - HID: mcp2221: Handle reads greater than 60 bytes (Benjamin Tissoires) [RHEL-23851]
  - HID: mcp2221: Don't set bus speed on every transfer (Benjamin Tissoires) [RHEL-23851]
  - HID: mcp2221: Set ACPI companion (Benjamin Tissoires) [RHEL-23851]
  - HID: mcp2221: Allow IO to start during probe (Benjamin Tissoires) [RHEL-23851]
  - HID: mcp2221: Set driver data before I2C adapter add (Benjamin Tissoires) [RHEL-23851]
  - HID: mcp2200: added driver for GPIOs of MCP2200 (Benjamin Tissoires) [RHEL-23851]
  - HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: Stop IO before calling hid_connect() (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: Drop HIDPP_QUIRK_UNIFYING (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: Drop delayed_work_cb() (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: Fix connect event race (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: Remove unused connected param from *_connect() (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: Remove connected check for non-unifying devices (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: Add hidpp_non_unifying_init() helper (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: Move hidpp_overwrite_name() to before connect check (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: Move g920_get_config() to just before hidpp_ff_init() (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: Remove wtp_get_config() call from probe() (Benjamin Tissoires) [RHEL-23851]
  - hid: lenovo: Resend all settings on reset_resume for compact keyboards (Benjamin Tissoires) [RHEL-23851]
  - HID: nintendo: cleanup LED code (Benjamin Tissoires) [RHEL-23851]
  - HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround (Benjamin Tissoires) [RHEL-23851]
  - HID: nvidia-shield: Select POWER_SUPPLY Kconfig option (Benjamin Tissoires) [RHEL-23851]
  - HID: prodikeys: Replace deprecated strncpy() with strscpy() (Benjamin Tissoires) [RHEL-23851]
  - HID: steelseries: Fix signedness bug in steelseries_headset_arctis_1_fetch_battery() (Benjamin Tissoires) [RHEL-23851]
  - hid: Remove trailing whitespace (Benjamin Tissoires) [RHEL-23851]
  - HID: apple: Add "Hailuck" to the list of non-apple keyboards (Benjamin Tissoires) [RHEL-23851]
  - HID: steelseries: arctis_1_battery_request[] should be static (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: Add support for Logitech MX Anywhere 3 mouse (Benjamin Tissoires) [RHEL-23851]
  - HID: wacom: struct name cleanup (Benjamin Tissoires) [RHEL-23851]
  - HID: wacom: remove unnecessary 'connected' variable from EKR (Benjamin Tissoires) [RHEL-23851]
  - HID: nvidia-shield: Update Thunderstrike LED instance name to use id (Benjamin Tissoires) [RHEL-23851]
  - HID: nvidia-shield: Add battery support for Thunderstrike (Benjamin Tissoires) [RHEL-23851]
  - HID: hid-google-stadiaff: add support for Stadia force feedback (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-dj: Add support for a new lightspeed receiver iteration (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: Add support for the Pro X Superlight (Benjamin Tissoires) [RHEL-23851]
  - HID: steelseries: Add support for Arctis 1 XBox (Benjamin Tissoires) [RHEL-23851]
  - HID: input: Fix Apple Magic Trackpad 1 Bluetooth disconnect (Benjamin Tissoires) [RHEL-23851]
  - HID: logitech-hidpp: Rename HID++ "internal" error constant (Benjamin Tissoires) [RHEL-23851]
  - HID: hid-wiimote-debug.c: Drop error checking for debugfs_create_file (Benjamin Tissoires) [RHEL-23851]
  - HID: sensor-hub: Allow multi-function sensor devices (Benjamin Tissoires) [RHEL-23851]
  - HID: hidraw: make hidraw_class structure const (Benjamin Tissoires) [RHEL-23851]
  - HID: roccat: make all 'class' structures const (Benjamin Tissoires) [RHEL-23851]
  - HID: cp2112: Use octal permissions (Benjamin Tissoires) [RHEL-23851]
  - HID: cp2112: Convert to DEVICE_ATTR_RW() (Benjamin Tissoires) [RHEL-23851]
  - HID: cp2112: Use sysfs_emit() to instead of scnprintf() (Benjamin Tissoires) [RHEL-23851]
  - HID: cp2112: Use BIT() in GPIO setter and getter (Benjamin Tissoires) [RHEL-23851]
  - HID: cp2112: Define all GPIO mask and use it (Benjamin Tissoires) [RHEL-23851]
  - HID: cp2112: Define maximum GPIO constant and use it (Benjamin Tissoires) [RHEL-23851]
  - HID: cp2112: Remove dead code (Benjamin Tissoires) [RHEL-23851]
  - HID: cp2112: Don't call ->to_irq() explicitly (Benjamin Tissoires) [RHEL-23851]
  - HID: cp2112: Switch to for_each_set_bit() to simplify the code (Benjamin Tissoires) [RHEL-23851]
  - HID: cp2112: Use str_write_read() and str_read_write() (Benjamin Tissoires) [RHEL-23851]
  - nfsd: fix oops when reading pool_stats before server is started (Benjamin Coddington) [RHEL-34875]
  - nfsd: don't create nfsv4recoverydir in nfsdfs when not used. (Benjamin Coddington) [RHEL-34875]
  - NFSD: grab nfsd_mutex in nfsd_nl_rpc_status_get_dumpit() (Benjamin Coddington) [RHEL-34875]
  - fs: don't call posix_acl_listxattr in generic_listxattr (Benjamin Coddington) [RHEL-34875]
  - NFSD: Fix nfsd4_encode_fattr4() crasher (Benjamin Coddington) [RHEL-34875]
  - NFSD: fix endianness issue in nfsd4_encode_fattr4 (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Fix rpcgss_context trace event acceptor field (Benjamin Coddington) [RHEL-34875]
  - NFSD: Fix nfsd_clid_class use of __string_len() macro (Benjamin Coddington) [RHEL-34875]
  - nfs: fix panic when nfs4_ff_layout_prepare_ds() fails (Benjamin Coddington) [RHEL-34875]
  - NFS: Fix an off by one in root_nfs_cat() (Benjamin Coddington) [RHEL-34875]
  - NFS: Fix nfs_netfs_issue_read() xarray locking for writeback interrupt (Benjamin Coddington) [RHEL-34875]
  - nfsd: Fix a regression in nfsd_setattr() (Benjamin Coddington) [RHEL-34875]
  - nfsd: don't call locks_release_private() twice concurrently (Benjamin Coddington) [RHEL-34875]
  - NFSD: fix LISTXATTRS returning more bytes than maxcount (Benjamin Coddington) [RHEL-34875]
  - NFSD: fix LISTXATTRS returning a short list with eof=TRUE (Benjamin Coddington) [RHEL-34875]
  - NFSD: change LISTXATTRS cookie encoding to big-endian (Benjamin Coddington) [RHEL-34875]
  - NFSD: fix nfsd4_listxattr_validate_cookie (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: fix some memleaks in gssx_dec_option_array (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: fix a memleak in gss_import_v2_context (Benjamin Coddington) [RHEL-34875]
  - NFSv4.2: fix listxattr maximum XDR buffer size (Benjamin Coddington) [RHEL-34875]
  - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Benjamin Coddington) [RHEL-34875]
  - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() (Benjamin Coddington) [RHEL-34875]
  - NFSv4: Fix a state manager thread deadlock regression (Benjamin Coddington) [RHEL-34875]
  - NFSv4: Fix a nfs4_state_manager() race (Benjamin Coddington) [RHEL-34875]
  - nfs: fix UAF on pathwalk running into umount (Benjamin Coddington) [RHEL-34875]
  - nfs: make nfs_set_verifier() safe for use in RCU pathwalk (Benjamin Coddington) [RHEL-34875]
  - nfsd: don't take fi_lock in nfsd_break_deleg_cb() (Benjamin Coddington) [RHEL-34875]
  - NFSv4.1: Assign the right value for initval and retries for rpc timeout (Benjamin Coddington) [RHEL-34875]
  - nfsd: fix RELEASE_LOCKOWNER (Benjamin Coddington) [RHEL-34875]
  - net: fill in MODULE_DESCRIPTION()s for Sun RPC (Benjamin Coddington) [RHEL-34875]
  - nfsd: rename nfsd_last_thread() to nfsd_destroy_serv() (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: discard sv_refcnt, and svc_get/svc_put (Benjamin Coddington) [RHEL-34875]
  - svc: don't hold reference for poolstats, only mutex. (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: remove printk when back channel request not found (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Implement multi-stage Read completion again (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Copy construction of svc_rqst::rq_arg to rdma_read_complete() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Add back svcxprt_rdma::sc_read_complete_q (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Add back svc_rdma_recv_ctxt::rc_pages (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Clean up comment in svc_rdma_accept() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Remove queue-shortening warnings (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Remove pointer addresses shown in dprintk() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Optimize svc_rdma_cc_init() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: De-duplicate completion ID initialization helpers (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Move the svc_rdma_cc_init() call (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Remove struct svc_rdma_read_info (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Update the synopsis of svc_rdma_read_special() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Update the synopsis of svc_rdma_read_call_chunk() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Update synopsis of svc_rdma_read_multiple_chunks() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Update synopsis of svc_rdma_copy_inline_range() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Update the synopsis of svc_rdma_read_data_item() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Update synopsis of svc_rdma_read_chunk_range() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Update synopsis of svc_rdma_build_read_chunk() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Update synopsis of svc_rdma_build_read_segment() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Move read_info::ri_pageoff into struct svc_rdma_recv_ctxt (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Move svc_rdma_read_info::ri_pageno to struct svc_rdma_recv_ctxt (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Start moving fields out of struct svc_rdma_read_info (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Move struct svc_rdma_chunk_ctxt to svc_rdma.h (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Remove the svc_rdma_chunk_ctxt::cc_rdma field (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Pass a pointer to the transport to svc_rdma_cc_release() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Explicitly pass the transport to svc_rdma_post_chunk_ctxt() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Explicitly pass the transport into Read chunk I/O paths (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Explicitly pass the transport into Write chunk I/O paths (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Acquire the svcxprt_rdma pointer from the CQ context (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Reduce size of struct svc_rdma_rw_ctxt (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Update some svcrdma DMA-related tracepoints (Benjamin Coddington) [RHEL-34875]
  - svcrdma: DMA error tracepoints should report completion IDs (Benjamin Coddington) [RHEL-34875]
  - svcrdma: SQ error tracepoints should report completion IDs (Benjamin Coddington) [RHEL-34875]
  - rpcrdma: Introduce a simple cid tracepoint class (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Add lockdep class keys for transport locks (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Clean up locking (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Add an async version of svc_rdma_write_info_free() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Add an async version of svc_rdma_send_ctxt_put() (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Add a utility workqueue to svcrdma (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Pre-allocate svc_rdma_recv_ctxt objects (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Eliminate allocation of recv_ctxt objects in backchannel (Benjamin Coddington) [RHEL-34875]
  - nfsd: remove unnecessary NULL check (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Remove RQ_SPLICE_OK (Benjamin Coddington) [RHEL-34875]
  - NFSD: Modify NFSv4 to use nfsd_read_splice_ok() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Replace RQ_SPLICE_OK in nfsd_read() (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Add a server-side API for retrieving an RPC's pseudoflavor (Benjamin Coddington) [RHEL-34875]
  - NFSD: Document lack of f_pos_lock in nfsd_readdir() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Remove nfsd_drc_gc() tracepoint (Benjamin Coddington) [RHEL-34875]
  - NFSD: Make the file_delayed_close workqueue UNBOUND (Benjamin Coddington) [RHEL-34875]
  - NFSD: use read_seqbegin() rather than read_seqbegin_or_lock() (Benjamin Coddington) [RHEL-34875]
  - nfsd: new Kconfig option for legacy client tracking (Benjamin Coddington) [RHEL-34875]
  - NFSv4.1: Use the nfs_client's rpc timeouts for backchannel (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Fixup v4.1 backchannel request timeouts (Benjamin Coddington) [RHEL-34875]
  - rpc_pipefs: Replace one label in bl_resolve_deviceid() (Benjamin Coddington) [RHEL-34875]
  - NFS: drop unused nfs_direct_req bytes_left (Benjamin Coddington) [RHEL-34875]
  - NFS: More fixes for nfs_direct_write_reschedule_io() (Benjamin Coddington) [RHEL-34875]
  - NFS: Use the correct commit info in nfs_join_page_group() (Benjamin Coddington) [RHEL-34875]
  - NFS: More O_DIRECT accounting fixes for error paths (Benjamin Coddington) [RHEL-34875]
  - NFS: Fix O_DIRECT locking issues (Benjamin Coddington) [RHEL-34875]
  - NFS: Fix error handling for O_DIRECT write scheduling (Benjamin Coddington) [RHEL-34875]
  - pNFS: Fix the pnfs block driver's calculation of layoutget size (Benjamin Coddington) [RHEL-34875]
  - nfs: print fileid in lookup tracepoints (Benjamin Coddington) [RHEL-34875]
  - nfs: rename the nfs_async_rename_done tracepoint (Benjamin Coddington) [RHEL-34875]
  - nfs: add new tracepoint at nfs4 revalidate entry point (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: fix _xprt_switch_find_current_entry logic (Benjamin Coddington) [RHEL-34875]
  - NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT (Benjamin Coddington) [RHEL-34875]
  - NFSv4.1: if referring calls are complete, trust the stateid argument (Benjamin Coddington) [RHEL-34875]
  - NFSv4: Track the number of referring calls in struct cb_process_state (Benjamin Coddington) [RHEL-34875]
  - pnfs/blocklayout: Don't add zero-length pnfs_block_dev (Benjamin Coddington) [RHEL-34875]
  - blocklayoutdriver: Fix reference leak of pnfs_device_node (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Fix a suspicious RCU usage warning (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Create a helper function for accessing the rpc_clnt's xprt_switch (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Remove unused function rpc_clnt_xprt_switch_put() (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Clean up unused variable in rpc_xprt_probe_trunked() (Benjamin Coddington) [RHEL-34875]
  - nfsd: kill stale comment about simple_fill_super() requirements (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Replace strlcpy() with strscpy() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Revert 738401a9bd1ac34ccd5723d69640a4adbb1a4bc0 (Benjamin Coddington) [RHEL-34875]
  - NFSD: Revert 6c41d9a9bd0298002805758216a9c44e38a8500d (Benjamin Coddington) [RHEL-34875]
  - nfsd: hold nfsd_mutex across entire netlink operation (Benjamin Coddington) [RHEL-34875]
  - NFSD: Fix checksum mismatches in the duplicate reply cache (Benjamin Coddington) [RHEL-34875]
  - NFSD: Fix "start of NFS reply" pointer passed to nfsd_cache_update() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Update nfsd_cache_append() to use xdr_stream (Benjamin Coddington) [RHEL-34875]
  - nfsd: fix file memleak on client_opens_release (Benjamin Coddington) [RHEL-34875]
  - nfs: Convert nfs_symlink() to use a folio (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Benjamin Coddington) [RHEL-34875]
  - NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Add an IS_ERR() check back to where it was (Benjamin Coddington) [RHEL-34875]
  - NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking (Benjamin Coddington) [RHEL-34875]
  - nfs41: drop dependency between flexfiles layout driver and NFSv3 modules (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: SOFTCONN tasks should time out when on the sending list (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Force close the socket when a hard error is reported (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Don't skip timeout checks in call_connect_status() (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: ECONNRESET might require a rebind (Benjamin Coddington) [RHEL-34875]
  - NFSv4/pnfs: Allow layoutget to return EAGAIN for softerr mounts (Benjamin Coddington) [RHEL-34875]
  - NFSv4: Add a parameter to limit the number of retries after NFS4ERR_DELAY (Benjamin Coddington) [RHEL-34875]
  - fs: add a new SB_I_NOUMASK flag (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Fix tracepoint printk format (Benjamin Coddington) [RHEL-34875]
  - svcrdma: Drop connection after an RDMA Read error (Benjamin Coddington) [RHEL-34875]
  - NFSD: clean up alloc_init_deleg() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Fix frame size warning in svc_export_parse() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Rewrite synopsis of nfsd_percpu_counters_init() (Benjamin Coddington) [RHEL-34875]
  - nfsd: Clean up errors in nfs3proc.c (Benjamin Coddington) [RHEL-34875]
  - nfsd: Clean up errors in nfs4state.c (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up errors in stats.c (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_seek() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_offset_status() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_copy_notify() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_copy() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_test_stateid() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_exchange_id() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_do_encode_secinfo() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_access() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_readdir() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_entry4() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add an nfsd4_encode_nfs_cookie4() helper (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_rdattr_error() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Rename nfsd4_encode_dirent() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_sequence() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Restructure nfsd4_encode_create_session() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_channel_attr4() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add a utility function for encoding sessionid4 objects (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_open() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_open_delegation4() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_open_none_delegation4() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_open_write_delegation4() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_open_read_delegation4() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Refactor nfsd4_encode_lock_denied() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_lock_owner4() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Remove a layering violation when encoding lock_denied (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_getdeviceinfo() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Make @gdev parameter of ->encode_getdeviceinfo a const pointer (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_layoutreturn() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_layoutcommit() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_layoutget() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Make @lgp parameter of ->encode_layoutget a const pointer (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_stateid() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_count4() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Rename nfsd4_encode_fattr() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Use a bitmask loop to encode FATTR4 results (Benjamin Coddington) [RHEL-34875]
  - NFSD: Copy FATTR4 bit number definitions from RFCs (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_xattr_support() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_sec_label() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_suppattr_exclcreat() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_layout_blksize() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_layout_types() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_fs_layout_types() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_mounted_on_fileid() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_time_modify() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_time_metadata() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_time_delta() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_time_create() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_time_access() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_space_used() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_space_total() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_space_free() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_space_avail() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_rawdev() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_owner_group() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_owner() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_numlinks() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_mode() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_maxwrite() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_maxread() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_maxname() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_maxlink() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_maxfilesize() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_fs_locations() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_files_total() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_files_free() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_files_avail() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_fileid() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_filehandle() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_acl() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_nfsace4() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_aclsupport() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_rdattr_error() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_lease_time() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_fsid() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_size() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_change() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_fh_expire_type() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_type() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4_supported_attrs() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4__false() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add nfsd4_encode_fattr4__true() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add struct nfsd4_fattr_args (Benjamin Coddington) [RHEL-34875]
  - NFSD: Clean up nfsd4_encode_setattr() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Rename nfsd4_encode_bitmap() (Benjamin Coddington) [RHEL-34875]
  - NFSD: Add simple u32, u64, and bool encoders (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Remove BUG_ON call sites (Benjamin Coddington) [RHEL-34875]
  - nfs: fix the typo of rfc number about xattr in NFSv4 (Benjamin Coddington) [RHEL-34875]
  - NFSD: add rpc_status netlink support (Benjamin Coddington) [RHEL-34875]
  - NFSD: handle GETATTR conflict with write delegation (Benjamin Coddington) [RHEL-34875]
  - NFSD: add support for CB_GETATTR callback (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: change svc_rqst::rq_flags bits to enum (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: change svc_pool::sp_flags bits to enum (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: change cache_head.flags bits to enum (Benjamin Coddington) [RHEL-34875]
  - lockd: hold a reference to nlmsvc_serv while stopping the thread. (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: integrate back-channel processing with svc_recv() (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: Clean up bc_svc_process() (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: rename and refactor svc_get_next_xprt() (Benjamin Coddington) [RHEL-34875]
  - SUNRPC: move all of xprt handling into svc_xprt_handle() (Benjamin Coddington) [RHEL-34875]
  - lockd: fix race in async lock request handling (Benjamin Coddington) [RHEL-34875]
  - lockd: don't call vfs_lock_file() for pending requests (Benjamin Coddington) [RHEL-34875]
  - lockd: introduce safe async lock op (Benjamin Coddington) [RHEL-34875]
  - Documentation: Add missing documentation for EXPORT_OP flags (Benjamin Coddington) [RHEL-34875]
  - nfsd: Don't reset the write verifier on a commit EAGAIN (Benjamin Coddington) [RHEL-34875]
  - nfsd: Handle EOPENSTALE correctly in the filecache (Benjamin Coddington) [RHEL-34875]
  - NFSD: add trace points to track server copy progress (Benjamin Coddington) [RHEL-34875]
  - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point (Benjamin Coddington) [RHEL-34875]
  - nfs: move nfs4_xattr_handlers to .rodata (Benjamin Coddington) [RHEL-34875]
  - xattr: make the xattr array itself const (Benjamin Coddington) [RHEL-34875]
  - xattr: remove unused argument (Benjamin Coddington) [RHEL-34875]
  - xattr: add listxattr helper (Benjamin Coddington) [RHEL-34875]
  - xattr: simplify listxattr helpers (Benjamin Coddington) [RHEL-34875]
  - xattr: use rbtree for simple_xattrs (Benjamin Coddington) [RHEL-34875]
  - NFS/flexfiles: Annotate struct nfs4_ff_layout_segment with __counted_by (Benjamin Coddington) [RHEL-34875]
  - nfs41: Annotate struct nfs4_file_layout_dsaddr with __counted_by (Benjamin Coddington) [RHEL-34875]
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26682] {CVE-2024-26600}
  - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Fix handling of SCMD_FAIL_IF_RECOVERING (Ewan D. Milne) [RHEL-33543]
  - scsi: sd: Unregister device if device_add_disk() failed in sd_probe() (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-33543]
  - scsi: st: Make st_sysfs_class constant (Ewan D. Milne) [RHEL-33543]
  - scsi: ch: Make ch_sysfs_class constant (Ewan D. Milne) [RHEL-33543]
  - scsi: sg: Make sg_sysfs_class constant (Ewan D. Milne) [RHEL-33543]
  - scsi: core: ata: Do no try to probe for CDL on old drives (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Simplify scsi_cdl_check_cmd() (Ewan D. Milne) [RHEL-33543]
  - scsi: sd: Handle read/write CDL timeout failures (Ewan D. Milne) [RHEL-33543]
  - scsi: block: Introduce BLK_STS_DURATION_LIMIT (Ewan D. Milne) [RHEL-33543]
  - scsi: sd: Set read/write command CDL index (Ewan D. Milne) [RHEL-33543]
  - block: uapi: Fix compilation errors using ioprio.h with C++ (Ewan D. Milne) [RHEL-33543]
  - scsi: block: Improve ioprio value validity checks (Ewan D. Milne) [RHEL-33543]
  - scsi: block: Introduce ioprio hints (Ewan D. Milne) [RHEL-33543]
  - scsi: block: ioprio: Clean up interface definition (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Allow enabling and disabling command duration limits (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Detect support for command duration limits (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Support Service Action in scsi_report_opcode() (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Support retrieving sub-pages of mode pages (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Rename and move get_scsi_ml_byte() (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Constify the struct device_type usage (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-33543]
  - scsi: sd: usb_storage: uas: Access media prior to querying device properties (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Make scsi_bus_type const (Ewan D. Milne) [RHEL-33543]
  - scsi: scsi_debug: Make pseudo_lld_bus const (Ewan D. Milne) [RHEL-33543]
  - scsi: iscsi: Make iscsi_flashnode_bus const (Ewan D. Milne) [RHEL-33543]
  - scsi: ufs: Have midlayer retry start stop errors (Ewan D. Milne) [RHEL-33543]
  - scsi: sr: Have midlayer retry get_sectorsize() errors (Ewan D. Milne) [RHEL-33543]
  - scsi: ses: Have midlayer retry scsi_execute_cmd() errors (Ewan D. Milne) [RHEL-33543]
  - scsi: sd: Have midlayer retry read_capacity_10() errors (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Have SCSI midlayer retry scsi_report_lun_scan() errors (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Have midlayer retry scsi_mode_sense() UAs (Ewan D. Milne) [RHEL-33543]
  - scsi: ch: Have midlayer retry ch_do_scsi() UAs (Ewan D. Milne) [RHEL-33543]
  - scsi: ch: Remove unit_attention (Ewan D. Milne) [RHEL-33543]
  - scsi: sd: Have midlayer retry sd_sync_cache() errors (Ewan D. Milne) [RHEL-33543]
  - scsi: spi: Have midlayer retry spi_execute() UAs (Ewan D. Milne) [RHEL-33543]
  - scsi: device_handler: rdac: Have midlayer retry send_mode_select() errors (Ewan D. Milne) [RHEL-33543]
  - scsi: device_handler: hp_sw: Have midlayer retry scsi_execute_cmd() errors (Ewan D. Milne) [RHEL-33543]
  - scsi: sd: Have midlayer retry sd_spinup_disk() errors (Ewan D. Milne) [RHEL-33543]
  - scsi: sd: Use separate buf for START_STOP in sd_spinup_disk() (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Retry INQUIRY after timeout (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Have midlayer retry scsi_probe_lun() errors (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Allow passthrough to request midlayer retries (Ewan D. Milne) [RHEL-33543]
  - scsi: sd: Fix sshdr use in sd_suspend_common() (Ewan D. Milne) [RHEL-33543]
  - scsi: sr: Fix sshdr use in sr_get_events (Ewan D. Milne) [RHEL-33543]
  - scsi: sd: Fix sshdr use in cache_type_store (Ewan D. Milne) [RHEL-33543]
  - scsi: Fix sshdr use in scsi_test_unit_ready (Ewan D. Milne) [RHEL-33543]
  - scsi: sd: Fix scsi_mode_sense caller's sshdr use (Ewan D. Milne) [RHEL-33543]
  - scsi: spi: Fix sshdr use (Ewan D. Milne) [RHEL-33543]
  - scsi: rdac: Fix sshdr use (Ewan D. Milne) [RHEL-33543]
  - scsi: rdac: Fix send_mode_select retry handling (Ewan D. Milne) [RHEL-33543]
  - scsi: hp_sw: Fix sshdr use (Ewan D. Milne) [RHEL-33543]
  - scsi: sd: Fix sshdr use in sd_spinup_disk (Ewan D. Milne) [RHEL-33543]
  - scsi: sd: Fix sshdr use in read_capacity_16 (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Safe warning about bad dev info string (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Kick the requeue list after inserting when flushing (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Add a precondition check in scsi_eh_scmd_add() (Ewan D. Milne) [RHEL-33543]
  - scsi: ch: Replace deprecated strncpy() with strscpy() (Ewan D. Milne) [RHEL-33543]
  - scsi: scsi_debug: Delete some bogus error checking (Ewan D. Milne) [RHEL-33543]
  - scsi: scsi_debug: Fix some bugs in sdebug_error_write() (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Add comment to target_destroy in scsi_host_template (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Clean up scsi_dev_queue_ready() (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Handle depopulation and restoration in progress (Ewan D. Milne) [RHEL-33543]
  - scsi: scsi_debug: Add param to control sdev's allow_restart (Ewan D. Milne) [RHEL-33543]
  - scsi: scsi_debug: Add debugfs interface to fail target reset (Ewan D. Milne) [RHEL-33543]
  - scsi: scsi_debug: Add new error injection type: Reset LUN failed (Ewan D. Milne) [RHEL-33543]
  - scsi: scsi_debug: Add new error injection type: Abort Failed (Ewan D. Milne) [RHEL-33543]
  - scsi: scsi_debug: Set command result and sense data if error is injected (Ewan D. Milne) [RHEL-33543]
  - scsi: scsi_debug: Return failed value if error is injected (Ewan D. Milne) [RHEL-33543]
  - scsi: scsi_debug: Time out command if the error is injected (Ewan D. Milne) [RHEL-33543]
  - scsi: scsi_debug: Define grammar to remove added error injection (Ewan D. Milne) [RHEL-33543]
  - scsi: scsi_debug: Add interface to manage error injection for a single device (Ewan D. Milne) [RHEL-33543]
  - scsi: scsi_debug: Create scsi_debug directory in the debugfs filesystem (Ewan D. Milne) [RHEL-33543]
  - scsi: simplify sysctl registration with register_sysctl() (Ewan D. Milne) [RHEL-33543]
  - scsi: sd: Convert SCSI errors to PR errors (Ewan D. Milne) [RHEL-33543]
  - scsi: core: Rename status_byte to sg_status_byte (Ewan D. Milne) [RHEL-33543]
  - scsi/scsi_error: Use call_rcu_hurry() instead of call_rcu() (Ewan D. Milne) [RHEL-33543]
  - scsi: st: Remove redundant variable pointer stp (Ewan D. Milne) [RHEL-33543]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-483.el9]
changelog:
  - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-45149]
  - mm/shmem: disable PMD-sized page cache if needed (Donald Dutile) [RHEL-14441]
  - mm/filemap: skip to create PMD-sized page cache if needed (Donald Dutile) [RHEL-14441]
  - mm/readahead: limit page cache size in page_cache_ra_order() (Donald Dutile) [RHEL-14441]
  - readahead: use ilog2 instead of a while loop in page_cache_ra_order() (Donald Dutile) [RHEL-14441]
  - mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (Donald Dutile) [RHEL-14441]
  - filemap: add helper mapping_max_folio_size() (Donald Dutile) [RHEL-14441]
  - filemap: Allow __filemap_get_folio to allocate large folios (Donald Dutile) [RHEL-14441]
  - filemap: Add fgf_t typedef (Donald Dutile) [RHEL-14441]
  - cpuidle: ACPI/intel: fix MWAIT hint target C-state computation (David Arcari) [RHEL-47255]
  - intel_idle: Add Meteorlake support (David Arcari) [RHEL-47255]
  - x86: Fix CPUIDLE_FLAG_IRQ_ENABLE leaking timer reprogram (David Arcari) [RHEL-47255]
  - coredump: Proactively round up to kmalloc bucket size (Audra Mitchell) [RHEL-44555]
  - efi/unaccepted: touch soft lockup during memory accept (CKI Backport Bot) [RHEL-46580] {CVE-2024-36936}
  - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22561] {CVE-2024-23848}
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: mhi: drop driver owner assignment (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: t7xx: Split 64bit accesses to fix alignment issues (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: core: make wwan_class constant (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: hwsim: make wwan_hwsim_class constant (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: t7xx: Prefer struct_size over open coded arithmetic (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: core: constify the struct device_type usage (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: t7xx: Add fastboot WWAN port (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: t7xx: Infrastructure for early port configuration (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: t7xx: Add sysfs attribute for device state machine (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - wwan: core: Add WWAN fastboot port type (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: qcom_bam_dmux: Convert to platform remove callback returning void (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: replace deprecated strncpy with strscpy (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - drivers: net: wwan: iosm: Fixed multiple typos in multiple files (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - Revert "net: wwan: iosm: enable runtime pm support for 7560" (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - drivers: net: wwan: wwan_core.c: resolved spelling mistake (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: t7xx: Add __counted_by for struct t7xx_fsm_event and use struct_size() (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - wwan: core: Use the bitmap API to allocate bitmaps (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: iosm: enable runtime pm support for 7560 (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: iosm: clean up unused struct members (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: iosm: remove unused enum definition (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - net: wwan: iosm: remove unused macro definition (Jose Ignacio Tornos Martinez) [RHEL-9429]
  - selftests: net: bridge: increase IGMP/MLD exclude timeout membership interval (Hangbin Liu) [RHEL-45825]
  - selftests: test_bridge_neigh_suppress.sh: Fix failures due to duplicate MAC (Hangbin Liu) [RHEL-45825]
  - selftests: reuseaddr_conflict: add missing new line at the end of the output (Hangbin Liu) [RHEL-45825]
  - selftests: forwarding: Fix ping failure due to short timeout (Hangbin Liu) [RHEL-45825]
  - selftests: net: more strict check in net_helper (Hangbin Liu) [RHEL-45825]
  - seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (Hangbin Liu) [RHEL-45826]
  - ipv6: prevent possible NULL dereference in rt6_probe() (Hangbin Liu) [RHEL-45826]
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Hangbin Liu) [RHEL-45826]
  - net/ipv6: Fix the RT cache flush via sysctl using a previous delay (Hangbin Liu) [RHEL-45826]
  - ipv6: fix possible race in __fib6_drop_pcpu_from() (Hangbin Liu) [RHEL-45826]
  - net/ipv6: Fix route deleting failure when metric equals 0 (Hangbin Liu) [RHEL-45826]
  - ipv6: prevent NULL dereference in ip6_output() (Hangbin Liu) [RHEL-45826]
  - net: ipv6: fix wrong start position when receive hop-by-hop fragment (Hangbin Liu) [RHEL-45826]
  - ipv6: Fix infinite recursion in fib6_dump_done(). (Hangbin Liu) [RHEL-45826]
  - ACPI: CPPC: Fix access width used for PCC registers (Mark Langsdorf) [RHEL-37532] {CVE-2024-35995}
  - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro (Mark Langsdorf) [RHEL-37532] {CVE-2024-35995}
  - ACPI: CPPC: Use access_width over bit_width for system memory accesses (Mark Langsdorf) [RHEL-37532] {CVE-2024-35995}
  - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - net: usb: ax88179_178a: Add check for usbnet_get_endpoints() (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - net: usb: ax88179_178a: stop lying about skb->truesize (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - net: usb: ax88179_178a: non necessary second random mac address (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - net: usb: ax88179_178a: avoid the interface always configured as random address (Jose Ignacio Tornos Martinez) [RHEL-45458]
  - i2c: designware: Add ACPI ID for Granite Rapids-D I2C controller (David Arcari) [RHEL-29353]
  - prinkt/nbcon: Add a scheduling point to nbcon_kthread_func(). (Derek Barbosa) [RHEL-37526]
  - rhel: add ICE_HWMON cfg (Petr Oros) [RHEL-17486]
  - ice: use proper macro for testing bit (Petr Oros) [RHEL-17486]
  - ice: Reject pin requests with unsupported flags (Petr Oros) [RHEL-17486]
  - ice: Don't process extts if PTP is disabled (Petr Oros) [RHEL-17486]
  - ice: Fix improper extts handling (Petr Oros) [RHEL-17486]
  - ice: Rebuild TC queues on VSI queue reconfiguration (Petr Oros) [RHEL-17486]
  - ice: Fix VSI list rule with ICE_SW_LKUP_LAST type (Petr Oros) [RHEL-17486]
  - ice: fix 200G link speed message log (Petr Oros) [RHEL-17486]
  - ice: avoid IRQ collision to fix init failure on ACPI S3 resume (Petr Oros) [RHEL-17486]
  - ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors() (Petr Oros) [RHEL-17486]
  - ice: add flag to distinguish reset from .ndo_bpf in XDP rings config (Petr Oros) [RHEL-17486]
  - ice: remove af_xdp_zc_qps bitmap (Petr Oros) [RHEL-17486]
  - ice: fix reads from NVM Shadow RAM on E830 and E825-C devices (Petr Oros) [RHEL-17486]
  - ice: fix iteration of TLVs in Preserved Fields Area (Petr Oros) [RHEL-17486]
  - ice: fix 200G PHY types to link speed mapping (Petr Oros) [RHEL-17486]
  - ice: fix accounting if a VLAN already exists (Petr Oros) [RHEL-17486]
  - ice: Interpret .set_channels() input differently (Petr Oros) [RHEL-17486]
  - ice: Fix package download algorithm (Petr Oros) [RHEL-17486]
  - ice: remove correct filters during eswitch release (Petr Oros) [RHEL-17486]
  - ice: refactor struct ice_vsi_cfg_params to be inside of struct ice_vsi (Petr Oros) [RHEL-17486]
  - ice: Deduplicate tc action setup (Petr Oros) [RHEL-17486]
  - ice: update E830 device ids and comments (Petr Oros) [RHEL-17486]
  - ice: add additional E830 device ids (Petr Oros) [RHEL-17486]
  - ice: ensure the copied buf is NUL terminated (Petr Oros) [RHEL-17486]
  - ice: fix LAG and VF lock dependency in ice_reset_vf() (Petr Oros) [RHEL-17486]
  - ice: Fix checking for unsupported keys on non-tunnel device (Petr Oros) [RHEL-17486]
  - ice: tc: allow zero flags in parsing tc flower (Petr Oros) [RHEL-17486]
  - ice: tc: check src_vsi in case of traffic from VF (Petr Oros) [RHEL-17486]
  - ice: store VF relative MSI-X index in q_vector->vf_reg_idx (Petr Oros) [RHEL-17486]
  - ice: set vf->num_msix in ice_initialize_vf_entry() (Petr Oros) [RHEL-17486]
  - ice: Implement 'flow-type ether' rules (Petr Oros) [RHEL-17486]
  - ice: Remove unnecessary argument from ice_fdir_comp_rules() (Petr Oros) [RHEL-17486]
  - ice: Fix freeing uninitialized pointers (Petr Oros) [RHEL-17486]
  - ice: hold devlink lock for whole init/cleanup (Petr Oros) [RHEL-17486]
  - ice: move devlink port code to a separate file (Petr Oros) [RHEL-17486]
  - ice: move ice_devlink.[ch] to devlink folder (Petr Oros) [RHEL-17486]
  - ice: Remove newlines in NL_SET_ERR_MSG_MOD (Petr Oros) [RHEL-17486]
  - ice: Add switch recipe reusing feature (Petr Oros) [RHEL-17486]
  - ice: count representor stats (Petr Oros) [RHEL-17486]
  - ice: do switchdev slow-path Rx using PF VSI (Petr Oros) [RHEL-17486]
  - ice: change repr::id values (Petr Oros) [RHEL-17486]
  - ice: remove switchdev control plane VSI (Petr Oros) [RHEL-17486]
  - ice: control default Tx rule in lag (Petr Oros) [RHEL-17486]
  - ice: default Tx rule instead of to queue (Petr Oros) [RHEL-17486]
  - ice: do Tx through PF netdev in slow-path (Petr Oros) [RHEL-17486]
  - ice: remove eswitch changing queues algorithm (Petr Oros) [RHEL-17486]
  - ice: fix memory corruption bug with suspend and rebuild (Petr Oros) [RHEL-17486]
  - ice: Refactor FW data type and fix bitmap casting issue (Petr Oros) [RHEL-17486]
  - ice: fix stats being updated by way too large values (Petr Oros) [RHEL-17486]
  - ice: fix typo in assignment (Petr Oros) [RHEL-17486]
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Petr Oros) [RHEL-17486]
  - ice: virtchnl: stop pretending to support RSS over AQ or registers (Petr Oros) [RHEL-17486]
  - ice: reconfig host after changing MSI-X on VF (Petr Oros) [RHEL-17486]
  - ice: reorder disabling IRQ and NAPI in ice_qp_dis (Petr Oros) [RHEL-17486]
  - ice: avoid unnecessary devm_ usage (Petr Oros) [RHEL-17486]
  - ice: do not disable Tx queues twice in ice_down() (Petr Oros) [RHEL-17486]
  - ice: cleanup line splitting for context set functions (Petr Oros) [RHEL-17486]
  - ice: use GENMASK instead of BIT(n) - 1 in pack functions (Petr Oros) [RHEL-17486]
  - ice: rename ice_write_* functions to ice_pack_ctx_* (Petr Oros) [RHEL-17486]
  - ice: remove vf->lan_vsi_num field (Petr Oros) [RHEL-17486]
  - ice: use relative VSI index for VFs instead of PF VSI number (Petr Oros) [RHEL-17486]
  - ice: remove unnecessary duplicate checks for VF VSI ID (Petr Oros) [RHEL-17486]
  - ice: pass VSI pointer into ice_vc_isvalid_q_id (Petr Oros) [RHEL-17486]
  - ice: Fix debugfs with devlink reload (Petr Oros) [RHEL-17486]
  - ice: Remove and readd netdev during devlink reload (Petr Oros) [RHEL-17486]
  - ice: add support for 3k signing DDP sections for E825C (Petr Oros) [RHEL-17486]
  - ice: Add helper function ice_is_generic_mac (Petr Oros) [RHEL-17486]
  - ice: introduce new E825C devices family (Petr Oros) [RHEL-17486]
  - ice: remove incorrect comment (Petr Oros) [RHEL-17486]
  - ice: Add a new counter for Rx EIPE errors (Petr Oros) [RHEL-17486]
  - ice: make ice_vsi_cfg_txq() static (Petr Oros) [RHEL-17486]
  - ice: make ice_vsi_cfg_rxq() static (Petr Oros) [RHEL-17486]
  - ice: stop destroying and reinitalizing Tx tracker during reset (Petr Oros) [RHEL-17486]
  - ice: factor out ice_ptp_rebuild_owner() (Petr Oros) [RHEL-17486]
  - ice: rename ice_ptp_tx_cfg_intr (Petr Oros) [RHEL-17486]
  - ice: don't check has_ready_bitmap in E810 functions (Petr Oros) [RHEL-17486]
  - ice: rename verify_cached to has_ready_bitmap (Petr Oros) [RHEL-17486]
  - ice: pass reset type to PTP reset functions (Petr Oros) [RHEL-17486]
  - ice: introduce PTP state machine (Petr Oros) [RHEL-17486]
  - ice: ice_base.c: Add const modifier to params and vars (Petr Oros) [RHEL-17486]
  - ice: remove rx_len_errors statistic (Petr Oros) [RHEL-17486]
  - ice: replace ice_vf_recreate_vsi() with ice_vf_reconfig_vsi() (Petr Oros) [RHEL-17486]
  - ice: Add support for packet mirroring using hardware in switchdev mode (Petr Oros) [RHEL-17486]
  - ice: Enable SW interrupt from FW for LL TS (Petr Oros) [RHEL-17486]
  - ice: Schedule service task in IRQ top half (Petr Oros) [RHEL-17486]
  - ice: cleanup inconsistent code (Petr Oros) [RHEL-17486]
  - ice: field get conversion (Petr Oros) [RHEL-17486]
  - ice: fix pre-shifted bit usage (Petr Oros) [RHEL-17486]
  - ice: field prep conversion (Petr Oros) [RHEL-17486]
  - ice: Fix PF with enabled XDP going no-carrier after reset (Petr Oros) [RHEL-17486]
  - ice: use VLAN proto from ring packet context in skb path (Petr Oros) [RHEL-17486]
  - ice: Implement VLAN tag hint (Petr Oros) [RHEL-17486]
  - ice: Support XDP hints in AF_XDP ZC mode (Petr Oros) [RHEL-17486]
  - ice: Support RX hash XDP hint (Petr Oros) [RHEL-17486]
  - ice: Support HW timestamp hint (Petr Oros) [RHEL-17486]
  - ice: Introduce ice_xdp_buff (Petr Oros) [RHEL-17486]
  - ice: Make ptype internal to descriptor info processing (Petr Oros) [RHEL-17486]
  - ice: make RX HW timestamp reading code more reusable (Petr Oros) [RHEL-17486]
  - ice: make RX hash reading code more reusable (Petr Oros) [RHEL-17486]
  - ice: add ability to read and configure FW log data (Petr Oros) [RHEL-17486]
  - ice: enable FW logging (Petr Oros) [RHEL-17486]
  - ice: configure FW logging (Petr Oros) [RHEL-17486]
  - ice: remove FW logging code (Petr Oros) [RHEL-17486]
  - iavf: enable symmetric-xor RSS for Toeplitz hash function (Petr Oros) [RHEL-17486]
  - ice: enable symmetric-xor RSS for Toeplitz hash function (Petr Oros) [RHEL-17486]
  - ice: refactor the FD and RSS flow ID generation (Petr Oros) [RHEL-17486]
  - ice: refactor RSS configuration (Petr Oros) [RHEL-17486]
  - ice: fix ICE_AQ_VSI_Q_OPT_RSS_* register values (Petr Oros) [RHEL-17486]
  - ice: Rename E822 to E82X (Petr Oros) [RHEL-17486]
  - ice: periodically kick Tx timestamp interrupt (Petr Oros) [RHEL-17486]
  - ice: Re-enable timestamping correctly after reset (Petr Oros) [RHEL-17486]
  - ice: Improve logs for max ntuple errors (Petr Oros) [RHEL-17486]
  - ice: read internal temperature sensor (Petr Oros) [RHEL-17486]
  - ice: fix error code in ice_eswitch_attach() (Petr Oros) [RHEL-17486]
  - ice: reserve number of CP queues (Petr Oros) [RHEL-17486]
  - ice: adjust switchdev rebuild path (Petr Oros) [RHEL-17486]
  - ice: add VF representors one by one (Petr Oros) [RHEL-17486]
  - ice: realloc VSI stats arrays (Petr Oros) [RHEL-17486]
  - ice: set Tx topology every time new repr is added (Petr Oros) [RHEL-17486]
  - ice: allow changing SWITCHDEV_CTRL VSI queues (Petr Oros) [RHEL-17486]
  - ice: return pointer to representor (Petr Oros) [RHEL-17486]
  - ice: make representor code generic (Petr Oros) [RHEL-17486]
  - ice: remove VF pointer reference in eswitch code (Petr Oros) [RHEL-17486]
  - ice: track port representors in xarray (Petr Oros) [RHEL-17486]
  - ice: use repr instead of vf->repr (Petr Oros) [RHEL-17486]
  - ice: track q_id in representor (Petr Oros) [RHEL-17486]
  - ice: remove unused control VSI parameter (Petr Oros) [RHEL-17486]
  - ice: remove redundant max_vsi_num variable (Petr Oros) [RHEL-17486]
  - ice: rename switchdev to eswitch (Petr Oros) [RHEL-17486]
  - ice: make use of DEFINE_FLEX() in ice_switch.c (Petr Oros) [RHEL-17486]
  - ice: make use of DEFINE_FLEX() for struct ice_aqc_dis_txq_item (Petr Oros) [RHEL-17486]
  - ice: make use of DEFINE_FLEX() for struct ice_aqc_add_tx_qgrp (Petr Oros) [RHEL-17486]
  - ice: make use of DEFINE_FLEX() in ice_ddp.c (Petr Oros) [RHEL-17486]
  - ice: drop two params of ice_aq_move_sched_elems() (Petr Oros) [RHEL-17486]
  - ice: ice_sched_remove_elems: replace 1 elem array param by u32 (Petr Oros) [RHEL-17486]
  - ice: Check CRC strip requirement for VLAN strip (Petr Oros) [RHEL-17486]
  - ice: Support FCS/CRC strip disable for VF (Petr Oros) [RHEL-17486]
  - ptp: introduce helpers to adjust by scaled parts per million (Petr Oros) [RHEL-17486]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-484.el9]
changelog:
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46919] {CVE-2024-39487}
  - phy: ti: gmii-sel: Enable SGMII mode for J784S4 (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Fix register offset when parent is not a syscon node (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Allow parent to not be syscon node (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Enable USXGMII mode for J784S4 (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Add support for CPSW9G GMII SEL in J784S4 (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Enable SGMII mode for J721E (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Enable SGMII mode for J7200 (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Add support for SGMII mode (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Add support for CPSW9G GMII SEL in J721e (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Update methods for fetching and using qsgmii main port (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: Add support for CPSW5G GMII SEL in J7200 (Andrew Halaney) [RHEL-44742]
  - phy: ti: gmii-sel: check of_get_address() for failure (Andrew Halaney) [RHEL-44742]
  - clk: keystone: syscon-clk: Fix audio refclk (Andrew Halaney) [RHEL-44742]
  - clk: keystone: syscon-clk: Add support for audio refclk (Andrew Halaney) [RHEL-44742]
  - clk: keystone: syscon-clk: Allow the clock node to not be of type syscon (Andrew Halaney) [RHEL-44742]
  - clk: keystone: syscon-clk: Use dev_err_probe() helper (Andrew Halaney) [RHEL-44742]
  - clk: keystone: syscon-clk: Add support for AM62 epwm-tbclk (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Consolidate serdes0 references (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Assign only lanes 0 and 1 to PCIe1 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-main: Add node for EHRPWMs (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am69-sk: Add PCIe support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Add overlay for PCIe0 and PCIe1 EP Mode (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Enable PCIe0 and PCIe1 in RC Mode (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-main: Add PCIe nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Add TPS62873 node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am69-sk: Add TPS62873 node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Enable USB3 support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-main: Add support for USB (Andrew Halaney) [RHEL-44742]
  - arm64: boot: dts: ti: k3-*: Add memory node to bootloader stage (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4: Add overlay for dual port USXGMII mode (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Add support for multiple CAN instances (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4: Add overlay to enable QSGMII mode with CPSW9G (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Enable Main CPSW2G node and add aliases for it (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-main: Add CPSW2G and CPSW9G nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j784s4-evm: Add alias for MCU CPSW2G (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Fix csi2-dual-imx219 dtb names (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-beagleplay: Fix Ethernet PHY RESET GPIOs (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-phyboard-lyra-rdk: Add USB-C (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2: Add main esm address range (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2-main: Enable support for SDR104 speed mode (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a: Enable UHS mode support for SD cards (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65-main: Remove unused properties in sdhci nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65-main: Fix sdhci node properties (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j722s-evm: Enable UHS support for MMCSD (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Enable overlays for the am625-phyboard-lyra (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: am64-phyboard-electra: Add overlay to enable a GPIO fan (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a-main: Add Wave5 Video Encoder/Decoder Node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am69-sk: Fix UART pin type and macro type (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62-verdin-dahlia: support sleep-moci (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62-verdin: replace sleep-moci hog with regulator (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a: Disable USB LPM (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62p: add the USB sub-system (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62/a: use sub-node for USB_PHY_CTRL registers (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62*: Add PHY2 region to USB wrapper node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Add icssg-prueth nodes for PG1 devices (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-phyboard-lyra-rdk: Add Audio Codec (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e: Use exact ranges for FSS node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Use exact ranges for FSS node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65: Use exact ranges for FSS node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65: Move SerDes mux nodes under the control node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65: Add full compatible to SerDes control nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j722s-evm: Enable eMMC support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-{am62p,j722s}: Disable ethernet by default (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am642-phyboard-electra-rdk: Increase CAN max bitrate (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-phyboard-lyra-rdk: Increase CAN max bitrate (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-verdin: add PCIe reset gpio hog (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: verdin-am62: mallow: fix GPIOs pinctrl (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2: Remove UART baud rate selection (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e: Remove UART baud rate selection (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Remove UART baud rate selection (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am64: Remove UART baud rate selection (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65: Remove UART baud rate selection (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62-lp-sk: Remove tps65219 power-button (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-beagleplay: Use mmc-pwrseq for wl18xx enable (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: verdin-am62: use SD1 CD as GPIO (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: verdin-am62: Set memory size to 2gb (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: verdin-am62: dahlia: fix audio clock (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62p5-sk: minor whitespace cleanup (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: hummingboard-t: add overlays for m.2 pci-e and usb-3 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: add description for solidrun am642 som and evaluation board (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62p: Add Wave5 Video Encoder/Decoder Node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2-main: Add Wave5 Video Encoder/Decoder Node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am69-sk: Add support for OSPI flash (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am69-sk: Enable CAN interfaces for AM69 SK board (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Enable overlays for SK-AM62P (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62p: Add nodes for CSI-RX (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62p: Add DMASS1 for CSI (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j722s-evm: Enable OSPI NOR support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j722s-evm: Enable CPSW3G RGMII1 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e: Fix mux-reg-masks in hbmc_mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Add common1 register space for AM62A SoC (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Add common1 register space for AM65x SoC (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am642-evm: add overlay for ICSSG1 2nd port (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am642-evm: add ICSSG1 Ethernet support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am64-main: Add ICSSG IEP nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am6*: Add bootph-all property in MMC node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am6*: Fix bus-width property in MMC nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am6*: Fix ti,clkbuf-sel property in MMC nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am6*: Remove DLL properties for soft PHYs (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62p: Add ITAP/OTAP values for MMC (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am64-main: Fix ITAP/OTAP values for MMC (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a7-sk: Enable eMMC support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a-main: Add sdhci2 instance (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a-main: Add sdhci0 instance (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e-sk: Add overlay for IMX219 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2-main: Add CSI2RX capture nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e-main: Add CSI2RX capture nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e-sk: Model CSI2RX connector mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am69-sk: Enable camera peripherals (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am68-sk-base-board: Enable camera peripherals (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2-common-proc-board: Enable camera peripherals (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Add reserved memory for watchdog (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Add support for TI J722S Evaluation Module (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Introduce J722S family of SoCs (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Support IOT2050-SM variant (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Annotate LED nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Factor out DP related bits (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Factor out enabling of USB3 support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Factor out arduino connector bits (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Disable R5 lockstep for all PG2 boards (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: verdin-am62: Set VDD CORE minimum voltage to 0.75V (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62-wakeup: Configure ti-sysc for wkup_uart0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: am62-phyboard-lyra: Add overlay to enable a GPIO fan (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: verdin-am62: add support for Verdin USB1 interface (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Add DT overlay for PCIe + USB3.0 SERDES personality card (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Add DT overlay for PCIe + USB2.0 SERDES personality card (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a: Make the main_conf node a simple-bus (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62: Make the main_conf node a simple-bus (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Make the FSS node a simple-bus (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2: Convert serdes_ln_ctrl node into reg-mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2: Convert usb_serdes_mux node into reg-mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e: Convert usb_serdes_mux node into reg-mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e: Convert serdes_ln_ctrl node into reg-mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Convert usb_serdes_mux node into reg-mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Convert serdes_ln_ctrl node into reg-mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am64: Convert serdes_ln_ctrl node into reg-mux (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Makefile: Clarify GPL-2.0 as GPL-2.0-only (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050*: Clarify GPL-2.0 as GPL-2.0-only (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: phycore*: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: beagle*: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-serdes: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-pinctrl: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am64: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62p: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a7: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Use https for urls (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: use ti,j7200-padconf compatible (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Makefile: Add HDMI audio check for AM62A7-SK (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a7-sk: Add HDMI support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am62a-main: Add node for Display SubSystem (DSS) (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: phycore-am64: Add ADC (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Add support for multiple CAN instances (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200-som-p0: Add support for CAN instance 0 in main domain (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Add support for CAN nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: verdin-am62: mallow: add TPM device (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am64: Remove PCIe endpoint node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am65: Remove PCIe endpoint nodes (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Remove PCIe endpoint node (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200: Enable PCIe nodes at the board level (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721s2-som-p0: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e-som-p0: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e-sk: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j721e-beagleboneai64: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-j7200-som-p0: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am69-sk: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am68-sk-som: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am654-base-board: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: iot2050: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am642-sk: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am642-evm: Do not split single items (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am642-phyboard-electra: Add TPM support (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: Disable clock output of the ethernet PHY (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-beagleplay: Use the builtin mdio bus (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-beagleplay: Add boot phase tags for USB0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am625-sk: Add boot phase tags for USB0 (Andrew Halaney) [RHEL-44742]
  - arm64: dts: ti: k3-am654-main: Add device tree entry for SGX GPU (Andrew Halaney) [RHEL-44742]
  - openvswitch: get related ct labels from its master if it is not confirmed (Xin Long) [RHEL-44560]
  - block: refine the EOF check in blkdev_iomap_begin (Ming Lei) [RHEL-43906] {CVE-2024-38604}
  - mm/userfaultfd: reset ptes when close() for wr-protected ones (Nico Pache) [RHEL-39639] {CVE-2024-36881}
  - scsi: mpi3mr: Fix printk() format strings (Ewan D. Milne) [RHEL-18205]
  - scsi: mpi3mr: Update driver version to 8.5.1.0.0 (Ewan D. Milne) [RHEL-18205]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-3 (Ewan D. Milne) [RHEL-18205]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-2 (Ewan D. Milne) [RHEL-18205]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-1 (Ewan D. Milne) [RHEL-18205]
  - x86/mce: Dynamically size space for machine check records (Aristeu Rozanski) [RHEL-24864]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-485.el9]
changelog:
  - net/mlx5e: Fix netif state handling (Benjamin Poirier) [RHEL-43870] {CVE-2024-38608}
  - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Benjamin Poirier) [RHEL-43870]
  - net: fix rc7's __skb_datagram_iter() (Paolo Abeni) [RHEL-46610]
  - net: allow skb_datagram_iter to be called from any context (Paolo Abeni) [RHEL-46610]
  - net: do not leave a dangling sk pointer, when socket creation fails (Paolo Abeni) [RHEL-46610]
  - netns: Make get_net_ns() handle zero refcount net (Paolo Abeni) [RHEL-46610]
  - net: fix out-of-bounds access in ops_init (Paolo Abeni) [RHEL-46610]
  - net: ethtool: correct MAX attribute value for stats (Davide Caratti) [RHEL-46358]
  - net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (Davide Caratti) [RHEL-46358 RHEL-47900] {CVE-2024-40928}
  - audit: use KMEM_CACHE() instead of kmem_cache_create() (Ricardo Robaina) [RHEL-35421]
  - audit: remove unnecessary assignment in audit_dupe_lsm_field() (Ricardo Robaina) [RHEL-35421]
  - audit,io_uring: io_uring openat triggers audit reference count underflow (Ricardo Robaina) [RHEL-35421]
  - audit: Annotate struct audit_chunk with __counted_by (Ricardo Robaina) [RHEL-35421]
  - putname(): IS_ERR_OR_NULL() is wrong here (Ricardo Robaina) [RHEL-35421]
  - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44237] {CVE-2024-38555}
  - efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init() (Waiman Long) [RHEL-24125]
  - fbdev/hyperv_fb: Include <linux/screen_info.h> (Waiman Long) [RHEL-24125]
  - drm/hyperv: Fix a compilation issue because of not including screen_info.h (Waiman Long) [RHEL-24125]
  - efi: Do not include <linux/screen_info.h> from EFI header (Waiman Long) [RHEL-24125]
  - PCI: Clear Secondary Status errors after enumeration (Myron Stowe) [RHEL-44851]
  - leds: gpio: Add kernel log if devm_fwnode_gpiod_get() fails (Radu Rendec) [RHEL-43483]
  - leds: gpio: Update headers (Radu Rendec) [RHEL-43483]
  - leds: gpio: Remove unneeded assignment (Radu Rendec) [RHEL-43483]
  - leds: gpio: Move temporary variable for struct device to gpio_led_probe() (Radu Rendec) [RHEL-43483]
  - leds: gpio: Refactor code to use devm_gpiod_get_index_optional() (Radu Rendec) [RHEL-43483]
  - leds: gpio: Utilise PTR_ERR_OR_ZERO() (Radu Rendec) [RHEL-43483]
  - leds: gpio: Keep driver firmware interface agnostic (Radu Rendec) [RHEL-43483]
  - leds: gpio: Annotate struct gpio_leds_priv with __counted_by (Radu Rendec) [RHEL-43483]
  - leds: gpio: Configure per-LED pin control (Radu Rendec) [RHEL-43483]
  - leds: gpio: switch to using devm_fwnode_gpiod_get() (Radu Rendec) [RHEL-43483]
  - leds: move default_state read from fwnode to core (Radu Rendec) [RHEL-43483]
  - PM: sleep: Restore asynchronous device resume optimization (Mark Langsdorf) [RHEL-29018] {CVE-2023-52498}
  - PM: sleep: Fix possible deadlocks in core system-wide PM code (Mark Langsdorf) [RHEL-29018] {CVE-2023-52498}
  - async: Introduce async_schedule_dev_nocall() (Mark Langsdorf) [RHEL-29018] {CVE-2023-52498}
  - pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain (Mark Salter) [RHEL-37329] {CVE-2024-35942}
  - perf: hisi: Fix use-after-free when register pmu fails (Mark Salter) [RHEL-38291] {CVE-2023-52859}
  - Enable tmpfs quota configuration option (Carlos Maiolino) [RHEL-7768]
  - shmem: properly report quota mount options (Carlos Maiolino) [RHEL-7768]
  - shmem: move spinlock into shmem_recalc_inode() to fix quota support (Carlos Maiolino) [RHEL-7768]
  - shmem: fix quota lock nesting in huge hole handling (Carlos Maiolino) [RHEL-7768]
  - tmpfs: fix race on handling dquot rbtree (Carlos Maiolino) [RHEL-7768]
  - shmem: Add default quota limit mount options (Carlos Maiolino) [RHEL-7768]
  - shmem: quota support (Carlos Maiolino) [RHEL-7768]
  - shmem: prepare shmem quota infrastructure (Carlos Maiolino) [RHEL-7768]
  - quota: Check presence of quota operation structures instead of ->quota_read and ->quota_write callbacks (Carlos Maiolino) [RHEL-7768]
  - shmem: make shmem_get_inode() return ERR_PTR instead of NULL (Carlos Maiolino) [RHEL-7768]
  - shmem: make shmem_inode_acct_block() return error (Carlos Maiolino) [RHEL-7768]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-486.el9]
changelog:
  - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47634] {CVE-2024-39502}
  - i2c: lpi2c: Avoid calling clk_get_rate during transfer (David Arcari) [RHEL-48206] {CVE-2024-40965}
  - i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work (David Arcari) [RHEL-48206] {CVE-2024-40965}
  - i2c: smbus: Support DDR5 and LPDDR5 SPD EEPROMs (David Arcari) [RHEL-49526]
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48391] {CVE-2024-40984}
  - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47688] {CVE-2024-39499}
  - drm/fbdev-generic: Fix framebuffer on big endian devices (Thomas Huth) [RHEL-45158]
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31564] {CVE-2024-26686}
  - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31564]
  - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31564]
  - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37072] {CVE-2023-52679}
  - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37072] {CVE-2023-52679}
  - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37072] {CVE-2023-52679}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-487.el9]
changelog:
  - net: ena: Fix redundant device NUMA node override (Kamal Heib) [RHEL-40816]
  - ibmvnic: Free any outstanding tx skbs during scrq reset (Mamatha Inamdar) [RHEL-45045]
  - ibmvnic: Add tx check to prevent skb leak (Mamatha Inamdar) [RHEL-45045]
  - ibmvnic: rename local variable index to bufidx (Mamatha Inamdar) [RHEL-45045]
  - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-35853]
  - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48319] {CVE-2024-40977}
  - wifi: cfg80211: validate HE operation element parsing (CKI Backport Bot) [RHEL-48273] {CVE-2024-40930}
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48026] {CVE-2024-40941}
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47918] {CVE-2024-40929}
  - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47768] {CVE-2024-40911}
  - efi/libstub: arm64: Remap relocated image with strict permissions (Lenny Szubowicz) [RHEL-39186]
  - efi/libstub: zboot: Mark zboot EFI application as NX compatible (Lenny Szubowicz) [RHEL-39186]
  - irqchip/renesas-irqc: Use platform_get_irq_optional() to get the interrupt (Radu Rendec) [RHEL-47248]
  - reset: Fix devm bulk optional exclusive control getter (Radu Rendec) [RHEL-47248]
  - net: rswitch: Avoid use-after-free in rswitch_poll() (Radu Rendec) [RHEL-47248]
  - mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (Aristeu Rozanski) [RHEL-45023] {CVE-2024-39298}
  - net: psample: fix flag being set in wrong skb (Adrian Moreno) [RHEL-31876]
  - net: openvswitch: store sampling probability in cb. (Adrian Moreno) [RHEL-31876]
  - net: openvswitch: add psample action (Adrian Moreno) [RHEL-31876]
  - net: psample: allow using rate as probability (Adrian Moreno) [RHEL-31876]
  - net: psample: skip packet copy if no listeners (Adrian Moreno) [RHEL-31876]
  - net: sched: act_sample: add action cookie to sample (Adrian Moreno) [RHEL-31876]
  - net: psample: add user cookie (Adrian Moreno) [RHEL-31876]
  - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-44136]
  - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-44136]
  - ACPI: APEI: EINJ: Add support for vendor defined error types (Mark Langsdorf) [RHEL-17909]
  - platform/chrome: cros_ec_debugfs: Fix permissions for panicinfo (Mark Langsdorf) [RHEL-17909]
  - fs: debugfs: Add write functionality to debugfs blobs (Mark Langsdorf) [RHEL-17909]
  - ACPI: APEI: EINJ: Refactor available_error_type_show() (Mark Langsdorf) [RHEL-17909]
  - mfd: syscon: Fix null pointer dereference in of_syscon_register() (Mark Langsdorf) [RHEL-26884] {CVE-2023-52467}
  - nvme-multipath: find NUMA path only for online numa-node (Chris Leech) [RHEL-40088]
  - ACPI: arm64: export acpi_arch_thermal_cpufreq_pctg() (Charles Mirabile) [RHEL-1697]
  - ACPI: processor: reduce CPUFREQ thermal reduction pctg for Tegra241 (Charles Mirabile) [RHEL-1697]
  - ACPI: thermal: Add Thermal fast Sampling Period (_TFP) support (Charles Mirabile) [RHEL-1697]
  - scsi: specify .sense_len = SCSI_SENSE_BUFFERSIZE in scsi_execute() scsi_exec_args (Ewan D. Milne) [RHEL-30596]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-488.el9]
changelog:
  - nvme-multipath: implement "queue-depth" iopolicy (John Meneghini) [RHEL-45230]
  - nvme-multipath: prepare for "queue-depth" iopolicy (John Meneghini) [RHEL-45230]
  - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-49548]
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47786] {CVE-2024-40912}
  - tracing: Ensure visibility when inserting an element into tracing_map (Jerome Marchand) [RHEL-30459] {CVE-2024-26645}
  - tracing/trigger: Fix to return error if failed to alloc snapshot (Jerome Marchand) [RHEL-33284] {CVE-2024-26920}
  - block: fix request.queuelist usage in flush (Ming Lei) [RHEL-43552]
  - block: fix that util can be greater than 100% (Ming Lei) [RHEL-42408]
  - block: support to account io_ticks precisely (Ming Lei) [RHEL-42408]
  - scsi: fnic: Move fnic_fnic_flush_tx() to a work queue (John Meneghini) [RHEL-36420]
  - scsi: fnic: Clean up some inconsistent indenting (John Meneghini) [RHEL-36420]
  - scsi: fnic: Convert snprintf() to sysfs_emit() (John Meneghini) [RHEL-36420]
  - scsi: fnic: unlock on error path in fnic_queuecommand() (John Meneghini) [RHEL-36420]
  - scsi: fnic: Increment driver version (John Meneghini) [RHEL-36420]
  - scsi: fnic: Improve logs and add support for multiqueue (MQ) (John Meneghini) [RHEL-36420]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic driver (John Meneghini) [RHEL-36420]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic_main.c (John Meneghini) [RHEL-36420]
  - scsi: fnic: Remove usage of host_lock (John Meneghini) [RHEL-36420]
  - scsi: fnic: Define stats to track multiqueue (MQ) IOs (John Meneghini) [RHEL-36420]
  - scsi: fnic: Modify ISRs to support multiqueue (MQ) (John Meneghini) [RHEL-36420]
  - scsi: fnic: Refactor and redefine fnic.h for multiqueue (John Meneghini) [RHEL-36420]
  - scsi: fnic: Get copy workqueue count and interrupt mode from config (John Meneghini) [RHEL-36420]
  - scsi: fnic: Rename wq_copy to hw_copy_wq (John Meneghini) [RHEL-36420]
  - scsi: fnic: Add and improve log messages (John Meneghini) [RHEL-36420]
  - scsi: fnic: Add and use fnic number (John Meneghini) [RHEL-36420]
  - scsi: fnic: Modify definitions to sync with VIC firmware (John Meneghini) [RHEL-36420]
  - scsi: fnic: Return error if vmalloc() failed (John Meneghini) [RHEL-36420]
  - scsi: fnic: Clean up some inconsistent indenting (John Meneghini) [RHEL-36420]
  - scsi: fnic: Fix sg_reset success path (John Meneghini) [RHEL-36420]
  - scsi: fnic: Remove unused functions fnic_scsi_host_start/end_tag() (John Meneghini) [RHEL-36420]
  - scsi: fnic: Replace sgreset tag with max_tag_id (John Meneghini) [RHEL-36420]
  - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (John Meneghini) [RHEL-36420]
  - scsi: fnic: Use vmalloc_array() and vcalloc() (John Meneghini) [RHEL-36420]
  - scsi: fnic: Use vzalloc() (John Meneghini) [RHEL-36420]
  - scsi: fnic: Switch to use %ptTs (John Meneghini) [RHEL-36420]
  - scsi: fnic: Refactor code in fnic probe to initialize SCSI layer (John Meneghini) [RHEL-36420]
  - scsi: fnic: Replace DMA mask of 64 bits with 47 bits (John Meneghini) [RHEL-36420]
  - scsi: fnic: Remove unneeded flush_workqueue() (John Meneghini) [RHEL-36420]
  - scsi: fnic: Remove redundant NULL check (John Meneghini) [RHEL-36420]
  - scsi: fnic: Stop using the SCSI pointer (John Meneghini) [RHEL-36420]
  - scsi: fnic: Fix a tracing statement (John Meneghini) [RHEL-36420]
  - scsi: fnic: Call scsi_done() directly (John Meneghini) [RHEL-36420]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-489.el9]
changelog:
  - powerpc/pseries: Fix scv instruction crash with kexec (Mamatha Inamdar) [RHEL-14159]
  - powerpc/numa: Online a node if PHB is attached. (Mamatha Inamdar) [RHEL-50147]
  - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-49749]
  - Revert "nvme-tcp: Use sendmsg(MSG_SPLICE_PAGES) rather then sendpage" (Chris Leech) [RHEL-49696]
  - Revert "nvmet-tcp: Use sendmsg(MSG_SPLICE_PAGES) rather then sendpage" (Chris Leech) [RHEL-49696]
  - Revert "nvme-tcp: Fix comma-related oops" (Chris Leech) [RHEL-49696]
  - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-48226]
  - sched: Move psi_account_irqtime() out of update_rq_clock_task() hotpath (Phil Auld) [RHEL-48226]
  - sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write() (Phil Auld) [RHEL-48226]
  - sched/fair: Remove stale FREQUENCY_UTIL comment (Phil Auld) [RHEL-48226]
  - sched/debug: Dump domains' level (Phil Auld) [RHEL-48226]
  - docs: cgroup-v1: Clarify that domain levels are system-specific (Phil Auld) [RHEL-48226]
  - sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level (Phil Auld) [RHEL-48226]
  - delayacct: track delays from IRQ/SOFTIRQ (Phil Auld) [RHEL-48226]
  - delayacct: improve the average delay precision of getdelay tool to microsecond (Phil Auld) [RHEL-48226]
  - nvme: cancel pending I/O if nvme controller is in terminal state (John Meneghini) [RHEL-35807]
  - iommu/amd: Fix GT feature enablement again (Jerry Snitselaar) [RHEL-42766]
  - iommu/amd: Invalidate cache before removing device from domain list (Jerry Snitselaar) [RHEL-44835]
  - dma: fix DMA sync for drivers not calling dma_set_mask*() (Jerry Snitselaar) [RHEL-44835]
  - iommu/dma: avoid expensive indirect calls for sync operations (Jerry Snitselaar) [RHEL-44835]
  - dma: avoid redundant calls for sync operations (Jerry Snitselaar) [RHEL-44835]
  - dma: compile-out DMA sync op calls when not used (Jerry Snitselaar) [RHEL-44835]
  - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Jerry Snitselaar) [RHEL-44835]
  - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Jerry Snitselaar) [RHEL-44835]
  - iommu/amd: Fix Invalid wait context issue (Jerry Snitselaar) [RHEL-44835]
  - iommu/amd: Fix sysfs leak in iommu init (Jerry Snitselaar) [RHEL-44835]
  - iommu/amd: Check EFR[EPHSup] bit before enabling PPR (Jerry Snitselaar) [RHEL-44835]
  - iommu/amd: Fix workqueue name (Jerry Snitselaar) [RHEL-44835]
  - iommu: Return right value in iommu_sva_bind_device() (Jerry Snitselaar) [RHEL-44835]
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44447] {CVE-2024-31076}
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36364] {CVE-2024-27395}
  - mptcp: ensure snd_nxt is properly initialized on connect (cki-backport-bot) [RHEL-39867] {CVE-2024-36889}
  - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29473] {CVE-2023-52619}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-490.el9]
changelog:
  - redhat/dracut-virt.conf: add systemd-veritysetup module (Emanuele Giuseppe Esposito) [RHEL-45168]
  - redhat/uki_addons/virt: add common FIPS addon (Emanuele Giuseppe Esposito) [RHEL-45160]
  - redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons (Emanuele Giuseppe Esposito) [RHEL-45159]
  - gcc-plugins/stackleak: Avoid .head.text section (Bandan Das) [RHEL-39439]
  - x86/sev: Skip ROM range scans and validation for SEV-SNP guests (Bandan Das) [RHEL-39439]
  - x86/sev: Move early startup code into .head.text section (Bandan Das) [RHEL-39439]
  - x86/sme: Move early SME kernel encryption handling into .head.text (Bandan Das) [RHEL-39439]
  - x86/sev: Do the C-bit verification only on the BSP (Bandan Das) [RHEL-39439]
  - x86/sev: Fix kernel crash due to late update to read-only ghcb_version (Bandan Das) [RHEL-39439]
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48140] {CVE-2024-40959}
  - eeprom: at24: fix memory corruption race condition (Mark Salter) [RHEL-37020] {CVE-2024-35848}
  - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case (Mark Salter) [RHEL-37020] {CVE-2024-35848}
  - eeprom: at24: Use dev_err_probe for nvmem register failure (Mark Salter) [RHEL-37020] {CVE-2024-35848}
  - eeprom: at24: Add support for 24c1025 EEPROM (Mark Salter) [RHEL-37020] {CVE-2024-35848}
  - eeprom: at24: remove struct at24_client (Mark Salter) [RHEL-37020] {CVE-2024-35848}
  - at24: Support probing while in non-zero ACPI D state (Mark Salter) [RHEL-37020] {CVE-2024-35848}
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47652] {CVE-2024-39501}
  - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47652] {CVE-2024-39501}
  - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47892] {CVE-2024-40927}
  - PCI: pciehp: Retain Power Indicator bits for userspace indicators (Myron Stowe) [RHEL-41181]
  - sched: act_ct: take care of padding in struct zones_ht_key (Xin Long) [RHEL-50682]
  - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44297] {CVE-2024-38538}
  - hugetlb: force allocating surplus hugepages on mempolicy allowed nodes (Aristeu Rozanski) [RHEL-38605]
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47558] {CVE-2024-40904}
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47535] {CVE-2024-40901}
  - vmxnet3: update to version 9 (Izabela Bakollari) [RHEL-50675]
  - vmxnet3: add command to allow disabling of offloads (Izabela Bakollari) [RHEL-50675]
  - vmxnet3: add latency measurement support in vmxnet3 (Izabela Bakollari) [RHEL-50675]
  - vmxnet3: prepare for version 9 changes (Izabela Bakollari) [RHEL-50675]
  - vmxnet3: disable rx data ring on dma allocation failure (Izabela Bakollari) [RHEL-50675]
  - vmxnet3: Fix missing reserved tailroom (Izabela Bakollari) [RHEL-50675]
  - maple_tree: fix mas_empty_area_rev() null pointer dereference (Aristeu Rozanski) [RHEL-39862] {CVE-2024-36891}
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-50366]
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-50366]
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-50366]
  - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-25193]
  - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-25193]
  - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-25193]
  - scsi: qedf: Use FC rport as argument for qedf_initiate_tmf() (John Meneghini) [RHEL-25193]
  - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41185] {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm (Xin Long) [RHEL-41185]
  - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39719] {CVE-2024-36025}
  - igb: Remove redundant runtime resume for ethtool_ops (Corinna Vinschen) [RHEL-17487]
  - net: intel: implement modern PM ops declarations (Corinna Vinschen) [RHEL-17487]
  - igb: simplify pci ops declaration (Corinna Vinschen) [RHEL-17487]
  - igb: Fix missing time sync events (Corinna Vinschen) [RHEL-17487]
  - intel: make module parameters readable in sys filesystem (Corinna Vinschen) [RHEL-17487 RHEL-25998]
  - net: adopt skb_network_offset() and similar helpers (Corinna Vinschen) [RHEL-17487]
  - igb: extend PTP timestamp adjustments to i211 (Corinna Vinschen) [RHEL-17487]
  - net: intel: igb: Use linkmode helpers for EEE (Corinna Vinschen) [RHEL-17487]
  - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-17487 RHEL-38454] {CVE-2024-36010}
  - intel: legacy: field get conversion (Corinna Vinschen) [RHEL-17487]
  - intel: legacy: field prep conversion (Corinna Vinschen) [RHEL-17487]
  - intel: add bit macro includes where needed (Corinna Vinschen) [RHEL-17487]
  - igb: Use FIELD_GET() to extract Link Width (Corinna Vinschen) [RHEL-17487]
  - netdevsim: fix rtnetlink.sh selftest (CKI Backport Bot) [RHEL-50016]
  - selinux: avoid dereference of garbage after mount failure (Ondrej Mosnacek) [RHEL-37187] {CVE-2024-35904}
  - calipso: fix memory leak in netlbl_calipso_add_pass() (Ondrej Mosnacek) [RHEL-37044] {CVE-2023-52698}
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51242] {CVE-2024-41065}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44414] {CVE-2024-37356}
  - tty: add the option to have a tty reject a new ldisc (John W. Linville) [RHEL-48254] {CVE-2024-40966}
  - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37024] {CVE-2024-35847}
  - usb-storage: alauda: Check whether the media is initialized (CKI Backport Bot) [RHEL-43714] {CVE-2024-38619}
  - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38285] {CVE-2023-52811}
  - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44155] {CVE-2024-38570}
  - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44155] {CVE-2024-38570}
  - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44155] {CVE-2024-38570}
  - openvswitch: Set the skbuff pkt_type for proper pmtud support. (Aaron Conole) [RHEL-37650]
  - scsi: mpi3mr: Driver version update to 8.8.1.0.50 (Ewan D. Milne) [RHEL-30580]
  - scsi: mpi3mr: Update MPI Headers to revision 31 (Ewan D. Milne) [RHEL-30580]
  - scsi: mpi3mr: Debug ability improvements (Ewan D. Milne) [RHEL-30580]
  - scsi: mpi3mr: Set the WriteSame Divert Capability in the IOCInit MPI Request (Ewan D. Milne) [RHEL-30580]
  - scsi: mpi3mr: Clear ioctl blocking flag for an unresponsive controller (Ewan D. Milne) [RHEL-30580]
  - scsi: mpi3mr: Set MPI request flags appropriately (Ewan D. Milne) [RHEL-30580]
  - scsi: mpi3mr: Block devices are not removed even when VDs are offlined (Ewan D. Milne) [RHEL-30580]
  - x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk (Waiman Long) [RHEL-31230]
  - x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO (Waiman Long) [RHEL-31230]
  - x86/bugs: Fix the SRSO mitigation on Zen3/4 (Waiman Long) [RHEL-31230]
  - redhat/configs: Rename x86 CPU mitigations config entries (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_RETHUNK              => CONFIG_MITIGATION_RETHUNK (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_CPU_SRSO             => CONFIG_MITIGATION_SRSO (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_CPU_IBRS_ENTRY       => CONFIG_MITIGATION_IBRS_ENTRY (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_CPU_UNRET_ENTRY      => CONFIG_MITIGATION_UNRET_ENTRY (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_SLS                  => CONFIG_MITIGATION_SLS (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_RETPOLINE            => CONFIG_MITIGATION_RETPOLINE (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_PAGE_TABLE_ISOLATION => CONFIG_MITIGATION_PAGE_TABLE_ISOLATION (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_CALL_DEPTH_TRACKING  => CONFIG_MITIGATION_CALL_DEPTH_TRACKING (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_CPU_IBPB_ENTRY       => CONFIG_MITIGATION_IBPB_ENTRY (Waiman Long) [RHEL-31230]
  - x86/bugs: Rename CONFIG_GDS_FORCE_MITIGATION => CONFIG_MITIGATION_GDS_FORCE (Waiman Long) [RHEL-31230]
  - kbuild: use objtool-args-y to clean up objtool arguments (Waiman Long) [RHEL-31230]
  - kbuild: do not create *.prelink.o for Clang LTO or IBT (Waiman Long) [RHEL-31230]
  - kbuild: replace $(linked-object) with CONFIG options (Waiman Long) [RHEL-31230]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-491.el9]
changelog:
  - net/mlx5: Fix MTMP register capability offset in MCAM register (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Fix peer devlink set for SF representor devlink port (Benjamin Poirier) [RHEL-24466]
  - RDMA/mlx5: Fix port number for counter query in multi-port configuration (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Restore mistakenly dropped parts in register devlink flow (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: RSS, Block XOR hash with over 128 channels (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: HTB, Fix inconsistencies with QoS SQs number (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: RSS, Block changing channels number when RXFH is configured (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Correctly compare pkt reformat ids (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: offset comp irq index in name by one (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Register devlink first under devlink lock (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: E-switch, store eswitch pointer before registering devlink_param (Benjamin Poirier) [RHEL-24466]
  - RDMA/mlx5: Relax DEVX access upon modify commands (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Fix query of sd_group field (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Use the correct lag ports number when creating TISes (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DPLL, Implement fractional frequency offset get pin op (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DPLL, Use struct to get values from mlx5_dpll_synce_status_get() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Use swap() instead of open coding it (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: devcom, Add component size getter (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Decouple CQ from priv (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Statify function mlx5e_monitor_counter_arm (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Move TISes from priv to mdev HW resources (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Remove TLS-specific logic in generic create TIS API (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: fs, Command to control TX flow table root (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: fs, Command to control L2TABLE entry silent mode (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Expose Management PCIe Index Register (MPIR) (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Add mlx5_ifc bits used for supporting single netdev Socket-Direct (Benjamin Poirier) [RHEL-24466]
  - mlx5: implement VLAN tag XDP hint (Benjamin Poirier) [RHEL-24466]
  - RDMA/mlx5: Expose register c0 for RDMA device (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: E-Switch, expose eswitch manager vport (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Manage ICM type of SW encap (Benjamin Poirier) [RHEL-24466]
  - RDMA/mlx5: Support handling of SW encap ICM area (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Introduce indirect-sw-encap ICM properties (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Implement AF_XDP TX timestamp and checksum offload (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Remove early assignment to netdev->features (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Add local loopback counter to vport rep stats (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Query maximum frequency adjustment of the PTP hardware clock (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Convert scaled ppm values outside the s32 range for PHC frequency adjustments (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Initialize clock->ptp_info inside mlx5_init_timer_clock (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Refactor real time clock operation checks for PHC (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Access array with enum values instead of magic numbers (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: simplify mlx5_set_driver_version string assignments (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Annotate struct mlx5_flow_handle with __counted_by (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Annotate struct mlx5_fc_bulk with __counted_by (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Some cleanup in mlx5e_tc_stats_matchall() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Allow sync reset flow when BF MGT interface device is present (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: print change on SW reset semaphore returns busy (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Switch to using _bh variant of of spinlock API in port timestamping NAPI poll context (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Fix MACsec state loss upon state update in offload path (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Change the warning when ignore_flow_level is not supported (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Check capability for fw_reset (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: E-switch, Change flow rule destination checking (Benjamin Poirier) [RHEL-24466]
  - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers (Benjamin Poirier) [RHEL-24466]
  - IB/mlx5: Don't expose debugfs entries for RRoCE general parameters if not supported (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Ignore IPsec replay window values on sender side (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Allow software parsing when IPsec crypto is enabled (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Can't go to uplink vport on RX rule (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Use the right GVMI number for drop action (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Bridge, fix multicast packets sent to uplink (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Fix a WARN upon a callback command failure (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Fix inconsistent hairpin RQT sizes (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Fix a race in command alloc flow (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Allow old devices to use multi destination FTE (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Free used cpus mask when an IRQ is released (Benjamin Poirier) [RHEL-24466]
  - Revert "net/mlx5: DR, Supporting inline WQE when possible" (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Increase max supported channels number to 256 (Benjamin Poirier) [RHEL-24463 RHEL-24466]
  - net/mlx5e: Preparations for supporting larger number of channels (Benjamin Poirier) [RHEL-24463 RHEL-24466]
  - net/mlx5e: Refactor mlx5e_rss_init() and mlx5e_rss_free() API's (Benjamin Poirier) [RHEL-24463 RHEL-24466]
  - net/mlx5e: Refactor mlx5e_rss_set_rxfh() and mlx5e_rss_get_rxfh() (Benjamin Poirier) [RHEL-24463 RHEL-24466]
  - net/mlx5e: Refactor rx_res_init() and rx_res_free() APIs (Benjamin Poirier) [RHEL-24463 RHEL-24466]
  - net/mlx5e: Use PTR_ERR_OR_ZERO() to simplify code (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Use PTR_ERR_OR_ZERO() to simplify code (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: fix config name in Kconfig parameter documentation (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove unused declaration (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Replace global mlx5_intf_lock with HCA devcom component lock (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Refactor LAG peer device lookout bus logic to mlx5 devcom (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Redesign SF active work to remove table_lock (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Parallelize vhca event handling (Benjamin Poirier) [RHEL-24466]
  - mlx5: Fix type of mode parameter in mlx5_dpll_device_mode_get() (Benjamin Poirier) [RHEL-24466]
  - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). (mlx5) (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Introduce ifc bits for migration in a chunk mode (Benjamin Poirier) [RHEL-24466]
  - RDMA/mlx5: Implement mkeys management via LIFO queue (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Enable 4 ports multiport E-switch (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Add a health error syndrome for pci data poisoned (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Handle multi destination action in the right order (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Add check for multi destination FTE (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Bridge, Enable mcast in smfs steering mode (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Check police action rate for matchall filter (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Consider aggregated port speed during rate configuration (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove redundant max_sfs check and field from struct mlx5_sf_dev_table (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove SF table reference counting (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Push common deletion code into mlx5_sf_del() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Rename mlx5_sf_deactivate_all() to mlx5_sf_del_all() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Move state lock taking into mlx5_sf_dealloc() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Convert SF port_indices xarray to function_ids xarray (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Use devlink port pointer to get the pointer of container SF struct (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Call mlx5_sf_id_erase() once in mlx5_sf_dealloc() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Set en auxiliary devlink instance as nested (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: SF, Implement peer devlink set for SF representor devlink port (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Lift reload limitation when SFs are present (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Disable eswitch as the first thing in mlx5_unload() (Benjamin Poirier) [RHEL-24466]
  - mlx5: Implement SyncE support using DPLL infrastructure (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Perform DMA operations in the right locations (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: macsec: use update_pn flag instead of PN comparation (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Supporting inline WQE when possible (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Update dead links in Kconfig documentation (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove health syndrome enum duplication (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: DR, Remove unneeded local variable (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: IRQ, consolidate irq and affinity mask allocation (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Fix spelling mistake "Faided" -> "Failed" (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: aRFS, Introduce ethtool stats (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: aRFS, Warn if aRFS table does not exist for aRFS rule (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: aRFS, Prevent repeated kernel rule migrations requests (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove redundant check of mlx5_vhca_event_supported() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Use mlx5_sf_start_function_id() helper instead of directly calling MLX5_CAP_GEN() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove redundant SF supported check from mlx5_sf_hw_table_init() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Use auxiliary_device_uninit() instead of device_put() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: E-switch, Add checking for flow rule destinations (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Check with FW that sync reset completed successfully (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Expose NIC temperature via hardware monitoring kernel API (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Expose port.c/mlx5_query_module_num() function (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Bridge, Only handle registered netdev bridge events (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: E-Switch, Remove redundant arg ignore_flow_lvl (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: remove many unnecessary NULL values (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Allocate completion EQs dynamically (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Handle SF IRQ request in the absence of SF IRQ pool (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Rename mlx5_comp_vectors_count() to mlx5_comp_vectors_max() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Add IRQ vector to CPU lookup function (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Introduce mlx5_cpumask_default_spread (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Implement single completion EQ create/destroy methods (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Use xarray to store and manage completion EQs (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Refactor completion IRQ request/release handlers in EQ layer (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Use xarray to store and manage completion IRQs (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Refactor completion IRQ request/release API (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Track the current number of completion EQs (Benjamin Poirier) [RHEL-24466]
  - IB/mlx5: Add HW counter called rx_dct_connect (Benjamin Poirier) [RHEL-24466]
  - RDMA/mlx: Remove unnecessary variable initializations (mlx5) (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Remove duplicate code for user flow (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Allocate command stats with xarray (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: split mlx5_cmd_init() to probe and reload routines (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove redundant cmdif revision check (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Re-organize mlx5_cmd struct (Benjamin Poirier) [RHEL-24466]
  - RDMA/mlx5: align MR mem allocation size to power-of-two (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Update the driver with the recent thermal changes (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove pointless vport lookup from mlx5_esw_check_port_type() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove redundant check from mlx5_esw_query_vport_vhca_id() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove redundant is_mdev_switchdev_mode() check from is_ib_rep_supported() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove redundant MLX5_ESWITCH_MANAGER() check from is_ib_rep_supported() (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Remove redundant comment (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Remove unused ecpu field from struct mlx5_sf_table (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Add header file for events (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Add local loopback counter to vport stats (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Expose bits for local loopback counter (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Remove mlx5e_dbg() and msglvl support (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: E-Switch, remove redundant else statements (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: simplify condition after napi budget handling change (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: TC, refactor access to hash key (Benjamin Poirier) [RHEL-24466]
  - net/mlx5e: Remove RX page cache leftovers (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Document previously implemented mlx5 tracepoints (Benjamin Poirier) [RHEL-24466]
  - net/mlx5: Update Kconfig parameter documentation (Benjamin Poirier) [RHEL-24466]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-90.0
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-1
changelog:
  - update to 4.5 (RHEL-6522 RHEL-6520 RHEL-9969 RHEL-9971 RHEL-9973 RHEL-9975
    RHEL-12411)
  - add chronyd-restricted service (RHEL-9972)


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Packit <hello@packit.dev> - 314-1
changelog:
  - Diagnostic reports: Fix command injection vulnerability with crafted report names
  - Storage: Improvements to read-only encrypted filesystems


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230731-1.git94f0e2c
changelog:
  - krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  - FIPS: enforce EMS in FIPS mode
  - NO-ENFORCE-EMS: add subpolicy to undo the EMS enforcement in FIPS mode
  - nss: implement EMS enforcement in FIPS mode (disabled in ELN)
  - openssl: implement EMS enforcement in FIPS mode
  - gnutls: implement EMS enforcement in FIPS mode (disabled in ELN)
  - docs: replace `FIPS 140-2` with just `FIPS 140`


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230920-1.git8dcf74d
changelog:
  - OSPP subpolicy: tighten beyond reason for OSPP 4.3
  - fips-mode-setup: more thorough --disable, still unsupported


author: Alexander Sosedkin <asosedkin@redhat.com> - 20231016-1.git77ceb0b
changelog:
  - openssl: fix SHA1 and NO-ENFORCE-EMS interaction
  - bind: fix a typo that led to duplication of ECDSAPxxxSHAxxx


author: Clemens Lang <cllang@redhat.com> - 20231108-1.git994ae09
changelog:
  - turn ssh_etm into an etm@SSH tri-state (RHEL-15925)
  - fips-mode-setup: increase chroot-friendliness (RHEL-11350)
  - fips-mode-setup: Fix usage with --no-bootcfg (RHEL-11350)


author: Clemens Lang <cllang@redhat.com> - 20231109-1.git0ceff7f
changelog:
  - Restore support for scoped ssh_etm directives (RHEL-15925)
  - Print matches in syntax deprecation warnings (RHEL-15925)


author: Clemens Lang <cllang@redhat.com> - 20231113-1.gite9247c2
changelog:
  - fips-mode-setup: Fix test for empty /boot (RHEL-11350)
  - fips-mode-setup: Avoid 'boot=UUID=' if /boot == / (RHEL-11350)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240202-1.git283706d
changelog:
  - fips-finish-install: make sure ostree is detected in chroot
  - fips-mode-setup: make sure ostree is detected in chroot
  - fips-finish-install: Create/remove /etc/system-fips on ostree systems
  - java: disable ChaCha20-Poly1305 where applicable


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240304-1.gitb1c706d
changelog:
  - packaging: remove perl build-dependency, it's not needed anymore
  - packaging: use newly introduced SKIP_LINTING=1
  - packaging: drop stale workarounds


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Daniel Zatovic <dzatovic@redhat.com> - 2.7.2-1
changelog:
  - Update to cryptsetup 2.7.2
  - Use OpenSLL Argon implementation instead of the built-in one
  - Resolves: RHEL-32377


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-23
changelog:
  - RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
  - RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jakub Martisko <jamartis@redhat.com> - 28-6
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-23
changelog:
  - Add 0091-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch
    * Fixes RHEL-6678 (Add support in multipathd for NVMe to listen for FPIN-Li
      events and mark effected paths as marginal)
  - Add 0092-multipath-tools-add-HPE-Alletra-9000-NVMe-to-hardwar.patch
    * Fixes RHEL-1830 (Changes to Arcus NVMeoFC multipath.conf settings for RHEL
      9.x to be included in kernel by default)
  - Resolves: RHEL-6678
  - Resolves: RHEL-1830


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-24
changelog:
  - Add 0093-RH-multipath-add-mpathcleanup-man-page.patch
    * Fixes RHEL-1266 ("There is no man page for mpathcleanup")
  - Resolves: RHEL-1266


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-25
changelog:
  - Add 0094-libmultipath-Add-max_retries-config-option.patch
    * Fixes RHEL-1729 ("Allow multipathd to set the max_retries of the
      scsi_device for paths")
  - Add 0095-libmutipath-Retain-device-size-if-sysfs_get_size-fai.patch
  - Add 0096-multipathd-check-and-update-all-paths-when-in-cli_re.patch
  - Add 0097-multipathd-move-post-reloading-commands-into-resize_.patch
  - Add 0098-multipathd-move-resize_map-to-multipathd-main.c.patch
  - Add 0099-multipathd-Add-auto_resize-config-option.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986
  - Resolves: RHEL-1729


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-26
changelog:
  - Add 0100-libmultipath-avoid-temporarily-enabling-queueing-on-.patch
  - Add 0101-multipathd-Make-sure-to-disable-queueing-if-recovery.patch
    * Fixes RHEL-17234 ("RHEL9 dm-multipath no_path_retry [retry number] is
      undone if paths are later lost for an open map.")
  - Add 0102-multipathd-remove-nopath-flushing-code-from-flush_ma.patch
  - Add 0103-multipathd-make-flush_map-delete-maps-like-the-multi.patch
  - Add 0104-multipathd-disable-queueing-when-removing-unknown-ma.patch
    * Fixes RHEL-4998 ("When remove external lun from host, rescan lun status
      will cause the OS hang and no response")
  - Resolves: RHEL-4998
  - Resolves: RHEL-17234


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-27
changelog:
  - Add 0105-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
  - Add 0106-multipathd-fix-auto-resize-configuration.patch
  - Add 0107-libmultipath-fix-displaying-auto_resize-config-setti.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-28
changelog:
  - Add 0108-libmultipath-actually-truncate-too-large-vpd-page.patch
  - Add 0109-kpartx-fix-theoretical-overflow-in-loop-device-name.patch
    * Fixes RHEL-31793 ("RHEL SAST Automation: address (selected) true positives")
  - Resolves: RHEL-31793


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-29
changelog:
  - Add 0110-libmultipath-keep-track-of-queueing-state-in-feature.patch
  - Add 0111-libmultipath-export-partmap_in_use.patch
  - Add 0112-libmultipath-change-flush_on_last_del-to-fix-a-multi.patch
  - Add 0113-libmultipath-pad-dev_loss_tmo-to-avoid-race-with-no_.patch
    * Fixes RHEL-30272
  - Add 0114-libmultipath-remove-pathgroup-wildcard-options.patch
  - Add 0115-libmultipath-print-all-values-in-snprint_failback.patch
  - Add 0116-multipathd-Stop-double-counting-map-failures-for-no_.patch
  - Add 0117-multipath-tools-man-pages-add-missing-multipathd-com.patch
  - Add 0118-libmultipath-change-the-vend-prod-rev-printing.patch
  - Add 0119-multipath-tools-man-pages-Add-format-wildcard-descri.patch
    * Fixes RHEL-8304
  - Resolves: RHEL-8304
  - Resolves: RHEL-30272


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-30
changelog:
  - Add 0120-multipath-tools-fix-multipath-ll-bug-for-Native-NVME.patch
    * Fixes RHEL-28068
  - Add 0121-multipathd-set-reply-length-to-zero-for-NULL-replies.patch
    * Fixes RHEL-44569
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-31
changelog:
  - Modify multiple tests especially medium_error_scsi_debug and squelch_scsi_id
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-32
changelog:
  - Modify bindings, find_multipaths, and user_friendly_names tests
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-2
changelog:
  - Allow non-zero values in unused index block entries.
  - Fix boundary check on the bitset for cached blocks.
  - Fix incorrect index_entry.nr_free on expansion affecting free space estimate.
  - Fix thin_repair checking keys on a node with a zero key.
  - Enhance error message in cache_check suggesting fix when applicable.


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.2-18.b1
changelog:
  - Fix for CVE-2022-2928
  - Fix for CVE-2022-2929
  - Use systemd-sysusers for dhcp user and group (#2095396)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-8
changelog:
  - Return an error when transaction fails (RhBug:2170093,2212262)
  - Document symbols in `dnf history list` output (RhBug:2172067,2218113)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-9
changelog:
  - Fix japanese translations (RHEL-11345)
  - Fix substitution in kay-value-pair list in add_new_repo (RHEL-6396)
  - base: Add obsoleters of only latest versions (RHEL-6304)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-11
changelog:
  - Fix handling an installation reason of install-only packages on autoremove
    (RHEL-15902)
  - Fix dnf-automatic service to apply security updates the same way as dnf tool
    (RHEL-21874)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-12
changelog:
  - Fix reporting nothing-to-do for "dnf remove --duplicates" (RHEL-6424)
  - Fix reporting nothing-to-do for "dnf remove --oldinstallonly" (RHEL-6424)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-16
changelog:
  - More specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49670)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-17
changelog:
  - Revert more specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49670)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-7
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2207946)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-12
changelog:
  - Fix incorrect spanish translation file (RHEL-6394)
  - Fix for strange issue with binary garbage in smaps files (RHEL-6420, RhBug:2231923)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-14
changelog:
  - needs-restarting prefers to obtain a boot time from systemd to deal with
    RTCs running in local time (RHEL-14900)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-16
changelog:
  - Revert needs-restarting prefers to obtain a boot time from systemd to deal
    with RTCs running in local time (RHEL-39775)


author: Pavel Valena <pvalena@redhat.com> - 057-20.git20221213
changelog:
  - refactor(url-lib): write curl output directly to file
  - fix(dracut-initramfs-restore.sh): initramfs detection not
  - fix(90kernel-modules): install blk modules using symbol
  - fix(squash): build ld cache for squash loader
  - test(16-DMSQUASH): make it pass on arch
  - feat(dmsquash-live): add new dmsquash-live-autooverlay module


author: Pavel Valena <pvalena@redhat.com> - 057-38.git20230725
changelog:
  - fix(dracut.sh): use dynamically uefi's sections offset
  - fix(dracut.sh): handle imagebase for uefi
  - fix(dracut.sh): use gawk for strtonum
  - fix(rngd): install system service file
  - fix(nvmf): nvme list-subsys prints the address using commas
  - fix(nvmf): don't try to validate network connections in
  - fix(nvmf): no need to load the nvme module
  - fix(nvmf): don't create did-setup file
  - fix(nvmf): don't use "finished" queue for autoconnect
  - fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes
  - fix(nvmf): avoid calling "exit" in a cmdline hook
  - fix(nvmf): run cmdline hook before parse-ip-opts.sh
  - feat(nvmf): set rd.neednet=1 if tcp records encountered
  - fix(nvmf): install 8021q module unconditionally
  - fix(nvmf): support /etc/nvme/config.json
  - feat(nvmf): add code for parsing the NBFT


author: Pavel Valena <pvalena@redhat.com> - 057-43.git20230816
changelog:
  - feat(spec): include modules for IMA
  - fix(dracut): there can be \ at the end on line in awk script
  - fix(rngd): spacing
  - fix(integrity): do not enable EVM if there is no key
  - fix(fips): include openssl's fips.so and openssl.cnf


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-0.1.alpha
changelog:
  - Update to 5.0.0-alpha (#1989523)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Remove createmodule.sh and createmodule.py utilities ('module sh-to-mod'
    should be used instead)
  - Remove configure options that have been made default starting version 5.0
  - Remove compat subpackage
  - Run non-regression tests in quick mode


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 (#2004402)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Configuration guide example.txt is replaced by more up to date INSTALL.txt
    document


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Martin Osvald <mosvald@redhat.com> - 3.16-3
changelog:
  - Add ownership of /etc/default, /usr/share/X11/fonts,
    /usr/share/fish, /usr/share/zsh
  - Improve directory creation to avoid 'Argument list too long' error
    Resolves: RHEL-35327
    Resolves: RHEL-1337
    Resolves: RHEL-1338


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Patsy Griffin <patsy@redhat.com> - 2.34-113
changelog:
  - CVE-2024-33601 glibc: netgroup cache may terminate daemon on
    memory allocation failure (RHEL-34272)
  - CVE-2024-33602 glibc: netgroup cache assumes NSS callback 
    uses in-buffer strings (RHEL-34274)


author: Patsy Griffin <patsy@redhat.com> - 2.34-115
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39992)


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-73
changelog:
  - search command: add flag to only search root dev
  - Resolves: #RHEL-20526
  - Resolves: #CVE-2023-4001


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Julien Rische <jrische@redhat.com> - 0.8.4-5
changelog:
  - Add an option for minimum lifetime
  - Resolves: rhbz#2184333
  - Remove unused patch files
  - Fix date typographical error in changelog


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Eugene Syromiatnikov <esyr@redhat.com> - 23.11-2
changelog:
  - Revert commit "lib: update detection of non-architectural L3CAT" that removed
    L3CAT detection support on Tiger Lake and Erkhart Lake CPUs (RHEL-22729)


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.el9
changelog:
  - tc: add missing separator (Andrea Claudi) [RHEL-337]
  - u32: fix TC_U32_TERMINAL printing (Andrea Claudi) [RHEL-586]


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Sutter <psutter@redhat.com> [1.8.10-1.el9]
changelog:
  - spec: Support for _excludedocs macro in alternatives installation (Phil Sutter) [RHEL-5810]
  - Rebase onto version 1.8.10 (Phil Sutter) [RHEL-14147]


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Cameron <pcameron@redhat.com> - 1.2.1-1
changelog:
  - Makefile: protect mandatory compile flags
  - packet capture: don't reuse socket for multiple receive functions
  - TPACKET_V[23]: continue even if mlock() fails
  - ipmon: fix division by zero
  - fix: detstats(), ifstats(): handle packets with incorrect header checksum
  - fix: positionptr(): properly allocate newly created interfaces
  - fix: detstats(): properly account non-IP packets
  - fix: properly init curses (fixes view on some utf-8 terminals)
  - fix: cidr_split_address(): fix buffer overflow
  - ipmon: printentry(): fix printing of huge values
  - build: use correct libraries (wide version of -lpanel)
  - fix unsafe handling of printf() args (RedHat Bugzilla: 1842690)
  - fix the CPU hog if the interface gets removed (RedHat Bugzilla: 1572750)
  - introduce packet capturing abstraction: add recvmmsg(), TPACKET_V2 and TPACKET_V3 mmap()ed capturing modules: this allow us to capture in multigigabit speeds
  - add partial support for IPoIB interfaces (full support cannot be done because the kernel interface doesn't give us source address) (RedHat Bugzilla: 1140211)
  - merge rvnamed-ng into iptraf-ng
  - allow scrolling with Home, End, PageUp and PageDown keys
  - show dropped packet count
  - pktsize: print in and out counters
  - ifstats: show total packet rate and packet drop across all interfaces
  - ipmon: show OSPF protocol version
  - hostmon, ipmon: update screen only when needed (vastly reduces CPU usage and also reduces packet drops)
  - update source code to compile cleanly on modern gcc
  - numerous code refactoring/cleaning up all over the source tree


author: Tao Liu <ltao@redhat.com> - 2:1.9.2-3
changelog:
  - Use misc/irqbalance.env as irqbalance.sysconfig
  - Use new rpm macros: autosetup and make_build
  - Use irqbalance-1.9.0-environment-file
  - Remove _hardened_build
  - Remove triggerun -- irqbalance < 2:0.56-3
  - Use SPDX licence


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Jan Stancek <jstancek@redhat.com> - 20230625-137
changelog:
  - Fix PSR-SU issues with kernel 6.2 or later (rhbz 2218668)
  - Update to upstream 20230625 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Makefile, copy-firmware: support xz/zstd compressed firmware
  - copy-firmware: silence the last shellcheck warnings
  - copy-firmware: drop obsolete backticks, quote
  - copy-firmware: tweak sed invocation
  - copy-firmware: quote deskdir and dirname
  - check_whence: error if symlinks are in-tree
  - check_whence: error if File: is actually a link
  - check_whence: strip quotation marks
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  - ice: update ice DDP wireless_edge package to 1.3.10.0
  - amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
  - amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  - fix broken cirrus firmware symlinks
  - qcom: Update the microcode files for Adreno a630 GPUs.
  - qcom: sdm845: rename the modem firmware
  - qcom: sdm845: update remoteproc firmware
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  - rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  - amdgpu: DMCUB updates for various AMDGPU asics
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - i915: Add HuC v8.5.0 for MTL
  - mediatek: Update mt8195 SCP firmware to support hevc
  - qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  - cirrus: Add firmware for new Asus ROG Laptops
  - brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  - amdgpu: Update GC 11.0.1 and 11.0.4
  - rtw89: 8851b: add firmware v0.29.41.0
  - ice: update ice DDP comms package to 1.3.40.0
  - cxgb4: Update firmware to revision 1.27.3.0


author: Jan Stancek <jstancek@redhat.com> - 20230726-138
changelog:
  - Navi32 dGPU firmware (rhbz 2047486)
  - CVE-2023-20593 linux-firmware: hw: amd: Cross-Process Information Leak (rhbz 2227156)
  - Update to upstream 20230726 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - copy-firmware: Fix linking directories when using compression
  - copy-firmware: Fix test: unexpected operator
  - qcom: sc8280xp: LENOVO: remove directory sym link
  - qcom: sc8280xp: LENOVO: Remove execute bits
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: add initial SMU 13.0.10 firmware
  - amdgpu: add initial SDMA 6.0.3 firmware
  - amdgpu: add initial PSP 13.0.10 firmware
  - amdgpu: add initial GC 11.0.3 firmware
  - linux-firmware: Update AMD fam17h cpu microcode
  - linux-firmware: Update AMD cpu microcode
  - amdgpu: update green sardine VCN firmware
  - amdgpu: update renoir VCN firmware
  - amdgpu: update raven VCN firmware
  - amdgpu: update raven2 VCN firmware
  - amdgpu: update Picasso VCN firmware
  - amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  - Updated NXP SR150 UWB firmware
  - wfx: update to firmware 3.16.1
  - mediatek: Update mt8195 SCP firmware to support 10bit mode
  - i915: update DG2 GuC to v70.8.0
  - i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  - cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models
  - Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - Fix qcom ASoC tglp WHENCE entry
  - check_whence: Check link targets are valid
  - iwlwifi: add new FWs from core80-39 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  - qcom: Add Audio firmware for SC8280XP X13s


author: Jan Stancek <jstancek@redhat.com> - 20230814-139
changelog:
  - CVE-2023-20569 linux-firmware: hw amd: Return Address Predictor velunerability leading to information disclosure (rhbz 2230418)
  - [AMDCLIENT 9.3 Bug] Linux FW update to fix multi monitor behind TBT3 dock & random flickers (rhbz 2227845)
  - amdgpu: partially revert firmware for GC 11.0.0 and GC 11.0.2
  - linux-firmware: Update AMD cpu microcode
  - Merge branch 'for-upstream' of http://git.chelsio.net/pub/git/linux-firmware
  - rtl_bt: Add firmware v2 file for RTL8852C
  - Revert "rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225"
  - amdgpu: DMCUB updates for various AMDGPU asics
  - cxgb4: Update firmware to revision 1.27.4.0
  - Merge branch 'rb3-update' of https://github.com/lumag/linux-firmware
  - Merge https://github.com/pkshih/linux-firmware
  - Mellanox: Add new mlxsw_spectrum firmware xx.2012.1012
  - linux-firmware: Add URL for latest FW binaries for NXP BT chipsets
  - rtw89: 8851b: update firmware to v0.29.41.1
  - qcom: sdm845: add RB3 sensors DSP firmware
  - amdgpu: Update DMCUB for DCN314 & Yellow Carp
  - Merge branch 'dmc-adlp_2.20-mtl_2.13' of git://anongit.freedesktop.org/drm/drm-firmware
  - Merge branch 'for-upstream' of https://github.com/CirrusLogic/linux-firmware
  - ice: add LAG-supporting DDP package
  - i915: Update MTL DMC to v2.13
  - i915: Update ADLP DMC to v2.20
  - cirrus: Add CS35L41 firmware for Dell Oasis Models


author: Scott Weaver <scweaver@redhat.com> - 20230926-140
changelog:
  - [Intel 9.4 FEAT] [SPR][EMR] QAT firmware update available (rhbz 2238636)
  - [AMDCLIENT 9.4 Feature] Sub-Feature: AMD PMF Linux FW (rhbz 2227340)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amd_pmf: Add initial PMF TA for Smart PC Solution Builder
  - linux-firmware: Update FW files for MRVL PCIE 8997 chipsets
  - rtl_bt: Update RTL8851B BT USB firmware to 0x048A_D230
  - iwlwifi: add new FWs from core81-65 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core81-65 release
  - linux-firmware: amd-ucode: Add note on fam19h warnings
  - i915: update MTL HuC to version 8.5.4
  - amdgpu: update DMCUB to 0.0.183.0 for various AMDGPU ASICs
  - linux-firmware: add link to sc8280xp audioreach firmware
  - qcom: sm8250: add RB5 sensors DSP firmware
  - qcom: Update vpu-1.0 firmware
  - qcom: sm8250: update DSP firmware
  - qcom: add firmware for the onboard WiFi on qcm2290 / qrb4210
  - qcom: add venus firmware files for v6.0
  - qcom: add firmware for QRB4210 platforms
  - qcom: add firmware for QCM2290 platforms
  - qcom: add GPU firmware for QCM2290 / QRB2210
  - ath10k/WCN3990: move wlanmdsp to qcom/sdm845
  - WHENCE: Don't compress qcom json files
  - WHENCE: amd-ucode: Use new RawFile keyword
  - Create symlinks for all firmware that is duplicate using rdfind
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00605
  - Fix carl9170fw shell scripts for shellcheck errors
  - i915: Update MTL DMC to v2.16
  - copy-firmware: Introduce 'RawFile' keyword
  - copy-firmware: Support additional compressor options
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: update firmware for qat_4xxx devices
  - linux-firmware: Update AMD SEV firmware
  - amdgpu: update DMCUB to 0.0.181.0 for various AMDGPU ASICs
  - rtw89: 8852b: update fw to v0.29.29.3
  - rtw89: 8851b: update fw to v0.29.41.2
  - i915: add GSC 102.0.0.1655 for MTL
  - amdgpu: DMCUB updates for various AMDGPU asics
  - amdgpu: DMCUB updates for various AMDGPU asics
  - cirrus: Add CS35L41 firmware for HP G11 models


author: Scott Weaver <scweaver@redhat.com> - 20231030-141
changelog:
  - CVE-2022-46329 linux-firmware: hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (RHEL-14264)
  - amd-ucode early loading broken [RHEL-15387]
  - Update to upstream 20231030 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX210
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX101
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX201
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX211
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - rtl_nic: update firmware of RTL8156B
  - linux-firmware: Update AMD cpu microcode
  - amdgpu: update SMU 13.0.0 firmware
  - linux-firmware: add Amlogic bluetooth firmware
  - i915: Add GuC v70.13.1 for DG2, TGL, ADL-P and MTL
  - iwlwifi: add a missing FW from core80-39 release
  - WHENCE: add symlink for BananaPi M64
  - linux-firmware: Add firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9260
  - i915: Update MTL DMC to v2.17
  - amdgpu: update raven firmware from 5.7 branch
  - amdgpu: update SDMA 5.2.7 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.8 firmware from 5.7 branch
  - amdgpu: update GC 10.3.7 firmware from 5.7 branch
  - amdgpu: update DCN 3.1.6 firmware from 5.7 branch
  - amdgpu: update SDMA 5.2.6 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.5 firmware from 5.7 branch
  - amdgpu: update GC 10.3.6 firmware from 5.7 branch
  - amdgpu: update VCN 4.0.0 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.0 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.0 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.0 firmware from 5.7 branch
  - amdgpu: update GC 11.0.0 firmware from 5.7 branch
  - amdgpu: update vega20 firmware from 5.7 branch
  - amdgpu: update beige goby firmware from 5.7 branch
  - amdgpu: update vega12 firmware from 5.7 branch
  - amdgpu: update vega10 firmware from 5.7 branch
  - amdgpu: update dimgrey cavefish firmware from 5.7 branch
  - amdgpu: update picasso firmware from 5.7 branch
  - amdgpu: update navy flounder firmware from 5.7 branch
  - amdgpu: update vangogh firmware from 5.7 branch
  - amdgpu: update green sardine firmware from 5.7 branch
  - amdgpu: update sienna cichlid firmware from 5.7 branch
  - amdgpu: update PSP 13.0.11 firmware from 5.7 branch
  - amdgpu: update GC 11.0.4 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.1 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.4 firmware from 5.7 branch
  - amdgpu: update GC 11.0.1 firmware from 5.7 branch
  - amdgpu: update navi14 firmware from 5.7 branch
  - amdgpu: update renoir firmware from 5.7 branch
  - amdgpu: update navi12 firmware from 5.7 branch
  - amdgpu: update VCN 4.0.4 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.7 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.2 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.7 firmware from 5.7 branch
  - amdgpu: update GC 11.0.2 firmware from 5.7 branch
  - amdgpu: update yellow carp firmware from 5.7 branch
  - amdgpu: update navi10 firmware from 5.7 branch
  - amdgpu: update raven2 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.10 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.10 firmware from 5.7 branch
  - amdgpu: update GC 11.0.3 firmware from 5.7 branch
  - amdgpu: update aldebaran firmware from 5.7 branch
  - iwlwifi: add FWs for new GL and MA device types with multiple RF modules


author: Scott Weaver <scweaver@redhat.com> - 20240109-142
changelog:
  - [DELL 9.3 BUG]System resume failed from suspend and auto reboot with WCN6856 (1/10 fail rate) (RHEL-4431)
  - [DELL 9.3 FEAT] - linux-firmware: Include to support QCA WIFI-7 WCN7850 Module: wifi firmware support (RHEL-10212)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: update firmware for w1u_uart
  - amdgpu: DMCUB updates for DCN314
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
  - amlogic/bluetooth: add firmware bin of W1 serial soc(w1u_uart)
  - linux-firmware: add firmware for mediatek bluetooth chip (MT7925)
  - linux-firmware: add firmware for MT7925
  - ASoC: tas2563: Add dsp firmware for laptops or other mobile devices
  - rtl_bt: Add firmware and config files for RTL8852BT/RTL8852BE-VT
  - ASoC: tas2781: Add dsp firmware for different laptops
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.36
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update board-2.bin
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00309-
  - ath12k: add new driver and firmware for WCN7850
  - iwlwifi: update gl FW for core80-165 release
  - intel: vsc: Add firmware for Visual Sensing Controller
  - cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2023 Models
  - cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2022 Models
  - QCA: Add bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00629
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 QRD
  - qcom: Add Audio firmware for SM8550 QRD
  - wfx: update to firmware 3.17
  - wfx: fix broken firmware
  - linux-firmware: Update AMD cpu microcode
  - cxgb4: Update firmware to revision 1.27.5.0
  - linux-firmware: add firmware for en8811h 2.5G ethernet phy
  - s5p-mfc: Add MFC v12 Firmware
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDFC8_145F
  - ice: update ice DDP wireless_edge package to 1.3.13.0
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - amdgpu: update DMCUB firmware to 0.0.194.0 for DCN321 and DCN32
  - qcom: update qrb4210 firmware
  - qcom: update qcm2290 firmware
  - qcom: update qcm2290/qrb4210 WiFi firmware file
  - qcom: update Venus firmware file for v6.0
  - powervr: add firmware for Imagination Technologies AXE-1-16M GPU
  - ice: update ice DDP comms package to 1.3.45.0
  - ice: update ice DDP package to 1.3.35.0
  - mediatek: Remove an unused packed library
  - mediatek: Sync shared memory structure changes
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: update DMCUB firmware to 0.0.193.0 for DCN31 and DCN314
  - i915: Update MTL DMC to v2.19
  - iwlwifi: fix for the new FWs from core83-55 release
  - iwlwifi: add new FWs from core83-55 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core83-55 release
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP G11 Laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 on 2024 ASUS Zenbook Laptops
  - linux-firmware: add firmware for mt7988 internal 2.5G ethernet phy
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - nvidia: add GSP-RM version 535.113.01 firmware images
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qca: add bluetooth firmware for WCN3988
  - linux-firmware: ixp4xx: Add the IXP4xx firmware
  - rtw89: 8852b: update fw to v0.29.29.5
  - rtw89: 8852b: update fw to v0.29.29.4
  - rtw89: 8851b: update fw to v0.29.41.3


author: Scott Weaver <scweaver@redhat.com> - 20240219-143
changelog:
  - [AMDCLIENT 9.4 Bug] Update PHX 1/2 firmware to fix some PSR related issues (RHEL-25408)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: First GuC release for LNL and Xe
  - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL
  - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7)
  - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet
  - ice: update ice DDP package to 1.3.36.0
  - Intel IPU3 ImgU: Move firmware file under intel/ipu
  - Intel IPU6: Move firmware binaries under ipu/
  - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models
  - panthor: Add initial firmware for Gen10 Arm Mali GPUs
  - amdgpu: DMCUB Updates for DCN321: 7.0.38.0
  - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0
  - qcom: update venus firmware file for v5.4
  - Montage: add firmware for Mont-TSSE
  - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32
  - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware
  - linux-firmware: Fix filenames for some CS35L41 firmwares for HP
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2
  - rtl_nic: add firmware for RTL8126A
  - linux-firmware: intel: Add IPU6 firmware binaries
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37
  - qcom: Add Audio firmware for SM8550 HDK
  - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs"
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 MTP
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SDMA 5.2.7 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update SDMA 5.2.6 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: add GC 11.0.1 rlc_1 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update picasso firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update navi14 firmware
  - amdgpu: add VCN 4.0.3 firmware
  - amdgpu: add SDMA 4.4.2 firmware
  - amdgpu: add SMU 13.0.6 firmware
  - amdgpu: add PSP 13.0.6 firmware
  - amdgpu: Add GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - RTL8192E: Remove old realtek WiFi firmware
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for DCN314
  - qcom: Update the firmware for Adreno a630 family of GPUs
  - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops
  - linux-firmware: update firmware for qat_4xxx devices
  - cirrus: Add firmware file for cs42l43
  - amdgpu: DMCUB updates for DCN312
  - amdgpu: DMCUB updates for DCN314
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240603-144
changelog:
  - [AMD 9.3 FEAT]: MI300 GPU firmware (RHEL-10056)
  - CVE-2023-31346 linux-firmware: kernel: Reserved fields in guest message responses may not be zero initialized [rhel-9.4.z] (RHEL-35597)
  - linux-firmware ships encrypted zip files (named *.ncf) (RHEL-32145)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: add support for PSP 14.0.1
  - amdgpu: add support for VPE 6.1.1
  - amdgpu: add support for VCN 4.0.6
  - amdgpu: add support for SDMA 6.1.1
  - amdgpu: add support for GC 11.5.1
  - amdgpu: Add support for DCN 3.5.1
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add ordinary firmware for RTL8821AU device
  - amdgpu: add new ISP 4.1.1 firmware
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Amphion: Update vpu firmware
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - i915: Add BMG DMC v2.06
  - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306
  - linux-firmware: Update firmware tuning for HP Consumer Laptop
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
  - linux-firmware: Add firmware and tuning for Lenovo Y770S
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops
  - i915: Update Xe2LPD DMC to v2.20
  - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41
  - linux-firmware: Add firmware for Lenovo Thinkbook 13X
  - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
  - amdgpu: add DMCUB 3.5 firmware
  - amdgpu: add VPE 6.1.0 firmware
  - amdgpu: add VCN 4.0.5 firmware
  - amdgpu: add UMSCH 4.0.0 firmware
  - amdgpu: add SDMA 6.1.0 firmware
  - amdgpu: add PSP 14.0.0  firmware
  - amdgpu: add GC 11.5.0 firmware
  - amdgpu: update license date
  - Montage: update firmware for Mont-TSSE
  - linux-firmware: Add tuning parameter configs for CS35L41 Firmware
  - linux-firmware: Fix firmware names for Laptop SSID 104316a3
  - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - iwlwifi: add gl FW for core87-44 release
  - iwlwifi: add ty/So/Ma firmwares for core87-44 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release
  - nvidia: Update Tegra210 XUSB firmware to v50.29
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update renoir firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update sdma 6.0.1 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update sdma 6.0.2 firmware
  - amdgpu: update ipsp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update raven firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update smu 13.0.6 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update sdma 6.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update  firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update gc 10.3.7 firmware
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9
  - Merge https://github.com/pkshih/linux-firmware into rtw
  - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file
  - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location
  - i915: Add DG2 HuC 7.10.15
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - mekdiatek: Update mt8186 SOF firmware to v2.0.1
  - rtw89: 8852c: update fw to v0.27.56.14
  - rtw89: 8922a: add firmware v0.35.18.0
  - rtw88: Add RTL8703B firmware v11.0.0
  - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops
  - Montage: update firmware for Mont-TSSE
  - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
  - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560
  - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8
  - imx: sdma: update firmware to v3.6/v4.6
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - iwlwifi: update 9000-family firmwares to core85-89
  - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops
  - amdgpu: Update VCN firmware binaries
  - Intel IPU2: Add firmware files
  - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet
  - i915: Add Xe2LPD DMC v2.18
  - i915: Update MTL DMC v2.21
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - linux-firmware: add firmware for MT7996


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240716-145
changelog:
  - [Intel 9.5 FEAT] [SRF] QAT_402XX firmware update (RHEL-47355)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qcom: move signed x1e80100 signed firmware to the SoC subdir
  - qcom: add video firmware file for vpu-3.0
  - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
  - qcom: add gpu firmwares for x1e80100 chipset
  - linux-firmware: add firmware for qat_402xx devices
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VPE 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update SDMA 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - intel: avs: Add topology file for I2S Analog Devices 4567
  - intel: avs: Add topology file for I2S Nuvoton 8825
  - intel: avs: Add topology file for I2S Maxim 98927
  - intel: avs: Add topology file for I2S Maxim 98373
  - intel: avs: Add topology file for I2S Maxim 98357a
  - intel: avs: Add topology file for I2S Dialog 7219
  - intel: avs: Add topology file for I2S Realtek 5663
  - intel: avs: Add topology file for I2S Realtek 5640
  - intel: avs: Add topology file for I2S Realtek 5514
  - intel: avs: Add topology file for I2S Realtek 298
  - intel: avs: Add topology file for I2S Realtek 286
  - intel: avs: Add topology file for I2S Realtek 274
  - intel: avs: Add topology file for Digital Microphone Array
  - intel: avs: Add topology file for HDMI codecs
  - intel: avs: Add topology file for HDAudio codecs
  - Add a copy of Apache-2.0
  - intel: avs: Update AudioDSP base firmware for APL-based platforms
  - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform
  - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
  - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
  - amdgpu: Update ISP FW for isp v4.1.1
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core
  - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB
  - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - linux-firmware: add new cc33xx firmware for cc33xx chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  - linux-firmware: Add firmware for Lenovo Thinkbooks
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SMU 13.0.6 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update aldebaran firmware
  Resolves: RHEL-47355


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Tao Liu <ltao@redhat.com> - 2.0.27-7
changelog:
  - Explain the auto_reset_crashkernel option in more details
  - Use the same /etc/resolve.conf in kdump initrd if it's managed manually


author: Tao Liu <ltao@redhat.com> - 2.0.27-10
changelog:
  - mkdumprd: Fix makedumpfile parameter check.
  - Install the driver of physical device for a SR-IOV virtual device
  - Try to install PHY and MDIO bus drivers explicitly


author: Tao Liu <ltao@redhat.com> - 2.0.27-13
changelog:
  - kdump-lib: Drop 'file' dependency in is_uki
  - kdumpctl.8: Add description to reset-crashkernel --reboot
  - kdumpctl: Fix misleading message and erratic reboot in reset_crashkernel
  - kdumpctl: Drop default kexec '-d' option


author: - Susan LeGendre-McGhee <slegendr@redhat.com> - 8.2.4.15-136.el9
changelog:
  - Fixed null pointer error with timed-out dedupt contexts.
  - Made timed-out dedupe contexts available for reuse sooner.
  - Added build support for more kernel versions.
  - Resolves: RHEL-42515


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Christopher Snyder <csnyder@redhat.com> 1.29.31-1
changelog:
  - warning: refname 'subscription-manager-1.29.30-1' is ambiguous.
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - tests: fix typos in test method names (ptoscano@redhat.com)
  - 2125227: Fixed incorrect registration warning with yum/dnf
    (jajerome@redhat.com)
  - 2094942: Fixed expected message for manual attach case (jajerome@redhat.com)
  - ENT-5102: Type-hint rhsmlib/facts (mhorky@redhat.com)
  - 2094942: Improve warning message (auto-attach in SCA mode)
    (jhnidek@redhat.com)
  - Update INSTALL.md (mhorky@redhat.com)
  - Remove unused classes of DBus tests (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Unregister objects (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Register objects (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Products object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of AllFacts object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Entitlement object (mhorky@redhat.com)
  - Fix typo in method name of EntitlementService (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Consumer object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Attach object (mhorky@redhat.com)
  - Fix possible parsing issues of dmidecode output (mhorky@redhat.com)
  - ENT-5317: New way to test DBus methods, starting with Config
    (mhorky@redhat.com)
  - cockpit: disable the reference branch for sub-man-cockpit
    (ptoscano@redhat.com)
  - TESTING.md: Remove mention of pytest-xdist (mhorky@redhat.com)
  - INSTALL.md: Update list of packages to be installed (mhorky@redhat.com)
  - Stop calling pytest with --failed-first (mhorky@redhat.com)
  - GCP: Better computing of cached token TTL (jhnidek@redhat.com)
  - 2101510: Fix D-Bus Register() and update entitlement certs
    (jhnidek@redhat.com)
  - 2120744: Close keycloak connection properly (jhnidek@redhat.com)
  - 2094942: [RFE] Improve the message, when  SCA is enabled (jhnidek@redhat.com)
  - Replaced list[] with List[] and dict[] with Dict[]. (jhnidek@redhat.com)
  - Update TESTING.md (mhorky@redhat.com)
  - Update README.md (mhorky@redhat.com)
  - Add INSTALL.md (mhorky@redhat.com)
  - Added type hints to package rhsmlib.service (jhnidek@redhat.com)
  - Added some missing imports. (jhnidek@redhat.com)
  - Reformated using black. (jhnidek@redhat.com)
  - Added one FIXME to redeem.py (jhnidek@redhat.com)
  - Added type hints and FIXMEs to rhsm package. (jhnidek@redhat.com)
  - [wip] ENT-5100: Type hint rhsm (mhorky@redhat.com)
  - Added type hints to syspurpose package (jhnidek@redhat.com)
  - Drop libnotify-devel usage (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.32-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - utils: import pkg_resources only when needed (ptoscano@redhat.com)
  - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com)
  - Alter import of rhsm.config functions (mhorky@redhat.com)
  - Handle tests in containers better (mhorky@redhat.com)
  - Call parent methods in DBusServerStubProvider (mhorky@redhat.com)
  - Base D-Bus tests on SubManFixture (mhorky@redhat.com)
  - ENT-5532: Call rhsm-package-profile-uploader with --force-upload
    (jhnidek@redhat.com)
  - 2108549: do not detect containers in OCP as such (ptoscano@redhat.com)
  - tests: extend InContainerTests for path checks (ptoscano@redhat.com)
  - Resolved issues in PR feedback (jajerome@redhat.com)
  - Updated request handling in connection.py (jajerome@redhat.com)
  - Resolve issues from PR review (jajerome@redhat.com)
  - Removed fixme since activateMachine() is still used (jajerome@redhat.com)
  - Black/flake8 fixes (jajerome@redhat.com)
  - FIXME: renamed default argument to not shadow inbuilt type
    (jajerome@redhat.com)
  - FIXME: removed Restlib and using only BaseRestLib (jajerome@redhat.com)
  - FIXME: updated unregisterConsumer() to return True if status code is 204
    (jajerome@redhat.com)
  - FIXME: changed unbindBySerial/unbindByPoolId to return bool
    (jajerome@redhat.com)
  - FIXME: changed default value of facts in updateConsumerFacts()
    (jajerome@redhat.com)
  - FIXME: sanitized email/lang variables in activateMachine()
    (jajerome@redhat.com)
  - FIXME: made email argument required in activatemachine()
    (jajerome@redhat.com)
  - FIXME: changed default value of serials argument to None
    (jajerome@redhat.com)
  - FIXME: removed unused username/password arguments (jajerome@redhat.com)
  - FIXME: raise exceptions where sanitizing guest Id returns None
    (jajerome@redhat.com)
  - FIXME: renamed response argument to result in validateResponse()
    (jajerome@redhat.com)
  - FIXME: rename info argument to params in _request() (jajerome@redhat.com)
  - FIXME: added error message when redeeming subscription fails
    (jajerome@redhat.com)
  - FIXME: removed unused UEPConnection class methods (jajerome@redhat.com)
  - Fixed profile tests setting Package release numbers as int instead of str
    (jajerome@redhat.com)
  - FIXME: changed epoch data type to str in Package class (jajerome@redhat.com)
  - FIXME: added null-checks for stdout/stderr wrapper (jajerome@redhat.com)
  - FIXME: re-iterated a fix is not needed for urlparse (jajerome@redhat.com)
  - FIXME: added exception messages to parse_url() (jajerome@redhat.com)
  - FIXME: changed  lists to tuples in StatusSpinnerStyle class
    (jajerome@redhat.com)
  - FIXME: fixed type hints for _normalize_string() (jajerome@redhat.com)
  - FIXME: use super() instead of class name (jajerome@redhat.com)
  - FIXME: fixed strings not being translated in is_log_level_valid()
    (jajerome@redhat.com)
  - FIXME: resolved improper use of tempfile in save() (jajerome@redhat.com)
  - FIXME: fixed config_file argument not being used in save()
    (jajerome@redhat.com)
  - FIXME: updated default value for files_name argument in read()
    (jajerome@redhat.com)
  - FIXME: fixed minor typo in bogus() (jajerome@redhat.com)
  - FIXME: changed read() to return self instead of None (jajerome@redhat.com)
  - FIXME: set default argument 'facts' to None in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: renamed argument 'type' to 'consumer_type' in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: ping() resolved in rhsm/connection.py (jajerome@redhat.com)
  - Remove test dependency 'mock' (mhorky@redhat.com)
  - Fix failures of D-Bus' Register tests (mhorky@redhat.com)
  - Mark D-Bus tests (mhorky@redhat.com)
  - 2131789: Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com)
  - Catch generic OSError during HTTPSConnection.connect() (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com)
  - Catch also CertificateLoadingError for identity cert loading
    (ptoscano@redhat.com)
  - ENT-4286: Additional fix for exception handling (jajerome@redhat.com)
  - Remove D-Bus env vars from container and CI files (mhorky@redhat.com)
  - 2121350: Implement "force" register option in rhsm dbus python binding
    (jajerome@redhat.com)
  - Show locals in pytest output (mhorky@redhat.com)
  - Improve formatting of CertificateLoadingError (ptoscano@redhat.com)
  - Raise a new CertificateLoadingError on X.509 loading failures
    (ptoscano@redhat.com)
  - Improve formatting of UnknownContentException (ptoscano@redhat.com)
  - connection: improve the internal UnknownContentException
    (ptoscano@redhat.com)
  - utils: add terminal_printable_content (ptoscano@redhat.com)
  - connection: rename NetworkException to UnknownContentException
    (ptoscano@redhat.com)
  - Improve formatting of ProxyException (ptoscano@redhat.com)
  - connection: improve the internal ProxyException (ptoscano@redhat.com)
  - Improve formatting of socket.gaierror (ptoscano@redhat.com)
  - Improve formatting of ConnectionError (ptoscano@redhat.com)
  - Improve formatting of BadCertificateException (ptoscano@redhat.com)
  - connection: extend BadCertificateException w/ SSL exception
    (ptoscano@redhat.com)
  - connection: drop dead code (ptoscano@redhat.com)
  - ENT-4286: Simplify exception reporting with system_exit()
    (jajerome@redhat.com)
  - 2136694: Clear progress messages properly (mhorky@redhat.com)
  - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com)
  - 2097679: Additional fix for non-interactive parameters (jajerome@redhat.com)
  - 2097679: Fixed script hang in non-interactive execution (jajerome@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.33-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (ljanda@redhat.com)
  - Translated using Weblate (French) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (jsefler@redhat.com)
  - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
  - Test libdnf plugin using GitHub Actions (mhorky@redhat.com)
  - libdnf: fix return value of findProductId() (ptoscano@redhat.com)
  - ENT-5541: Publish PR coverage (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Spanish) (ptoscano@redhat.com)
  - Simplify test setup for D-Bus fact collection (mhorky@redhat.com)
  - ENT-3759: Test on GitHub Actions (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.34-1
changelog:
  - Update TESTING.md (mhorky@redhat.com)
  - Improved debug print of http traffic, when proxy is used (jhnidek@redhat.com)
  - ENT-5544: Remove Jenkins jobs, Containers (mhorky@redhat.com)
  - ENT-5549: Remove unused code from entcertlib (mhorky@redhat.com)
  - ENT-5549: Fix issues found when type-hinting (mhorky@redhat.com)
  - ENT-5549: Fix return code handling of CLI (mhorky@redhat.com)
  - ENT-5549: Fix found type hint issues (mhorky@redhat.com)
  - ENT-5549: Fix object instantiation in EntitlementDirectory
    (mhorky@redhat.com)
  - ENT-5549: Refactor ProductDirectory (mhorky@redhat.com)
  - ENT-5549: Change internal implementation for some Cache methods
    (mhorky@redhat.com)
  - ENT-5549: Clean up _sync_with_server arguments of cache objects
    (mhorky@redhat.com)
  - ENT-5549: Remove 'autoheal' argument from Action clients (mhorky@redhat.com)
  - Refactored code a little bit (jhnidek@redhat.com)
  - 2093291: Make locking more reliable (jhnidek@redhat.com)
  - test: add simple test for 2178610 (ptoscano@redhat.com)
  - Small improvement of debugging of http traffic (jhnidek@redhat.com)
  - 2093883: Fix issue with race condition in rhsm.service (jhnidek@redhat.com)
  - 2178610: do not collect unentitled products in SCA mode (ptoscano@redhat.com)
  - 2174297: register: do a simple strip() on environment(s) input
    (ptoscano@redhat.com)
  - Stop subclassing 'object' (ptoscano@redhat.com)
  - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com)
  - tests: Install dnf-plugins-core every time (mhorky@redhat.com)
  - 2169251: connection: restore UEPConnection.getJob() (ptoscano@redhat.com)
  - ENT-5106: Type-hint subscription_manager/ files (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Dan Horák <dhorak@redhat.com> - 4.2.3-1
changelog:
  - updated to 4.2.3 (RHEL-11415)
  - fix selfcheck in FIPS mode (RHEL-9918)
  - Resolves: RHEL-11415 RHEL-9918


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Dan Horák <dan[at]danny.cz> - 2.2.0-10
changelog:
  - build with libzfcphbaapi as standalone library to avoid dependency on obsolete libhbaapi (#1922413)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Than Ngo <than@redhat.com> - 1.7.14-3
changelog:
  - Resolves: #2181241, lsvpd is not reporting the correct I/O microcode
    for HBA, PCIe, SAS adapters, HDD, etc


author: Than Ngo <than@redhat.com> - 1.7.14-4
changelog:
  - Related: #2181241, backport upstream patch to update update nvme_templates
    with logpage format for 0005 and 0006 versions


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230214-1
changelog:
  - Update Intel CPU microcode to microcode-20230214 release, addresses
    CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171237,
      - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b000181;
    - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
      0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
      0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
      0x2b000181;
    - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
      0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
      0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
      0x2c000170;
    - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
    - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
    - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
      revision 0x410e;
    - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
      revision 0x410e;
    - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf0 up to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
      to 0xf4;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
      up to 0x1000161;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
      up to 0x4003303;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003302 up to 0x5003303;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
      up to 0x7002503;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
      up to 0xd000389;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
      to 0x22;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
      up to 0xb8;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
      to 0x32;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
      to 0x42;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
      up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x421 up to 0x429;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
      up to 0x429;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
      up to 0x24000024;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
      to 0xf4;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf0 up to 0xf4;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
      to 0x57;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
      0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
      0x2c (old pf 0x3).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230516-1
changelog:
  - Update Intel CPU microcode to microcode-20230516 release (#2213124):
    - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
    - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
      to 0x2006f05;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf4 up to 0xf6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf4 up
      to 0xf8;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
      up to 0x1000171;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
      up to 0x4003501;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003303 up to 0x5003501;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
      up to 0x7002601;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
      up to 0xd000390;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
      up to 0x1000230;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
      up to 0xba;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
      to 0x33;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
      to 0x44;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
      up to 0x42a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
      to 0x58;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
      to 0x113;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
      up to 0x4112.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-1
changelog:
  - Update Intel CPU microcode to microcode-20230808 release, addresses
    CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2213124, #2223992, #2230677,
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
      to 0x2007006;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf6 up to 0xf8;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf8 up
      to 0xfa;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
      up to 0x1000181;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
      up to 0x4003604;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003501 up to 0x5003604;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
      up to 0x7002703;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
      up to 0xd0003a5;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
      up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
      to 0x2c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
      up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
      up to 0x42c;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
      to 0xf8;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
      to 0x59;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
      to 0x119;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
      up to 0x4119 (old pf 0xc0);
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
      to 0x11 (old pf 0x1).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-2
changelog:
  - Add support for the new, more correct, variant of dracut's default
    $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20231009-1
changelog:
  - Update Intel CPU microcode to microcode-20231009 release, addresses
    CVE-2023-23583:
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240531-1
changelog:
  - Update Intel CPU microcode to microcode-20240531 release, addresses
    CVE-2023-22655, CVE-2023-23583. CVE-2023-28746, CVE-2023-38575,
    CVE-2023-39368, CVE-2023-42667, CVE-2023-43490, CVE-2023-45733,
    CVE-2023-46103, CVE-2023-49141 (RHEL-30861, RHEL-30864, RHEL-30867,
    RHEL-30870, RHEL-30873, RHEL-41094, RHEL-41109):
    - Addition of 06-aa-04/0xe6 (MTL-H/U C0) microcode at revision 0x1c;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) at
      revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) at
      revision 0x4121;
    - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode at revision 0x4121;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode at revision
      0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) at revision 0x21000230;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) at revision 0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode at revision
      0x21000230;
    - Removal of 06-8f-04/0x10 microcode at revision 0x2c000290;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b0004d0;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000290;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb4 up to 0xb6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf8 up to 0xfa;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf4 up
      to 0xf8;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfa up
      to 0xfc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000181
      up to 0x1000191;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003604
      up to 0x4003605;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003604 up to 0x5003605;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002703
      up to 0x7002802;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000014 up to 0xe000015;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x38 up
      to 0x3e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003b9
      up to 0xd0003d1;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000268
      up to 0x1000290;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3e up
      to 0x42;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x22 up
      to 0x24;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc2
      up to 0xc4;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x4e up
      to 0x50;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000290 up to
      0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x17 up
      to 0x19;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x32
      up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x430 up to 0x433;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x430
      up to 0x433;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x5 up
      to 0x7;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000024
      up to 0x24000026;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf8 up
      to 0xfa;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5d up
      to 0x5e;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x11d up
      to 0x123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x411c up to 0x4121;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x411c
      up to 0x4121;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x12 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35.


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Peter Jones <pjones@redhat.com> - 2:0.5.0-3
changelog:
  - Add support for "mokutil --list-sbat-revocations" and
    "mokutil --set-sbat-policy"
    Related: CVE-2022-28737


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110314, rebase to 3.19.0
  - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110476, openCryptoki ep11 token: master key consistency
  - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Dan Horák <dhorak@redhat.com> - 2.4.0-2
changelog:
  - engine: Only register those algos specified with default_algorithms (#2221894)
  - Resolves: #2221894


author: Dan Horák <dhorak@redhat.com> - 2.4.0-4
changelog:
  - provider: RSA: Fix get_params to retrieve max-size, bits, and security-bits (#2222878 #2224568)
  - provider: Default debug directory to /tmp but make it configurable (#2160084)
  - Resolves: #2222878 #2160084 #2224568


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Than Ngo <than@redhat.com> - 1.3.10-3
changelog:
  - Resolves: #2111991, Add udev rule for the nx-gzip in to the core subpackage
  - Resolves: #2121470, Fix lsslot -c mem output when using 4GB LMB size
  - Resolves: #2110129, Add NVMf-FC boot support for Power


author: Than Ngo <than@redhat.com> - 1.3.10-4
changelog:
  - Resolves: #2150698, handle nsid of nvmf device as hexadecimal number
  - Resolves: #2150697, setup multiple device path for a nvmf boot device


author: Than Ngo <than@redhat.com> - 1.3.10-6
changelog:
  - Resolves: #2166870, lparstat: Fix display of mode for dedicated-donating partition
  - Resolves: #2169269, lparstat: Fix negative values seen while running lparstat with -E option


author: Than Ngo <than@redhat.com> - 1.3.10-7
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  Resolves: #2225371


author: Than Ngo <than@redhat.com> - 1.3.10-8
changelog:
  - Resolves: RHEL-16045, Support partial SMT level through SYS FS smt/control files
  - Resolves: RHEL-11456, LPM hooks


author: Than Ngo <than@redhat.com> - 1.3.10-9
changelog:
  - Resolves: RHEL-20350, getting larger Negative value while running rtas_dbg -l
  - Resolves: RHEL-19076, installation fails if nsid of nvme device is greater than 10
  - Resolves: RHEL-11456, add new /etc/drmgr.d/pmig hierarchy


author: Than Ngo <than@redhat.com> - 1.3.10-11
changelog:
  - Resolves: RHEL-23620, nvram help page and man page are not in sync
  - Resolves: RHEL-23619, segault when running nvram --nvram-size 268435456
  - Resolves: RHEL-23624, segault when running nvram --print-config


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-3
changelog:
  - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399
  - Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Rafael Jeffman <rjeffman@redhat.com> - 2.2.1-1
changelog:
  - Rebase to version 2.2.1
    Resolves: rhbz#2088661
  - Disable DNSSEC tests using SHA1 due to crypto policies
    Resolves: rhbz#2107651


author: Miro Hrončok <mhroncok@redhat.com> - 0.4-39
changelog:
  - Subpackage python2-iniparse has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: John Kacur <jkacur@redhat.com> - 0.6.3-5
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2031717


author: John Kacur <jkacur@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream python-linux-procfs-0.7.3
  - This rebase removes upstream spec files and
  - syncs the git tag with version
  Resolves: RHEL-7614


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.3.4-2
changelog:
  - Apply PR6 by Igor Raits <ignatenkobrain@fedoraproject.org>: Support
    for building on EPEL8 + upstream tests invocation.
  - Remove unused BR on python3-tidy (we'd need pytidylib instead, which
    doesn't seem to be packaged).


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.5-6
changelog:
  - Security fix for CVE-2024-37891
  - Backport upstream patch to fix TypeError for http connection if the PoolManager
  - is instantiated with server_hostname
  Resolves: RHEL-43172
  Resolves: RHEL-39285


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-25
changelog:
  - Followup on #2166383
  - Add compat scripts calling external find-debug, sepdebugcrcfix and debugedit
  - Add %__find_debuginfo macro


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-26
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.3-1
changelog:
  - SETools 4.4.3 release
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Sumit Bose <sbose@redhat.com>
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: jira#RHEL-12112
  - fix ccache handling for leave operation
    Resolves: jira#RHEL-5104


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: systemd maintenance team <systemd-maint@redhat.com> - 252-28
changelog:
  - random-seed: shorten a bit may_credit() (RHEL-16952)
  - random-seed: make one more use of random_write_entropy() (RHEL-16952)
  - random-seed: use getopt() (RHEL-16952)
  - random-seed: make the logic to calculate the number of bytes read from the random seed file clearer (RHEL-16952)
  - random-seed: no need to pass 'mode' argument when opening /dev/urandom (RHEL-16952)
  - random-seed: split out run() (RHEL-16952)
  - random_seed: minor improvement in run() (RHEL-16952)
  - random-seed: downgrade some messages (RHEL-16952)
  - random-seed: clarify one comment (RHEL-16952)
  - random-seed: make sure to load machine id even if the seed file is missing (RHEL-16952)
  - chase-symlinks: add new flag for prohibiting any following of symlinks (RHEL-16952)
  - bootctl,bootspec: make use of CHASE_PROHIBIT_SYMLINKS whenever we access the ESP/XBOOTLDR (RHEL-16952)
  - boot: implement kernel EFI RNG seed protocol with proper hashing (RHEL-16952)
  - random-seed: refresh EFI boot seed when writing a new seed (RHEL-16952)
  - random-seed: handle post-merge review nits (RHEL-16952)
  - boot: do not truncate random seed file (RHEL-16952)
  - bootctl: install system token on virtualized systems (RHEL-16952)
  - boot: remove random-seed-mode (RHEL-16952)
  - stub: handle random seed like sd-boot does (RHEL-16952)
  - efi: add efi_guid_equal() helper (RHEL-16952)
  - efi: add common implementation for loop finding EFI configuration tables (RHEL-16952)
  - boot: Detect hypervisors using SMBIOS info (RHEL-16952)
  - boot: Skip soft-brick warning when in a VM (RHEL-16952)
  - boot: Replace UINTN with size_t (RHEL-16952)
  - boot: Use unsigned for beep counting (RHEL-16952)
  - boot: Use unicode literals (RHEL-16952)
  - macro: add generic IS_ALIGNED32() anf friends (RHEL-16952)
  - meson: use 0|1 for SD_BOOT (RHEL-16952)
  - boot: Add printf functions (RHEL-16952)
  - boot: Use printf for error logging (RHEL-16952)
  - boot: Introduce log_wait (RHEL-16952)
  - boot: Add log_trace debugging helper (RHEL-16952)
  - tree-wide: Use __func__ in asserts (RHEL-16952)
  - boot: Drop use of xpool_print/SPrint (RHEL-16952)
  - boot: Drop use of Print (RHEL-16952)
  - boot: Rework GUID handling (RHEL-16952)
  - efi-string: Fix strchr() null byte handling (RHEL-16952)
  - efi-string: Add startswith8() (RHEL-16952)
  - efi-string: Add efi_memchr() (RHEL-16952)
  - vmm: Add more const (RHEL-16952)
  - vmm: Add smbios_find_oem_string() (RHEL-16952)
  - stub: Read extra kernel command line items from SMBIOS (RHEL-16952)
  - vmm: Modernize get_smbios_table() (RHEL-16952)
  - stub: measure SMBIOS kernel-cmdline-extra in PCR12 (RHEL-16952)
  - efi: support passing empty cmdline to mangle_stub_cmdline() (RHEL-16952)
  - efi: set EFIVAR to stop Shim from uninstalling its protocol (RHEL-16952)
  - ukify: use empty stub for addons (RHEL-16952)
  - stub: allow loading and verifying cmdline addons (RHEL-16952)
  - TODO: remove fixed item (RHEL-16952)
  - fix: do not check/verify slice units if recursive errors are to be ignored (RHEL-1086)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-30
changelog:
  - resolved: limit the number of signature validations in a transaction (RHEL-26643)
  - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643)
  - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133)
  - units: change assert to condition to skip running in initrd/os (RHEL-16182)
  - ci: add configuration for regression sniffer GA (RHEL-1086)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-31
changelog:
  - bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952)
  - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952)
  - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952)
  - sha256: add helper than hashes a buffer *and* its size (RHEL-16952)
  - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952)
  - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952)
  - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952)
  - bootctl: split out setting of system token into function of its own (RHEL-16952)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-33
changelog:
  - execute: Pass AT_FDCWD instead of -1 (RHEL-31783)
  - ci(src-git): update list of supported products (RHEL-30372)
  - coredump: by default process and store core files up to 1GiB (RHEL-15501)
  - coredump: keep core files for two weeks (RHEL-15501)
  - ukify: make the test happy with the latest OpenSSL (RHEL-30372)
  - test_ukify: use raw string for the regex (RHEL-30372)
  - coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-29430)
  - test: add a couple of tests for systemd-coredump (RHEL-29430)
  - test: don't expand the subshell expression prematurely (RHEL-29430)
  - coredump filter: fix stack overflow with =all (RHEL-29430)
  - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-29430)
  - test: add coverage for CoredumpFilter=all (RHEL-29430)
  - test: rotate journal before storing coredumps (RHEL-29430)
  - test: sync with the fake binary before killing it (RHEL-29430)
  - test: check coredump handling in containers & namespaces (RHEL-29430)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-34
changelog:
  - ci: update actions/upload-artifact to v4 (RHEL-30372)
  - journal-remote: code is of type enum MHD_RequestTerminationCode (RHEL-30372)
  - resolve: dns_server_feature_level_*_string type is DnsServerFeatureLevel (RHEL-30372)
  - shared|install: Use InstallChangeType consistently (RHEL-30372)
  - test: temporarily disable coredumps in testsuite-17.03.sh (RHEL-30372)
  - ci: update manpage deployment workflow (RHEL-30372)
  - bootspec: fix null-dereference-read (RHEL-36284)
  - units: don't install pcrphase-related units without gnu-efi (RHEL-33384)
  - kernel-install: fix uki-copy deinstall (RHEL-36505)
  - ci(packit): explicitly clone `c9s` branch (RHEL-30372)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-37
changelog:
  - ci(src-git): add RHEL-9.1 and RHEL-9.1.z to allowed versions (RHEL-30372)
  - libsystemd: link with '-z nodelete' (RHEL-6589)
  - basic/utf8: make utf8_encoded_to_unichar() return length of the codepoint (RHEL-31219)
  - test-gunicode: add new test to show that unichar_iswide() is borked (RHEL-31219)
  - string-util: pass ANSI sequences through unchanged (RHEL-31219)
  - cryptsetup: do not assert when unsealing token without salt (RHEL-38864)
  - cryptsetup: check the existence of salt by salt_size > 0 (RHEL-38864)
  - core/mount: if umount(8) fails but mount disappeared, assume success (RHEL-13159)
  - Drop log level of header limits log message (RHEL-33890)
  - journal: do not rotate unrelated journal files when full or corrupted (RHEL-33890)
  - man: suffix --unit with an equal sign, since it expects an argument (RHEL-31070)
  - shared: move uid-alloc-range.[ch] from src/shared/ → src/basic/ (RHEL-31070)
  - journald: move uid_for_system_journal() to uid-alloc-range.h (RHEL-31070)
  - sd-journal: when SD_JOURNAL_CURRENT_USER is set, and called from system UID, imply SD_JOURNAL_SYSTEM (RHEL-31070)
  - man: document that journalctl --user requires Storage=persistent (RHEL-31070)
  - fix: prefix of dmesg pstore files (RHEL-20322)
  - backport new mkosi (RHEL-27512)
  - test: Skip various tests when /sys is not mounted (RHEL-27512)
  - string-util: introduce ascii_ishex() (RHEL-27512)
  - sd-id128: several cleanups (RHEL-27512)
  - sd-id128: make id128_read() or friends return -ENOPKG when the file contents is "uninitialized" (RHEL-27512)
  - test: add tests for "uninitialized" string handling by id128_read_fd() (RHEL-27512)
  - man: mention sd_id128_get_machine() or friend may return -ENOPKG (RHEL-27512)
  - sd-id128: make sd_id128_get_boot() and friend return -ENOMEDIUM (RHEL-27512)
  - sd-id128: make sd_id128_get_boot() and friend return -ENOSYS when /proc/ is not mounted (RHEL-27512)
  - man: mention that sd_id128_get_boot() and friend may return -ENOSYS (RHEL-27512)
  - sd-id128: fold do_sync flag into Id128FormatFlag (RHEL-27512)
  - sd-id128: make sd_id128_get_machine() or friends return -EUCLEAN when an ID is in an invalid format (RHEL-27512)
  - sd-id128: allow sd_id128_get_machine() and friend to be called with NULL (RHEL-27512)
  - sd-id128: also refuse an empty invocation ID (RHEL-27512)
  - man: update documents for sd_id128_get_invocation() (RHEL-27512)
  - test-id128: simplify machine-id check (RHEL-27512)
  - test-fs-util: skip part of test_chase_symlinks if machine-id is not initialized (RHEL-27512)
  - test-unit-name: simplify machine-id check (RHEL-27512)
  - test-load-fragment: simplify machine-id check (RHEL-27512)
  - journal: skip part of test-journal-interleaving if no machine-id exists (RHEL-27512)
  - test: skip journal tests without valid /etc/machine-id (RHEL-27512)
  - test-recurse-dir: work around nftw() ignoring symlinks() (RHEL-27512)
  - test: Skip test-recurse-dir on overlayfs (RHEL-27512)
  - test-specifier: Ignore -ENOPKG from specifier_printf() (RHEL-27512)
  - test-execute: Skip when /sys is read-only (RHEL-27512)
  - kernel-install: Make sure KERNEL_INSTALL_BYPASS is disabled in tests (RHEL-27512)
  - tools: make sure $KERNEL_INSTALL_BYPASS is disabled when checking help (RHEL-27512)
  - test-execute: drop capabilities when testing with user manager (RHEL-27512)
  - tmpfiles: Add merge support for copy files action (RHEL-27512)
  - generator: add generator_open_unit_file_full to allow creating temporary units (RHEL-27512)
  - network-generator: rewrite unit if it already exists and its content changed (RHEL-27512)
  - ci: drop super-linter's shellcheck (RHEL-27512)
  - mkosi: make sure we build & use RHEL 9 stuff (RHEL-27512)
  - ci: backport mkosi CI configuration from upstream (RHEL-27512)
  - mkosi: explicitly enroll SecureBoot keys (RHEL-27512)
  - test-execute: also mount tmpfs on /dev/shm (RHEL-27512)
  - mkosi: fix UKI addons test (RHEL-27512)
  - Revert "mkosi: Disable cmdline addon test for now" (RHEL-27512)
  - Revert "mkosi: Don't fail on systemd-vconsole-setup.service failure for now" (RHEL-27512)
  - mkosi: make shellcheck happy (RHEL-27512)
  - mkosi: use pesign for signing UKI addons (RHEL-27512)
  - test: copy out the necessary test data before we start overmounting stuff (RHEL-27512)
  - ci: make the build dir accessible when running w/o privileges (RHEL-27512)
  - ci: explicitly change oom-{score}-adj before running tests (RHEL-27512)
  - ratelimit: add ratelimit_left helper (RHEL-35703)
  - manager: restrict Dump*() to privileged callers or ratelimit (RHEL-35703)
  - ci: define `runas` function inline (RHEL-35703)
  - Drop /dev test in test-mountpoint-util (RHEL-30372)
  - core/manager: export manager_dbus_is_running (RHEL-40878)
  - core: refuse dbus activation if dbus is not running (RHEL-40878)
  - core: only refuse Type=dbus service enqueuing if dbus has stop job (RHEL-40878)
  - Revert "core/manager: export manager_dbus_is_running" and partially "core: refuse dbus activation if dbus is not running" (RHEL-40878)
  - manager: fix reloading in reload-or-restart --marked (RHEL-40878)
  - rpm: add `systemd_postun_with_reload` and `systemd_user_postun_with_reload` (RHEL-40878)
  - rpm: add `systemd_user_daemon_reexec` (RHEL-40878)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-38
changelog:
  - tools: fix the file name that "meson setup" generates (RHEL-30372)
  - tools: explicitly specify "setup" subcommand (RHEL-30372)
  - fuzz: pass -Dc_args=/-Dcpp_args= to fuzzer targets (RHEL-30372)
  - fuzz: don't panic without a C++ compiler (RHEL-30372)
  - meson: use ternary op for brevity (RHEL-30372)


author: Jiri Hnidek <jhnidek@redhat.com> 4-1
changelog:
  * Tue Jul 26 2022 Jiri Hnidek <jhnidek@redhat.com> 3-1
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - test: drop unused reference-image file (ptoscano@redhat.com)
  - Drop the static npm-shrinkwrap.json (ptoscano@redhat.com)
  - Bump cockpit test API to 273 + run-tests scheduler fix (martin@piware.de)
  - spec: suggest insights-client on RHEL (ptoscano@redhat.com)
  - tito: remove autogenerated spec file before tagging (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 5-1
changelog:
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2077759: invoke cockpit.translate() after document loading
    (ptoscano@redhat.com)
  - test: Drop outdated copy of packagelib.py (martin@piware.de)
  - Added missing keys to react components (jhnidek@redhat.com)
  - Fix the issue, when it is not possible to install insights-client
    (jhnidek@redhat.com)
  - test: Sync packagelib.py with cockpit main (martin@piware.de)
  - New target and added one project directory to .gitignore (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update to the upstream v6.15 @ 172bf0e3 (bz 2075977)
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Vladis Dronov <vdronov@redhat.com> - 6.15-2
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ 6dcc9ec2 (bz 2124605)
  - Do not require selinux-policy if it is not present


author: Vladis Dronov <vdronov@redhat.com> - 6.15-3
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ cb8cc624 (bz 2156554)
  - Fix a number of issues found by covscan code scanner
  - Add a jitter init timeout for tests
  - Add a start condition for the FIPS mode (bz 2154804)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-1
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 0e560296 (bz 2174916)
  - Get rid of text relocations in -fPIE build
  - Add a hint for opensc package (bz 1845854)


author: Till Maas <opensource@till.name> - 8.1-26
changelog:
  - Sync in current files from bash package:
    https://src.fedoraproject.org/rpms/bash/c/739b272e5f5d10cf27a847a44d09eb7f4b6ec89b?branch=master
    https://src.fedoraproject.org/rpms/bash/c/329df36f8bbc303be618f06562ec2c4eebfd1d29?branch=master
    https://src.fedoraproject.org/rpms/bash/c/e3b3cd9cec4a3bd12a792536c0ea131f5ba5bd72?branch=master


author: Steve Dickson <steved@redhat.com> - 1.2.6-4
changelog:
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-17
changelog:
  - Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-1
changelog:
  - rebased to 2.27.0 (#2160062)
  - lszcrypt fails when querying a specific domain (#2177612)
  - DASD autoquiesce support (#2196517)
  - zcrypt DD: AP command filtering (#2170360)
  - vmconvert and zgetdump consolidation (#2173924)
  - Support for List-Directed dump from ECKD DASD (#2160052)
  - Support for List-Directed IPL and re-IPL from ECKD DASD (#2160040)
  - Resolves: #2160062 #2177612 #2196517 #2170360 #2173924 #2160052 #2160040


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-2
changelog:
  - zdev: cleanup patches to fix warnings (#2223304)
  - zdev: add missing label in the udev-rules (#2222900)
  - Resolves: #2223304 #2222900


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-1
changelog:
  - rebased to 2.29.0 (RHEL-11408)
  - KVM: Support AP Bindings in SE Header (RHEL-10572)
  - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10578)
  - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11440)
  - vmur: fix handling of option -t (RHEL-11480)
  - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16527)
  - enable multi-arch build (RHEL-10567)
  - Resolves: RHEL-11408 RHEL-10572 RHEL-10578 RHEL-11440 RHEL-11480 RHEL-16527 RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.36-1
changelog:
  - Allow systemd-timedated get the timemaster service status
  Resolves: RHEL-25978
  - postfix: allow qmgr to delete mails in bounce/ directory
  Resolves: RHEL-30271
  - Allow NetworkManager the sys_ptrace capability in user namespace
  Resolves: RHEL-24346
  - Label /dev/iommu with iommu_device_t
  Resolves: RHEL-22063
  - Allow qemu-ga read vm sysctls
  Resolves: RHEL-31892
  - Update repository link and branches names for c9s
  Related: RHEL-22960


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.37-1
changelog:
  - Allow numad to trace processes in user namespace
  Resolves: RHEL-33994
  - Remove permissive domain for rshim_t
  Resolves: RHEL-22173
  - Remove permissive domain for mptcpd_t
  Resolves: RHEL-22173
  - Remove permissive domain for coreos_installer_t
  Resolves: RHEL-22173
  - Remove permissive domain for afterburn_t
  Resolves: RHEL-22173
  - Update afterburn policy
  Resolves: RHEL-22173
  - Allow bootupd search EFI directory
  Resolves: RHEL-22172
  - Add the bootupd module
  Resolves: RHEL-22172
  - Add policy for bootupd
  Resolves: RHEL-22172
  - Label /dev/mmcblk0rpmb character device with removable_device_t
  Resolves: RHEL-28080
  - Differentiate between staff and sysadm when executing crontab with sudo
  Resolves: RHEL-31888
  - Add crontab_admin_domtrans interface
  Resolves: RHEL-31888
  - Add crontab_domtrans interface
  Resolves: RHEL-31888
  - Allow svirt_t read vm sysctls
  Resolves: RHEL-32296


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.38-1
changelog:
  - Add boolean qemu-ga to run unconfined script
  Resolves: RHEL-31211
  - Ensure dbus communication is allowed bidirectionally
  Resolves: RHEL-35782
  - Allow logwatch_mail_t read network sysctls
  Resolves: RHEL-34135
  - Allow sysadm execute dmidecode using sudo
  Resolves: RHEL-16104
  - Allow sudodomain list files in /var
  Resolves: RHEL-16104
  - Allow various services read and write z90crypt device
  Resolves: RHEL-33361
  - Allow system_cronjob_t dbus chat with avahi_t
  Resolves: RHEL-32290
  - Allow setroubleshootd get attributes of all sysctls
  Resolves: RHEL-34078
  - Remove permissive domain for bootupd_t
  Resolves: RHEL-22173


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.39-1
changelog:
  - Add interfaces for watching and reading ifconfig_var_run_t
  Resolves: RHEL-39408
  - Allow dhcpcd use unix_stream_socket
  Resolves: RHEL-39408
  - Allow dhcpc read /run/netns files
  Resolves: RHEL-39408
  - Allow all domains read and write z90crypt device
  Resolves: RHEL-38833
  - Allow bootupd search efivarfs dirs
  Resolves: RHEL-36289
  - Move unconfined_domain(sap_unconfined_t) to an optional block
  Resolves: RHEL-37663


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.40-1
changelog:
  - Allow systemd-coredump read nsfs files
  Resolves: RHEL-39937
  - Allow login_userdomain execute systemd-tmpfiles in the caller domain
  Resolves: RHEL-40374
  - Allow ptp4l_t request that the kernel load a kernel module
  Resolves: RHEL-38905
  - Allow collectd to trace processes in user namespace
  Resolves: RHEL-36293


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.41-1
changelog:
  - Differentiate between staff and sysadm when executing crontab with sudo
  Resolves: RHEL-31888
  - Label /usr/bin/samba-gpupdate with samba_gpupdate_exec_t
  Resolves: RHEL-25724
  - Allow unconfined_service_t transition to passwd_t
  Resolves: RHEL-17404
  - Allow sbd to trace processes in user namespace
  Resolves: RHEL-44680
  - Allow systemd-coredumpd sys_admin and sys_resource capabilities
  Resolves: RHEL-45245
  - Label /usr/lib/node_modules/npm/bin with bin_t
  Resolves: RHEL-36587
  - Support /var is empty
  Resolves: RHEL-29331
  - Allow timemaster write to sysfs files
  Resolves: RHEL-28777
  - Don't audit crontab_domain write attempts to user home
  Resolves: RHEL-31888
  - Transition from sudodomains to crontab_t when executing crontab_exec_t
  Resolves: RHEL-31888
  - Fix label of pseudoterminals created from sudodomain
  Resolves: RHEL-31888


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.42-1
changelog:
  - Label samba certificates with samba_cert_t
  Resolves: RHEL-25724
  - Allow systemd-coredumpd the sys_chroot capability
  Resolves: RHEL-45245
  - Allow svirt_tcg_t read vm sysctls
  Resolves: RHEL-27141
  - Label /usr/sbin/samba-gpupdate with samba_gpupdate_exec_t
  Resolves: RHEL-25724
  - Label /var/run/coreos-installer-reboot with coreos_installer_var_run_t
  Resolves: RHEL-38614
  - Allow coreos-installer add systemd unit file links
  Resolves: RHEL-38614


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.43-1
changelog:
  - Allow rhsmcertd read/write access to /dev/papr-sysparm
  Resolves: RHEL-49599
  - Label /dev/papr-sysparm and /dev/papr-vpd
  Resolves: RHEL-49599
  - Allow rhsmcertd read, write, and map ica tmpfs files
  Resolves: RHEL-50926
  - Update afterburn file transition policy
  Resolves: RHEL-49735
  - Label /run/metadata with afterburn_runtime_t
  Resolves: RHEL-49735
  - Allow afterburn list ssh home directory
  Resolves: RHEL-49735
  - Support SGX devices
  Resolves: RHEL-50922
  - Allow systemd-pstore send a message to syslogd over a unix domain
  Resolves: RHEL-45528
  - Allow postfix_domain map postfix_etc_t files
  Resolves: RHEL-46332
  - Allow microcode create /sys/devices/system/cpu/microcode/reload
  Resolves: RHEL-26821
  - Allow svirt_tcg_t map svirt_image_t files
  Resolves: RHEL-27141
  - Allow systemd-hostnamed shut down nscd
  Resolves: RHEL-45033
  - Allow postfix_domain connect to postgresql over a unix socket
  Resolves: RHEL-6776


author: Martin Osvald <mosvald@redhat.com> - 2.13.7-7
changelog:
  - Move /var/log/lastlog ownership to systemd (#2066753)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#2066767)
  - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#2026892)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-7
changelog:
  - useradd: check if subid range exists for user. Resolves: #2179987
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988


author: Javier Martinez Canillas <javierm@redhat.com> - 15-7
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715879
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717061


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
  - Fix a shim crash when attempting to netboot


author: Peter Jones <pjones@redhat.com> - 15-13
changelog:
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Jan Jansky <jjansky@redhat.com> = 4.6.0-1
changelog:
  - [ultrapath] Add new plugin for Huawei UltraPath
    Resolves: bz2187407
  - [cleaner] Use data filter for extraction
    Resolves: bz2217906
  - [discovery] Enable the plugin by containers
    Resolves: bz2222134


author: Pavel Moravec <pmoravec@redhat.com> = 4.6.1-1
changelog:
  - rebase to upstream 4.6.1
    Resolves: RHEL-21174
  - [redhat] Change authentication method for RHEL
    Resolves: RHEL-21178


author: Abhi Das <adas@redhat.com> - 4.4-9.git1
changelog:
  - CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
    rhbz#2000638


author: Abhi Das <adas@redhat.com> - 4.4-10.git1
changelog:
  - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
    rhbz#2007304


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-3
changelog:
  - Address some issues reported by covscan (#1996691).
  - Replace 0141-tests-disable-sockopt-timestamp-on-new-glibc-with-__.patch
    with upstream v5.13-10-g0211fdc "tests: change sockopt-timestamp test
    to use syscall(__NR_recvmsg)"
    and 0154-tests-call-setsockopt-directly-in-sockopt-timestamp.patch.
  - Undo forceful injection of -m64 into CFLAGS/CPPFLAGS to avoid breaking
    mpers and its tests (#1996676).


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.18-2
changelog:
  - Fix the issues reported by covscan (#2103068).
  - Fix SELinux context matching for the deleted paths (#2087693).
  - Fix sloppy FD usage in the bpf test (#2103137).
  - Cater for RHEL 9 license requirement idiosyncrasies (#2103032).


author: Clemens Lang <cllang@redhat.com> - 5.62-2
changelog:
  - Fix stunnel in FIPS mode
    Resolves: rhbz#2050617
  - Fail build if tests fail
    Resolves: rhbz#2051083


author: Clemens Lang <cllang@redhat.com> - 5.71-1
changelog:
  - New upstream release 5.71
    Resolves: RHEL-2468
  - Enable socket activation support
  - verify upstream source in %prep
  - clean up stale conditionals


author: Jiri Hnidek <jhnidek@redhat.com> 20220608-1
changelog:
  - New package built with tito
  - Using new version pattern for subscription-manager-rhsm-certificates


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-8
changelog:
  RHEL 9.2.0 ERRATUM
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2115789


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-9
changelog:
  RHEL 9.2.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161225


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-10
changelog:
  RHEL 9.3.0.Z ERRATUM
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21834
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21828
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21821


author: Lukas Javorsky <ljavorsk@redhat.com> - 2:1.34-4
changelog:
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-1
changelog:
  - The patches are for SSL3 compatibility. These can probably be
    removed when upstream tboot fully implements SSL3.
  - Upgrade to latest upstream.
  - Remove trousers dependency.
    Resolves: rhbz#1922002
    Resolves: rhbz#1870520
    Resolves: rhbz#1927374


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-2
changelog:
  - Bump the NVR as a result of including the gating.yaml file in
    the git repo.
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-3
changelog:
  - Add the -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m32 -march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection and -Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  macros to assure the
    build meets RHEL security requirements.
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-4
changelog:
  - From Miroslave Vadkerti:
    Onboarding tests to RHEL9 in BaseOS CI requires action, adding
    test configuration in our "dispatcher" configuration for RHEL9:
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/blob/production/brew-dispatcher-rhel9.yaml
    Test config was added for tboot in the following MR.
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/-/merge_requests/2686
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.5-1
changelog:
  - Upgrade to tboot-1.10.5-1 for fixes and updates.
  - Added a Requires line to install grub2-efi-x64-modules
  - Added a scriptlet to the tboot.spec file to automatically install
    grub2-efi-x64-modules and move them to the correct directory.
  - Removed three patches that are no longer needed.
  - Added two patches from upstream, one for a fix, the other cosemetic.
  - Resolves: rhbz#2041766
    Resolves: rhbz#2040083


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-3
changelog:
  - Add the -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection and -Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  macros to assure the
    build meets RHEL security requirements.
    Resolves: rhbz#1922002


author: Štěpán Horáček <shoracek@redhat.com> - 3.2.2-1
changelog:
  - Rebase to 3.2.2
  - Use systemd-sysusers to create user
    Resolves: CVE-2023-22745
    Resolves: rhbz#2095479
    Resolves: rhbz#2160307
    Resolves: rhbz#2162613


author: Leah Leshchinsky <lleshchi@redhat.com> - 0.18-9
changelog:
  - Remove import and fix help message
  - Update manpages for argparse CLI changes
  Resolves: rhbz#2138692


author: John Kacur <jkacur@redhat.com> - 0.19-3
changelog:
  - Don't start the gui if a display is not available
  - Change to SPDX licence tag in the specfile
  Resolves: RHEL-8859


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2133815
    - systemd: relax polkit requirement
    - sysvinit: fixed path
      resolves: rhbz#2118301
    - plugin_cpu: added support for pm_qos_resume_latency_us
      resolves: rhbz#2118786
    - do not exit on duplicate config lines
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - API: add support for moving devices between instances
      resolves: rhbz#2113925
    - D-Bus: send tracebacks through D-Bus only in debug mode
      resolves: rhbz#2159680
    - Makefile: added fix for python-3.12
    - throughput-performance: set net.core.somaxconn to at least 2048
    - plugin_scheduler: do not leak FDs from the perf
    - plugin_cpu: added support for intel_pstate scaling driver
      resolves: rhbz#2095829
    - added support for the API access through the Unix Domain Socket
      resolves: rhbz#2113900


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20.0-0.2.rc1
changelog:
  - post RC.1 fixes
    related: rhbz#2133815
  - fixed possible traceback on SIGHUP
    resolves: rhbz#2169712


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.21.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2182117
    - plugin_scheduler: fix perf fd leaks
      resolves: rhbz#2173938
    - allow skipping rollback when restarting TuneD or switching profile
      resolves: rhbz#2203142
    - function_calc_isolated_cores: no errors for offline CPUs
      resolves: rhbz#2217015


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-17121
    - print all arguments of failing commands in error messages
      resolves: RHEL-3689
    - plugin_sysctl: added support for sysctl names with slash
      resolves: RHEL-3707
    - tuned-adm: added support for moving devices between plugin instances
      resolves: RHEL-15141
    - api: added methods for retrieval of plugin instances and devices
      resolves: RHEL-15137
    - plugin_cpu: amd-pstate mentioned instead of just intel_pstate
      resolves: RHEL-16469
    - hotplug: do not report ENOENT errors on device remove
      resolves: RHEL-11342
    - plugin_sysctl: expand variables when reporting overrides
      resolves: RHEL-18972
    - plugin_acpi: new plugin which handles ACPI platform_profile
      resolves: RHEL-16966
    - plugin_bootloader: skip calling rpm-ostree kargs in no-op case
      resolves: RHEL-20767
    - plugin_cpu: support cstate settings of pm_qos_resume_latency_us
      resolves: RHEL-21129
    - scheduler: add option for ignoring IRQs affinity
      resolves: RHEL-21923
    - plugin_intel_uncore: new plugin for uncore setting


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50568
    - spec: create /etc/tuned/profiles directory
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
      resolves: RHEL-31757
    - daemon: buffer sighup signal
      resolves: RHEL-31180
    - added an option to configure profile directories
      resolves: RHEL-26157
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
      resolves: RHEL-25613
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
      resolves: RHEL-46560
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.2.rc1
changelog:
  - fixed functions packaging and added explicit conflict with power-profiles-daemon
    related: RHEL-50568


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
    - Egypt reintroduced DST, from April through October.
    - Morocco springs forward April 23, not April 30.
    - Palestine delayed the start of DST this year.


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-2
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-26860)


author: Jakub Martisko <jamartis@redhat.com> - 6.0-56
changelog:
  - Use the C crc implementation instead of the asm (i686 only, other arches already use C)
  Related: rhbz#2045075


author: Sérgio Basto <sergio@serjux.com> - 2.6.0-3
changelog:
  - Use make macros (https://src.fedoraproject.org/rpms/usb_modeswitch/pull-request/1)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Sérgio Basto <sergio@serjux.com> - 2.6.1-1
changelog:
  - Update usb_modeswitch to 2.6.1
  - Drop patch1, http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?f=2&t=2733
  - Drop BR jimtcl-devel, if we don't install dynlink-dispatcher


author: Jiri Kucera <jkucera@redhat.com> - 1.114-3
changelog:
  - Do not use fexecve
    Script executed via fexecve has a file descriptor number in
    argv[0]. This results in unexpected output: when displaying
    the script help, a user see "Usage: <number> [options]"
    instead of "Usage: <scriptname> [options]".
    Resolves: #1984417


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.316-1
changelog:
  - Rebased to upstream candidate.
  - Resolves: rhbz#1955374
  - Removed all python based tools, and all management should now be done with
    LVM.
  - Resolves: rhbz#1949159
  - vdostats is now a C program
  - Resolves: rhbz#1972302


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.287-1
changelog:
  - Fixed off-by-one issue in vdostats.
  - Resolves: rhbz#1999056
  - Improved error handling and path validation in vdostats.
  - Resolves: rhbz#2004576


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.360-1
changelog:
  - Fixed vdostats output issues.
  - Resolves: rhbz#2004576
  - Removed incorrect assumptions about major device numbers in vdostats.
  - Resolves: rhbz#2045885
  - Made improvements to the vdorecover script.
  - Resolves: rhbz#2047543
  - Added a tool to make LVMVDO pools read/write so that support and
    debugging tools may access them.
  - Resolves: rhbz#2047543


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-4
changelog:
  - Explicitly allow/disallow unsafe legacy renegotiation on configuration base.
    Resolves: rhbz#2077973


author: Pavel Reichl <preichl@redhat.com> - 3.1.12-3
changelog:
  - xfsdump: restoring inventory prevents non-directory files being restored from tape,
  - actually fixed by rebase to 3.1.12
  - related: bz#2166557
  - xfsrestore: Files from the backup go to orphanage dir because of xfsdump issue
  - related: bz#2034327


author: Pavel Reichl <preichl@redhat.com> - 3.1.12-4
changelog:
  - xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x
  - Related: RHEL-8000


author: Pavel Reichl <preichl@redhat.com> - 5.19.0-1
changelog:
  - New upstream release
  - Tolerate tiny (<300MB) filesystems
  - Rename xfsprogs-5.12.0-default-bigtime-inobtcnt-on.patch to
      xfsprogs-5.19.0-disable-old-kernel-bigtime-inobtcnt-on.patch
      and amend it to reflect upstream changes
  - Backport all "Fixing" patches relevant to 5.19
    Related: rhbz#2142910


author: Pavel Reichl <preichl@redhat.com> - 6.3.0-1
changelog:
  - Rebase to upstream version 6.3.0
  -
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
  - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
  -
  - Rename the remaining patches so the name contains upstream version in which
  - they are implemented, or "rhelonly".
  -
  - Drop Eric Sandeen's public key used to check tarball signature and replace it by
  - Carlos Maiolino's (current upstream xfsprogs maintainer).
  -
  - Following is a list of newly backported patches from versions released after 6.3
  - which are fixing patches present in version 6.3:
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  -
  - Backport:
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  - to implement RHEL-RHEL-8284
  -
  - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
  - to implement RHEL-7900
  -
  - Related: RHEL-15399
  - Related: RHEL-8284
  - Related: RHEL-7900


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-1
changelog:
  - Rebase to a more recent upstream release
  - Related: RHEL-28339
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
  - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  -
  - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
  -	version it was merged in.


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-2
changelog:
  - Fix various CVE issues.
  - Related: RHEL-32996
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
  - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-3
changelog:
  - Fix coverity issue
  - Related: RHEL-39449
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch


author: Jakub Martisko <jamartis@redhat.com> - 3.0-31
changelog:
  - Add the missing linker flags
  - Add the patch that allows to configure the linker flags from the spec file
    Resolves: rhbz #2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-33
changelog:
  - Disable the asm implementation of some functions and use the C instead
  - This should fix some of the annocheck issues
    Related: rhbz#2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-34
changelog:
  - Fix the regression introduced in 3.0-33 that caused some of the zip build flags to be dropped
  Resolves: rhbz#2162688


author: Jakub Martisko <jamartis@redhat.com> - 3.0-35
changelog:
  - Fix the annocheck issus from 3-0-33 without reintroducing the regression from 3.0-34
  Related: rhbz#2162688


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


