# changelog

author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-541.el9]
changelog:
  - platform/x86/amd/pmc: Detect when STB is not available (CKI Backport Bot) [RHEL-68176] {CVE-2024-53072}
  - fs: dlm: avoid false-positive checker warning (Alexander Aring) [RHEL-60001]
  - ice: change q_index variable type to s16 to store -1 value (Petr Oros) [RHEL-49816]
  - ice: Fix use after free during unload with ports in bridge (Petr Oros) [RHEL-49816]
  - ice: fix crash on probe for DPLL enabled E810 LOM (Petr Oros) [RHEL-49816]
  - ice: block SF port creation in legacy mode (Petr Oros) [RHEL-49816]
  - ice: Fix increasing MSI-X on VF (Petr Oros) [RHEL-49816]
  - ice: Flush FDB entries before reset (Petr Oros) [RHEL-49816]
  - ice: Fix netif_is_ice() in Safe Mode (Petr Oros) [RHEL-49816]
  - ice: Fix entering Safe Mode (Petr Oros) [RHEL-49816]
  - ice: fix VLAN replay after reset (Petr Oros) [RHEL-49816]
  - ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins (Petr Oros) [RHEL-49816]
  - ice: fix memleak in ice_init_tx_topology() (Petr Oros) [RHEL-49816]
  - ice: clear port vlan config during reset (Petr Oros) [RHEL-49816]
  - ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() (Petr Oros) [RHEL-49816]
  - ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() (Petr Oros) [RHEL-49816]
  - ice: set correct dst VSI in only LAN filters (Petr Oros) [RHEL-49816]
  - ice: Fix a NULL vs IS_ERR() check in probe() (Petr Oros) [RHEL-49816]
  - ice: Fix a couple NULL vs IS_ERR() bugs (Petr Oros) [RHEL-49816]
  - ice: Fix lldp packets dropping after changing the number of channels (Petr Oros) [RHEL-49816]
  - ice: subfunction activation and base devlink ops (Petr Oros) [RHEL-49816]
  - ice: basic support for VLAN in subfunctions (Petr Oros) [RHEL-49816]
  - ice: support subfunction devlink Tx topology (Petr Oros) [RHEL-49816]
  - ice: implement netdevice ops for SF representor (Petr Oros) [RHEL-49816]
  - ice: check if SF is ready in ethtool ops (Petr Oros) [RHEL-49816]
  - ice: don't set target VSI for subfunction (Petr Oros) [RHEL-49816]
  - ice: create port representor for SF (Petr Oros) [RHEL-49816]
  - ice: make representor code generic (Petr Oros) [RHEL-49816]
  - ice: implement netdev for subfunction (Petr Oros) [RHEL-49816]
  - ice: base subfunction aux driver (Petr Oros) [RHEL-49816]
  - ice: allocate devlink for subfunction (Petr Oros) [RHEL-49816]
  - ice: treat subfunction VSI the same as PF VSI (Petr Oros) [RHEL-49816]
  - ice: add basic devlink subfunctions support (Petr Oros) [RHEL-49816]
  - ice: export ice ndo_ops functions (Petr Oros) [RHEL-49816]
  - ice: add new VSI type for subfunctions (Petr Oros) [RHEL-49816]
  - ice: do not bring the VSI up, if it was down before the XDP setup (Petr Oros) [RHEL-49816]
  - ice: remove ICE_CFG_BUSY locking from AF_XDP code (Petr Oros) [RHEL-49816]
  - ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset (Petr Oros) [RHEL-49816]
  - ice: check for XDP rings instead of bpf program when unconfiguring (Petr Oros) [RHEL-49816]
  - ice: protect XDP configuration with a mutex (Petr Oros) [RHEL-49816]
  - ice: move netif_queue_set_napi to rtnl-protected sections (Petr Oros) [RHEL-49816]
  - ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node() (Petr Oros) [RHEL-49816]
  - ice: Report NVM version numbers on mismatch during load (Petr Oros) [RHEL-49816]
  - ice: remove unnecessary control queue cmd_buf arrays (Petr Oros) [RHEL-49816]
  - ice: reword comments referring to control queues (Petr Oros) [RHEL-49816]
  - ice: stop intermixing AQ commands/responses debug dumps (Petr Oros) [RHEL-49816]
  - ice: do not clutter debug logs with unused data (Petr Oros) [RHEL-49816]
  - ice: improve debug print for control queue messages (Petr Oros) [RHEL-49816]
  - ice: implement and use rd32_poll_timeout for ice_sq_done timeout (Petr Oros) [RHEL-49816]
  - ice: add callbacks for Embedded SYNC enablement on dpll pins (Petr Oros) [RHEL-49816]
  - ice: use internal pf id instead of function number (Petr Oros) [RHEL-49816]
  - ice: Fix a 32bit bug (Petr Oros) [RHEL-49816]
  - ice: enable FDIR filters from raw binary patterns for VFs (Petr Oros) [RHEL-49816]
  - ice: add method to disable FDIR SWAP option (Petr Oros) [RHEL-49816]
  - virtchnl: support raw packet in protocol header (Petr Oros) [RHEL-49816]
  - ice: add API for parser profile initialization (Petr Oros) [RHEL-49816]
  - ice: add UDP tunnels support to the parser (Petr Oros) [RHEL-49816]
  - ice: support turning on/off the parser's double vlan mode (Petr Oros) [RHEL-49816]
  - ice: add parser execution main loop (Petr Oros) [RHEL-49816]
  - ice: add parser internal helper functions (Petr Oros) [RHEL-49816]
  - ice: add debugging functions for the parser sections (Petr Oros) [RHEL-49816]
  - ice: parse and init various DDP parser sections (Petr Oros) [RHEL-49816]
  - ice: add parser create and destroy skeleton (Petr Oros) [RHEL-49816]
  - ice: Fix incorrect assigns of FEC counts (Petr Oros) [RHEL-49816]
  - ice: Skip PTP HW writes during PTP reset procedure (Petr Oros) [RHEL-49816]
  - ice: Fix reset handler (Petr Oros) [RHEL-49816]
  - ice: Fix recipe read procedure (Petr Oros) [RHEL-49816]
  - ice: Add tracepoint for adding and removing switch rules (Petr Oros) [RHEL-49816]
  - ice: Remove unused members from switch API (Petr Oros) [RHEL-49816]
  - ice: Optimize switch recipe creation (Petr Oros) [RHEL-49816]
  - ice: remove unused recipe bookkeeping data (Petr Oros) [RHEL-49816]
  - ice: Simplify bitmap setting in adding recipe (Petr Oros) [RHEL-49816]
  - ice: Remove reading all recipes before adding a new one (Petr Oros) [RHEL-49816]
  - ice: Remove unused struct ice_prot_lkup_ext members (Petr Oros) [RHEL-49816]
  - ice: remove eswitch rebuild (Petr Oros) [RHEL-49816]
  - ice: Add support for devlink local_forwarding param (Petr Oros) [RHEL-49816]
  - ice: Implement driver functionality to dump serdes equalizer values (Petr Oros) [RHEL-49816]
  - ice: Implement driver functionality to dump fec statistics (Petr Oros) [RHEL-49816]
  - ice: Extend Sideband Queue command to support flags (Petr Oros) [RHEL-49816]
  - ice: do not init struct ice_adapter more times than needed (Petr Oros) [RHEL-49816]
  - ice: Distinguish driver reset and removal for AQ shutdown (Petr Oros) [RHEL-49816]
  - ice: Allow different FW API versions based on MAC type (Petr Oros) [RHEL-49816]
  - ice: Check all ice_vsi_rebuild() errors in function (Petr Oros) [RHEL-49816]
  - ice: Add get/set hw address for VFs using devlink commands (Petr Oros) [RHEL-49816]
  - ice: update representor when VSI is ready (Petr Oros) [RHEL-49816]
  - ice: move VSI configuration outside repr setup (Petr Oros) [RHEL-49816]
  - ice: move devlink locking outside the port creation (Petr Oros) [RHEL-49816]
  - ice: store representor ID in bridge port (Petr Oros) [RHEL-49816]
  - ice: add and use roundup_u64 instead of open coding equivalent (Petr Oros) [RHEL-49816]
  - ice: check for unregistering correct number of devlink params (Petr Oros) [RHEL-49816]
  - ice: flower: validate control flags (Petr Oros) [RHEL-49816]
  - ice: Document tx_scheduling_layers parameter (Petr Oros) [RHEL-49816]
  - ice: Add tx_scheduling_layers devlink param (Petr Oros) [RHEL-49816]
  - ice: Enable switching default Tx scheduler topology (Petr Oros) [RHEL-49816]
  - ice: Adjust the VSI/Aggregator layers (Petr Oros) [RHEL-49816]
  - ice: Support 5 layer topology (Petr Oros) [RHEL-49816]
  - net: intel: implement modern PM ops declarations (ice) (Petr Oros) [RHEL-49816]
  - overflow: Change DEFINE_FLEX to take __counted_by member (Petr Oros) [RHEL-49816]
  - ice: Implement RSS settings for GTP using ethtool (Petr Oros) [RHEL-49816]
  - net: intel: fix old compiler regressions (ice) (Petr Oros) [RHEL-49816]
  - intel: fix string truncation warnings (ice) (Petr Oros) [RHEL-49816]
  - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). (ice) (Petr Oros) [RHEL-49816]
  - Documentation: networking: correct spelling (ice) (Petr Oros) [RHEL-49816]
  - cpufreq: intel_pstate: Update asym capacity for CPUs that were offline initially (Steve Best) [RHEL-68120]
  - x86/sev: Ensure that RMP table fixups are reserved (Bandan Das) [RHEL-68360]
  - redhat/configs: aarch64: compile cpufreq-dt-platdev as built-in (Radu Rendec) [RHEL-68851]
  - iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift (Jerry Snitselaar) [RHEL-67994]
  - iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (CKI Backport Bot) [RHEL-65892] {CVE-2024-50101}
  - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-69123]
  - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-69123]
  - sfc: Don't invoke xdp_do_flush() from netpoll. (Michal Schmidt) [RHEL-52776]
  - sfc: Add X4 PF support (Michal Schmidt) [RHEL-52776]
  - sfc: siena: rip out rss-context dead code (Michal Schmidt) [RHEL-52776]
  - sfc: convert comma to semicolon (Michal Schmidt) [RHEL-52776]
  - sfc/siena: Convert comma to semicolon (Michal Schmidt) [RHEL-52776]
  - sfc: Convert to use ERR_CAST() (Michal Schmidt) [RHEL-52776]
  - sfc: remove .cap_rss_ctx_supported from updated drivers (Michal Schmidt) [RHEL-52776]
  - sfc: falcon: Make I2C terminology more inclusive (Michal Schmidt) [RHEL-52776]
  - sfc: remove get_rxfh_context dead code (Michal Schmidt) [RHEL-52776]
  - sfc: use new rxfh_context API (Michal Schmidt) [RHEL-52776]
  - sfc: use flow_rule_is_supp_control_flags() (Michal Schmidt) [RHEL-52776]
  - sfc: adopt skb_network_offset() and similar helpers (Michal Schmidt) [RHEL-52776]
  - sfc: fix a double-free bug in efx_probe_filters (Michal Schmidt) [RHEL-52776]
  - sfc-siena: Implement ndo_hwtstamp_(get|set) (Michal Schmidt) [RHEL-52776]
  - sfc: Implement ndo_hwtstamp_(get|set) (Michal Schmidt) [RHEL-52776]
  - sfc: cleanup and reduce netlink error messages (Michal Schmidt) [RHEL-52776]
  - sfc: support offloading ct(nat) action in RHS rules (Michal Schmidt) [RHEL-52776]
  - sfc: parse mangle actions (NAT) in conntrack entries (Michal Schmidt) [RHEL-52776]
  - sfc: replace deprecated strncpy with strscpy (Michal Schmidt) [RHEL-52776]
  - sfc: support TC rules which require OR-AR-CT-AR flow (Michal Schmidt) [RHEL-52776]
  - sfc: ensure an extack msg from efx_tc_flower_replace_foreign EOPNOTSUPPs (Michal Schmidt) [RHEL-52776]
  - sfc: offload foreign RHS rules without an encap match (Michal Schmidt) [RHEL-52776]
  - sfc: support TC left-hand-side rules on foreign netdevs (Michal Schmidt) [RHEL-52776]
  - sfc: Replace xdp_do_flush_map() with xdp_do_flush(). (Michal Schmidt) [RHEL-52776]
  - sfc: handle error pointers returned by rhashtable_lookup_get_insert_fast() (Michal Schmidt) [RHEL-52776]
  - sfc: make coding style of PTP addresses consistent with core (Michal Schmidt) [RHEL-52776]
  - sfc: check for zero length in EF10 RX prefix (Michal Schmidt) [RHEL-52776]
  - sfc: extend pedit add action to handle decrement ipv6 hop limit (Michal Schmidt) [RHEL-52776]
  - sfc: introduce pedit add actions on the ipv4 ttl field (Michal Schmidt) [RHEL-52776]
  - sfc: add decrement ipv6 hop limit by offloading set hop limit actions (Michal Schmidt) [RHEL-52776]
  - sfc: add decrement ttl by offloading set ipv4 ttl actions (Michal Schmidt) [RHEL-52776]
  - sfc: add mac source and destination pedit action offload (Michal Schmidt) [RHEL-52776]
  - sfc: introduce ethernet pedit set action infrastructure (Michal Schmidt) [RHEL-52776]
  - sfc: Remove unneeded semicolon (Michal Schmidt) [RHEL-52776]
  - sfc: don't fail probe if MAE/TC setup fails (Michal Schmidt) [RHEL-52776]
  - sfc: don't unregister flow_indr if it was never registered (Michal Schmidt) [RHEL-52776]
  - sfc: offload left-hand side rules for conntrack (Michal Schmidt) [RHEL-52776]
  - sfc: conntrack state matches in TC rules (Michal Schmidt) [RHEL-52776]
  - sfc: handle non-zero chain_index on TC rules (Michal Schmidt) [RHEL-52776]
  - sfc: offload conntrack flow entries (match only) from CT zones (Michal Schmidt) [RHEL-52776]
  - sfc: functions to insert/remove conntrack entries to MAE hardware (Michal Schmidt) [RHEL-52776]
  - sfc: functions to register for conntrack zone offload (Michal Schmidt) [RHEL-52776]
  - sfc: add MAE table machinery for conntrack table (Michal Schmidt) [RHEL-52776]
  - sfc: fix use-after-free in efx_tc_flower_record_encap_match() (Michal Schmidt) [RHEL-52776]
  - sfc: support TC decap rules matching on enc_src_port (Michal Schmidt) [RHEL-52776]
  - sfc: support TC decap rules matching on enc_ip_tos (Michal Schmidt) [RHEL-52776]
  - sfc/falcon: fix repeated words in comments (Michal Schmidt) [RHEL-52776]
  - sfc: falcon: Use the bitmap API to allocate bitmaps (Michal Schmidt) [RHEL-52776]
  - sfc:falcon: fix repeated words in comments (Michal Schmidt) [RHEL-52776]
  - sfc: Stop using iommu_present() (Michal Schmidt) [RHEL-52776]
  - sfc: falcon: Check null pointer of rx_queue->page_ring (Michal Schmidt) [RHEL-52776]
  - sfc: use swap() to make code cleaner (Michal Schmidt) [RHEL-52776]
  - s390/cio: Externalize full CMG characteristics (Mete Durlu) [RHEL-50790]
  - s390/cio: export CHPID operating speed (Mete Durlu) [RHEL-50790]
  - s390/cio: export measurement data for all CMGs (Mete Durlu) [RHEL-50790]
  - s390/cio: export extended channel-path-measurement data (Mete Durlu) [RHEL-50790]
  - s390/cio: simplify measurement attribute registration (Mete Durlu) [RHEL-50790]
  - s390/cio: rework channel-utilization-block handling (Mete Durlu) [RHEL-50790]
  - vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data() (Alex Williamson) [RHEL-69746]
  - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (Alex Williamson) [RHEL-69746]
  - bpf: Do not alloc arena on unsupported arches (Viktor Malik) [RHEL-66263]
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids (Steve Best) [RHEL-70007]
  - netfilter: br_netfilter: fix panic with metadata_dst skb (Ivan Vecera) [RHEL-59418]
  - bridge: mcast: Fail MDB get request on empty entry (Ivan Vecera) [RHEL-59418]
  - mptcp: error out earlier on disconnect (CKI Backport Bot) [RHEL-69692] {CVE-2024-53123}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-542.el9]
changelog:
  - bpf: Get better reg range with ldsx and 32bit compare (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Use -4095 as the bad address for bits iterator (Viktor Malik) [RHEL-30774]
  - selftests/bpf: update send_signal to lower perf evemts frequency (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add three test cases for bits_iter (Viktor Malik) [RHEL-30774]
  - bpf: Use __u64 to save the bits in bits iterator (Viktor Malik) [RHEL-30774]
  - bpf: Check the validity of nr_words in bpf_iter_bits_new() (Viktor Malik) [RHEL-30774]
  - bpf: Add bpf_mem_alloc_check_size() helper (Viktor Malik) [RHEL-30774]
  - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add test case for delta propagation (Viktor Malik) [RHEL-30774]
  - bpf: Fix print_reg_state's constant scalar dump (Viktor Malik) [RHEL-30774]
  - bpf: Fix incorrect delta propagation between linked registers (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add more test case for field flattening (Viktor Malik) [RHEL-30774]
  - bpf: Check the remaining info_cnt before repeating btf fields (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add a selftest to check for incorrect names (Viktor Malik) [RHEL-30774]
  - bpftool: Fix handling enum64 in btf dump sorting (Viktor Malik) [RHEL-30774]
  - libbpf: Ensure new BTF objects inherit input endianness (Viktor Malik) [RHEL-30774]
  - bpf: Fix a crash when btf_parse_base() returns an error pointer (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add a test to verify previous stacksafe() fix (Viktor Malik) [RHEL-30774]
  - bpf: Fix updating attached freplace prog in prog_array map (Viktor Malik) [RHEL-30774]
  - libbpf: Fix license for btf_relocate.c (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Filter out _GNU_SOURCE when compiling test_cpp (Viktor Malik) [RHEL-30774]
  - tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids (Viktor Malik) [RHEL-30774]
  - bpf, events: Use prog to emit ksymbol event for main program (Viktor Malik) [RHEL-30774]
  - bpftool: Fix typo in usage help (Viktor Malik) [RHEL-30774]
  - libbpf: Fix no-args func prototype BTF dumping syntax (Viktor Malik) [RHEL-30774]
  - selftests/bpf: fexit_sleep: Fix stack allocation for arm64 (Viktor Malik) [RHEL-30774]
  - test_bpf: convert comma to semicolon (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Test for null-pointer-deref bugfix in resolve_prog_type() (Viktor Malik) [RHEL-30774]
  - bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT (Viktor Malik) [RHEL-30774]
  - selftests/bpf: DENYLIST.aarch64: Skip fexit_sleep again (Viktor Malik) [RHEL-30774]
  - bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o (Viktor Malik) [RHEL-30774]
  - bpf: annotate BTF show functions with __printf (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add ASSERT_OK_FD macro (Viktor Malik) [RHEL-30774]
  - bpf: relax zero fixed offset constraint on KF_TRUSTED_ARGS/KF_RCU (Viktor Malik) [RHEL-30774]
  - libbpf: improve old BPF skeleton handling for map auto-attach (Viktor Malik) [RHEL-30774]
  - libbpf: fix BPF skeleton forward/backward compat handling (Viktor Malik) [RHEL-30774]
  - bpftool: improve skeleton backwards compat with old buggy libbpfs (Viktor Malik) [RHEL-30774]
  - selftests/bpf: DENYLIST.aarch64: Remove fexit_sleep (Viktor Malik) [RHEL-30774]
  - libbpf: Add NULL checks to bpf_object__{prev_map,next_map} (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Remove exceptions tests from DENYLIST.s390x (Viktor Malik) [RHEL-30774]
  - s390/bpf: Implement exceptions (Viktor Malik) [RHEL-30774]
  - s390/bpf: Change seen_reg to a mask (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Remove arena tests from DENYLIST.s390x (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add UAF tests for arena atomics (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Introduce __arena_global (Viktor Malik) [RHEL-30774]
  - s390/bpf: Support arena atomics (Viktor Malik) [RHEL-30774]
  - s390/bpf: Enable arena (Viktor Malik) [RHEL-30774]
  - s390/bpf: Support address space cast instruction (Viktor Malik) [RHEL-30774]
  - s390/bpf: Support BPF_PROBE_MEM32 (Viktor Malik) [RHEL-30774]
  - s390/bpf: Land on the next JITed instruction after exception (Viktor Malik) [RHEL-30774]
  - s390/bpf: Introduce pre- and post- probe functions (Viktor Malik) [RHEL-30774]
  - s390/bpf: Get rid of get_probe_mem_regno() (Viktor Malik) [RHEL-30774]
  - s390/bpf: Factor out emitting probe nops (Viktor Malik) [RHEL-30774]
  - bpftool: Mount bpffs when pinmaps path not under the bpffs (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add testcase where 7th argment is struct (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Factor out many args tests from tracing_struct (Viktor Malik) [RHEL-30774]
  - bpf: Use precise image size for struct_ops trampoline (Viktor Malik) [RHEL-30774]
  - libbpf: Fix error handling in btf__distill_base() (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Move ARRAY_SIZE to bpf_misc.h (Viktor Malik) [RHEL-30774]
  - libbpf: Fix clang compilation error in btf_relocate.c (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Don't close(-1) in serial_test_fexit_stress() (Viktor Malik) [RHEL-30774]
  - bpf: add new negative selftests to cover missing check_func_arg_reg_off() and reg->type check (Viktor Malik) [RHEL-30774]
  - bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses (Viktor Malik) [RHEL-30774]
  - bpf: Fix tailcall cases in test_bpf (Viktor Malik) [RHEL-30774]
  - libbpf: Skip base btf sanity checks (Viktor Malik) [RHEL-30774]
  - selftests/bpf: add test validating uprobe/uretprobe stack traces (Viktor Malik) [RHEL-30774]
  - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined (Viktor Malik) [RHEL-30774]
  - bpf, docs: Address comments from IETF Area Directors (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod (Viktor Malik) [RHEL-30774]
  - kbuild,bpf: Add module-specific pahole flags for distilled base BTF (Viktor Malik) [RHEL-30774]
  - libbpf,bpf: Share BTF relocate-related code with kernel (Viktor Malik) [RHEL-30774]
  - libbpf: Split field iter code into its own file kernel (Viktor Malik) [RHEL-30774]
  - module, bpf: Store BTF base pointer in struct module (Viktor Malik) [RHEL-30774]
  - libbpf: BTF relocation followup fixing naming, loop logic (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Match tests against regular expression (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Support checks against a regular expression (Viktor Malik) [RHEL-30774]
  - libbpf: Checking the btf_type kind when fixing variable offsets (Viktor Malik) [RHEL-30774]
  - bpf: Add security_file_post_open() LSM hook to sleepable_lsm_hooks (Viktor Malik) [RHEL-30774]
  - bpftool: Allow compile-time checks of BPF map auto-attach support in skeleton (Viktor Malik) [RHEL-30774]
  - bpf: remove redeclaration of new_n in bpf_verifier_vlog (Viktor Malik) [RHEL-30774]
  - bpf: remove unused parameter in __bpf_free_used_btfs (Viktor Malik) [RHEL-30774]
  - bpf: remove unused parameter in bpf_jit_binary_pack_finalize (Viktor Malik) [RHEL-30774]
  - bpf, x64: Remove tail call detection (Viktor Malik) [RHEL-30774]
  - bpf, verifier: Correct tail_call_reachable for bpf prog (Viktor Malik) [RHEL-30774]
  - resolve_btfids: Handle presence of .BTF.base section (Viktor Malik) [RHEL-30774]
  - libbpf: Make btf_parse_elf process .BTF.base transparently (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Extend distilled BTF tests to cover BTF relocation (Viktor Malik) [RHEL-30774]
  - libbpf: Split BTF relocation (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Test distilled base, split BTF generation (Viktor Malik) [RHEL-30774]
  - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add tests for add_const (Viktor Malik) [RHEL-30774]
  - bpf: Support can_loop/cond_break on big endian (Viktor Malik) [RHEL-30774]
  - bpf: Track delta between "linked" registers. (Viktor Malik) [RHEL-30774]
  - selftests: bpf: add testmod kfunc for nullable params (Viktor Malik) [RHEL-30774]
  - bpf: verifier: make kfuncs args nullalble (Viktor Malik) [RHEL-30774]
  - bpf: selftests: Do not use generated kfunc prototypes for arena progs (Viktor Malik) [RHEL-30774]
  - bpf: Fix bpf_dynptr documentation comments (Viktor Malik) [RHEL-30774]
  - bpftool: Support dumping kfunc prototypes from BTF (Viktor Malik) [RHEL-30774]
  - bpf: selftests: xfrm: Opt out of using generated kfunc prototypes (Viktor Malik) [RHEL-30774]
  - bpf: selftests: nf: Opt out of using generated kfunc prototypes (Viktor Malik) [RHEL-30774]
  - bpf: treewide: Align kfunc signatures to prog point-of-view (Viktor Malik) [RHEL-30774]
  - bpf: verifier: Relax caller requirements for kfunc projection type args (Viktor Malik) [RHEL-30774]
  - bpf: selftests: Fix bpf_map_sum_elem_count() kfunc prototype (Viktor Malik) [RHEL-30774]
  - bpf: selftests: Fix bpf_cpumask_first_zero() kfunc prototype (Viktor Malik) [RHEL-30774]
  - bpf: selftests: Fix fentry test kfunc prototypes (Viktor Malik) [RHEL-30774]
  - bpf: selftests: Fix bpf_iter_task_vma_new() prototype (Viktor Malik) [RHEL-30774]
  - kbuild: bpf: Tell pahole to DECL_TAG kfuncs (Viktor Malik) [RHEL-30774]
  - bpftool: Query only cgroup-related attach types (Viktor Malik) [RHEL-30774]
  - libbpf: Auto-attach struct_ops BPF maps in BPF skeleton (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add btf_field_iter selftests (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT (Viktor Malik) [RHEL-30774]
  - libbpf: Remove callback-based type/string BTF field visitor helpers (Viktor Malik) [RHEL-30774]
  - bpftool: Use BTF field iterator in btfgen (Viktor Malik) [RHEL-30774]
  - libbpf: Make use of BTF field iterator in BTF handling code (Viktor Malik) [RHEL-30774]
  - libbpf: Make use of BTF field iterator in BPF linker code (Viktor Malik) [RHEL-30774]
  - libbpf: Add BTF field iterator (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Ignore .llvm.<hash> suffix in kallsyms_find() (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Fix bpf_cookie and find_vma in nested VM (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Test global bpf_list_head arrays. (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Test global bpf_rb_root arrays and fields in nested struct types. (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Test kptr arrays and kptrs in nested struct fields. (Viktor Malik) [RHEL-30774]
  - bpf: limit the number of levels of a nested struct type. (Viktor Malik) [RHEL-30774]
  - bpf: look into the types of the fields of a struct type recursively. (Viktor Malik) [RHEL-30774]
  - bpf: create repeated fields for arrays. (Viktor Malik) [RHEL-30774]
  - bpf: refactor btf_find_struct_field() and btf_find_datasec_var(). (Viktor Malik) [RHEL-30774]
  - bpf: Remove unnecessary call to btf_field_type_size(). (Viktor Malik) [RHEL-30774]
  - bpf: Remove unnecessary checks on the offset of btf_field. (Viktor Malik) [RHEL-30774]
  - test_bpf: Add missing MODULE_DESCRIPTION() (Viktor Malik) [RHEL-30774]
  - bpftool: Fix typo in MAX_NUM_METRICS macro name (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Remove unused struct 'libcap' (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Remove unused 'key_t' structs (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Remove unused struct 'scale_test_def' (Viktor Malik) [RHEL-30774]
  - bpftool: Change pid_iter.bpf.c to comply with the change of bpf_link_fops. (Viktor Malik) [RHEL-30774]
  - selftests/bpf: test struct_ops with epoll (Viktor Malik) [RHEL-30774]
  - bpf: export bpf_link_inc_not_zero. (Viktor Malik) [RHEL-30774]
  - bpf: support epoll from bpf struct_ops links. (Viktor Malik) [RHEL-30774]
  - bpf: enable detaching links of struct_ops objects. (Viktor Malik) [RHEL-30774]
  - bpf: pass bpf_struct_ops_link to callbacks in bpf_struct_ops. (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add selftest for bits iter (Viktor Malik) [RHEL-30774]
  - bpf: Add bits iterator (Viktor Malik) [RHEL-30774]
  - bitops: make BYTES_TO_BITS() treewide-available (Viktor Malik) [RHEL-30774]
  - libbpf: Configure log verbosity with env variable (Viktor Malik) [RHEL-30774]
  - bpf, docs: Fix instruction.rst indentation (Viktor Malik) [RHEL-30774]
  - bpf, docs: Clarify call local offset (Viktor Malik) [RHEL-30774]
  - bpf, docs: Add table captions (Viktor Malik) [RHEL-30774]
  - bpf, docs: clarify sign extension of 64-bit use of 32-bit imm (Viktor Malik) [RHEL-30774]
  - bpf, docs: Use RFC 2119 language for ISA requirements (Viktor Malik) [RHEL-30774]
  - bpf, docs: Move sentence about returning R0 to abi.rst (Viktor Malik) [RHEL-30774]
  - bpf: constify member bpf_sysctl_kern:: Table (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Fix prog numbers in test_sockmap (Viktor Malik) [RHEL-30774]
  - bpf: Remove unused variable "prev_state" (Viktor Malik) [RHEL-30774]
  - bpftool: Un-const bpf_func_info to fix it for llvm 17 and newer (Viktor Malik) [RHEL-30774]
  - kbuild, bpf: Use test-ge check for v1.25-only pahole (Viktor Malik) [RHEL-30774]
  - bpftool: Introduce btf c dump sorting (Viktor Malik) [RHEL-30774]
  - bpftool: Fix make dependencies for vmlinux.h (Viktor Malik) [RHEL-30774]
  - redhat: Add protected XTS and HMAC config files (Mete Durlu) [RHEL-50772]
  - s390/pkey: Add AES xts and HMAC clear key token support (Mete Durlu) [RHEL-50772]
  - s390/cpacf: Add MSA 10 and 11 new PCKMO functions (Mete Durlu) [RHEL-50772]
  - s390/pkey_pckmo: Return with success for valid protected key types (Mete Durlu) [RHEL-50772]
  - s390/pkey: Add function to enforce pkey handler modules load (Mete Durlu) [RHEL-50772]
  - s390/pkey: Add slowpath function to CCA and EP11 handler (Mete Durlu) [RHEL-50772]
  - s390/pkey: Introduce pkey base with handler registry and handler modules (Mete Durlu) [RHEL-50772]
  - s390/pkey: Unify pkey cca, ep11 and pckmo functions signatures (Mete Durlu) [RHEL-50772]
  - s390/pkey: Rework and split PKEY kernel module code (Mete Durlu) [RHEL-50772]
  - s390/pkey: Split pkey_unlocked_ioctl function (Mete Durlu) [RHEL-50772]
  - s390/pkey: Wipe copies of protected- and secure-keys (Mete Durlu) [RHEL-50772]
  - s390/pkey: Wipe copies of clear-key structures on failure (Mete Durlu) [RHEL-50772]
  - s390/pkey: Wipe sensitive data on failure (Mete Durlu) [RHEL-50772]
  - s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings (Mete Durlu) [RHEL-50772]
  - scsi: aacraid: Fix double-free on probe failure (Tomas Henzl) [RHEL-64334] {CVE-2024-46673}
  - selftests/landlock: Build without static libraries (Mamatha Inamdar) [RHEL-59644]
  - selftests/landlock: Fix out-of-tree builds (Mamatha Inamdar) [RHEL-59644]
  - selftests/landlock: fix broken include of linux/landlock.h (Mamatha Inamdar) [RHEL-59644]
  - selftests/landlock: drop deprecated headers dependency (Mamatha Inamdar) [RHEL-59644]
  - fscache: Fix oops due to race with cookie_lru and use_cookie (CKI Backport Bot) [RHEL-63701] {CVE-2022-48989}
  - block: sed-opal: add ioctl IOC_OPAL_SET_SID_PW (Ming Lei) [RHEL-56730]
  - uprobes: fix kernel info leak via "[uprobes]" vma (Oleg Nesterov) [RHEL-63997] {CVE-2024-49975}
  - selftests: forwarding: Add IPv6 GRE remote change tests (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Sync Rx buffers for device (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Sync Rx buffers for CPU (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_ptp: Add missing verification before pushing Tx header (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: fix xa_store() error checking (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Fix -Wformat-truncation warning (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Remove unnecessary assignments (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Remove unnecessary checks (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Simplify rollback (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Make mlxsw_thermal_module_{init, fini} symmetric (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Remove unused arguments (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Fold two loops into one (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Remove another unnecessary check (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Remove unnecessary check (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Call thermal_zone_device_unregister() unconditionally (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Lock configuration space of upstream bridge during reset (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Report valid current state during cooling device registration (Ivan Vecera) [RHEL-67125]
  - mlxsw: Warn about invalid accesses to array fields (Ivan Vecera) [RHEL-67125]
  - selftests: mlxsw: mirror_gre: Obey TESTS (Ivan Vecera) [RHEL-67125]
  - selftests: mlxsw: mirror_gre: Simplify (Ivan Vecera) [RHEL-67125]
  - mlxsw: Implement ethtool operation to write to a transceiver module EEPROM (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Use fragmented buffers (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Store number of scatter/gather entries for maximum packet size (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Fix driver initialization with Spectrum-4 (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Use napi_consume_skb() to free SKB as part of Tx completion (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Do not store SKB for RDQ elements (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Optimize data buffer access (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Use page pool for Rx buffers allocation (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Initialize page pool per CQ (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Store CQ pointer as part of RDQ structure (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Split NAPI setup/teardown into two steps (Ivan Vecera) [RHEL-67125]
  - mlxsw: Use the same maximum MTU value throughout the driver (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Set more accurate values for netdevice min/max MTU (Ivan Vecera) [RHEL-67125]
  - mlxsw: Adjust MTU value to hardware check (Ivan Vecera) [RHEL-67125]
  - mlxsw: port: Edit maximum MTU value (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Apply user-defined multipath hash seed (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_erp: Fix object nesting warning (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_atcam: Fix wrong comment (Ivan Vecera) [RHEL-67125]
  - lib: test_objagg: Fix spelling (Ivan Vecera) [RHEL-67125]
  - lib: objagg: Fix spelling (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Constify struct devlink_dpipe_table_ops (Ivan Vecera) [RHEL-67125]
  - devlink: Constify the 'table_ops' parameter of devl_dpipe_table_register() (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Use NAPI for event processing (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Reorganize 'mlxsw_pci_queue' structure (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Initialize dummy net devices for NAPI (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Ring RDQ and CQ doorbells once per several completions (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Handle up to 64 Rx completions in tasklet (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_tcam: Rate limit error message (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_tcam: Fix race in region ID allocation (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Fix driver initialization with old firmware (Ivan Vecera) [RHEL-67125]
  - mlxsw: core: Unregister EMAD trap using FORWARD action (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_flower: validate control flags (Ivan Vecera) [RHEL-67125]
  - selftests: mlxsw: ethtool_lanes: Wait for lanes parameter dump explicitly (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_ethtool: Add support for 100Gb/s per lane link modes (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Store DQ pointer as part of CQ structure (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Remove mlxsw_pci_cq_count() (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Remove mlxsw_pci_sdq_count() (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Break mlxsw_pci_cq_tasklet() into tasklets per queue type (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Make style change in mlxsw_pci_cq_tasklet() (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Remove unused wait queue (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Use only one event queue (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Rename MLXSW_PCI_EQS_COUNT (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Poll command interface for each cmd_exec() (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Make style changes in mlxsw_pci_eq_tasklet() (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Remove unused counters (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Arm CQ doorbell regardless of number of completions (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Do not setup tasklet from operation (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Move mlxsw_pci_cq_{init, fini}() (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Move mlxsw_pci_eq_{init, fini}() (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Share nexthop counters in resilient groups (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Support nexthop group hardware statistics (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Track NH ID's of group members (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Add helpers for nexthop counters (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Avoid allocating NH counters twice (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Allow fetch-and-clear of flow counters (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Have mlxsw_sp_nexthop_counter_enable() return int (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Rename two functions (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Set THERMAL_TRIP_FLAG_RW_TEMP directly (Ivan Vecera) [RHEL-67125]
  - mlxsw: remove I2C_CLASS_HWMON from drivers w/o detect and address_list (Ivan Vecera) [RHEL-67125]
  - mlxsw: Use refcount_t for reference counting (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Refactor LAG create and destroy code (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Search for free LAD ID once (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Query max_lag once (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Remove mlxsw_sp_lag_get() (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Change mlxsw_sp_upper to LAG structure (Ivan Vecera) [RHEL-67125]
  - selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes (Ivan Vecera) [RHEL-67125]
  - selftests: mlxsw: qos_pfc: Remove wrong description (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Set NVE flood profile as part of FID configuration (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add an "any" packet type (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Add nve_flood_prf_id field to SFMR (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Use CFF mode where available (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add support for rFID family in CFF flood mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add a family for bridge FIDs in CFF flood mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Initialize flood profiles in CFF mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add profile_id to flood profile (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add an object to keep flood profiles (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add hooks for RSP table maintenance (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add a not-UC packet type (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add an op for packing SFMR (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add an op to get PGT address of a FID (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add an op to get PGT allocation size (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add an op for flood table initialization (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Move mlxsw_sp_fid_flood_table_init() up (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Make mlxsw_sp_fid_ops.setup return an int (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Split a helper out of mlxsw_sp_fid_flood_table_mid() (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Rename FID ops, families, arrays (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Privatize FID families (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Fix missing error checking (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Call RIF setup before obtaining FID (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Add a helper to get subport number from a RIF (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Extract SFMR packing into a helper (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Drop unnecessary conditions (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Permit enabling CFF mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: core, pci: Add plumbing related to CFF mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Add to SFMR register the fields related to CFF flood mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Extract flood-mode specific part of mlxsw_reg_sfmr_pack() (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Drop unnecessary writes from mlxsw_reg_sfmr_pack() (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Mark SFGC & some SFMR fields as reserved in CFF mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Add Switch FID Flooding Profiles Register (Ivan Vecera) [RHEL-67125]
  - mlxsw: resources: Add max_cap_nve_flood_prf (Ivan Vecera) [RHEL-67125]
  - mlxsw: cmd: Add MLXSW_CMD_MBOX_CONFIG_PROFILE_FLOOD_MODE_CFF (Ivan Vecera) [RHEL-67125]
  - mlxsw: cmd: Add cmd_mbox.query_fw.cff_support (Ivan Vecera) [RHEL-67125]
  - selftests: mlxsw: Add PCI reset test (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Implement PCI reset handlers (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Add support for new reset flow (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Move software reset code to a separate function (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Rename mlxsw_pci_sw_reset() (Ivan Vecera) [RHEL-67125]
  - mlxsw: Extend MRSR pack() function to support new commands (Ivan Vecera) [RHEL-67125]
  - PCI: Add no PM reset quirk for NVIDIA Spectrum devices (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Set SW LAG mode on Spectrum>1 (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Allocate LAG table when in SW LAG mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_pgt: Generalize PGT allocation (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Allocate PGT for the whole FID family in one go (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Permit toggling LAG mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: core, pci: Add plumbing related to LAG mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: cmd: Add QUERY_FW.lag_mode_support (Ivan Vecera) [RHEL-67125]
  - mlxsw: cmd: Add CONFIG_PROFILE.{set_, }lag_mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: cmd: Fix omissions in CONFIG_PROFILE field names in comments (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Add SGCR.lag_lookup_pgt_base (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Drop SGCR.llb (Ivan Vecera) [RHEL-67125]
  - cachefiles: fix dentry leak in cachefiles_open_file() (CKI Backport Bot) [RHEL-63602] {CVE-2024-49870}
  - nfsd: fix race between laundromat and free_stateid (Olga Kornievskaia) [RHEL-65915] {CVE-2024-50106}
  - dm cache: fix potential out-of-bounds access on the first resume (Benjamin Marzinski) [RHEL-69092]
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Benjamin Marzinski) [RHEL-69092]
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Benjamin Marzinski) [RHEL-69092]
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr error (Benjamin Marzinski) [RHEL-69092]
  - dm cache: correct the number of origin blocks to match the target length (Benjamin Marzinski) [RHEL-69092]
  - dm-verity: don't crash if panic_on_corruption is not selected (Benjamin Marzinski) [RHEL-69092]
  - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Benjamin Marzinski) [RHEL-69092]
  - dm: fix a crash if blk_alloc_disk fails (Benjamin Marzinski) [RHEL-69092]
  - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Olga Kornievskaia) [RHEL-66036] {CVE-2024-50121}
  - md/raid10: fix null ptr dereference in raid10_size() (Nigel Croxon) [RHEL-66030] {CVE-2024-50109}
  - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (CKI Backport Bot) [RHEL-66865] {CVE-2024-50256}
  - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (CKI Backport Bot) [RHEL-66865] {CVE-2024-50256}
  - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (Olga Kornievskaia) [RHEL-63854] {CVE-2024-50046}
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-9848]
  - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-9848]
  - media: Convert from tasklet to BH workqueue (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: add missing MODULE_DESCRIPTION() macro (Kate Hsuan) [RHEL-67885]
  - usb: uvc: add missing MODULE_DESCRIPTION() macro (Kate Hsuan) [RHEL-67885]
  - media: uapi: Add PiSP Compressed RAW Bayer formats (Kate Hsuan) [RHEL-67885]
  - media: uapi: Add a pixel format for BGR48 and RGB48 (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Fix typo in documentation (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Drop unreacheable warning (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: core: Drop unneeded forward declaration (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add average QP control (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Provide const-aware subdev state accessors (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Fix v4l2_subdev_state_get_format() documentation (Kate Hsuan) [RHEL-67885]
  - media: subdev: Improve s_stream documentation (Kate Hsuan) [RHEL-67885]
  - media: subdev: Support non-routing subdevs in v4l2_subdev_s_stream_helper() (Kate Hsuan) [RHEL-67885]
  - media: subdev: Support single-stream case in v4l2_subdev_enable/disable_streams() (Kate Hsuan) [RHEL-67885]
  - media: subdev: Refactor v4l2_subdev_enable/disable_streams() (Kate Hsuan) [RHEL-67885]
  - media: subdev: Add v4l2_subdev_is_streaming() (Kate Hsuan) [RHEL-67885]
  - media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback (Kate Hsuan) [RHEL-67885]
  - media: subdev: Fix use of sd->enabled_streams in call_s_stream() (Kate Hsuan) [RHEL-67885]
  - media: subdev: Add checks for subdev features (Kate Hsuan) [RHEL-67885]
  - media: subdev: Use v4l2_subdev_has_op() in v4l2_subdev_enable/disable_streams() (Kate Hsuan) [RHEL-67885]
  - Revert "media: v4l2-ctrls: show all owned controls in log_status" (Kate Hsuan) [RHEL-67885]
  - media: cec: cec.h: 2.1 ms -> 2100 ms (Kate Hsuan) [RHEL-67885]
  - media: uapi: v4l: Don't expose generic metadata formats to userspace (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Add trivial set_routing support (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Return routes set using S_ROUTING (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Add len_routes field to struct v4l2_subdev_routing (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Copy argument back to user also for S_ROUTING (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Add a function to lock two sub-device states, use it (Kate Hsuan) [RHEL-67885]
  - media: v4l: Set line based metadata flag in V4L2 core (Kate Hsuan) [RHEL-67885]
  - media: v4l: Support line-based metadata capture (Kate Hsuan) [RHEL-67885]
  - media: uapi: v4l: Add generic 8-bit metadata format definitions (Kate Hsuan) [RHEL-67885]
  - media: Documentation: Rename meta format files (Kate Hsuan) [RHEL-67885]
  - media: uapi: Document which mbus format fields are valid for metadata (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Clearly document that the crop API won't be extended (Kate Hsuan) [RHEL-67885]
  - media: v4l: async: Set owner for async sub-devices (Kate Hsuan) [RHEL-67885]
  - media: v4l: Set sub-device's owner field to the caller's module (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: improve max_num_buffers sanity checks (Kate Hsuan) [RHEL-67885]
  - media: cec: return -ENODEV instead of -ENXIO if unregistered (Kate Hsuan) [RHEL-67885]
  - media: v4l2-core: hold videodev_lock until dev reg, finishes (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Return handler error in creating new fwnode properties (Kate Hsuan) [RHEL-67885]
  - media: mc: mark the media devnode as registered from the, start (Kate Hsuan) [RHEL-67885]
  - media: videodev2: Fix v4l2_ext_control packing. (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Fix stream handling for crop API (Kate Hsuan) [RHEL-67885]
  - media: mc: Fix graph walk in media_pipeline_start (Kate Hsuan) [RHEL-67885]
  - media: mc: Add nop implementations of media_device_{init,cleanup} (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Remove non-pad dv timing callbacks (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Add pad versions of dv timing subdev calls (Kate Hsuan) [RHEL-67885]
  - media: v4l2-common: Add Y210 and Y216 format info (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: add support for area type logging (Kate Hsuan) [RHEL-67885]
  - media: v4l2: Add REMOVE_BUFS ioctl (Kate Hsuan) [RHEL-67885]
  - media: core: Free range of buffers (Kate Hsuan) [RHEL-67885]
  - media: core: Add bitmap manage bufs array entries (Kate Hsuan) [RHEL-67885]
  - media: core: Rework how create_buf index returned value is computed (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Add min_reqbufs_allocation field to vb2_queue structure (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Update vb2_is_busy() logic (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Add missing doc comment for waiting_in_dqbuf (Kate Hsuan) [RHEL-67885]
  - media: core: v4l2-ioctl.c: use is_valid_ioctl() (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls-core.c: check min/max for menu, controls (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Follow renaming of SPI "master" to "controller" (Kate Hsuan) [RHEL-67885]
  - media: mc: Expand MUST_CONNECT flag to always require an enabled link (Kate Hsuan) [RHEL-67885]
  - media: mc: Rename pad variable to clarify intent (Kate Hsuan) [RHEL-67885]
  - media: mc: Add num_links flag to media_pad (Kate Hsuan) [RHEL-67885]
  - media: mc: Fix flags handling when creating pad links (Kate Hsuan) [RHEL-67885]
  - media: mc: Add local pad to pipeline regardless of the link state (Kate Hsuan) [RHEL-67885]
  - media: media-devnode: make media_bus_type const (Kate Hsuan) [RHEL-67885]
  - media: cec: make cec_bus_type const (Kate Hsuan) [RHEL-67885]
  - media: v4l2-common.h: kerneldoc: correctly format return values (Kate Hsuan) [RHEL-67885]
  - media: cec.h: Fix kerneldoc (Kate Hsuan) [RHEL-67885]
  - media: videodev2.h: Fix kerneldoc (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: show all owned controls in log_status (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Fix doc comment (Kate Hsuan) [RHEL-67885]
  - media: v4l: Add a helper for setting up link-frequencies control (Kate Hsuan) [RHEL-67885]
  - media: vb2: refactor setting flags and caps, fix missing cap (Kate Hsuan) [RHEL-67885]
  - media: media videobuf2: Stop direct calls to queue num_buffers field (Kate Hsuan) [RHEL-67885]
  - media: mc: Drop useless debug print on file handle release (Kate Hsuan) [RHEL-67885]
  - media: v4l2-mc: Add debug prints for v4l2_fwnode_create_links_for_pad() (Kate Hsuan) [RHEL-67885]
  - media: media-entity.h: fix Excess kernel-doc description warnings (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: core: Rename min_buffers_needed field in vb2_queue (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Store frame interval in subdev state (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Move out subdev state lock macros outside CONFIG_MEDIA_CONTROLLER (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: request more buffers for vb2_read (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Fix indentation in v4l2-subdev.h (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Rename .init_cfg() operation to .init_state() (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Return NULL from pad access functions on error (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Remove stream-unaware sub-device state access (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Always compile sub-device state access functions (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Make stream argument optional in state access functions (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: v4l2_subdev_state_get_format always returns format now (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Rename sub-device state information access functions (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Also return pads array information on stream functions (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Store the sub-device in the sub-device state (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Drop outdated comment for v4l2_subdev_pad_config (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Rename pad config 'try_*' fields (Kate Hsuan) [RHEL-67885]
  - media: videodev2.h: add missing __user to p_h264_pps (Kate Hsuan) [RHEL-67885]
  - media: drop CONFIG_MEDIA_CONTROLLER_REQUEST_API (Kate Hsuan) [RHEL-67885]
  - media: v4l2-mem2mem.h: fix typo in comment (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dev: Check that g/s_selection are valid before selecting crop (Kate Hsuan) [RHEL-67885]
  - media: v4l2-common: Add 10bpp RGB formats info (Kate Hsuan) [RHEL-67885]
  - media: core: v4l2-ioctl: check if ioctl is known to avoid NULL name (Kate Hsuan) [RHEL-67885]
  - media: core: Report the maximum possible number of buffers for the queue (Kate Hsuan) [RHEL-67885]
  - media: media videobuf2: Be more flexible on the number of queue stored buffers (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Use vb2_get_num_buffers() helper (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Add helper to get queue number of buffers (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Remove duplicated index vs q->num_buffers check (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Access vb2_queue bufs array through helper functions (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Use vb2_buffer instead of index (Kate Hsuan) [RHEL-67885]
  - media: dvb_vb2: fix possible out of bound access (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Stop spamming kernel log with all queue counter (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Rework offset 'cookie' encoding pattern (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Rename offset parameter (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Fix a 64bit bug (Kate Hsuan) [RHEL-67885]
  - media: v4l2: Add ignore_streaming flag (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Fix IS_ERR checking in vb2_vmalloc_put_userptr() (Kate Hsuan) [RHEL-67885]
  - media: subdev: Don't report V4L2_SUBDEV_CAP_STREAMS when the streams API is disabled (Kate Hsuan) [RHEL-67885]
  - media: mc: Check pad flag validity (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Print debug information on frame descriptor (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Clear frame descriptor before get_frame_desc (Kate Hsuan) [RHEL-67885]
  - media: v4l2-event: Annotate struct v4l2_subscribed_event with __counted_by (Kate Hsuan) [RHEL-67885]
  - media: v4l2-device.h: drop V4L2_DEVICE_NAME_SIZE (Kate Hsuan) [RHEL-67885]
  - media: use sizeof() instead of V4L2_SUBDEV_NAME_SIZE (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev.h: increase struct v4l2_subdev name size (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dev.h: increase struct video_device name size (Kate Hsuan) [RHEL-67885]
  - media: cec.h: increase input_phys buffer (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add user control base for Nuvoton NPCM controls (Kate Hsuan) [RHEL-67885]
  - media: v4l: Add HEXTILE compressed format (Kate Hsuan) [RHEL-67885]
  - media: use struct_size() helper (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Document and enforce .s_stream() requirements (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Document that routing support depends on streams (Kate Hsuan) [RHEL-67885]
  - media: v4l2-mc: Make v4l2_pipeline_pm_{get,put} deprecated (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: fix typo: vb2_dbuf -> vb2_qbuf (Kate Hsuan) [RHEL-67885]
  - media: vb2: frame_vector.c: replace WARN_ONCE with a comment (Kate Hsuan) [RHEL-67885]
  - media: subdev: Add debug prints to enable/disable_streams (Kate Hsuan) [RHEL-67885]
  - media: subdev: Constify v4l2_subdev_set_routing_with_fmt() param (Kate Hsuan) [RHEL-67885]
  - media: subdev: Drop implicit zeroing of stream field (Kate Hsuan) [RHEL-67885]
  - media: cec-pin: only enable interrupts when monitoring the CEC pin (Kate Hsuan) [RHEL-67885]
  - media: cec-pin: improve interrupt handling (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Don't assert held reservation lock for dma-buf mmapping (Kate Hsuan) [RHEL-67885]
  - media: Add NV15_4L4 pixel format (Kate Hsuan) [RHEL-67885]
  - media: v4l2-common: Add support for fractional bpp (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Fix missing kerneldoc for client_caps (Kate Hsuan) [RHEL-67885]
  - media: v4l2-mc: Drop subdev check in v4l2_create_fwnode_links_to_pad() (Kate Hsuan) [RHEL-67885]
  - media: uapi: Use unsigned int values for assigning bits in u32 fields (Kate Hsuan) [RHEL-67885]
  - media: mc: Make media_entity_get_fwnode_pad() fwnode argument const (Kate Hsuan) [RHEL-67885]
  - media: videodev2.h: Fix struct v4l2_input tuner index comment (Kate Hsuan) [RHEL-67885]
  - media: Adjust column width for pdfdocs (Kate Hsuan) [RHEL-67885]
  - media: videodev2.h: Fix p_s32 and p_s64 pointer types (Kate Hsuan) [RHEL-67885]
  - media: v4l2-mem2mem: add lock to protect parameter num_rdy (Kate Hsuan) [RHEL-67885]
  - media: Add ABGR64_12 video format (Kate Hsuan) [RHEL-67885]
  - media: Add BGR48_12 video format (Kate Hsuan) [RHEL-67885]
  - media: Add YUV48_12 video format (Kate Hsuan) [RHEL-67885]
  - media: Add Y212 v4l2 format info (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Add new ioctl for client capabilities (Kate Hsuan) [RHEL-67885]
  - media: Accept non-subdev sinks in v4l2_create_fwnode_links_to_pad() (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Fix doc for v4l2_ctrl_request_hdl_find (Kate Hsuan) [RHEL-67885]
  - media: subdev: Add V4L2_SUBDEV_ROUTING_NO_MULTIPLEXING (Kate Hsuan) [RHEL-67885]
  - media: subdev: Split V4L2_SUBDEV_ROUTING_NO_STREAM_MIX (Kate Hsuan) [RHEL-67885]
  - media: subdev: Use 'shall' instead of 'may' in route validation (Kate Hsuan) [RHEL-67885]
  - media: v4l2-core: zero field base in struct v4l2_framebuffer (Kate Hsuan) [RHEL-67885]
  - media: videodev.h: drop V4L2_FBUF_CAP_LIST/BITMAP_CLIPPING (Kate Hsuan) [RHEL-67885]
  - media: v4l2-core: drop v4l2_window clipping and bitmap support (Kate Hsuan) [RHEL-67885]
  - media: drop unnecessary networking includes (Kate Hsuan) [RHEL-67885]
  - media: rc: add common keymap for Dreambox RC10/RC0 and RC20/RC-BT remotes (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dev.c: check for V4L2_CAP_STREAMING to enable streaming ioctls (Kate Hsuan) [RHEL-67885]
  - media: vb2: set owner before calling vb2_read (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Make link validation safer (Kate Hsuan) [RHEL-67885]
  - media: subdev: Fix validation state lockdep issue (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev.c: clear stream field (Kate Hsuan) [RHEL-67885]
  - media: videobuf2-core: drop obsolete sanity check in __vb2_queue_free() (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Fix minor issues in comments and documentation (Kate Hsuan) [RHEL-67885]
  - media: mc: Get media_device directly from pad (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Add entity iterator for media_pipeline (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Add pad iterator for media_pipeline (Kate Hsuan) [RHEL-67885]
  - media: Add stream to frame descriptor (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Add v4l2_subdev_s_stream_helper() function (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Add subdev .(enable|disable)_streams() operations (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Add v4l2_subdev_state_xlate_streams() helper (Kate Hsuan) [RHEL-67885]
  - media: subdev: add v4l2_subdev_routing_validate() helper (Kate Hsuan) [RHEL-67885]
  - media: subdev: add v4l2_subdev_set_routing_with_fmt() helper (Kate Hsuan) [RHEL-67885]
  - media: subdev: add streams to v4l2_subdev_get_fmt() helper function (Kate Hsuan) [RHEL-67885]
  - media: subdev: add "opposite" stream helper funcs (Kate Hsuan) [RHEL-67885]
  - media: subdev: use streams in v4l2_subdev_link_validate() (Kate Hsuan) [RHEL-67885]
  - media: subdev: add stream based configuration (Kate Hsuan) [RHEL-67885]
  - media: subdev: Add for_each_active_route() macro (Kate Hsuan) [RHEL-67885]
  - media: subdev: add v4l2_subdev_set_routing helper() (Kate Hsuan) [RHEL-67885]
  - media: subdev: add v4l2_subdev_has_pad_interdep() (Kate Hsuan) [RHEL-67885]
  - media: subdev: Require code change to enable [GS]_ROUTING (Kate Hsuan) [RHEL-67885]
  - media: subdev: Add [GS]_ROUTING subdev ioctls and operations (Kate Hsuan) [RHEL-67885]
  - media: add V4L2_SUBDEV_CAP_STREAMS (Kate Hsuan) [RHEL-67885]
  - media: add V4L2_SUBDEV_FL_STREAMS (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Sort includes (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Fix doc for media_graph_walk_init (Kate Hsuan) [RHEL-67885]
  - media: mc: Improve the media_entity_has_pad_interdep() documentation (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls-api.c: move ctrl->is_new = 1 to the correct line (Kate Hsuan) [RHEL-67885]
  - media: Add Y210, Y212 and Y216 formats (Kate Hsuan) [RHEL-67885]
  - media: Add 2-10-10-10 RGB formats (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls-api.c: add back dropped ctrl->is_new = 1 (Kate Hsuan) [RHEL-67885]
  - media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() (Kate Hsuan) [RHEL-67885]
  - headers: Remove some left-over license text in include/uapi/linux/v4l2-* (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: revert "get_userptr: buffers are always writable" (Kate Hsuan) [RHEL-67885]
  - media: videobuf2-dma-sg: Fix buf->vb NULL pointer dereference (Kate Hsuan) [RHEL-67885]
  - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails (Kate Hsuan) [RHEL-67885]
  - media: add nv12_8l128 and nv12_10be_8l128 video format. (Kate Hsuan) [RHEL-67885]
  - media: v4l: Use memset_after() helper (Kate Hsuan) [RHEL-67885]
  - media: dvb_ringbuffer: Fix typo in dvb_ringbuffer_pkt_write() kerneldoc (Kate Hsuan) [RHEL-67885]
  - media: subdev: Replace custom implementation of device_match_fwnode() (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dv-timings.c: fix too strict blanking sanity checks (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Reserve controls for ASPEED (Kate Hsuan) [RHEL-67885]
  - media: v4l: Add definition for the Aspeed JPEG format (Kate Hsuan) [RHEL-67885]
  - v4l: subdev: Warn if disabling streaming failed, return success (Kate Hsuan) [RHEL-67885]
  - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dv-timings: add sanity checks for blanking values (Kate Hsuan) [RHEL-67885]
  - media: v4l: ctrls: Add a control for HDR mode (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Document s_power() callback is deprecated (Kate Hsuan) [RHEL-67885]
  - media: Fix documentation typos in media-entity.h (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ioctl.c: Unify YCbCr/YUV terms in format descriptions (Kate Hsuan) [RHEL-67885]
  - videodev2.h: add p_s32 and p_s64 pointers (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Fix off-by-one error in integer menu control check (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ioctl.c: fix incorrect error path (Kate Hsuan) [RHEL-67885]
  - media: v4l2-compat-ioctl32.c: zero buffer passed to v4l2_compat_get_array_args() (Kate Hsuan) [RHEL-67885]
  - media: mc: convert pipeline funcs to take media_pad (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Add has_pad_interdep entity operation (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Rewrite media_pipeline_start() (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: add alloc variant of pipeline_start (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dev: Add videodev wrappers for media pipelines (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Add media_entity_pipeline() to access the media pipeline (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Move media_entity_get_fwnode_pad() out of graph walk section (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Merge media_entity_enum_init and __media_entity_enum_init (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Add iterator helper for entity pads (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Rename streaming_count -> start_count (Kate Hsuan) [RHEL-67885]
  - media: subdev: increase V4L2_FRAME_DESC_ENTRY_MAX to 8 (Kate Hsuan) [RHEL-67885]
  - media: media-entity.h: add include for min() (Kate Hsuan) [RHEL-67885]
  - media: Remove incorrect comment from struct v4l2_fwnode_endpoint (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Fail graciously when getting try data for NULL state (Kate Hsuan) [RHEL-67885]
  - media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: drop 'elems' argument from control type ops. (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Remove vb2_find_timestamp() (Kate Hsuan) [RHEL-67885]
  - media: videodev2.h: drop V4L2_CAP_ASYNCIO (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Fix typo in VP8 comment (Kate Hsuan) [RHEL-67885]
  - media: vb2: videobuf -> videobuf2 (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ioctl: Fix typo 'the the' in comment (Kate Hsuan) [RHEL-67885]
  - media: v4l: uapi: Add user control base for DW100 controls (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Export default v4l2_ctrl_type_ops callbacks (Kate Hsuan) [RHEL-67885]
  - media: Documentation: mc-core: Fix typo (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: optimize type_ops for arrays (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: add change flag for when dimensions change (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: add v4l2_ctrl_modify_dimensions (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: alloc arrays in ctrl_ref (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: allocate space for arrays (Kate Hsuan) [RHEL-67885]
  - media: mc-entity: Add a new helper function to get a remote pad for a pad (Kate Hsuan) [RHEL-67885]
  - media: mc-entity: Add a new helper function to get a remote pad (Kate Hsuan) [RHEL-67885]
  - media: mc-entity: Rename media_entity_remote_pad() to media_pad_remote_pad_first() (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Introduce vb2_find_buffer() (Kate Hsuan) [RHEL-67885]
  - media: Add P010 tiled format (Kate Hsuan) [RHEL-67885]
  - media: uapi: HEVC: Add SEI pic struct flags (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: add support for dynamically allocated arrays. (Kate Hsuan) [RHEL-67885]
  - media: videodev2.h: add V4L2_CTRL_FLAG_DYNAMIC_ARRAY (Kate Hsuan) [RHEL-67885]
  - media: entity: Use dedicated data link iterator (Kate Hsuan) [RHEL-67885]
  - media: entity: Add iterator for entity data links (Kate Hsuan) [RHEL-67885]
  - media: subdev: Add v4l2_subdev_call_state_try() macro (Kate Hsuan) [RHEL-67885]
  - media: v4l2: Sanitize colorspace values in the framework (Kate Hsuan) [RHEL-67885]
  - media: pixfmt-yuv-planar.rst: fix PIX_FMT labels (Kate Hsuan) [RHEL-67885]
  - media: v4l2: Make colorspace validity checks more future-proof (Kate Hsuan) [RHEL-67885]
  - media: v4l: Add packed YUV 4:4:4 YUVA and YUVX pixel formats (Kate Hsuan) [RHEL-67885]
  - media: Fix incorrect P010 chroma order description (Kate Hsuan) [RHEL-67885]
  - media: Add P010 video format (Kate Hsuan) [RHEL-67885]
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - gpl-2.0_168.RULE (part 2) (Kate Hsuan) [RHEL-67885]
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - gpl-2.0_30.RULE (part 2) (Kate Hsuan) [RHEL-67885]
  - media: Add CSI-2 bus configuration to frame descriptors (Kate Hsuan) [RHEL-67885]
  - media: Add bus type to frame descriptors (Kate Hsuan) [RHEL-67885]
  - media: cec-pin.c: don't zero work_pin_num_events in adap_enable (Kate Hsuan) [RHEL-67885]
  - media: cec-pin.c: disabling the adapter cannot call kthread_stop (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctls-core.c: kvmalloc_array -> kvcalloc (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev.c: kvmalloc_array -> kvcalloc (Kate Hsuan) [RHEL-67885]
  - media: videobuf2-v4l2: Expose vb2_queue_is_busy() to drivers (Kate Hsuan) [RHEL-67885]
  - media: v4l2: fix uninitialized value tuner_status(CWE-457) (Kate Hsuan) [RHEL-67885]
  - media: ext-ctrls-codec.rst: fix indentation (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add intra-refresh type control (Kate Hsuan) [RHEL-67885]
  - media: v4l: Add Qualcomm custom compressed pixel formats (Kate Hsuan) [RHEL-67885]
  - media: media-entity.h: Fix documentation for media_create_intf_link (Kate Hsuan) [RHEL-67885]
  - media: media.h: remove unneeded <stdint.h> inclusion (Kate Hsuan) [RHEL-67885]
  - media: subdev: add v4l2_subdev_get_fmt() helper function (Kate Hsuan) [RHEL-67885]
  - media: subdev: add locking wrappers to subdev op wrappers (Kate Hsuan) [RHEL-67885]
  - media: subdev: add subdev state locking (Kate Hsuan) [RHEL-67885]
  - media: subdev: pass also the active state to subdevs from ioctls (Kate Hsuan) [RHEL-67885]
  - media: subdev: rename v4l2_subdev_get_pad_* helpers (Kate Hsuan) [RHEL-67885]
  - media: subdev: add active state to struct v4l2_subdev (Kate Hsuan) [RHEL-67885]
  - media: subdev: rename subdev-state alloc & free (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: drop extra #ifdef (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: fix #endif comments (Kate Hsuan) [RHEL-67885]
  - media: mc: delete redundant code in __media_device_unregister_entity (Kate Hsuan) [RHEL-67885]
  - media: v4l: ioctl: Set bus_info in v4l_querycap() (Kate Hsuan) [RHEL-67885]
  - media: mc: Set bus_info in media_device_init() (Kate Hsuan) [RHEL-67885]
  - media: mc: Provide a helper for setting bus_info field (Kate Hsuan) [RHEL-67885]
  - media: mc: media_device_init() initialises a media_device, not media_entity (Kate Hsuan) [RHEL-67885]
  - media: mc: Remove redundant documentation (Kate Hsuan) [RHEL-67885]
  - media: entity: Add support for ancillary links (Kate Hsuan) [RHEL-67885]
  - media: entity: Add link_type_name() helper (Kate Hsuan) [RHEL-67885]
  - media: media.h: Add new media link type (Kate Hsuan) [RHEL-67885]
  - media: entity: Skip non-data links in graph iteration (Kate Hsuan) [RHEL-67885]
  - media: entity: skip non-data link when removing reverse links (Kate Hsuan) [RHEL-67885]
  - media: add nv12m_8l128 and nv12m_10be_8l128 video format. (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add new V4L2_H264_DECODE_PARAM_FLAG_P/BFRAME flags (Kate Hsuan) [RHEL-67885]
  - media: media-entity: Clarify media_entity_cleanup() usage (Kate Hsuan) [RHEL-67885]
  - media: media-entity: Simplify media_pipeline_start() (Kate Hsuan) [RHEL-67885]
  - media: media-entity: Add media_pad_is_streaming() helper function (Kate Hsuan) [RHEL-67885]
  - media: v4l2-core: Initialize h264 scaling matrix (Kate Hsuan) [RHEL-67885]
  - media: uapi: Init VP9 stateless decode params (Kate Hsuan) [RHEL-67885]
  - media: v4l2-mediabus: Drop legacy V4L2_MBUS_CSI2_*_LANE flags (Kate Hsuan) [RHEL-67885]
  - media: v4l: Avoid unaligned access warnings when printing 4cc modifiers (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Drop .set_mbus_config() operation (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dev: Use non-atomic bitmap API when applicable (Kate Hsuan) [RHEL-67885]
  - media: hevc: Remove RPS named flags (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: make array range static (Kate Hsuan) [RHEL-67885]
  - media: dmxdev: drop unneeded <linux/kernel.h> inclusion from other headers (Kate Hsuan) [RHEL-67885]
  - media: mc: mc-entity.c: Use bitmap_zalloc() when applicable (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: add WARN_ON_ONCE if bytesused is bigger than buffer length (Kate Hsuan) [RHEL-67885]
  - media: vb2: frame_vector.c: don't overwrite error code (Kate Hsuan) [RHEL-67885]
  - media: mc: drop an unused debug function (Kate Hsuan) [RHEL-67885]
  - media: uapi: Add VP9 stateless decoder controls (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add RGB color effects control (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add V4L2_CID_COLORFX_CBCR max setting (Kate Hsuan) [RHEL-67885]
  - media: v4l2-mem2mem: add v4l2_m2m_get_unmapped_area for no-mmu platform (Kate Hsuan) [RHEL-67885]
  - media: v4l2-core: fix VIDIOC_DQEVENT handling on non-x86 (Kate Hsuan) [RHEL-67885]
  - include/media/media-entity.h: replace kernel.h with the necessary inclusions (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dev.h: move open brace after struct video_device (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: handle V4L2_MEMORY_FLAG_NON_COHERENT flag (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: add queue memory coherency parameter (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: add V4L2_MEMORY_FLAG_NON_COHERENT flag (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: split buffer cache_hints initialisation (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: inverse buffer cache_hints flags (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: rework vb2_mem_ops API (Kate Hsuan) [RHEL-67885]
  - media: Request API is no longer experimental (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ioctl: S_CTRL output the right value (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ioctl: Fix check_ext_ctrls (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add V4L2_CID_NOTIFY_GAINS control (Kate Hsuan) [RHEL-67885]
  - media: add Mediatek's MM21 format (Kate Hsuan) [RHEL-67885]
  - media: Clean V4L2_PIX_FMT_NV12MT documentation (Kate Hsuan) [RHEL-67885]
  - media: Add NV12_4L4 tiled format (Kate Hsuan) [RHEL-67885]
  - media: Rename V4L2_PIX_FMT_HM12 to V4L2_PIX_FMT_NV12_16L16 (Kate Hsuan) [RHEL-67885]
  - media: Rename V4L2_PIX_FMT_SUNXI_TILED_NV12 to V4L2_PIX_FMT_NV12_32L32 (Kate Hsuan) [RHEL-67885]
  - media: videobuf2-core: sanity checks for requests and qbuf (Kate Hsuan) [RHEL-67885]
  - media: hevc: Add scaling matrix control (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add intra-refresh period control (Kate Hsuan) [RHEL-67885]
  - media: docs: ext-ctrls-codec: Document cyclic intra-refresh zero control value (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dv-timings.c: fix wrong condition in two for-loops (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Add pre_streamon and post_streamoff callbacks (Kate Hsuan) [RHEL-67885]
  - media: mc-device.c: use DEVICE_ATTR_RO() helper macro (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Fix documentation of the subdev_notifier member (Kate Hsuan) [RHEL-67885]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-543.el9]
changelog:
  - scsi: lpfc: Fix a possible null pointer dereference (Ewan D. Milne) [RHEL-64869] {CVE-2024-43821}
  - smb: client: fix NULL ptr deref in crypto_aead_setkey() (Paulo Alcantara) [RHEL-63909]
  - smb: client: fix UAF in async decryption (Paulo Alcantara) [RHEL-63909] {CVE-2024-50047}
  - macsec: Fix use-after-free while sending the offloading packet (CKI Backport Bot) [RHEL-66910] {CVE-2024-50261}
  - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-68541]
  - ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS for ChainDMA (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Use single token list for the copiers (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin format (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Adjust the params based on DAI formats (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Improve readability of sof_ipc4_prepare_dai_copier() (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology/pcm: Rename sof_ipc4_copier_is_single_format() (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Print out the channel count in sof_ipc4_dbg_audio_format (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: support tdm slot number query (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc3-topology: support tdm slot number query (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: sof-audio: add sof_dai_get_tdm_slots function (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: sof-audio: rename dai clock setting query function (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Add support for NHLT with 16-bit only DMIC blob (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Correct DAI copier config and NHLT blob request (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Allow selective update in sof_ipc4_update_hw_params (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: remove shadowed variable (Jaroslav Kysela) [RHEL-54539]
  - redhat/configs: Move GPIO configs under rhel (Rupinderjit Singh) [RHEL-69941]
  - platform/x86/intel/tpmi/plr: Fix output in plr_print_bits() (David Arcari) [RHEL-46074]
  - doc: TPMI: Add entry for Performance Limit Reasons (David Arcari) [RHEL-46074]
  - platform/x86/intel/tpmi/plr: Add support for the plr mailbox (David Arcari) [RHEL-46074]
  - platform/x86/intel/tpmi: Add new auxiliary driver for performance limits (David Arcari) [RHEL-46074]
  - redhat: configs: enable INTEL_PLR_TPMI for RHEL (David Arcari) [RHEL-46074]
  - platform/x86/intel: TPMI domain id and CPU mapping (David Arcari) [RHEL-46074]
  - platform/x86/intel/tpmi: Add API to get debugfs root (David Arcari) [RHEL-46074]
  - platform/x86/intel/tpmi: Add support for performance limit reasons (David Arcari) [RHEL-46074]
  - doc: TPMI: Add debugfs documentation (David Arcari) [RHEL-46074]
  - MAINTAINERS: Add entry for TPMI driver (David Arcari) [RHEL-46074]
  - gso: fix dodgy bit handling for GSO_UDP_L4 (Guillaume Nault) [RHEL-69903]
  - udp: allow header check for dodgy GSO_UDP_L4 packets. (Guillaume Nault) [RHEL-69903]
  - redhat: configs: Disable DVB settings (Kate Hsuan) [RHEL-65104]
  - cache: add __cacheline_group_{begin, end}_aligned() (+ couple more) (CKI Backport Bot) [RHEL-68652]
  - uapi: stddef.h: Provide UAPI macros for __counted_by_{le, be} (Michal Schmidt) [RHEL-68653]
  - compiler_types: add Endianness-dependent __counted_by_{le,be} (Michal Schmidt) [RHEL-68653]
  - docs: ignore __counted_by attribute in structure definitions (Michal Schmidt) [RHEL-68653]
  - Documentation: conf.py: Add __force to c_id_attributes (Michal Schmidt) [RHEL-68653]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-544.el9]
changelog:
  - x86/apic: Always explicitly disarm TSC-deadline timer (David Arcari) [RHEL-65750]
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [RHEL-35819]
  - CVE-2024-53122 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Patrick Talbert) [RHEL-69670] {CVE-2024-53122}
  - x86/tdx: mark TDX guest as fully supported (Vitaly Kuznetsov) [RHEL-70465]
  - net: usb: cdc_ether: don't spew notifications (Jose Ignacio Tornos Martinez) [RHEL-52777]
  - USB: zaurus: Add ID for A-300/B-500/C-700 (Jose Ignacio Tornos Martinez) [RHEL-52777]
  - net: usb: cdc_ether: add u-blox 0x1313 composition. (Jose Ignacio Tornos Martinez) [RHEL-52777]
  - USB: serial: xr: add TIOCGRS485 and TIOCSRS485 ioctls (Desnes Nunes) [RHEL-67057]
  - USB: serial: xr: avoid requesting zero DTE rate (Desnes Nunes) [RHEL-67057]
  - redhat: configs: enable xr_serial on rhel (Desnes Nunes) [RHEL-67057]
  - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-68558] {CVE-2024-53095}
  - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-67852]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-545.el9]
changelog:
  - net: fix data-races around sk->sk_forward_alloc (CKI Backport Bot) [RHEL-69689] {CVE-2024-53124}
  - nvme-fabrics: handle zero MAXCMD without closing the connection (Maurizio Lombardi) [RHEL-71164]
  - redhat: add test_klp_syscall to mod-internal.list (Ryan Sullivan) [RHEL-69931]
  - blk_iocost: fix more out of bound shifts (CKI Backport Bot) [RHEL-63978] {CVE-2024-49933}
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()" (Rafael Aquini) [RHEL-27745 RHEL-70053] {CVE-2024-53136}
  - mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (Rafael Aquini) [RHEL-27745 RHEL-69683] {CVE-2024-53105}
  - filemap: Fix bounds checking in filemap_read() (Rafael Aquini) [RHEL-27745 RHEL-68011] {CVE-2024-50272}
  - mm/mlock: set the correct prev on failure (Rafael Aquini) [RHEL-27745]
  - vmscan,migrate: fix page count imbalance on node stats when demoting pages (Rafael Aquini) [RHEL-27745]
  - kasan: remove vmalloc_percpu test (Rafael Aquini) [RHEL-27745]
  - mm: krealloc: Fix MTE false alarm in __do_krealloc (Rafael Aquini) [RHEL-27745 RHEL-68909] {CVE-2024-53097}
  - mm: shmem: fix data-race in shmem_getattr() (Rafael Aquini) [RHEL-27745 RHEL-66818] {CVE-2024-50228}
  - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Rafael Aquini) [RHEL-27745 RHEL-66794] {CVE-2024-50219}
  - fork: only invoke khugepaged, ksm hooks if no error (Rafael Aquini) [RHEL-27745]
  - fork: do not invoke uffd on fork if error occurs (Rafael Aquini) [RHEL-27745]
  - maple_tree: add regression test for spanning store bug (Rafael Aquini) [RHEL-27745 RHEL-66950] {CVE-2024-50200}
  - maple_tree: correct tree corruption on spanning store (Rafael Aquini) [RHEL-27745 RHEL-66950] {CVE-2024-50200}
  - mm/mglru: only clear kswapd_failures if reclaimable (Rafael Aquini) [RHEL-27745]
  - mm/swapfile: skip HugeTLB pages for unuse_vma (Rafael Aquini) [RHEL-27745 RHEL-66977] {CVE-2024-50199}
  - mm: don't install PMD mappings when THPs are disabled by the hw/process/vma (Rafael Aquini) [RHEL-27745]
  - mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw() (Rafael Aquini) [RHEL-27745]
  - mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point (Rafael Aquini) [RHEL-27745]
  - mm/mremap: fix move_normal_pmd/retract_page_tables race (Rafael Aquini) [RHEL-27745]
  - secretmem: disable memfd_secret() if arch cannot set direct map (Rafael Aquini) [RHEL-27745 RHEL-66627] {CVE-2024-50182}
  - memory tiers: use default_dram_perf_ref_source in log message (Rafael Aquini) [RHEL-27745 RHEL-62336]
  - mm: migrate: annotate data-race in migrate_folio_unmap() (Rafael Aquini) [RHEL-27745]
  - mm: avoid leaving partial pfn mappings around in error case (Rafael Aquini) [RHEL-27745]
  - mm: Kconfig: fixup zsmalloc configuration (Rafael Aquini) [RHEL-27745]
  - mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock (Rafael Aquini) [RHEL-27745]
  - sched/numa: Fix the vma scan starving issue (Rafael Aquini) [RHEL-27745]
  - mm: krealloc: consider spare memory for __GFP_ZERO (Rafael Aquini) [RHEL-27745]
  - mm: only enforce minimum stack gap size if it's sensible (Rafael Aquini) [RHEL-27745]
  - mm/memcontrol: respect zswap.writeback setting from parent cg too (Rafael Aquini) [RHEL-27745]
  - Revert "mm: skip CMA pages when they are not available" (Rafael Aquini) [RHEL-27745]
  - mm: vmalloc: ensure vmap_block is initialised before adding to queue (Rafael Aquini) [RHEL-27745]
  - mm: Fix missing folio invalidation calls during truncation (Rafael Aquini) [RHEL-27745]
  - mm: fix endless reclaim on machines with unaccepted memory (Rafael Aquini) [RHEL-27745]
  - mm/numa: no task_numa_fault() call if PMD is changed (Rafael Aquini) [RHEL-27745]
  - mm/numa: no task_numa_fault() call if PTE is changed (Rafael Aquini) [RHEL-27745]
  - memcg_write_event_control(): fix a user-triggerable oops (Rafael Aquini) [RHEL-27745]
  - mm/page_alloc: fix pcp->count race between drain_pages_zone() vs __rmqueue_pcplist() (Rafael Aquini) [RHEL-27745]
  - mm/mglru: fix ineffective protection calculation (Rafael Aquini) [RHEL-27745 RHEL-54929] {CVE-2024-42316}
  - mm/hugetlb: fix possible recursive locking detected warning (Rafael Aquini) [RHEL-27745]
  - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-27745]
  - mm/mglru: fix overshooting shrinker memory (Rafael Aquini) [RHEL-27745 RHEL-54929] {CVE-2024-42316}
  - mm/mglru: fix div-by-zero in vmpressure_calc_level() (Rafael Aquini) [RHEL-27745 RHEL-54929] {CVE-2024-42316}
  - mm: ignore data-race in __swap_writepage (Rafael Aquini) [RHEL-27745]
  - mm, virt: merge AS_UNMOVABLE and AS_INACCESSIBLE (Rafael Aquini) [RHEL-27745]
  - mm/hugetlb: fix potential race in __update_and_free_hugetlb_folio() (Rafael Aquini) [RHEL-27745]
  - mm: gup: stop abusing try_grab_folio (Rafael Aquini) [RHEL-27745]
  - mm: refactor folio_undo_large_rmappable() (Rafael Aquini) [RHEL-27745]
  - mm: page_ref: remove folio_try_get_rcu() (Rafael Aquini) [RHEL-27745]
  - mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer (Rafael Aquini) [RHEL-27745]
  - mm/memory_hotplug: prevent accessing by index=-1 (Rafael Aquini) [RHEL-27745]
  - x86/mm: Cleanup prctl_enable_tagged_addr() nr_bits error checking (Rafael Aquini) [RHEL-27745]
  - x86/mm: Fix LAM inconsistency during context switch (Rafael Aquini) [RHEL-27745]
  - mm/page_alloc: Separate THP PCP into movable and non-movable categories (Rafael Aquini) [RHEL-27745]
  - mm: fix incorrect vbq reference in purge_fragmented_block (Rafael Aquini) [RHEL-27745]
  - Revert "mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default" (Rafael Aquini) [RHEL-27745]
  - mm/debug_vm_pgtable: drop RANDOM_ORVALUE trick (Rafael Aquini) [RHEL-27745]
  - mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default (Rafael Aquini) [RHEL-27745]
  - mm/hugetlb: do not call vma_add_reservation upon ENOMEM (Rafael Aquini) [RHEL-27745]
  - kmsan: do not wipe out origin when doing partial unpoisoning (Rafael Aquini) [RHEL-27745]
  - kasan, fortify: properly rename memintrinsics (Rafael Aquini) [RHEL-27745]
  - mm: Introduce AS_INACCESSIBLE for encrypted/confidential memory (Rafael Aquini) [RHEL-27745]
  - mm/hugetlb: align cma on allocation order, not demotion order (Rafael Aquini) [RHEL-27745]
  - mm: fix race between __split_huge_pmd_locked() and GUP-fast (Rafael Aquini) [RHEL-27745]
  - mm/page_table_check: support userfault wr-protect entries (Rafael Aquini) [RHEL-27745]
  - mm/slab: make __free(kfree) accept error pointers (Rafael Aquini) [RHEL-27745]
  - mm/slub: handle bulk and single object freeing separately (Rafael Aquini) [RHEL-27745]
  - mm/hugetlb: pass correct order_per_bit to cma_declare_contiguous_nid (Rafael Aquini) [RHEL-27745]
  - mm/cma: drop incorrect alignment check in cma_init_reserved_mem (Rafael Aquini) [RHEL-27745]
  - hugetlb: convert alloc_buddy_hugetlb_folio to use a folio (Rafael Aquini) [RHEL-27745]
  - mm: page_alloc: use the correct THP order for THP PCP (Rafael Aquini) [RHEL-27745]
  - khugepaged: use a folio throughout hpage_collapse_scan_file() (Rafael Aquini) [RHEL-27745]
  - khugepaged: use a folio throughout collapse_file() (Rafael Aquini) [RHEL-27745]
  - khugepaged: pass a folio to __collapse_huge_page_copy() (Rafael Aquini) [RHEL-27745]
  - khugepaged: remove hpage from collapse_huge_page() (Rafael Aquini) [RHEL-27745]
  - khugepaged: remove hpage from collapse_file() (Rafael Aquini) [RHEL-27745]
  - khugepaged: convert alloc_charge_hpage to alloc_charge_folio (Rafael Aquini) [RHEL-27745]
  - khugepaged: inline hpage_collapse_alloc_folio() (Rafael Aquini) [RHEL-27745]
  - selftest/mm: ksm_functional_tests: extend test case for ksm fork/exec (Rafael Aquini) [RHEL-27745]
  - selftest/mm: ksm_functional_tests: refactor mmap_and_merge_range() (Rafael Aquini) [RHEL-27745]
  - mm/ksm: fix ksm exec support for prctl (Rafael Aquini) [RHEL-27745]
  - mm: page_alloc: control latency caused by zone PCP draining (Rafael Aquini) [RHEL-27745]
  - mm: zswap: fix shrinker NULL crash with cgroup_disable=memory (Rafael Aquini) [RHEL-27745]
  - mm: turn folio_test_hugetlb into a PageType (Rafael Aquini) [RHEL-27745]
  - mm: support page_mapcount() on page_has_type() pages (Rafael Aquini) [RHEL-27745]
  - mm, pagemap: remove SLOB and SLQB from comments and documentation (Rafael Aquini) [RHEL-27745]
  - mm: create FOLIO_FLAG_FALSE and FOLIO_TYPE_OPS macros (Rafael Aquini) [RHEL-27745]
  - mm/shmem: inline shmem_is_huge() for disabled transparent hugepages (Rafael Aquini) [RHEL-27745]
  - mm,swapops: update check in is_pfn_swap_entry for hwpoison entries (Rafael Aquini) [RHEL-27745]
  - mm/madvise: make MADV_POPULATE_(READ|WRITE) handle VM_FAULT_RETRY properly (Rafael Aquini) [RHEL-27745]
  - mm: zswap: fix writeback shinker GFP_NOIO/GFP_NOFS recursion (Rafael Aquini) [RHEL-27745]
  - mm: recover pud_leaf() definitions in nopmd case (Rafael Aquini) [RHEL-27745]
  - mm/treewide: align up pXd_leaf() retval across archs (Rafael Aquini) [RHEL-27745]
  - mm/treewide: drop pXd_large() (Rafael Aquini) [RHEL-27745]
  - mm/treewide: replace pud_large() with pud_leaf() (Rafael Aquini) [RHEL-27745]
  - mm/treewide: replace pmd_large() with pmd_leaf() (Rafael Aquini) [RHEL-27745]
  - mm/kasan: use pXd_leaf() in shadow_mapped() (Rafael Aquini) [RHEL-27745]
  - mm/x86: drop two unnecessary pud_leaf() definitions (Rafael Aquini) [RHEL-27745]
  - mm/x86: replace pgd_large() with pgd_leaf() (Rafael Aquini) [RHEL-27745]
  - mm/x86: replace p4d_large() with p4d_leaf() (Rafael Aquini) [RHEL-27745]
  - mm/powerpc: replace pXd_is_leaf() with pXd_leaf() (Rafael Aquini) [RHEL-27745]
  - mm/powerpc: define pXd_large() with pXd_leaf() (Rafael Aquini) [RHEL-27745]
  - mm: memory: fix shift-out-of-bounds in fault_around_bytes_set (Rafael Aquini) [RHEL-27745]
  - mm: remove cast from page_to_nid() (Rafael Aquini) [RHEL-27745]
  - mm: constify more page/folio tests (Rafael Aquini) [RHEL-27745]
  - mm: constify testing page/folio flags (Rafael Aquini) [RHEL-27745]
  - mm: make dump_page() take a const argument (Rafael Aquini) [RHEL-27745]
  - mm: add __dump_folio() (Rafael Aquini) [RHEL-27745]
  - mm: remove PageYoung and PageIdle definitions (Rafael Aquini) [RHEL-27745]
  - mm: remove PageWaiters, PageSetWaiters and PageClearWaiters (Rafael Aquini) [RHEL-27745]
  - mm: separate out FOLIO_FLAGS from PAGEFLAGS (Rafael Aquini) [RHEL-27745]
  - mm: support order-1 folios in the page cache (Rafael Aquini) [RHEL-27745]
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations (Rafael Aquini) [RHEL-27745]
  - madvise:madvise_cold_or_pageout_pte_range(): allow split while folio_estimated_sharers = 0 (Rafael Aquini) [RHEL-27745]
  - selftests/mm: run_vmtests.sh: add hugetlb_madv_vs_map (Rafael Aquini) [RHEL-27745 RHEL-61137]
  - mm/hugetlb: restore the reservation if needed (Rafael Aquini) [RHEL-27745 RHEL-61137]
  - x86/mm: delete unused cpu argument to leave_mm() (Rafael Aquini) [RHEL-27745]
  - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-27745]
  - mm: kmsan: remove runtime checks from kmsan_unpoison_memory() (Rafael Aquini) [RHEL-27745]
  - mm/swap_state: update zswap LRU's protection range with the folio locked (Rafael Aquini) [RHEL-27745]
  - mm: zswap: fix missing folio cleanup in writeback race path (Rafael Aquini) [RHEL-27745]
  - mm/zswap: don't return LRU_SKIP if we have dropped lru lock (Rafael Aquini) [RHEL-27745]
  - fs/hugetlbfs/inode.c: mm/memory-failure.c: fix hugetlbfs hwpoison handling (Rafael Aquini) [RHEL-27745]
  - efi: disable mirror feature during crashkernel (Rafael Aquini) [RHEL-27745]
  - mm, treewide: rename MAX_ORDER to MAX_PAGE_ORDER (Rafael Aquini) [RHEL-27745]
  - mm, treewide: introduce NR_PAGE_ORDERS (Rafael Aquini) [RHEL-27745]
  - mm/khugepaged: use a folio more in collapse_file() (Rafael Aquini) [RHEL-27745]
  - zswap: memcontrol: implement zswap writeback disabling (Rafael Aquini) [RHEL-27745]
  - mm: remove unnecessary ia64 code and comment (Rafael Aquini) [RHEL-27745]
  - fs: improve dump_mapping() robustness (Rafael Aquini) [RHEL-27745]
  - mm: migrate: fix getting incorrect page mapping during page migration (Rafael Aquini) [RHEL-27745 RHEL-28873] {CVE-2023-52490}
  - mm: convert swap_cluster_readahead and swap_vma_readahead to return a folio (Rafael Aquini) [RHEL-27745]
  - mm: return a folio from read_swap_cache_async() (Rafael Aquini) [RHEL-27745]
  - mm: remove page_swap_info() (Rafael Aquini) [RHEL-27745]
  - mm: convert swap_readpage() to swap_read_folio() (Rafael Aquini) [RHEL-27745]
  - mm: convert swap_page_sector() to swap_folio_sector() (Rafael Aquini) [RHEL-27745]
  - mm: pass a folio to swap_readpage_bdev_async() (Rafael Aquini) [RHEL-27745]
  - mm: pass a folio to swap_readpage_bdev_sync() (Rafael Aquini) [RHEL-27745]
  - mm: pass a folio to swap_readpage_fs() (Rafael Aquini) [RHEL-27745]
  - mm: pass a folio to swap_writepage_bdev_async() (Rafael Aquini) [RHEL-27745]
  - mm: pass a folio to swap_writepage_bdev_sync() (Rafael Aquini) [RHEL-27745]
  - mm: pass a folio to swap_writepage_fs() (Rafael Aquini) [RHEL-27745]
  - mm: pass a folio to __swap_writepage() (Rafael Aquini) [RHEL-27745]
  - mm: return the folio from __read_swap_cache_async() (Rafael Aquini) [RHEL-27745]
  - mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx (Rafael Aquini) [RHEL-27745]
  - mm/zswap: cleanup zswap_writeback_entry() (Rafael Aquini) [RHEL-27745]
  - mm/zswap: cleanup zswap_load() (Rafael Aquini) [RHEL-27745]
  - mm/zswap: refactor out __zswap_load() (Rafael Aquini) [RHEL-27745]
  - mm/zswap: reuse dstmem when decompress (Rafael Aquini) [RHEL-27745]
  - mm: convert collapse_huge_page() to use a folio (Rafael Aquini) [RHEL-27745]
  - lib/maple_tree.c: fix build error due to hotfix alteration (Rafael Aquini) [RHEL-27745]
  - mm/memory-failure: cast index to loff_t before shifting it (Rafael Aquini) [RHEL-27745]
  - mm/memory-failure: check the mapcount of the precise page (Rafael Aquini) [RHEL-27745]
  - mm/memory-failure: pass the folio and the page to collect_procs() (Rafael Aquini) [RHEL-27745]
  - mm/filemap: avoid buffered read/write race to read inconsistent data (Rafael Aquini) [RHEL-27745]
  - mm/readahead: do not allow order-1 folio (Rafael Aquini) [RHEL-27745]
  - zswap: shrink zswap pool based on memory pressure (Rafael Aquini) [RHEL-27745]
  - maple_tree: mtree_range_walk() clean up (Rafael Aquini) [RHEL-27745]
  - maple_tree: don't find node end in mtree_lookup_walk() (Rafael Aquini) [RHEL-27745]
  - maple_tree: use maple state end for write operations (Rafael Aquini) [RHEL-27745]
  - maple_tree: remove mas_searchable() (Rafael Aquini) [RHEL-27745]
  - maple_tree: separate ma_state node from status (Rafael Aquini) [RHEL-27745]
  - maple_tree: clean up inlines for some functions (Rafael Aquini) [RHEL-27745]
  - maple_tree: use cached node end in mas_destroy() (Rafael Aquini) [RHEL-27745]
  - maple_tree: use cached node end in mas_next() (Rafael Aquini) [RHEL-27745]
  - maple_tree: add end of node tracking to the maple state (Rafael Aquini) [RHEL-27745]
  - maple_tree: move debug check to __mas_set_range() (Rafael Aquini) [RHEL-27745]
  - maple_tree: make mas_erase() more robust (Rafael Aquini) [RHEL-27745]
  - maple_tree: remove unnecessary default labels from switch statements (Rafael Aquini) [RHEL-27745]
  - mm/zswap: replace kmap_atomic() with kmap_local_page() (Rafael Aquini) [RHEL-27745]
  - mm: remove invalidate_inode_page() (Rafael Aquini) [RHEL-27745]
  - mm: convert isolate_page() to mf_isolate_folio() (Rafael Aquini) [RHEL-27745]
  - mm: convert soft_offline_in_use_page() to use a folio (Rafael Aquini) [RHEL-27745]
  - mm: use mapping_evict_folio() in truncate_error_page() (Rafael Aquini) [RHEL-27745]
  - mm: convert __do_fault() to use a folio (Rafael Aquini) [RHEL-27745]
  - mm: make mapping_evict_folio() the preferred way to evict clean folios (Rafael Aquini) [RHEL-27745]
  - fork: use __mt_dup() to duplicate maple tree in dup_mmap() (Rafael Aquini) [RHEL-27745]
  - maple_tree: preserve the tree attributes when destroying maple tree (Rafael Aquini) [RHEL-27745]
  - maple_tree: update check_forking() and bench_forking() (Rafael Aquini) [RHEL-27745]
  - maple_tree: skip other tests when BENCH is enabled (Rafael Aquini) [RHEL-27745]
  - maple_tree: update the documentation of maple tree (Rafael Aquini) [RHEL-27745]
  - maple_tree: add test for mtree_dup() (Rafael Aquini) [RHEL-27745]
  - maple_tree: introduce interfaces __mt_dup() and mtree_dup() (Rafael Aquini) [RHEL-27745]
  - maple_tree: introduce {mtree,mas}_lock_nested() (Rafael Aquini) [RHEL-27745]
  - maple_tree: add mt_free_one() and mt_attr() helpers (Rafael Aquini) [RHEL-27745]
  - mm/hugetlb: have CONFIG_HUGETLB_PAGE select CONFIG_XARRAY_MULTI (Rafael Aquini) [RHEL-27745]
  - mm: kmem: properly initialize local objcg variable in current_obj_cgroup() (Rafael Aquini) [RHEL-27745]
  - mm/slub: optimize free fast path code layout (Rafael Aquini) [RHEL-27745]
  - mm/slab: move kmalloc() functions from slab_common.c to slub.c (Rafael Aquini) [RHEL-27745]
  - mm/slab: move kmalloc_slab() to mm/slab.h (Rafael Aquini) [RHEL-27745]
  - mm/slab: move kfree() from slab_common.c to slub.c (Rafael Aquini) [RHEL-27745]
  - mm/slab: move struct kmem_cache_node from slab.h to slub.c (Rafael Aquini) [RHEL-27745]
  - mm/slab: move memcg related functions from slab.h to slub.c (Rafael Aquini) [RHEL-27745]
  - mm/slab: move pre/post-alloc hooks from slab.h to slub.c (Rafael Aquini) [RHEL-27745]
  - mm/slab: consolidate includes in the internal mm/slab.h (Rafael Aquini) [RHEL-27745]
  - mm/slab: move the rest of slub_def.h to mm/slab.h (Rafael Aquini) [RHEL-27745]
  - mm/slab: move struct kmem_cache_cpu declaration to slub.c (Rafael Aquini) [RHEL-27745]
  - mm/slab: remove CONFIG_SLAB code from slab common code (Rafael Aquini) [RHEL-27745]
  - mempolicy: alloc_pages_mpol() for NUMA policy without vma (Rafael Aquini) [RHEL-27745]
  - mm: add page_rmappable_folio() wrapper (Rafael Aquini) [RHEL-27745]
  - mempolicy: clean up minor dead code in queue_pages_test_walk() (Rafael Aquini) [RHEL-27745]
  - mempolicy: remove confusing MPOL_MF_LAZY dead code (Rafael Aquini) [RHEL-27745]
  - mempolicy: mpol_shared_policy_init() without pseudo-vma (Rafael Aquini) [RHEL-27745]
  - mempolicy trivia: use pgoff_t in shared mempolicy tree (Rafael Aquini) [RHEL-27745]
  - mempolicy trivia: slightly more consistent naming (Rafael Aquini) [RHEL-27745]
  - mempolicy trivia: delete those ancient pr_debug()s (Rafael Aquini) [RHEL-27745]
  - mempolicy: fix migrate_pages(2) syscall return nr_failed (Rafael Aquini) [RHEL-27745]
  - kernfs: drop shared NUMA mempolicy hooks (Rafael Aquini) [RHEL-27745]
  - hugetlbfs: drop shared NUMA mempolicy pretence (Rafael Aquini) [RHEL-27745]
  - mm: migrate: record the mlocked page status to remove unnecessary lru drain (Rafael Aquini) [RHEL-27745]
  - mm: page_alloc: check the order of compound page even when the order is zero (Rafael Aquini) [RHEL-27745]
  - mm/khugepaged: convert collapse_pte_mapped_thp() to use folios (Rafael Aquini) [RHEL-27745]
  - mm/khugepaged: convert alloc_charge_hpage() to use folios (Rafael Aquini) [RHEL-27745]
  - mm/khugepaged: convert is_refcount_suitable() to use folios (Rafael Aquini) [RHEL-27745]
  - mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios (Rafael Aquini) [RHEL-27745]
  - mm/khugepaged: convert __collapse_huge_page_isolate() to use folios (Rafael Aquini) [RHEL-27745]
  - mm/migrate: add nr_split to trace_mm_migrate_pages stats. (Rafael Aquini) [RHEL-27745]
  - mm/migrate: correct nr_failed in migrate_pages_sync() (Rafael Aquini) [RHEL-27745]
  - bootmem: use kmemleak_free_part_phys in free_bootmem_page (Rafael Aquini) [RHEL-27745]
  - bootmem: use kmemleak_free_part_phys in put_page_bootmem (Rafael Aquini) [RHEL-27745]
  - mm: kmem: reimplement get_obj_cgroup_from_current() (Rafael Aquini) [RHEL-27745]
  - percpu: scoped objcg protection (Rafael Aquini) [RHEL-27745]
  - mm: kmem: scoped objcg protection (Rafael Aquini) [RHEL-27745]
  - mm: kmem: make memcg keep a reference to the original objcg (Rafael Aquini) [RHEL-27745]
  - mm: kmem: add direct objcg pointer to task_struct (Rafael Aquini) [RHEL-27745]
  - mm: kmem: optimize get_obj_cgroup_from_current() (Rafael Aquini) [RHEL-27745]
  - mm: abstract VMA merge and extend into vma_merge_extend() helper (Rafael Aquini) [RHEL-27745]
  - mm: abstract merge for new VMAs into vma_merge_new_vma() (Rafael Aquini) [RHEL-27745]
  - mm: make vma_merge() and split_vma() internal (Rafael Aquini) [RHEL-27745]
  - mm: abstract the vma_merge()/split_vma() pattern for mprotect() et al. (Rafael Aquini) [RHEL-27745]
  - mm: move vma_policy() and anon_vma_name() decls to mm_types.h (Rafael Aquini) [RHEL-27745]
  - mm/mprotect: allow unfaulted VMAs to be unaccounted on mprotect() (Rafael Aquini) [RHEL-27745]
  - mm/thp: fix "mm: thp: kill __transhuge_page_enabled()" (Rafael Aquini) [RHEL-27745]
  - mm/gup: adapt get_user_page_vma_remote() to never return NULL (Rafael Aquini) [RHEL-27745]
  - mm/gup: make failure to pin an error if FOLL_NOWAIT not specified (Rafael Aquini) [RHEL-27745]
  - mm/gup: explicitly define and check internal GUP flags, disallow FOLL_TOUCH (Rafael Aquini) [RHEL-27745]
  - mm: make __access_remote_vm() static (Rafael Aquini) [RHEL-27745]
  - shmem: _add_to_page_cache() before shmem_inode_acct_blocks() (Rafael Aquini) [RHEL-27745]
  - shmem: move memcg charge out of shmem_add_to_page_cache() (Rafael Aquini) [RHEL-27745]
  - shmem: shmem_acct_blocks() and shmem_inode_acct_blocks() (Rafael Aquini) [RHEL-27745]
  - shmem: factor shmem_falloc_wait() out of shmem_fault() (Rafael Aquini) [RHEL-27745]
  - shmem: remove vma arg from shmem_get_folio_gfp() (Rafael Aquini) [RHEL-27745]
  - shmem: shrink shmem_inode_info: dir_offsets in a union (Rafael Aquini) [RHEL-27745]
  - mm: memcg: normalize the value passed into memcg_rstat_updated() (Rafael Aquini) [RHEL-27745]
  - mm: memcg: refactor page state unit helpers (Rafael Aquini) [RHEL-27745]
  - maple_tree: add GFP_KERNEL to allocations in mas_expected_entries() (Rafael Aquini) [RHEL-27745]
  - mm/filemap: remove hugetlb special casing in filemap.c (Rafael Aquini) [RHEL-27745]
  - sched/numa, mm: make numa migrate functions to take a folio (Rafael Aquini) [RHEL-27745]
  - mm: mempolicy: make mpol_misplaced() to take a folio (Rafael Aquini) [RHEL-27745]
  - mm: memory: make numa_migrate_prep() to take a folio (Rafael Aquini) [RHEL-27745]
  - mm: memory: use a folio in do_numa_page() (Rafael Aquini) [RHEL-27745]
  - mm: huge_memory: use a folio in do_huge_pmd_numa_page() (Rafael Aquini) [RHEL-27745]
  - mm: memory: add vm_normal_folio_pmd() (Rafael Aquini) [RHEL-27745]
  - memcg: remove unused do_memsw_account in memcg1_stat_format (Rafael Aquini) [RHEL-27745]
  - memcg: expose swapcache stat for memcg v1 (Rafael Aquini) [RHEL-27745]
  - mm/writeback: update filemap_dirty_folio() comment (Rafael Aquini) [RHEL-27745]
  - mm/hugetlb: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-27745]
  - mm: migrate: remove isolated variable in add_page_for_migration() (Rafael Aquini) [RHEL-27745]
  - mm: migrate: remove PageHead() check for HugeTLB in add_page_for_migration() (Rafael Aquini) [RHEL-27745]
  - mm: migrate: use a folio in add_page_for_migration() (Rafael Aquini) [RHEL-27745]
  - mm: migrate: use __folio_test_movable() (Rafael Aquini) [RHEL-27745]
  - mm: migrate: convert migrate_misplaced_page() to migrate_misplaced_folio() (Rafael Aquini) [RHEL-27745]
  - mm: migrate: convert numamigrate_isolate_page() to numamigrate_isolate_folio() (Rafael Aquini) [RHEL-27745]
  - mm: migrate: remove THP mapcount check in numamigrate_isolate_page() (Rafael Aquini) [RHEL-27745]
  - mm: migrate: remove PageTransHuge check in numamigrate_isolate_page() (Rafael Aquini) [RHEL-27745]
  - mm/rmap: pass folio to hugepage_add_anon_rmap() (Rafael Aquini) [RHEL-27745]
  - mm/rmap: simplify PageAnonExclusive sanity checks when adding anon rmap (Rafael Aquini) [RHEL-27745]
  - mm/rmap: warn on new PTE-mapped folios in page_add_anon_rmap() (Rafael Aquini) [RHEL-27745]
  - mm/rmap: move folio_test_anon() check out of __folio_set_anon() (Rafael Aquini) [RHEL-27745]
  - mm/rmap: move SetPageAnonExclusive out of __page_set_anon_rmap() (Rafael Aquini) [RHEL-27745]
  - mm/rmap: drop stale comment in page_add_anon_rmap and hugepage_add_anon_rmap() (Rafael Aquini) [RHEL-27745]
  - mm: memcg: add THP swap out info for anonymous reclaim (Rafael Aquini) [RHEL-27745]
  - kmsan: introduce test_memcpy_initialized_gap() (Rafael Aquini) [RHEL-27745]
  - kmsan: merge test_memcpy_aligned_to_unaligned{,2}() together (Rafael Aquini) [RHEL-27745]
  - kmsan: prevent optimizations in memcpy tests (Rafael Aquini) [RHEL-27745]
  - kmsan: simplify kmsan_internal_memmove_metadata() (Rafael Aquini) [RHEL-27745]
  - mm: remove duplicated vma->vm_flags check when expanding stack (Rafael Aquini) [RHEL-27745]
  - mm: convert DAX lock/unlock page to lock/unlock folio (Rafael Aquini) [RHEL-27745]
  - mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype() (Rafael Aquini) [RHEL-27745]
  - mm/mremap: fix unaccount of memory on vma_merge() failure (Rafael Aquini) [RHEL-27745]
  - mm/compaction: factor out code to test if we should run compaction for target order (Rafael Aquini) [RHEL-27745]
  - mm/compaction: improve comment of is_via_compact_memory (Rafael Aquini) [RHEL-27745]
  - mm/compaction: remove repeat compact_blockskip_flush check in reset_isolation_suitable (Rafael Aquini) [RHEL-27745]
  - mm/compaction: correctly return failure with bogus compound_order in strict mode (Rafael Aquini) [RHEL-27745]
  - mm/compaction: call list_is_{first}/{last} more intuitively in move_freelist_{head}/{tail} (Rafael Aquini) [RHEL-27745]
  - mm/compaction: use correct list in move_freelist_{head}/{tail} (Rafael Aquini) [RHEL-27745]
  - mm/slub: simplify the last resort slab order calculation (Rafael Aquini) [RHEL-27745]
  - mm/slub: add sanity check for slub_min/max_order cmdline setup (Rafael Aquini) [RHEL-27745]
  - maple_tree: add MAS_UNDERFLOW and MAS_OVERFLOW states (Rafael Aquini) [RHEL-27745]
  - maple_tree: add mas_is_active() to detect in-tree walks (Rafael Aquini) [RHEL-27745]
  - arm/xen: remove lazy mode related definitions (Rafael Aquini) [RHEL-27745]
  - mm: Remove kmem_valid_obj() (Rafael Aquini) [RHEL-27745]
  - maple_tree: clean up mas_wr_append() (Rafael Aquini) [RHEL-27745]
  - maple_tree: replace data before marking dead in split and spanning store (Rafael Aquini) [RHEL-27745]
  - maple_tree: change mas_adopt_children() parent usage (Rafael Aquini) [RHEL-27745]
  - maple_tree: introduce mas_tree_parent() definition (Rafael Aquini) [RHEL-27745]
  - maple_tree: introduce mas_put_in_tree() (Rafael Aquini) [RHEL-27745]
  - maple_tree: reorder replacement of nodes to avoid live lock (Rafael Aquini) [RHEL-27745]
  - maple_tree: add hex output to maple_arange64 dump (Rafael Aquini) [RHEL-27745]
  - maple_tree: Be more strict about locking (Rafael Aquini) [RHEL-27745]
  - fs/address_space: add alignment padding for i_map and i_mmap_rwsem to mitigate a false sharing. (Rafael Aquini) [RHEL-15601 RHEL-27745]
  - maple_tree: drop mas_first_entry() (Rafael Aquini) [RHEL-27745]
  - maple_tree: replace mas_logical_pivot() with mas_safe_pivot() (Rafael Aquini) [RHEL-27745]
  - maple_tree: update mt_validate() (Rafael Aquini) [RHEL-27745]
  - maple_tree: make mas_validate_limits() check root node and node limit (Rafael Aquini) [RHEL-27745]
  - maple_tree: fix mas_validate_child_slot() to check last missed slot (Rafael Aquini) [RHEL-27745]
  - maple_tree: make mas_validate_gaps() to check metadata (Rafael Aquini) [RHEL-27745]
  - maple_tree: don't use MAPLE_ARANGE64_META_MAX to indicate no gap (Rafael Aquini) [RHEL-27745]
  - maple_tree: add a fast path case in mas_wr_slot_store() (Rafael Aquini) [RHEL-27745]
  - maple_tree: optimize mas_wr_append(), also improve duplicating VMAs (Rafael Aquini) [RHEL-27745]
  - maple_tree: add test for expanding range in RCU mode (Rafael Aquini) [RHEL-27745]
  - maple_tree: add test for mas_wr_modify() fast path (Rafael Aquini) [RHEL-27745]
  - shmem: Refactor shmem_symlink() (Rafael Aquini) [RHEL-27745]
  - XArray: Do not return sibling entries from xa_load() (Rafael Aquini) [RHEL-27745]
  - bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page (Rafael Aquini) [RHEL-27745]
  - kasan, doc: note kasan.fault=panic_on_write behaviour for async modes (Rafael Aquini) [RHEL-27745]
  - fs: hugetlbfs: set vma policy only when needed for allocating folio (Rafael Aquini) [RHEL-27745]
  - afs: fix the afs_dir_get_folio return value (Rafael Aquini) [RHEL-27745]
  - of: reserved_mem: Have kmemleak ignore dynamically allocated reserved mem (Rafael Aquini) [RHEL-27745]
  - powerpc/64s: Fix local irq disable when PMIs are disabled (Rafael Aquini) [RHEL-27745]
  - powerpc/book3e: remove #include <generated/utsrelease.h> (Rafael Aquini) [RHEL-27745]
  - s390: avoid using global register for current_stack_pointer (Rafael Aquini) [RHEL-27745]
  - s390/virtio_ccw: Fix dma_parm pointer not set up (Thomas Huth) [RHEL-70246]
  - fs/mnt_idmapping.c: Return -EINVAL when no map is written (Ian Kent) [RHEL-62007]
  - fs: reformat idmapped mounts entry (Ian Kent) [RHEL-62007]
  - mnt_idmapping: decouple from namespaces (Ian Kent) [RHEL-62007]
  - mnt_idmapping: remove nop check (Ian Kent) [RHEL-62007]
  - mnt_idmapping: remove check_fsmapping() (Ian Kent) [RHEL-62007]
  - fs: export mnt_idmap_get/mnt_idmap_put (Ian Kent) [RHEL-62007]
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Fix connection issue with Pluggable UD-4VPD dock (Desnes Nunes) [RHEL-59052]
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Desnes Nunes) [RHEL-59052] {CVE-2024-50268}
  - usb: dwc3: fix fault at system suspend if device was already runtime suspended (Desnes Nunes) [RHEL-59052 RHEL-68268] {CVE-2024-53070}
  - USB: serial: io_edgeport: fix use after free in debug printk (Desnes Nunes) [RHEL-59052] {CVE-2024-50267}
  - USB: serial: option: add Quectel RG650V (Desnes Nunes) [RHEL-59052]
  - USB: serial: option: add Fibocom FG132 0x0112 composition (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Add only on-board retimers when !CONFIG_USB4_DEBUGFS_MARGINING (Desnes Nunes) [RHEL-59052]
  - usb: phy: Fix API devm_usb_put_phy() can not release the phy (Desnes Nunes) [RHEL-59052]
  - usb: typec: use cleanup facility for 'altmodes_node' (Desnes Nunes) [RHEL-59052]
  - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (Desnes Nunes) [RHEL-59052]
  - usb: acpi: fix boot hang due to early incorrect 'tunneled' USB3 device links (Desnes Nunes) [RHEL-59052]
  - xhci: Fix Link TRB DMA in command ring stopped completion event (Desnes Nunes) [RHEL-59052]
  - xhci: Use pm_runtime_get to prevent RPM on unsupported systems (Desnes Nunes) [RHEL-59052]
  - phy: tegra: xusb: Add error pointer check in xusb.c (Desnes Nunes) [RHEL-59052]
  - phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Honor TMU requirements in the domain when setting TMU mode (Desnes Nunes) [RHEL-59052]
  - misc: rtsx: list supported models in Kconfig help (Desnes Nunes) [RHEL-59052]
  - media: pulse8-cec: fix data timestamp at pulse8_setup() (Desnes Nunes) [RHEL-59052]
  - redhat/configs: Adding CONFIG_USB_ONBOARD_DEV_USB5744 (Desnes Nunes) [RHEL-59052]
  - USB: serial: option: add Telit FN920C04 MBIM compositions (Desnes Nunes) [RHEL-59052]
  - USB: serial: option: add support for Quectel EG916Q-GL (Desnes Nunes) [RHEL-59052]
  - xhci: dbc: honor usb transfer size boundaries. (Desnes Nunes) [RHEL-59052]
  - usb: xhci: Fix handling errors mid TD followed by other errors (Desnes Nunes) [RHEL-59052]
  - xhci: Mitigate failed set dequeue pointer commands (Desnes Nunes) [RHEL-59052]
  - xhci: Fix incorrect stream context type macro (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: core: Fix system suspend on TI AM62 platforms (Desnes Nunes) [RHEL-59052]
  - xhci: tegra: fix checked USB2 port number (Desnes Nunes) [RHEL-59052 RHEL-65123] {CVE-2024-50075}
  - usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG (Desnes Nunes) [RHEL-59052]
  - usb: typec: altmode should keep reference to parent (Desnes Nunes) [RHEL-59052 RHEL-66511] {CVE-2024-50150}
  - usb: xhci: Fix problem with xhci resume from suspend (Desnes Nunes) [RHEL-59052]
  - usb: misc: onboard_usb_dev: introduce new config symbol for usb5744 SMBus support (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: core: Stop processing of pending events if controller is halted (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: re-enable runtime PM after failed resume (Desnes Nunes) [RHEL-59052]
  - usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (Desnes Nunes) [RHEL-59052]
  - usb: gadget: core: force synchronous registration (Desnes Nunes) [RHEL-59052]
  - usbnet: fix cyclical race on disconnect with work queue (Desnes Nunes) [RHEL-59052]
  - usbnet: Fix linkwatch use-after-free on disconnect (Desnes Nunes) [RHEL-59052]
  - usbnet: Run unregister_netdev() before unbind() again (Desnes Nunes) [RHEL-59052]
  - USB: appledisplay: close race between probe and completion handler (Desnes Nunes) [RHEL-59052]
  - USB: class: CDC-ACM: fix race between get_serial and set_serial (Desnes Nunes) [RHEL-59052]
  - usb: storage: ene_ub6250: Fix right shift warnings (Desnes Nunes) [RHEL-59052]
  - usb: roles: Improve the fix for a false positive recursive locking complaint (Desnes Nunes) [RHEL-59052]
  - locking/mutex: Introduce mutex_init_with_key() (Desnes Nunes) [RHEL-59052]
  - locking/mutex: Define mutex_init() once (Desnes Nunes) [RHEL-59052]
  - leds: mlxreg: Use devm_mutex_init() for mutex initialization (Desnes Nunes) [RHEL-59052] {CVE-2024-42129}
  - locking/mutex: Introduce devm_mutex_init() (Desnes Nunes) [RHEL-59052]
  - locking/rwsem: Make DEBUG_RWSEMS and PREEMPT_RT mutually exclusive (Desnes Nunes) [RHEL-59052]
  - locking/rwsem: Clarify that RWSEM_READER_OWNED is just a hint (Desnes Nunes) [RHEL-59052]
  - locking/qspinlock: Fix 'wait_early' set but not used warning (Desnes Nunes) [RHEL-59052]
  - locking/mutex: Simplify <linux/mutex.h> (Desnes Nunes) [RHEL-59052]
  - locking/mutex: split out mutex_types.h (Desnes Nunes) [RHEL-59052]
  - usb: xhci: fix loss of data on Cadence xHC (Desnes Nunes) [RHEL-59052]
  - usb: xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: qcom: simplify with devm_platform_ioremap_resource (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: qcom: use scoped device node handling to simplify error paths (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: imx8mp: disable SS_CON and U3 wakeup for system sleep (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: imx8mp: add 2 software managed quirk properties for host mode (Desnes Nunes) [RHEL-59052]
  - usb: host: xhci-plat: Parse xhci-missing_cas_quirk and apply quirk (Desnes Nunes) [RHEL-59052]
  - usb: misc: onboard_usb_dev: add Microchip usb5744 SMBus programming support (Desnes Nunes) [RHEL-59052]
  - usb: misc: onboard_dev: extend platform data to add power on delay field (Desnes Nunes) [RHEL-59052]
  - usb: cdnsp: Fix incorrect usb_request status (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci: support edge irq (Desnes Nunes) [RHEL-59052]
  - usb: chipidea: npcm: Fix coding style with clarification of data type (Desnes Nunes) [RHEL-59052]
  - usb: common: Switch to device_property_match_property_string() (Desnes Nunes) [RHEL-59052]
  - device property: Add fwnode_property_match_property_string() (Desnes Nunes) [RHEL-59052]
  - device property: Use fwnode_property_string_array_count() (Desnes Nunes) [RHEL-59052]
  - USB: usbtmc: prevent kernel-usb-infoleak (Desnes Nunes) [RHEL-59052] {CVE-2024-47671}
  - USB: serial: pl2303: add device id for Macrosilicon MS3020 (Desnes Nunes) [RHEL-59052]
  - redhat/configs: Adding CONFIG_USB_EXTRON_DA_HD_4K_PLUS_CEC (Desnes Nunes) [RHEL-59052]
  - media: cec: extron-da-hd-4k-plus: add the Extron DA HD 4K Plus CEC driver (Desnes Nunes) [RHEL-59052]
  - media: cec: move cec_get/put_device to header (Desnes Nunes) [RHEL-59052]
  - media: input: serio.h: add SERIO_EXTRON_DA_HD_PLUS (Desnes Nunes) [RHEL-59052]
  - media: admin-guide: cec.rst (Desnes Nunes) [RHEL-59052]
  - xhci: support setting interrupt moderation IMOD for secondary interrupters (Desnes Nunes) [RHEL-59052]
  - xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them. (Desnes Nunes) [RHEL-59052]
  - usb: xhci: adjust empty TD list handling in handle_tx_event() (Desnes Nunes) [RHEL-59052]
  - usb: xhci: remove 'retval' from xhci_pci_resume() (Desnes Nunes) [RHEL-59052]
  - usb: xhci: add comments explaining specific interrupt behaviour (Desnes Nunes) [RHEL-59052]
  - usb: xhci: make 'sbrn' a local variable (Desnes Nunes) [RHEL-59052]
  - usb: xhci: remove unused variables from struct 'xhci_hcd' (Desnes Nunes) [RHEL-59052]
  - usb: xhci: remove excessive Bulk short packet debug message (Desnes Nunes) [RHEL-59052]
  - usb: xhci: remove excessive isoc frame debug message spam (Desnes Nunes) [RHEL-59052]
  - xhci: Remove unused function declarations (Desnes Nunes) [RHEL-59052]
  - xhci: dbc: add dbgtty request to end of list once it completes (Desnes Nunes) [RHEL-59052]
  - xhci: dbc: Fix STALL transfer event handling (Desnes Nunes) [RHEL-59052]
  - dt-bindings: extcon: convert extcon-usb-gpio.txt to yaml format (Desnes Nunes) [RHEL-59052]
  - redhat/configs: Adding CONFIG_EXTCON_LC824206XA (Desnes Nunes) [RHEL-59052]
  - extcon: Add LC824206XA microUSB switch driver (Desnes Nunes) [RHEL-59052]
  - power: supply: Change usb_types from an array into a bitmask (Desnes Nunes) [RHEL-59052]
  - power: supply: sysfs: Move power_supply_show_enum_with_available() up (Desnes Nunes) [RHEL-59052]
  - power: supply: sysfs: Add power_supply_show_enum_with_available() helper (Desnes Nunes) [RHEL-59052]
  - power: supply: "usb_type" property may be written to (Desnes Nunes) [RHEL-59052]
  - power: supply: core: simplify charge_behaviour formatting (Desnes Nunes) [RHEL-59052]
  - power: supply: core: fix charge_behaviour formatting (Desnes Nunes) [RHEL-59052]
  - power: supply: core: ease special formatting implementations (Desnes Nunes) [RHEL-59052]
  - dt-bindings: phy: mxs-usb-phy: add nxp,sim property (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Don't create device link from USB4 Host Interface to USB3 xHC host (Desnes Nunes) [RHEL-59052]
  - usb: acpi: add device link between tunneled USB3 device and USB4 Host Interface (Desnes Nunes) [RHEL-59052]
  - device property: Move fwnode_handle_put() into property.h (Desnes Nunes) [RHEL-59052]
  - usb: Add tunnel_mode parameter to usb device structure (Desnes Nunes) [RHEL-59052]
  - xhci: Add USB4 tunnel detection for USB3 devices on Intel hosts (Desnes Nunes) [RHEL-59052]
  - usb: chipidea: npcm: Fix coding style with missing space (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: imx8mp: use scoped device node handling to simplify error paths (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: imx8mp: simplify with dev_err_probe (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: imx8mp: simplify with devm_clk_get_enabled (Desnes Nunes) [RHEL-59052]
  - usb-storage: Constify struct usb_device_id and us_unusual_dev (Desnes Nunes) [RHEL-59052]
  - phy: broadcom: brcm-sata: Simplify with scoped for each OF child loop (Desnes Nunes) [RHEL-59052]
  - USB: serial: kobil_sct: restore initial terminal settings (Desnes Nunes) [RHEL-59052]
  - USB: serial: drop driver owner initialization (Desnes Nunes) [RHEL-59052]
  - USB: serial: set driver owner when registering drivers (Desnes Nunes) [RHEL-59052]
  - usb: roles: add lockdep class key to struct usb_role_switch (Desnes Nunes) [RHEL-59052]
  - usb: typec: tipd: Free IRQ only if it was requested before (Desnes Nunes) [RHEL-59052 RHEL-63862] {CVE-2024-50057}
  - Documentation: msm-hsusb.txt: remove (Desnes Nunes) [RHEL-59052]
  - usb: typec: ucsi: Add DATA_RESET option of Connector Reset command (Desnes Nunes) [RHEL-59052]
  - dt-bindings: usb: qcom,dwc3: Document X1E80100 MP controller (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Improve software receiver lane margining (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Add optional voltage offset range for receiver lane margining (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Consolidate margining parameters into a structure (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Add missing usb4_port_sb_read() to usb4_port_sw_margin() (Desnes Nunes) [RHEL-59052]
  - xhci: dbgtty: use kfifo from tty_port struct (Desnes Nunes) [RHEL-59052]
  - xhci: dbgtty: remove kfifo_out() wrapper (Desnes Nunes) [RHEL-59052]
  - usb: common: Use helper function for_each_node_with_property() (Desnes Nunes) [RHEL-59052]
  - usb: phy: mxs: enable weak 1p1 regulator for imx6ul during suspend (Desnes Nunes) [RHEL-59052]
  - usb: phy: mxs: add wakeup enable for imx7ulp (Desnes Nunes) [RHEL-59052]
  - usb: phy: mxs: keep USBPHY2's clk always on (Desnes Nunes) [RHEL-59052]
  - usb: phy: mxs: enable regulator phy-3p0 to improve signal qualilty (Desnes Nunes) [RHEL-59052]
  - xhci-pci: Make xhci-pci-renesas a proper modular driver (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: imx8mp: Switch to RUNTIME/SYSTEM_SLEEP_PM_OPS() (Desnes Nunes) [RHEL-59052]
  - usb: chipidea: Use of_property_present() (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci: use GENMASK() for TCPC_TRANSMIT register fields (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci: use GENMASK() for TCPC_MSG_HDR_INFO_REV (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci: use GENMASK() for TCPC_ROLE_CTRL_RP_VAL (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci: use GENMASK() for TCPC_ROLE_CTRL_CC[12] (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci: use GENMASK() for TCPC_CC_STATUS_CC[12] (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci_rt1711h: Drop CONFIG_OF ifdeffery (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci_rt1711h: Convert enum->pointer for data in the match tables (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci_rt1711h: Remove trailing comma in the terminator entry for OF table (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpm/tcpci_maxim: clarify a comment (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci: fix a comment typo (Desnes Nunes) [RHEL-59052]
  - dt-bindings: usb: qcom,dwc3: Update ipq5332 clock details (Desnes Nunes) [RHEL-59052]
  - USB: ohci-ppc-of: Drop ohci-littledian compatible (Desnes Nunes) [RHEL-59052]
  - usb: ohci-ppc-of: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-59052]
  - fsnotify: fix sending inotify event with unexpected filename (Ian Kent) [RHEL-37493]
  - block, bfq: fix possible UAF for bfqq->bic with merge chain (CKI Backport Bot) [RHEL-63388] {CVE-2024-47706}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-546.el9]
changelog:
  - net/mlx5: Update the list of the PCI supported devices (Benjamin Poirier) [RHEL-70419]
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Guillaume Nault) [RHEL-70449]
  - crypto: rng - Fix extrng EFAULT handling (Herbert Xu) [RHEL-68420]
  - Bluetooth: btmtk: adjust the position to init iso data anchor (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add 2 USB HW IDs for MT7925 (0xe118/e) (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add Mediatek MT7925 support ID 0x13d3:0x3608 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Invert LE State flag to set invalid rather then valid (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Add DSBR support for BlazarIW, BlazarU and GaP (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Bastien Nocera) [RHEL-61734]
  - redhat/configs: Fix Bluetooth configs for automotive (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Direct exception event to bluetooth stack (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Disable works on hci_unregister_dev (Bastien Nocera) [RHEL-61734]
  - workqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask() (Bastien Nocera) [RHEL-61734]
  - workqueue: Implement disable/enable for (delayed) work items (Bastien Nocera) [RHEL-61734]
  - workqueue: Preserve OFFQ bits in cancel[_sync] paths (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Fix not being able to reconnect after suspend (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Remove debugfs directory on module init failure (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Don't fail external suspend requests (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add one more ID 0x13d3:0x3623 for Qualcomm WCN785x (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Allocate memory for driver private data (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Fix not handling ZPL/short-transfer (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btsdio: Do not bind to non-removable CYW4373 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL (Bastien Nocera) [RHEL-61734]
  - Bluetooth: CMTP: Mark BT_CMTP as DEPRECATED (Bastien Nocera) [RHEL-61734]
  - Bluetooth: replace deprecated strncpy with strscpy_pad (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Use led_set_brightness() in LED trigger activate() callback (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btrtl: Use kvmemdup to simplify the code (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btrtl: Add the support for RTL8922A (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_ldisc: Use speed set by btattach as oper_speed (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_conn: Remove redundant memset after kzalloc (Bastien Nocera) [RHEL-61734]
  - Bluetooth: L2CAP: Remove unused declarations (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Add support for ISO packets (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_h4: Add support for ISO packets in h4_recv.h (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_uart: Add support for Amlogic HCI UART (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add MediaTek MT7925-B22M support ID 0x13d3:0x3604 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Add support for ISO data (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Add a helper function to extract iso header (Bastien Nocera) [RHEL-61734]
  - Bluetooth: MGMT: Ignore keys being loaded with invalid type (Bastien Nocera) [RHEL-61734]
  - Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" (Bastien Nocera) [RHEL-61734]
  - Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: If memdump doesn't work, re-enable IBS (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Fix not handling hibernation actions (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Fix random crash seen while removing driver (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Allow configuring drive strength of BRI (Bastien Nocera) [RHEL-61734]
  - Bluetooth: SMP: Fix assumption of Central always being Initiator (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Fix LE quote calculation (Bastien Nocera) [RHEL-61734]
  - Bluetooth: HCI: Invert LE State quirk to be opt-out rather then opt-in (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: avoid dup filtering when passive scanning with adv monitor (Bastien Nocera) [RHEL-61734]
  - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: fix a NULL-pointer derefence at shutdown (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: fix QCA6390 support on non-DT platforms (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: don't call pwrseq_power_off() twice for QCA6390 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_event: Fix setting DISCOVERY_FINDING for passive scanning (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: remove #ifdef around declarations (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: Fix btmtk.c undefined reference build error (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Fix suspending with wrong filter policy (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: Fix kernel crash when entering btmtk_usb_suspend (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Fail setup on error (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: Mark all stub functions as inline (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: Fix build error (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: use the power sequencer for wcn7850 and wcn6855 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: make pwrseq calls the default if available (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: unduplicate calls to hci_uart_register_device() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: schedule a devm action for disabling the clock (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Fix warnings for suspend and resume functions (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Add system suspend and resume handlers (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Add support for IW615 chipset (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Add support for AW693 A1 chipset (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Add support for Whale Peak2 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Add support for BlazarU core (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: mediatek: add ISO data transmission functions (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: move btusb_recv_acl_mtk to btmtk.c (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: move btusb_mtk_[setup, shutdown] to btmtk.c (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: move btusb_mtk_hci_wmt_sync to btmtk.c (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: add callback function in btusb suspend/resume (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: rename btmediatek_data (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: mediatek: return error for failed reg access (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: mediatek: remove the unnecessary goto tag (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Remove hci_request.{c,h} (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Remove remaining dependencies of hci_request (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Move handling of interleave_scan (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Don't use hci_prepare_cmd (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Remove usage of hci_req_sync (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: cleanup struct hci_dev (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Fix the sfi name for BlazarU (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: don't disable power management for QCA6390 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci: fix build when POWER_SEQUENCING=m (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Fix spelling of *intermediate* in comment (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: use the power sequencer for QCA6390 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Add firmware ID to firmware name (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core, hci_sync: cleanup struct discovery_state (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_event: Set QoS encryption from BIGInfo report (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Add handling for boot-signature timeout errors (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Update firmware names (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_bcm4377: Add BCM4388 support (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Add vendor-specific packet classification for ISO data (Bastien Nocera) [RHEL-61734]
  - Bluetooth: iso: remove unused struct 'iso_list_data' (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Remove unnecessary memset(0) calls (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Use sizeof(*pointer) instead of sizeof(type) (Bastien Nocera) [RHEL-61734]
  - Bluetooth: MGMT: Uninitialized variable in load_conn_param() (Bastien Nocera) [RHEL-61734]
  - Bluetooth/nokia: Remove unused struct 'hci_nokia_radio_hdr' (Bastien Nocera) [RHEL-61734]
  - tty: rfcomm: prefer array indexing over pointer arithmetic (Bastien Nocera) [RHEL-61734]
  - tty: rfcomm: prefer struct_size over open coded arithmetic (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Prefer array indexing over pointer arithmetic (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Prefer struct_size over open coded arithmetic (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Fix irq leak (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Print Firmware Sequencer information (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: mediatek: add MT7922 subsystem reset (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: mediatek: reset the controller before downloading the fw (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: mediatek: refactor the function btusb_mtk_reset (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: apply the common btmtk_fw_get_filename (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Refactor btintel_set_ppag() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: add the function to get the fw name (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_bcm4377: Increase boot timeout (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Handle FW Download Abort scenario (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Enable status prints for firmware download (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_bcm4377: Use correct unit for timeouts (Bastien Nocera) [RHEL-61734]
  - Bluetooth: MGMT: Make MGMT_OP_LOAD_CONN_PARAM update existing connection (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Enable Power Save feature on startup (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_event: Fix setting of unicast qos interval (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Fix REVERSE_INULL issue reported by coverity (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_bcm4377: Fix msgid release (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Add quirk to ignore reserved PHY bits in LE Extended Adv Report (Bastien Nocera) [RHEL-61734]
  - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Fix not using correct handle (Bastien Nocera) [RHEL-61734]
  - bluetooth: virtio: drop owner assignment (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Refactor and code cleanup (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Fix warning reported by sparse (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Fix not handling hdev->le_num_of_adv_sets=1 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Fix compiler warnings (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Add *setup* function to download firmware (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Add support for PCIe transport (Bastien Nocera) [RHEL-61734]
  - redhat/configs: Enable Intel Bluetooth PCIE drivers (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Export few static functions (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: Fix error code in qca_read_fw_build_info() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_conn: Use __counted_by() and avoid -Wfamnae warning (Bastien Nocera) [RHEL-61734]
  - LE Create Connection command timeout increased to 20 secs (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Add support for Filmore Peak2 (BE201) (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Add support for BlazarI (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_conn: Use struct_size() in hci_le_big_create_sync() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Use cmd->num_cis instead of magic number (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: clean up defines (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: drop bogus module version (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: drop bogus edl header checks (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_conn, hci_sync: Use __counted_by() to avoid -Wfamnae warnings (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_conn: Use __counted_by() to avoid -Wfamnae warning (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Sort usb_device_id table by the ID (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: Support downloading board id specific NVM for WCN7850 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Correct timeout macro argument used to receive control message (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Remove 3 repeated macro definitions (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_conn: Remove a redundant check for HFP offload (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Populate hci_set_hw_info for Intel and Realtek (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Fix the patch for MT7920 the affected to MT7921 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_bcm: Limit bcm43455 baudrate to 2000000 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_intel: Fix multiple issues reported by checkpatch.pl (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_event: Set DISCOVERY_FINDING on SCAN_ENABLED (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Add proper definitions for scan interval and window (Bastien Nocera) [RHEL-61734]
  - Bluetooth: L2CAP: Avoid -Wflex-array-member-not-at-end warnings (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Add support for MediaTek MT7922 device (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_intel: Convert to platform remove callback returning void (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_bcm: Convert to platform remove callback returning void (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btqcomsmd: Convert to platform remove callback returning void (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Add support to download intermediate loader (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Define macros for image types (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix firmware check error path (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix info leak when fetching board id (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix info leak when fetching fw build id (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: generalise device address check (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix NVM configuration parsing (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix wcn3991 device address check (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: set power_ctrl_enabled on NULL returned by gpiod_get_optional() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix NULL-deref on non-serdev setup (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix NULL-deref on non-serdev suspend (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: mediatek: Fix double free of skb in coredump (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix invalid device address check (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_event: Fix sending HCI_OP_READ_ENC_KEY_SIZE (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Fix triggering coredump implementation for QCA (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Use advertised PHYs on hci_le_ext_create_conn_sync (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Fix using the same interval and window for Coded PHY (Bastien Nocera) [RHEL-61734]
  - Bluetooth: ISO: Don't reject BT_ISO_QOS if parameters are unset (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtksdio: drop driver owner initialization (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmrvl_sdio: drop driver owner initialization (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_event: set the conn encrypted before conn establishes (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Fix not checking error on hci_cmd_sync_cancel_sync (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix device-address endianness (Bastien Nocera) [RHEL-61734]
  - Bluetooth: add quirk for broken address properties (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Fix eir name length (Bastien Nocera) [RHEL-61734]
  - Bluetooth: ISO: Align broadcast sync_timeout with connection timeout (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Add new quirk for broken read key length on ATS2851 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add support Mediatek MT7920 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: Add MODULE_FIRMWARE() for MT7922 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Fix btnxpuart_close (Bastien Nocera) [RHEL-61734]
  - Bluetooth: fix use-after-free in accessing skb after sending it (Bastien Nocera) [RHEL-61734]
  - Bluetooth: bnep: Fix out-of-bound access (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Fix memory leak (Bastien Nocera) [RHEL-61734]
  - Bluetooth: msft: Fix memory leak (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Fix possible buffer overflow (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Use QoS to determine which PHY to scan (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Fix overwriting request callback (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Use address filtering when HCI_PA_SYNC is set (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Print Firmware Sequencer information (Bastien Nocera) [RHEL-61734]
  - Bluetooth: constify the struct device_type usage (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btbcm: Use devm_kstrdup() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btbcm: Use strreplace() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Cancel request on command timeout (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Disconnect connected devices before rfkilling adapter (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Add new state HCI_POWERING_DOWN (Bastien Nocera) [RHEL-61734]
  - Bluetooth: mgmt: Remove leftover queuing of power_off work (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btrtl: Add the support for RTL8852BT/RTL8852BE-VT (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sysfs: make bt_class a static const structure (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} (Bastien Nocera) [RHEL-61734]
  - Bluetooth: mgmt: Replace zero-length array with flexible-array member (Bastien Nocera) [RHEL-61734]
  - net: sched: fix erspan_opt settings in cls_flower (Xin Long) [RHEL-54225]
  - s390/hiperdispatch: Fix KASAN global-out-of-bounds report (Mete Durlu) [RHEL-69777]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: add missing locking for cfg80211 calls (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: ieee80211_i: Fix memory corruption bug in struct ieee80211_chanctx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: fix 6 GHz scan construction (Jose Ignacio Tornos Martinez) [RHEL-67113 RHEL-68230] {CVE-2024-53055}
  - wifi: cfg80211: clear wdev->cqm_config pointer on free (Jose Ignacio Tornos Martinez) [RHEL-66824 RHEL-67113] {CVE-2024-50235}
  - mac80211: fix user-power when emulating chanctx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - Revert "wifi: iwlwifi: remove retry loops in start" (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: don't add default link in fw restart flow (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (Jose Ignacio Tornos Martinez) [RHEL-67113 RHEL-68158] {CVE-2024-53059}
  - wifi: iwlwifi: mvm: SAR table alignment (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: don't leak a link on AP removal (Jose Ignacio Tornos Martinez) [RHEL-67113 RHEL-68167] {CVE-2024-53074}
  - wifi: rtlwifi: rtl8192du: Don't claim USB ID 0bda:8171 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: Fix the RX aggregation in USB 3 mode (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: brcm80211: BRCM_TRACING should depend on TRACING (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath11k: Fix invalid ring usage in full monitor mode (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath10k: Fix memory leak in management tx (Jose Ignacio Tornos Martinez) [RHEL-66777 RHEL-67113] {CVE-2024-50236}
  - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Jose Ignacio Tornos Martinez) [RHEL-66892 RHEL-67113] {CVE-2024-50237}
  - wifi: mac80211: Convert color collision detection to wiphy work (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: Add wiphy_delayed_work_pending() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: Do not create BSS entries for unsupported channels (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: Fix setting txpower with emulate_chanctx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - finally take no_llseek out (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - net: qrtr: Update packets cloning when broadcasting (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: do not increase mcu skb refcount if retry is not supported (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: coex: add debug message of link counts on 2/5GHz bands for wl_info v7 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: brcmfmac: cfg80211: Convert comma to semicolon (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: wilc1000: Convert using devm_clk_get_optional_enabled() in wilc_bus_probe() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: wilc1000: Convert using devm_clk_get_optional_enabled() in wilc_sdio_probe() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (Jose Ignacio Tornos Martinez) [RHEL-63924 RHEL-67113] {CVE-2024-50008}
  - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (Jose Ignacio Tornos Martinez) [RHEL-63370 RHEL-67113] {CVE-2024-47713}
  - wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: fix kernel-doc for per-link data (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7925: replace chan config with extend txpower config for clc (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7925: fix a potential array-index-out-of-bounds issue for clc (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7615: check devm_kasprintf() returned value (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7925: convert comma to semicolon (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7925: fix a potential association failure upon resuming (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: Avoid multiple -Wflex-array-member-not-at-end warnings (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7921: Check devm_kasprintf() returned value (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: check devm_kasprintf() returned value (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: avoid long MCU command timeouts during SER (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: fix uninitialized TLV data (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: always query station rx rate from firmware (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: fix rx filter setting for bfee functionality (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: shrink mt76_queue_buf (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: improve hardware restart reliability (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: reset the device after MCU timeout (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: retry mcu messages (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: set MT76_MCU_RESET early in mt7915_mac_full_reset (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: use mac80211 .sta_state op (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: change .sta_assoc callback to .sta_event (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: connac: add support for passing connection state directly (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: connac: add support for IEEE 802.11 fragmentation (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: allocate vif wcid in the same range as stations (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: add separate tx scheduling queue for off-channel tx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: handle ieee80211_radar_detected() for MLO (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211/mac80211: use proper link ID for DFS (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: handle DFS per link (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: handle DFS per link (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: move DFS related members to links[] in wireless_dev (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: trace: unlink rdev_end_cac trace event from wiphy_netdev_evt class (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: remove label usage in ieee80211_start_radar_detection() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: introduce EHT rate support in AQL airtime (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: avoid overriding direct/MBSSID BSS with per-STA profile BSS (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: skip indicating signal for per-STA profile BSSs (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: make BSS source types public (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: replace CONFIG_PM by CONFIG_PM_SLEEP (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: Avoid RCU debug splat in __cfg80211_bss_update error paths (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: partially move channel change code to core (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: fix mt76_get_rate (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7603: initialize chainmask (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7603: fix reading target power from eeprom (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7603: fix mixed declarations and code (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: connac: fix checksum offload fields of connac3 RXD (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: set IEEE80211_KEY_FLAG_GENERATE_MMIE for other ciphers (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: connac: add IEEE 802.11 fragmentation support for mt7996 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: fix handling mbss enable/disable (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath12k: Avoid -Wflex-array-member-not-at-end warnings (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath11k: Avoid -Wflex-array-member-not-at-end warnings (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - bus: mhi: host: pci_generic: Enable EDL trigger for Foxconn modems (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - bus: mhi: host: pci_generic: Update EDL firmware path for Foxconn modems (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: set correct value in beamforming mcu command for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: fix EHT beamforming capability check (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: set correct beamformee SS capability (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: fix HE and EHT beamforming capabilities (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: advertize beacon_int_min_gcd (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: fix wmm set of station interface to 3 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: fix traffic delay when switching back to working channel (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: use hweight16 to get correct tx antenna (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: fix oops on non-dbdc mt7986 (Jose Ignacio Tornos Martinez) [RHEL-63206 RHEL-67113] {CVE-2024-47715}
  - wifi: rtw89: avoid reading out of bounds when loading TX power FW elements (Jose Ignacio Tornos Martinez) [RHEL-64546 RHEL-67113] {CVE-2024-49928}
  - wifi: rtw89: use frequency domain RSSI (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: adjust DIG threshold to reduce false alarm (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: Convert to use jiffies macro (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: wilc1000: Re-enable RTC clock on resume (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: brcmsmac: Use kvmemdup to simplify the code (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: properly set the rates in link cmd (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: Remove unused last_sub_index from reorder buffer (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: remove mvm prefix from iwl_mvm_tx_resp* (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: s/iwl_mvm_remove_sta_cmd/iwl_remove_sta_cmd (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: STA command structure shouldn't be mvm specific (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: s/IWL_MVM_STATION_COUNT_MAX/IWL_STATION_COUNT_MAX (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: tell the firmware about CSA with mode=1 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: refactor scan channel description a bit (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: wext: Update spelling and grammar (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: add scan interval option for net-detect (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: add net-detect support for 8922ae (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: add wait for H2C of FW-IPS mode (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: fix wait condition for AOAC report request (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: assign mac_id for vif/sta and update to TX desc (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: Fix USB/SDIO devices not transmitting beacons (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: Set correct chandef when starting CAC (Jose Ignacio Tornos Martinez) [RHEL-64603 RHEL-67113] {CVE-2024-49937}
  - wifi: mac80211: scan: Use max macro (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: Check for missing VHT elements only for 5 GHz (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: fix RCU list iterations (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - bus: mhi: host: pci_generic: Add support for Netprisma LCUR57 and FCUN69 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: allow ESR when we the ROC expires (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: avoid NULL pointer dereference (Jose Ignacio Tornos Martinez) [RHEL-63991 RHEL-67113] {CVE-2024-49929}
  - wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rfkill: Correct parameter type for rfkill_set_hw_state_reason() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: remove redundant unlikely() around IS_ERR() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - net: rfkill: gpio: Do not load on Lenovo Yoga Tab 3 Pro YT3-X90 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: allow only CN mcc from WRDD (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: drop wrong STA selection in TX (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: bump FW API to 93 for BZ/SC devices (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: cleanup iwl_mvm_get_wd_timeout (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: use default command queue watchdog timeout (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: handle the new EML OMN failure notification (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: Stop processing MCC update if there was no change (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: add API for EML OMN frame failure (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: exit EMLSR if both links are missing beacons (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: handle the new missed beacons notification (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: add the new API for the missed beacons notification (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: rename iwl_missed_beacons_notif (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: Offload RLC/SMPS functionality to firmware (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: fix the comeback long retry times (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: Add non-atomic station iterator (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: lib80211: Constify struct lib80211_crypto_ops (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: lib80211: Handle const struct lib80211_crypto_ops in lib80211 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: add and improve EMLSR debug info (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: Enable channel puncturing for US/CAN from bios (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: add firmware debug points for EMLSR entry / exit (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwiif: mvm: handle the new BT notif (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: start to support the new BT profile notification (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: s/iwl_bt_coex_profile_notif/iwl_bt_coex_prof_old_notif (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: increase the time between ranging measurements (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: set the cipher for secured NDP ranging (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: Fix a race in scan abort flow (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: set ul_mu_data_disable when needed (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mei: add support for SAP version 4 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: config: label 'gl' devices as discrete (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: pcie: print function scratch before writing (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: use correct key iteration (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: remove MVM prefix from FW macros (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: add support for new REDUCE_TXPOWER_CMD versions (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: prepare the introduction of V9 of REDUCED_TX_POWER (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: don't use rate mask for offchannel TX either (Jose Ignacio Tornos Martinez) [RHEL-63376 RHEL-67113] {CVE-2024-47738}
  - wifi: mac80211: refactor block ack management code (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211_hwsim: correct MODULE_PARM_DESC of multi_radio (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: introduce chip support link number and driver MLO capability (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: rename roc_entity_idx to roc_chanctx_idx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8922a: use right chanctx whenever possible in RFK flow (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852c: use right chanctx whenever possible in RFK flow (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bx: use right chanctx whenever possible in RFK flow (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852a: use right chanctx whenever possible in RFK flow (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8851b: use right chanctx whenever possible in RFK flow (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: pass chan to rfk_band_changed() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - net: Correct spelling in headers (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - bus: mhi: host: make mhi_bus_type const (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - bus: mhi: host: pci_generic: Fix the name for the Telit FE990A (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: remove unnecessary checks for valid priv (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: Fix uninitialized variable in mwifiex_cfg80211_authenticate() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: coex: Add new Wi-Fi role format condition for function using (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: coex: Bluetooth hopping map for Wi-Fi role version 7 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: coex: Update Wi-Fi role info version 7 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: coex: Update report version of Wi-Fi firmware 0.29.90.0 for RTL8852BT (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: debugfs: support multiple adapters debugging (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: remove CPT execution branch never used (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852a: adjust ANA clock to 12M (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: correct base HT rate mask for firmware (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8922a: add digital compensation to avoid TX EVM degrade (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852c: support firmware with fw_element (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (Jose Ignacio Tornos Martinez) [RHEL-64609 RHEL-67113] {CVE-2024-49938}
  - wifi: mwifiex: keep mwifiex_cfg80211_ops constant (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath12k: fix the stack frame size warning in ath12k_mac_op_hw_scan (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: add support for WPA-PSK-SHA256 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: fix key_mgmt setting (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: simplify WPA flags setting (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - Revert "wifi: ath9k: use devm for request_irq()" (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: Enable USB RX aggregation for 8822c/8822b/8821c (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: usb: Support RX aggregation (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: usb: Update the RX stats after every frame (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: usb: Init RX burst length according to USB speed (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtl8xxxu: add missing rtl8192cu USB IDs (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtl8xxxu: drop reference to staging drivers (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: add net-detect support for 8852c (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: add delay option for net-detect (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: add WoWLAN net-detect support (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: implement PS mode for net-detect (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852c: support firmware format up to v1 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath12k: match WMI BSS chan info structure with firmware definition (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath12k: fix BSS chan info request WMI command (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath12k: restore ASPM for supported hardwares only (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath9k: Remove error checks when creating debugfs entries (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath9k: use devm for gpio_request_one() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath9k: use devm for request_irq() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: correct VHT TX rate on 20MHz connection (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: add support for HW encryption in unicast management frames (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: avoid to add interface to list twice when SER (Jose Ignacio Tornos Martinez) [RHEL-64482 RHEL-67113] {CVE-2024-49939}
  - wifi: rtw89: 8922a: Add new fields for scan offload H2C command (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8922a: new implementation for RFK pre-notify H2C (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: brcmsmac: clean up unnecessary current_ampdu_cnt and related checks (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: brcmfmac: introducing fwil query functions (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: brcmfmac: fwsignal: Use struct_size() to simplify brcmf_fws_rxreorder() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: add host mlme for AP mode (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: add host mlme for client mode (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: increase max_num_akm_suites (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: pass chanctx_idx to rtw89_btc_{path_}phymap() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: fw: correct chan access in assoc_cmac_tbl_g7 and update_beacon_be (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: pass rtwvif to RFK scan (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: pass rtwvif to RFK channel (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: rename sub_entity to chanctx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: mcc: stop at a role holding chanctx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: chan: refine MCC re-plan flow when unassign chanctx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: always wait for both firmware loading attempts (Jose Ignacio Tornos Martinez) [RHEL-63398 RHEL-67113] {CVE-2024-47718}
  - wifi: rtw89: fix typo of rtw89_phy_ra_updata_XXX (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 885xb: reset IDMEM mode to prevent download firmware failure (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: add support for hardware rfkill (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: add EVM statistics for 1SS rate (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: 8822c: Parse channel from IE to correct invalid hardware reports (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath9k: Use swap() to improve ath9k_hw_get_nf_hist_mid() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath9k: use unmanaged PCI functions in ath9k_pci_owl_loader (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: 8703b: Fix reported RX band width (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: 8822c: Fix reported RX band width (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bt: add 8852BE-VT to Makefile and Kconfig (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bte: add PCI entry of 8852BE-VT (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bt: declare firmware features of RTL8852BT (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bt: add chip_ops of RTL8852BT (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bt: add chip_info of RTL8852BT (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bt: rfk: use predefined string choice for DPK enable/disable (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bt: add set_channel_rf (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: select WANT_DEV_COREDUMP (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: select WANT_DEV_COREDUMP (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: debugfs: support multiple adapters debugging (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: usb: Support USB 3 with RTL8822CU/RTL8822BU (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bt: rfk: Fix spelling mistake "KIP_RESOTRE" -> "KIP_RESTORE" (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: Set efuse->ext_lna_5g - fix typo (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath12k: Support Transmit DE stats (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath11k: fix array out-of-bound access in SoC stats (Jose Ignacio Tornos Martinez) [RHEL-64581 RHEL-67113] {CVE-2024-49930}
  - wifi: ath12k: fix array out-of-bound access in SoC stats (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath11k: use work queue to process beacon tx event (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - Revert "wifi: ath11k: support hibernation" (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - Revert "wifi: ath11k: restore country code during resume" (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - redhat/kernel.spec.template: Link rtla against in-tree libcpupower (Tomas Glozar) [RHEL-69522]
  - rtla: Documentation: Mention --deepest-idle-state (Tomas Glozar) [RHEL-69522]
  - rtla/timerlat: Add --deepest-idle-state for hist (Tomas Glozar) [RHEL-69522]
  - rtla/timerlat: Add --deepest-idle-state for top (Tomas Glozar) [RHEL-69522]
  - rtla/utils: Add idle state disabling via libcpupower (Tomas Glozar) [RHEL-69522]
  - rtla: Add optional dependency on libcpupower (Tomas Glozar) [RHEL-69522]
  - tools/build: Add libcpupower dependency detection (Tomas Glozar) [RHEL-69522]
  - redhat/kernel.spec.template: add extra flags for tools build (Tomas Glozar) [RHEL-69522]
  - tools/rtla: Use tools/build makefiles to build rtla (Tomas Glozar) [RHEL-69522]
  - of: check previous kernel's ima-kexec-buffer against memory bounds (Mamatha Inamdar) [RHEL-70361]
  - Revert "igb: Disable threaded IRQ for igb_msix_other" (Corinna Vinschen) [RHEL-49817]
  - igb: Disable threaded IRQ for igb_msix_other (Corinna Vinschen) [RHEL-49817]
  - igb: Cleanup unused declarations (Corinna Vinschen) [RHEL-49817]
  - igb: Do not bring the device up after non-fatal error (Corinna Vinschen) [RHEL-49817]
  - igb: Always call igb_xdp_ring_update_tail() under Tx lock (Corinna Vinschen) [RHEL-49817]
  - igb: Fix not clearing TimeSync interrupts for 82580 (Corinna Vinschen) [RHEL-49817]
  - igb: cope with large MAX_SKB_FRAGS (Corinna Vinschen) [RHEL-49817]
  - igb: Add MII write support (Corinna Vinschen) [RHEL-49817]
  - igb: flower: validate control flags (Corinna Vinschen) [RHEL-49817]
  - vsock: Update rx_bytes on read_skb() (Jon Maloy) [RHEL-66526] {CVE-2024-50169}
  - iavf: add support for offloading tc U32 cls filters (Michal Schmidt) [RHEL-49814]
  - iavf: refactor add/del FDIR filters (Michal Schmidt) [RHEL-49814]
  - iavf: flower: validate control flags (Michal Schmidt) [RHEL-49814]
  - iavf: RHEL only: re-add "legacy-rx" as a dummy priv flag (Michal Schmidt) [RHEL-49814]
  - iavf: kill "legacy-rx" for good (Michal Schmidt) [RHEL-49814]
  - iavf: implement modern PM ops declarations (Michal Schmidt) [RHEL-49814]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-547.el9]
changelog:
  - workqueue: Introduce from_work() helper for cleaner callback declarations (CKI Backport Bot) [RHEL-71464]
  - x86/cacheinfo: Delete global num_cache_leaves (David Arcari) [RHEL-22704]
  - cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (David Arcari) [RHEL-22704]
  - x86/pat: Simplify the PAT programming protocol (David Arcari) [RHEL-22704]
  - rh_messages.h: un-unmaintain hfi1 (Michal Schmidt) [RHEL-68505]
  - netfilter: IDLETIMER: Fix for possible ABBA deadlock (Phil Sutter) [RHEL-6041]
  - x86: fix off-by-one in access_ok() (Waiman Long) [RHEL-71045]
  - kasan: move checks to do_strncpy_from_user (Waiman Long) [RHEL-71045]
  - x86/uaccess: Zero the 8-byte get_range case on failure on 32-bit (Waiman Long) [RHEL-71045]
  - x86/uaccess: Improve the 8-byte getuser() case (Waiman Long) [RHEL-71045 RHEL-71049]
  - x86/uaccess: Fix missed zeroing of ia32 u64 get_user() range checking (Waiman Long) [RHEL-71045]
  - x86/asm: Use %c/%n instead of %P operand modifier in asm templates (Waiman Long) [RHEL-71045]
  - vfio/mlx5: Align the page tracking max message size with the device capability (CKI Backport Bot) [RHEL-67541]
  - scsi: smartpqi: update driver version to 2.1.30-031 (Don Brace) [RHEL-61191]
  - scsi: smartpqi: fix volume size updates (Don Brace) [RHEL-61191]
  - scsi: smartpqi: fix rare system hang during LUN reset (Don Brace) [RHEL-61191]
  - scsi: smartpqi: add new controller PCI IDs (Don Brace) [RHEL-61191]
  - scsi: smartpqi: add counter for parity write stream requests (Don Brace) [RHEL-61191]
  - scsi: smartpqi: correct stream detection (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Add fw log to kdump (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Update driver version to 2.1.28-025 (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Improve handling of multipath failover (Don Brace) [RHEL-61191]
  - scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Improve accuracy/performance of raid-bypass-counter (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Add new controller PCI IDs (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Replace deprecated strncpy() with strscpy() (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Replace one-element arrays with flexible-array members (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Replace all non-returning strlcpy() with strscpy() (Don Brace) [RHEL-61191]
  - KVM: arm64: Pass on SVE mapping failures (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Don't map 'kvm_vgic_global_state' at EL2 with pKVM (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Just advertise SEIS as 0 when emulating ICC_CTLR_EL1 (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Initialize trap register values in hyp in pKVM (Shaoqin Huang) [RHEL-68038]
  - KVM: selftests: Don't bother deleting memslots in KVM when freeing VMs (Shaoqin Huang) [RHEL-68038]
  - KVM: selftests: Always unlink memory regions when deleting (VM free) (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: vgic: Kill VGIC_MAX_PRIVATE definition (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: vgic: Make vgic_get_irq() more robust (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Don't retire aborted MMIO instruction (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Get rid of userspace_irqchip_in_use (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Move pkvm_vcpu_init_traps() to init_pkvm_hyp_vcpu() (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Correctly access TCR2_EL1, PIR_EL1, PIRE0_EL1 with VHE (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Don't eagerly teardown the vgic on init error (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Make PIR{,E0}_EL1 save/restore conditional on FEAT_TCRX (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Make TCR2_EL1 save/restore dependent on the VM features (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Get rid of HCRX_GUEST_FLAGS (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Correctly honor the presence of FEAT_TCRX (Shaoqin Huang) [RHEL-68038]
  - vsock: Fix sk_error_queue memory leak (Jon Maloy) [RHEL-69707] {CVE-2024-53118}
  - nvme-fabrics: fix kernel crash while shutting down controller (Ming Lei) [RHEL-69767]
  - Revert "nvme: make keep-alive synchronous operation" (Ming Lei) [RHEL-69767]
  - arm64: dts: qcom: sa8775p: Add interconnects for ethernet (Radu Rendec) [RHEL-70213]
  - arm64: dts: qcom: sa8775p-ride-r3: add new board file (Radu Rendec) [RHEL-70213]
  - arm64: dts: qcom: move common parts for sa8775p-ride variants into a .dtsi (Radu Rendec) [RHEL-70213]
  - net: stmmac: qcom-ethqos: enable SGMII loopback during DMA reset on sa8775p-ride-r3 (Radu Rendec) [RHEL-70213]
  - net: stmmac: qcom-ethqos: add support for 2.5G BASEX mode (Radu Rendec) [RHEL-70213]
  - vfio/pci: Properly hide first-in-list PCIe extended capability (Alex Williamson) [RHEL-69744]
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (CKI Backport Bot) [RHEL-69700] {CVE-2024-53113}
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CKI Backport Bot) [RHEL-69574] {CVE-2024-53104}
  - mm: resolve faulty mmap_region() error path behaviour (Herton R. Krzesinski) [RHEL-68912] {CVE-2024-53096}
  - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (Herton R. Krzesinski) [RHEL-68912]
  - parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards (Herton R. Krzesinski) [RHEL-68912]
  - prctl: generalize PR_SET_MDWE support check to be per-arch (Herton R. Krzesinski) [RHEL-68912]
  - prctl: Disable prctl(PR_SET_MDWE) on parisc (Herton R. Krzesinski) [RHEL-68912]
  - mm: refactor map_deny_write_exec() (Herton R. Krzesinski) [RHEL-68912]
  - mm: unconditionally close VMAs on error (Herton R. Krzesinski) [RHEL-68912]
  - mm: avoid unsafe VMA hook invocation when error arises on mmap hook (Herton R. Krzesinski) [RHEL-68912]
  - netlink: fix false positive warning in extack during dumps (Petr Oros) [RHEL-57756]
  - netfilter: nfnetlink: Initialise extack before use in ACKs (Petr Oros) [RHEL-57756] {CVE-2024-44945}
  - Revert "rtnetlink: add guard for RTNL" (Petr Oros) [RHEL-57756]
  - netdev-genl: Hold rcu_read_lock in napi_get (Petr Oros) [RHEL-57756]
  - netlink: terminate outstanding dump on socket close (Petr Oros) [RHEL-57756] {CVE-2024-53140}
  - net: fix crash when config small gso_max_size/gso_ipv4_max_size (Petr Oros) [RHEL-57756] {CVE-2024-50258}
  - genetlink: hold RCU in genlmsg_mcast() (Petr Oros) [RHEL-57756]
  - rtnetlink: Add bulk registration helpers for rtnetlink message handlers. (Petr Oros) [RHEL-57756]
  - netlink: specs: mptcp: fix port endianness (Petr Oros) [RHEL-57756]
  - netlink: specs: nftables: allow decode of tailscale ruleset (Petr Oros) [RHEL-57756]
  - tools/net/ynl: fix cli.py --subscribe feature (Petr Oros) [RHEL-57756]
  - netlink: specs: nftables: allow decode of default firewalld ruleset (Petr Oros) [RHEL-57756]
  - netdev-genl: Set extack and fix error on napi-get (Petr Oros) [RHEL-57756]
  - tools: ynl: error check scanf() in a sample (Petr Oros) [RHEL-57756]
  - net: netlink: Remove the dump_cb_mutex field from struct netlink_sock (Petr Oros) [RHEL-57756]
  - rtnetlink: delete redundant judgment statements (Petr Oros) [RHEL-57756]
  - tools: ynl: lift an assumption about spec file name (Petr Oros) [RHEL-57756]
  - doc/netlink/specs: add netkit support to rt_link.yaml (Petr Oros) [RHEL-57756]
  - tools: ynl: remove extraneous ; after statements (Petr Oros) [RHEL-57756]
  - net: reduce rtnetlink_rcv_msg() stack usage (Petr Oros) [RHEL-57756]
  - docs: networking: devlink: capitalise length value (Petr Oros) [RHEL-57756]
  - tools: ynl: use ident name for Family, too. (Petr Oros) [RHEL-57756]
  - tools: net: package libynl for use in selftests (Petr Oros) [RHEL-57756]
  - tcp_metrics: add netlink protocol spec in YAML (Petr Oros) [RHEL-57756]
  - tcp_metrics: add UAPI to the header guard (Petr Oros) [RHEL-57756]
  - tools: ynl: use display hints for formatting of scalar attrs (Petr Oros) [RHEL-57756]
  - netdev-genl: fix error codes when outputting XDP features (Petr Oros) [RHEL-57756]
  - net: netlink: remove the cb_mutex "injection" from netlink core (Petr Oros) [RHEL-57756]
  - rtnetlink: move rtnl_lock handling out of af_netlink (Petr Oros) [RHEL-57756]
  - tools: ynl: make user space policies const (Petr Oros) [RHEL-57756]
  - tools: ynl: make the attr and msg helpers more C++ friendly (Petr Oros) [RHEL-57756]
  - netdev: add qstat for csum complete (Petr Oros) [RHEL-57756]
  - doc: netlink: Fix op pre and post fields in generated .rst (Petr Oros) [RHEL-57756]
  - doc: netlink: Fix formatting of op flags in generated .rst (Petr Oros) [RHEL-57756]
  - doc: netlink: Don't 'sanitize' op docstrings in generated .rst (Petr Oros) [RHEL-57756]
  - doc: netlink: Fix generated .rst for multi-line docs (Petr Oros) [RHEL-57756]
  - ynl: ensure exact-len value is resolved (Petr Oros) [RHEL-57756]
  - netdev: Add queue stats for TX stop and wake (Petr Oros) [RHEL-57756]
  - netlink/specs: Add VF attributes to rt_link spec (Petr Oros) [RHEL-57756]
  - net: write once on dev->allmulti and dev->promiscuity (Petr Oros) [RHEL-57756]
  - net/core: print message for allmulticast (Petr Oros) [RHEL-57756]
  - net/core: refactor promiscuous mode message (Petr Oros) [RHEL-57756]
  - net-core: use netdev_* calls for kernel messages (Petr Oros) [RHEL-57756]
  - rtnetlink: allow rtnl_fill_link_netnsid() to run under RCU protection (Petr Oros) [RHEL-57756]
  - rtnetlink: do not depend on RTNL in rtnl_xdp_prog_skb() (Petr Oros) [RHEL-57756]
  - rtnetlink: do not depend on RTNL in rtnl_fill_proto_down() (Petr Oros) [RHEL-57756]
  - rtnetlink: do not depend on RTNL for many attributes (Petr Oros) [RHEL-57756]
  - rtnetlink: do not depend on RTNL for IFLA_TXQLEN output (Petr Oros) [RHEL-57756]
  - rtnetlink: do not depend on RTNL for IFLA_IFNAME output (Petr Oros) [RHEL-57756]
  - rtnetlink: do not depend on RTNL for IFLA_QDISC output (Petr Oros) [RHEL-57756]
  - tools: ynl: add --list-ops and --list-msgs to CLI (Petr Oros) [RHEL-57756]
  - rtnetlink: use for_each_netdev_dump() in rtnl_stats_dump() (Petr Oros) [RHEL-57756]
  - rtnetlink: change rtnl_stats_dump() return value (Petr Oros) [RHEL-57756]
  - netdev: add queue stats (Petr Oros) [RHEL-57756]
  - tools: ynl: don't append doc of missing type directly to the type (Petr Oros) [RHEL-57756]
  - selftests: drv-net: test dumping qstats per device (Petr Oros) [RHEL-57756]
  - netlink: support all extack types in dumps (Petr Oros) [RHEL-57756]
  - netlink: move extack writing helpers (Petr Oros) [RHEL-57756]
  - netdev: support dumping a single netdev in qstats (Petr Oros) [RHEL-57756]
  - tools: ynl: don't ignore errors in NLMSG_DONE messages (Petr Oros) [RHEL-57756]
  - netfilter: nfnetlink: Handle ACK flags for batch messages (Petr Oros) [RHEL-57756]
  - tools/net/ynl: Add multi message support to ynl (Petr Oros) [RHEL-57756]
  - tools/net/ynl: Fix extack decoding for directional ops (Petr Oros) [RHEL-57756]
  - doc/netlink/specs: Add draft nftables spec (Petr Oros) [RHEL-57756]
  - devlink: add a new info version tag (Petr Oros) [RHEL-57756]
  - doc/netlink/specs: Add bond support to rt_link.yaml (Petr Oros) [RHEL-57756]
  - netlink: add nlmsg_consume() and use it in devlink compat (Petr Oros) [RHEL-57756]
  - ynl: support binary and integer sub-type for indexed-array (Petr Oros) [RHEL-57756]
  - ynl: rename array-nest to indexed-array (Petr Oros) [RHEL-57756]
  - tools: ynl: copy netlink error to NlError (Petr Oros) [RHEL-57756]
  - rtnetlink: add guard for RTNL (Petr Oros) [RHEL-57756]
  - tools: ynl: add ynl_dump_empty() helper (Petr Oros) [RHEL-57756]
  - genetlink: remove linux/genetlink.h (Petr Oros) [RHEL-57756]
  - net: openvswitch: remove unnecessary linux/genetlink.h include (Petr Oros) [RHEL-57756]
  - netlink: create a new header for internal genetlink symbols (Petr Oros) [RHEL-57756]
  - doc: netlink: Update tc spec with missing definitions (Petr Oros) [RHEL-57756]
  - doc: netlink: Add hyperlinks to generated Netlink docs (Petr Oros) [RHEL-57756]
  - doc: netlink: Change generated docs to limit TOC to depth 3 (Petr Oros) [RHEL-57756]
  - tools/net/ynl: Add extack policy attribute decoding (Petr Oros) [RHEL-57756]
  - doc/netlink/specs: Add vlan attr in rt_link spec (Petr Oros) [RHEL-57756]
  - ynl: support hex display_hint for integer (Petr Oros) [RHEL-57756]
  - netlink: let core handle error cases in dump operations (Petr Oros) [RHEL-57756]
  - xfs: don't fail repairs on metadata files with no attr fork (Bill O'Donnell) [RHEL-65728]
  - xfs: fix integer overflow in xrep_bmap (Bill O'Donnell) [RHEL-65728]
  - xfs: disable sparse inode chunk alignment check when there is no alignment (Bill O'Donnell) [RHEL-65728]
  - xfs: fix error bailout in xrep_abt_build_new_trees (Bill O'Donnell) [RHEL-65728]
  - xfs: remove conditional building of rt geometry validator functions (Bill O'Donnell) [RHEL-65728]
  - xfs: reset XFS_ATTR_INCOMPLETE filter on node removal (Bill O'Donnell) [RHEL-65728]
  - xfs: read only mounts with fsopen mount API are busted (Bill O'Donnell) [RHEL-65728]
  - xfs: fix backwards logic in xfs_bmap_alloc_account (Bill O'Donnell) [RHEL-65728]
  - xfs: use the op name in trace_xlog_intent_recovery_failed (Bill O'Donnell) [RHEL-65728]
  - xfs: fix a use after free in xfs_defer_finish_recovery (Bill O'Donnell) [RHEL-65728]
  - xfs: turn the XFS_DA_OP_REPLACE checks in xfs_attr_shortform_addname into asserts (Bill O'Donnell) [RHEL-65728]
  - xfs: remove xfs_attr_sf_hdr_t (Bill O'Donnell) [RHEL-65728]
  - xfs: remove struct xfs_attr_shortform (Bill O'Donnell) [RHEL-65728]
  - xfs: use xfs_attr_sf_findname in xfs_attr_shortform_getvalue (Bill O'Donnell) [RHEL-65728]
  - xfs: remove xfs_attr_shortform_lookup (Bill O'Donnell) [RHEL-65728]
  - xfs: simplify xfs_attr_sf_findname (Bill O'Donnell) [RHEL-65728]
  - xfs: move the xfs_attr_sf_lookup tracepoint (Bill O'Donnell) [RHEL-65728]
  - xfs: return if_data from xfs_idata_realloc (Bill O'Donnell) [RHEL-65728]
  - xfs: make if_data a void pointer (Bill O'Donnell) [RHEL-65728]
  - xfs: fold xfs_rtallocate_extent into xfs_bmap_rtalloc (Bill O'Donnell) [RHEL-65728]
  - xfs: simplify and optimize the RT allocation fallback cascade (Bill O'Donnell) [RHEL-65728]
  - xfs: reorder the minlen and prod calculations in xfs_bmap_rtalloc (Bill O'Donnell) [RHEL-65728]
  - xfs: remove XFS_RTMIN/XFS_RTMAX (Bill O'Donnell) [RHEL-65728]
  - xfs: remove rt-wrappers from xfs_format.h (Bill O'Donnell) [RHEL-65728]
  - xfs: factor out a xfs_rtalloc_sumlevel helper (Bill O'Donnell) [RHEL-65728]
  - xfs: tidy up xfs_rtallocate_extent_exact (Bill O'Donnell) [RHEL-65728]
  - xfs: merge the calls to xfs_rtallocate_range in xfs_rtallocate_block (Bill O'Donnell) [RHEL-65728]
  - xfs: reflow the tail end of xfs_rtallocate_extent_block (Bill O'Donnell) [RHEL-65728]
  - xfs: invert a check in xfs_rtallocate_extent_block (Bill O'Donnell) [RHEL-65728]
  - xfs: split xfs_rtmodify_summary_int (Bill O'Donnell) [RHEL-65728]
  - xfs: move xfs_rtget_summary to xfs_rtbitmap.c (Bill O'Donnell) [RHEL-65728]
  - xfs: cleanup picking the start extent hint in xfs_bmap_rtalloc (Bill O'Donnell) [RHEL-65728]
  - xfs: indicate if xfs_bmap_adjacent changed ap->blkno (Bill O'Donnell) [RHEL-65728]
  - xfs: reflow the tail end of xfs_bmap_rtalloc (Bill O'Donnell) [RHEL-65728]
  - xfs: return -ENOSPC from xfs_rtallocate_* (Bill O'Donnell) [RHEL-65728]
  - xfs: move xfs_bmap_rtalloc to xfs_rtalloc.c (Bill O'Donnell) [RHEL-65728]
  - xfs: also use xfs_bmap_btalloc_accounting for RT allocations (Bill O'Donnell) [RHEL-65728]
  - xfs: remove the xfs_alloc_arg argument to xfs_bmap_btalloc_accounting (Bill O'Donnell) [RHEL-65728]
  - xfs: turn the xfs_trans_mod_dquot_byino stub into an inline function (Bill O'Donnell) [RHEL-65728]
  - xfs: consider minlen sized extents in xfs_rtallocate_extent_block (Bill O'Donnell) [RHEL-65728]
  - xfs/health: cleanup, remove duplicated including (Bill O'Donnell) [RHEL-65728]
  - xfs: repair quotas (Bill O'Donnell) [RHEL-65728]
  - xfs: improve dquot iteration for scrub (Bill O'Donnell) [RHEL-65728]
  - xfs: check dquot resource timers (Bill O'Donnell) [RHEL-65728]
  - xfs: check the ondisk space mapping behind a dquot (Bill O'Donnell) [RHEL-65728]
  - xfs: online repair of realtime bitmaps (Bill O'Donnell) [RHEL-65728]
  - xfs: create a new inode fork block unmap helper (Bill O'Donnell) [RHEL-65728]
  - xfs: repair the inode core and forks of a metadata inode (Bill O'Donnell) [RHEL-65728]
  - xfs: always check the rtbitmap and rtsummary files (Bill O'Donnell) [RHEL-65728]
  - xfs: check rt summary file geometry more thoroughly (Bill O'Donnell) [RHEL-65728]
  - xfs: check rt bitmap file geometry more thoroughly (Bill O'Donnell) [RHEL-65728]
  - xfs: repair problems in CoW forks (Bill O'Donnell) [RHEL-65728]
  - xfs: create a ranged query function for refcount btrees (Bill O'Donnell) [RHEL-65728]
  - xfs: refactor repair forcing tests into a repair.c helper (Bill O'Donnell) [RHEL-65728]
  - xfs: repair inode fork block mapping data structures (Bill O'Donnell) [RHEL-65728]
  - xfs: reintroduce reaping of file metadata blocks to xrep_reap_extents (Bill O'Donnell) [RHEL-65728]
  - xfs: skip the rmapbt search on an empty attr fork unless we know it was zapped (Bill O'Donnell) [RHEL-65728]
  - xfs: abort directory parent scrub scans if we encounter a zapped directory (Bill O'Donnell) [RHEL-65728]
  - xfs: zap broken inode forks (Bill O'Donnell) [RHEL-65728]
  - xfs: repair inode records (Bill O'Donnell) [RHEL-65728]
  - xfs: set inode sick state flags when we zap either ondisk fork (Bill O'Donnell) [RHEL-65728]
  - xfs: dont cast to char * for XFS_DFORK_*PTR macros (Bill O'Donnell) [RHEL-65728]
  - xfs: add missing nrext64 inode flag check to scrub (Bill O'Donnell) [RHEL-65728]
  - xfs: try to attach dquots to files before repairing them (Bill O'Donnell) [RHEL-65728]
  - xfs: disable online repair quota helpers when quota not enabled (Bill O'Donnell) [RHEL-65728]
  - xfs: repair refcount btrees (Bill O'Donnell) [RHEL-65728]
  - xfs: repair inode btrees (Bill O'Donnell) [RHEL-65728]
  - xfs: repair free space btrees (Bill O'Donnell) [RHEL-65728]
  - xfs: remove trivial bnobt/inobt scrub helpers (Bill O'Donnell) [RHEL-65728]
  - xfs: roll the scrub transaction after completing a repair (Bill O'Donnell) [RHEL-65728]
  - xfs: move the per-AG datatype bitmaps to separate files (Bill O'Donnell) [RHEL-65728]
  - xfs: create separate structures and code for u32 bitmaps (Bill O'Donnell) [RHEL-65728]
  - xfs: constrain dirty buffers while formatting a staged btree (Bill O'Donnell) [RHEL-65728]
  - xfs: move btree bulkload record initialization to ->get_record implementations (Bill O'Donnell) [RHEL-65728]
  - xfs: add debug knobs to control btree bulk load slack factors (Bill O'Donnell) [RHEL-65728]
  - xfs: read leaf blocks when computing keys for bulkloading into node blocks (Bill O'Donnell) [RHEL-65728]
  - xfs: set XBF_DONE on newly formatted btree block that are ready for writing (Bill O'Donnell) [RHEL-65728]
  - xfs: force all buffers to be written during btree bulk load (Bill O'Donnell) [RHEL-65728]
  - xfs: initialise di_crc in xfs_log_dinode (Bill O'Donnell) [RHEL-65728]
  - xfs: pass the defer ops directly to xfs_defer_add (Bill O'Donnell) [RHEL-65728]
  - xfs: pass the defer ops instead of type to xfs_defer_start_recovery (Bill O'Donnell) [RHEL-65728]
  - xfs: store an ops pointer in struct xfs_defer_pending (Bill O'Donnell) [RHEL-65728]
  - xfs: move xfs_attr_defer_type up in xfs_attr_item.c (Bill O'Donnell) [RHEL-65728]
  - xfs: consolidate the xfs_attr_defer_* helpers (Bill O'Donnell) [RHEL-65728]
  - xfs: recompute growfsrtfree transaction reservation while growing rt volume (Bill O'Donnell) [RHEL-65728]
  - xfs: move xfs_ondisk.h to libxfs/ (Bill O'Donnell) [RHEL-65728]
  - xfs: use static_assert to check struct sizes and offsets (Bill O'Donnell) [RHEL-65728]
  - xfs: extract xfs_da_buf_copy() helper function (Bill O'Donnell) [RHEL-65728]
  - xfs: update dir3 leaf block metadata after swap (Bill O'Donnell) [RHEL-65728]
  - xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real (Bill O'Donnell) [RHEL-65728]
  - xfs: clean up xfs_fsops.h (Bill O'Donnell) [RHEL-65728]
  - xfs: clean up the xfs_reserve_blocks interface (Bill O'Donnell) [RHEL-65728]
  - xfs: clean up the XFS_IOC_FSCOUNTS handler (Bill O'Donnell) [RHEL-65728]
  - xfs: clean up the XFS_IOC_{GS}ET_RESBLKS handler (Bill O'Donnell) [RHEL-65728]
  - xfs: force small EFIs for reaping btree extents (Bill O'Donnell) [RHEL-65728]
  - xfs: log EFIs for all btree blocks being used to stage a btree (Bill O'Donnell) [RHEL-65728]
  - xfs: implement block reservation accounting for btrees we're staging (Bill O'Donnell) [RHEL-65728]
  - xfs: remove unused fields from struct xbtree_ifakeroot (Bill O'Donnell) [RHEL-65728]
  - xfs: automatic freeing of freshly allocated unwritten space (Bill O'Donnell) [RHEL-65728]
  - xfs: remove __xfs_free_extent_later (Bill O'Donnell) [RHEL-65728]
  - xfs: allow pausing of pending deferred work items (Bill O'Donnell) [RHEL-65728]
  - xfs: don't append work items to logged xfs_defer_pending objects (Bill O'Donnell) [RHEL-65728]
  - xfs: make xchk_iget safer in the presence of corrupt inode btrees (Bill O'Donnell) [RHEL-65728]
  - xfs: elide ->create_done calls for unlogged deferred work (Bill O'Donnell) [RHEL-65728]
  - xfs: document what LARP means (Bill O'Donnell) [RHEL-65728]
  - xfs: don't allow overly small or large realtime volumes (Bill O'Donnell) [RHEL-65728]
  - xfs: fix 32-bit truncation in xfs_compute_rextslog (Bill O'Donnell) [RHEL-65728]
  - xfs: make rextslog computation consistent with mkfs (Bill O'Donnell) [RHEL-65728]
  - xfs: move ->iop_relog to struct xfs_defer_op_type (Bill O'Donnell) [RHEL-65728]
  - xfs: collapse the ->create_done functions (Bill O'Donnell) [RHEL-65728]
  - xfs: hoist xfs_trans_add_item calls to defer ops functions (Bill O'Donnell) [RHEL-65728]
  - xfs: clean out XFS_LI_DIRTY setting boilerplate from ->iop_relog (Bill O'Donnell) [RHEL-65728]
  - xfs: use xfs_defer_create_done for the relogging operation (Bill O'Donnell) [RHEL-65728]
  - xfs: hoist ->create_intent boilerplate to its callsite (Bill O'Donnell) [RHEL-65728]
  - xfs: collapse the ->finish_item helpers (Bill O'Donnell) [RHEL-65728]
  - xfs: hoist intent done flag setting to ->finish_item callsite (Bill O'Donnell) [RHEL-65728]
  - xfs: don't set XFS_TRANS_HAS_INTENT_DONE when there's no ATTRD log item (Bill O'Donnell) [RHEL-65728]
  - xfs: move ->iop_recover to xfs_defer_op_type (Bill O'Donnell) [RHEL-65728]
  - xfs: use xfs_defer_finish_one to finish recovered work items (Bill O'Donnell) [RHEL-65728]
  - xfs: dump the recovered xattri log item if corruption happens (Bill O'Donnell) [RHEL-65728]
  - xfs: recreate work items when recovering intent items (Bill O'Donnell) [RHEL-65728]
  - xfs: transfer recovered intent item ownership in ->iop_recover (Bill O'Donnell) [RHEL-65728]
  - xfs: pass the xfs_defer_pending object to iop_recover (Bill O'Donnell) [RHEL-65728]
  - xfs: use xfs_defer_pending objects to recover intent items (Bill O'Donnell) [RHEL-65728]
  - xfs: don't leak recovered attri intent items (Bill O'Donnell) [RHEL-65728]
  - bdev: rename freeze and thaw helpers (Bill O'Donnell) [RHEL-65728]
  - scsi: core: Fix missing FORCE for scsi_devinfo_tbl.c build rule (Ewan D. Milne) [RHEL-59053]
  - Document/kexec: generalize crash hotplug description (Baoquan He) [RHEL-58641]
  - sysfs/cpu: Make crash_hotplug attribute world-readable (Baoquan He) [RHEL-58641]
  - Documentation: kdump: clean up the outdated description (Baoquan He) [RHEL-58641]
  - s390/kexec: do not automatically select KEXEC option (Baoquan He) [RHEL-58641]
  - redhat/configs: Add new configs for crash hotplug support of kdump (Baoquan He) [RHEL-58641]
  - powerpc/85xx: fix compile error without CONFIG_CRASH_DUMP (Baoquan He) [RHEL-58641]
  - kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y (Baoquan He) [RHEL-58641]
  - fs/proc: fix softlockup in __read_vmcore (Baoquan He) [RHEL-58641]
  - crash: add prefix for crash dumping messages (Baoquan He) [RHEL-58641]
  - vmcore: replace strncpy with strscpy_pad (Baoquan He) [RHEL-58641]
  - crash: add a new kexec flag for hotplug support (Baoquan He) [RHEL-58641]
  - crash: forward memory_notify arg to arch crash hotplug handler (Baoquan He) [RHEL-58641]
  - crash: use macro to add crashk_res into iomem early for specific arch (Baoquan He) [RHEL-58641]
  - powerpc/kdump: Split KEXEC_CORE and CRASH_DUMP dependency (Baoquan He) [RHEL-58641]
  - powerpc/machdep: Remove stale functions from ppc_md structure (Baoquan He) [RHEL-58641]
  - powerpc/kexec: split CONFIG_KEXEC_FILE and CONFIG_CRASH_DUMP (Baoquan He) [RHEL-58641]
  - kexec/kdump: make struct crash_mem available without CONFIG_CRASH_DUMP (Baoquan He) [RHEL-58641]
  - arch, crash: move arch_crash_save_vmcoreinfo() out to file vmcore_info.c (Baoquan He) [RHEL-58641]
  - powerpc: add cpu_spec.cpu_features to vmcoreinfo (Baoquan He) [RHEL-58641]
  - mips, crash: wrap crash dumping code into crash related ifdefs (Baoquan He) [RHEL-58641]
  - s390, crash: wrap crash dumping code into crash related ifdefs (Baoquan He) [RHEL-58641]
  - ppc, crash: enforce KEXEC and KEXEC_FILE to select CRASH_DUMP (Baoquan He) [RHEL-58641]
  - arm64, crash: wrap crash dumping code into crash related ifdefs (Baoquan He) [RHEL-58641]
  - x86, crash: wrap crash dumping code into crash related ifdefs (Baoquan He) [RHEL-58641]
  - crash: clean up kdump related config items (Baoquan He) [RHEL-58641]
  - crash: split crash dumping code out from kexec_core.c (Baoquan He) [RHEL-58641]
  - crash: remove dependency of FA_DUMP on CRASH_DUMP (Baoquan He) [RHEL-58641]
  - crash: split vmcoreinfo exporting code out from crash_core.c (Baoquan He) [RHEL-58641]
  - kexec: split crashkernel reservation code out from crash_core.c (Baoquan He) [RHEL-58641]
  - kexec: Annotate struct crash_mem with __counted_by (Baoquan He) [RHEL-58641]
  - kexec: drop dependency on ARCH_SUPPORTS_KEXEC from CRASH_DUMP (Baoquan He) [RHEL-58641]
  - kexec: select CRYPTO from KEXEC_FILE instead of depending on it (Baoquan He) [RHEL-58641]
  - kexec: fix KEXEC_FILE dependencies (Baoquan He) [RHEL-58641]
  - kernel/Kconfig.kexec: drop select of KEXEC for CRASH_DUMP (Baoquan He) [RHEL-58641]
  - kexec: Allocate kernel above bzImage's pref_address (Baoquan He) [RHEL-58641]
  - kernel/crash_core.c: make __crash_hotplug_lock static (Baoquan He) [RHEL-58641]
  - kdump: defer the insertion of crashkernel resources (Baoquan He) [RHEL-58641]
  - crash_core: fix and simplify the logic of crash_exclude_mem_range() (Baoquan He) [RHEL-58641]
  - x86/crash: use SZ_1M macro instead of hardcoded value (Baoquan He) [RHEL-58641]
  - x86/crash: remove the unused image parameter from prepare_elf_headers() (Baoquan He) [RHEL-58641]
  - crash_core: fix the check for whether crashkernel is from high memory (Baoquan He) [RHEL-58641]
  - kdump: remove redundant DEFAULT_CRASH_KERNEL_LOW_SIZE (Baoquan He) [RHEL-58641]
  - kexec_core: fix the assignment to kimage->control_page (Baoquan He) [RHEL-58641]
  - x86/kexec: fix incorrect end address passed to kernel_ident_mapping_init() (Baoquan He) [RHEL-58641]
  - x86/kexec: fix incorrect argument passed to kexec_dprintk() (Baoquan He) [RHEL-58641]
  - x86/kexec: use pr_err() instead of kexec_dprintk() when an error occurs (Baoquan He) [RHEL-58641]
  - kexec_file: fix incorrect temp_start value in locate_mem_hole_top_down() (Baoquan He) [RHEL-58641]
  - kexec: modify the meaning of the end parameter in kimage_is_destination_range() (Baoquan He) [RHEL-58641]
  - crash_core: remove duplicated including of kexec.h (Baoquan He) [RHEL-58641]
  - x86/kexec: simplify the logic of mem_region_callback() (Baoquan He) [RHEL-58641]
  - kexec: use ALIGN macro instead of open-coding it (Baoquan He) [RHEL-58641]
  - kexec_file: load kernel at top of system RAM if required (Baoquan He) [RHEL-58641]
  - kexec: use atomic_try_cmpxchg in crash_kexec (Baoquan He) [RHEL-58641]
  - kernel: kexec: copy user-array safely (Baoquan He) [RHEL-58641]
  - crash_core.c: remove unneeded functions (Baoquan He) [RHEL-58641]
  - arm64: kdump: use generic interface to simplify crashkernel reservation (Baoquan He) [RHEL-58641]
  - x86: kdump: use generic interface to simplify crashkernel reservation code (Baoquan He) [RHEL-58641]
  - crash_core: move crashk_*res definition into crash_core.c (Baoquan He) [RHEL-58641]
  - crash_core: add generic function to do reservation (Baoquan He) [RHEL-58641]
  - crash_core: change parse_crashkernel() to support crashkernel=,high|low parsing (Baoquan He) [RHEL-58641]
  - crash_core: change the prototype of function parse_crashkernel() (Baoquan He) [RHEL-58641]
  - crash_core.c: remove unnecessary parameter of function (Baoquan He) [RHEL-58641]
  - Crash: add lock to serialize crash hotplug handling (Baoquan He) [RHEL-58641]
  - x86/crash: optimize CPU changes (Baoquan He) [RHEL-58641]
  - crash: change crash_prepare_elf64_headers() to for_each_possible_cpu() (Baoquan He) [RHEL-58641]
  - crash: hotplug support for kexec_load() (Baoquan He) [RHEL-58641]
  - x86/crash: add x86 crash hotplug support (Baoquan He) [RHEL-58641]
  - kexec: exclude elfcorehdr from the segment digest (Baoquan He) [RHEL-58641]
  - crash: add generic infrastructure for crash hotplug support (Baoquan He) [RHEL-58641]
  - crash: move a few code bits to setup support of crash hotplug (Baoquan He) [RHEL-58641]
  - kexec_lock: Replace kexec_mutex() by kexec_lock() in two comments (Baoquan He) [RHEL-58641]
  - remove ARCH_DEFAULT_KEXEC from Kconfig.kexec (Baoquan He) [RHEL-58641]
  - kexec: rename ARCH_HAS_KEXEC_PURGATORY (Baoquan He) [RHEL-58641]
  - s390/kexec: refactor for kernel/Kconfig.kexec (Baoquan He) [RHEL-58641]
  - powerpc/kexec: refactor for kernel/Kconfig.kexec (Baoquan He) [RHEL-58641]
  - mips/kexec: refactor for kernel/Kconfig.kexec (Baoquan He) [RHEL-58641]
  - arm64/kexec: refactor for kernel/Kconfig.kexec (Baoquan He) [RHEL-58641]
  - x86/kexec: refactor for kernel/Kconfig.kexec (Baoquan He) [RHEL-58641]
  - kexec: consolidate kexec and crash options into kernel/Kconfig.kexec (Baoquan He) [RHEL-58641]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-3
changelog:
  - Fix Keylime configuration upgrades issues introduced in last rebase
    Resolves: RHEL-475
  - Handle session close using a session manager
    Resolves: RHEL-1252
  - Add ignores for EV_PLATFORM_CONFIG_FLAGS
    Resolves: RHEL-947


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-4
changelog:
  - Update spec file to use %verify(not md5 size mode mtime) for files updated in %post scriptlets
    Resolves: RHEL-475


author: Sergio Correia <scorreia@redhat.com> - 6.5.2-1
changelog:
  - Update to 6.5.2
    Resolves: CVE-2022-3500
    Resolves: rhbz#2138167 - agent fails IMA attestation when one scripts is executed quickly after the other
    Resolves: rhbz#2140670 - Segmentation fault in /usr/share/keylime/create_mb_refstate script
    Resolves: rhbz#142009 - Registrar may crash during EK validation when require_ek_cert is enabled


author: Sergio Correia <scorreia@redhat.com> - 6.5.2-4
changelog:
  - Backport upstream PR#1240 - logging: remove option to log into separate file
    Resolves: rhbz#2154584 - keylime verifier is not logging to /var/log/keylime


author: Patrik Koncity <pkoncity@redhat.com> - 7.3.0-2
changelog:
  - Keylime SELinux policy provides more restricted ports.
  - New SELinux label for ports used by keylime.
  - Adding tabrmd interfaces allow unix stream socket communication and dbus communication.
  - Allow the keylime_server_t domain to get the attributes of all filesystems.
    Resolves: RHEL-595
    Resolves: RHEL-390
    Resolves: RHEL-948


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
  - Resolves: rhbz#2151513
  - Remove invalid password expiry warning
  - Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2063838
  - New upstream version (1.20.1)
  - Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  - Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.0~BETA-1
changelog:
  - new upstream release
  - remove upstreamed patches
  - update CCFLAGS (https://github.com/ksh93/ksh/commit/98f989afcc7)
    Resolves: #1986897


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Matej Matuska <mmatuska@redhat.com> - 0.21.0-4
changelog:
  - Require leapp-framework 6.0+
  - Update leapp-deps package to satisfy leapp-framework-dependencies 6
  - Add dependency on libdb-utils
  - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token
  - Adjust resource limitations for leapp to be able to perform the upgrade
  - Cap max size of the sparse files to 1TiB for storage with large amount of free space
  - Check that detected Intel CPU microarchitecture is supported on target system
  - Fix the report when handling broken parsing of kernel cmdline
  - Generate proper error message instead of ModelViolationError when parsing invalid repository definition
  - Handle default kernel cmdline when multiple boot entries for the default kernel are defined
  - Migrate Ruby IRB during the upgrade
  - Migrate pam_userdb backend during the upgrade
  - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs
  - Update leapp upgrade data files
  - Resolves: RHEL-57043


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Vishal Vijayraghavan <vvijayra AT redhat DOT com> - 1:2.1.3-1
changelog:
  - New release of liberation-fonts 2.1.3
  - Resolves:rh#1464310 : Tilded G not works with Liberation Sans and Serif


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Laszlo Ersek <lersek@redhat.com> - 1:1.46.1-2
changelog:
  - Add detection support for Rocky Linux
    resolves: rhbz#2030709
  - Resolve conflict between manual and libvirt-assigned PCI addresses
    resolves: rhbz#2034160


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-2
changelog:
  - Rebase to new stable branch version 1.48.4
    resolves: rhbz#2059285
  - Disable 5-level page tables when using -cpu max
    resolves: rhbz#2084568
  - SELinux relabelling should not stop on ext4 immutable bits
    resolves: rhbz#1794518
  - Ignore "iface" in add-drive variants
    resolves: rhbz#1844341
  - Lift protocol limit on guestfs_readdir()
    resolves: rhbz#1674392
  - Check return values from librpm calls (2089623)
  - Document limitations of encrypted RBD disks
    resolves: rhbz#2033247
  - Fix lvm-set-filter failed in guestfish with the latest lvm2 package
    resolves: rhbz#1965941
  - Enable PHP bindings
    resolves: rhbz#2097718
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2101281
  - Add clevis-luks to BRs, required for Clevis & Tang
    related: rhbz#1809453
  - Add zstd support to guestfs_file_architecture
    resolves: rhbz#2117004


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-4
changelog:
  - New API: guestfs_inspect_get_build_id
  - Add support for detecting Windows >= 10, returned through osinfo
    resolves: rhbz#2012658


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-4
changelog:
  - Rebase libguestfs to 1.50.1
    resolves: rhbz#2168625
  - Use q35 machine type for libguestfs appliance
    resolves: rhbz#2168578
  - Run SELinux relabelling in parallel [for virt-v2v]
    resolves: rhbz#2190276


author: Laszlo Ersek <lersek@redhat.com> - 1:1.50.1-5
changelog:
  - let "guestfish -i" recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable quickcheck; we now use "-cpu max" (upstream 30f74f38bd6e)
    resolves: rhbz#2209279


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-2
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 8.2-1
changelog:
  - Rebuild for RHEL AV 8.2.
  - Include ntfs-3g-system-compression plugin.
    resolves: rhbz#1705234, rhbz#1796073


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.5.2-5
changelog:
  - replace use of ucpp with gcc cpp
  - Resolves: tdf#132739 two html style tags where there should be just one


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Stefan Berger <stefanb@linux.ibm.com> - 0.7.5-0.20210218gite271498466
changelog:
  - Addressed UBSAN and cppcheck detected issues
  - Return proper size of ECC Parameters to pass HLK tests


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-1
changelog:
  - Rebased to libvirt-10.5.0 (RHEL-21381)
  - The rebase also fixes the following bugs:
      RHEL-23833, RHEL-29642, RHEL-37542, RHEL-39969, RHEL-40899
      RHEL-43309


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-2
changelog:
  - vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46099)
  - tests: vhostuser: add virtiofsd json descriptor (RHEL-7108, RHEL-40135)
  - tests: qemuxmlconf: adjust test case to new virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: fill capabilities for virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: do not use deprecated options for new virtiofsd (RHEL-7108)
  - qemu: migration: allow migration for virtiofs (RHEL-40135)
  - virt-host-validate: Drop extra "PASS" (RHEL-46868)
  - qemu: Don't leave beingDestroyed=true on inactive domain (RHEL-43309)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
  - qemu_domain: Strip <acpi/> from s390(x) definitions (RHEL-49516)
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
  - vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-1
changelog:
  - Rebased to libvirt-10.8.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-688, RHEL-7122, RHEL-19379, RHEL-22166, RHEL-24746
      RHEL-28827, RHEL-45200, RHEL-45952, RHEL-53964, RHEL-54550
      RHEL-56611, RHEL-58446


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61576)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61576)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61576)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61576)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61576)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-7036, RHEL-7122, RHEL-35752, RHEL-46870, RHEL-52314
      RHEL-60030, RHEL-60033, RHEL-64341


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-23607, RHEL-24850, RHEL-29267, RHEL-30842, RHEL-53963
      RHEL-54325, RHEL-54326, RHEL-55240, RHEL-64341, RHEL-65372
      RHEL-65780, RHEL-65844, RHEL-67702, RHEL-67836, RHEL-68614
      RHEL-69417


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69938)
  - qemu: tpm: do not update profile name for transient domains (RHEL-71072)
  - qemu: Enable I/O APIC if needed (RHEL-65844)
  - cpu_map: Sort data files in meson.build (RHEL-70052)
  - sync_qemu_models_i386: Update meson.build (RHEL-70052)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70052)
  - cpu_map: Add 486-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70052)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70052)
  - cpu_map: Add n270-v1 CPU model (RHEL-70052)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70052)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70052)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70052)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70052)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70052)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70052)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70052)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-4
changelog:
  - Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
  - qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
  - qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
  - domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-5
changelog:
  - cpu: x86: Add support for adding features to existing CPU models (RHEL-25995)
  - qemu: domain: Check arch in qemuDomainMakeCPUMigratable (RHEL-25995)
  - conf: cpu: Introduce virCPUDefListFeatures (RHEL-25995)
  - qemu: domain: Drop added features from migratable CPU (RHEL-25995)
  - Add vmx-* features to Broadwell* (RHEL-25995)
  - Add vmx-* features to Cascadelake* (RHEL-25995)
  - Add vmx-* features to Conroe (RHEL-25995)
  - Add vmx-* features to Cooperlake (RHEL-25995)
  - Add vmx-* features to core{,2}duo (RHEL-25995)
  - Add vmx-* features to Haswell* (RHEL-25995)
  - Add vmx-* features to Icelake* (RHEL-25995)
  - Add vmx-* features to IvyBridge* (RHEL-25995)
  - Add vmx-* features to kvm* (RHEL-25995)
  - Add vmx-* features to Nehalem* (RHEL-25995)
  - Add vmx-* features to Penryn (RHEL-25995)
  - Add vmx-* features to SandyBridge* (RHEL-25995)
  - Add vmx-* features to SapphireRapids (RHEL-25995)
  - Add vmx-* features to Skylake* (RHEL-25995)
  - Add vmx-* features to Snowridge (RHEL-25995)
  - Add vmx-* features to Westmere* (RHEL-25995)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-7
changelog:
  - qemu: virtiofs: do not crash if cgroups are missing
  - qemu: virtiofs: set correct label when creating the socket
  - qemu: virtiofs: error out if getting the group or user name fails
  - Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)
  - qemu: Fix migration with custom XML (RHEL-30622)


author: Jiri Denemark <jdenemar@redhat.com> - 10.3.0-1
changelog:
  - Rebased to libvirt-10.3.0 (RHEL-29642)
  - The rebase also fixes the following bugs:
      RHEL-25993, RHEL-7101, RHEL-7461, RHEL-16333, RHEL-7343
      RHEL-28808, RHEL-32880, RHEL-35879, RHEL-34112, RHEL-30373
      RHEL-23416, RHEL-23608, RHEL-26276, RHEL-22728


author: Jiri Denemark <jdenemar@redhat.com> - 10.4.0-1
changelog:
  - Rebased to libvirt-10.4.0 (RHEL-7489)
  - The rebase also fixes the following bugs:
      RHEL-29642, RHEL-30373, RHEL-32182, RHEL-33044, RHEL-33082
      RHEL-34615, RHEL-35948, RHEL-36565, RHEL-36721, RHEL-39271
      RHEL-39400


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Jakub Jelen <jjelen@redhat.com> - 1.1.33-4
changelog:
  - Do not build python bindings even if the python is available
  - Fix CVE-2019-13117 (#1728547)
  - Fix CVE-2019-13118 (#1728542)


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Dan Horák <dan[at]danny.cz> - 2.2.0-10
changelog:
  - build with libzfcphbaapi as standalone library to avoid dependency on obsolete libhbaapi (#1922413)


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "s390x-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j16  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-3
changelog:
  - fix handling of zero-length messages
  - minimize default configuration
  - remove obsolete build requirement


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Frank Crawford <frank@crawford.emu.id.au> - 7.5.4-2
changelog:
  - Add requires for perl-diagnostics (#1893671) and perl-lib (#1893503)
  - Add other requires as nothing is now automatically supplied


author: Brian C. Lane <bcl@redhat.com> 34.9.15-1
changelog:
  - tito: Add the LoraxRHELTagger from rhel8-branch (bcl)
    Related: rhbz#2070910
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2070910


author: Brian C. Lane <bcl@redhat.com> 34.9.16-1
changelog:
  - Makefile: Add local-srpm target to create a .src.rpm from HEAD (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix s390x support (bcl)
    Related: rhbz#2088631
  - mkksiso: Remove use of os.path.join (bcl)
    Related: rhbz#2088631
  - Makefile: Add mkksiso to coverage report (bcl)
    Related: rhbz#2088631
  - setup.py: Install mkksiso to /usr/bin (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix grub2 editing error (bcl)
    Related: rhbz#2088631
  - mkksiso: Rewrite to use xorriso features (bcl)
    Resolves: rhbz#2088631


author: Brian C. Lane <bcl@redhat.com> 34.9.17-1
changelog:
  - minimal.ks: Add include for architecture specific packages (bcl)
    Related: rhbz#2051548
  - livemedia.ks: Add include for architecture specific packages (bcl)
    Resolves: rhbz#2051548
  - tests: Add tests for mkksiso (bcl)
    Related: rhbz#2037015
  - mkksiso: Add kernel cmdline customization support (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Move kickstart to --ks KICKSTART (bcl)
    Related: rhbz#2037015
  - mkksiso: Add helper functions for kernel cmdline modifications (bcl)
    Related: rhbz#2037015
  - lorax.spec: Fix changelog order (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.18-1
changelog:
  - mkksiso: Set u+rw permission on extracted files and directories (bcl)
    Related: rhbz#2088631
  - lorax.spec: Fix changelog (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.19-1
changelog:
  - mkksiso: Optionally support 3 arguments or --ks (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Add -U to xorriso on ppc64le (bcl)
    Resolves: rhbz#2109665
  - mkksiso: Fix passing -iso-level to xorriso (bcl)
    Related: rhbz#2109665


author: Brian C. Lane <bcl@redhat.com> 34.9.20-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042057
  - templates: Update path to license files (bcl)
    Related: rhbz#2042057
  - templates: Update boot timeout to 5s (bcl)
    Related: rhbz#2042057


author: Brian C. Lane <bcl@redhat.com> 34.9.23-1
changelog:
  - rsyslog.conf: Set WorkDirectory to /var/lib/rsyslog (bcl)
    Resolves: rhbz#2158731
  - lorax.spec: fix changelog entry for 2132511 (bcl)
    Related: rhbz#2132511


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> - 9.0-29
changelog:
  - Drop ia32 uefi package installation (bcl)
    Resolves: rhbz#2038397
  - Enable sftp when using inst.sshd (bcl)
    Resolves: rhbz#2035049


author: Brian C. Lane <bcl@redhat.com> - 9.0-30
changelog:
  - Add .discinfo on all arches (bcl)
    Resolves: rhbz#2030008
  - Add inst.rngd cmdline option (bcl)
    Resolves: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-31
changelog:
  - Do not install rng-tools (bcl)
    Resolves: rhbz#2028720
  - Revert "Add inst.rngd cmdline option" (bcl)
    Related: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-35
changelog:
  - Makefile: Making it easier to create releases (bcl)
    Related: rhbz#2071074
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2071074


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Brian C. Lane <bcl@redhat.com> - 9.6-1
changelog:
  - Bump release version to 9.6 (bcl)
    Related: RHEL-69011
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-69011


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Tom Callaway <spot@fedoraproject.org> - 33.3.1-17
changelog:
  - hack this ancient beastie to work with lua 5.4
  - maintainer, please update this to the current upstream release at your earliest convenience


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Christopher Tubbs <ctubbsii@fedoraproject.org> - 1:3.6.3-6
changelog:
  - Remove unneeded commons-logging from runtime class path (rhbz#1883751)
  - Also remove redundant commons-codec


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.2
changelog:
  - Set version to 104.0.2
  - BZ#2084608 - Fix mismatched allocation function
  - BZ#2084613 - qga-win: race condition in build


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.1
changelog:
  - Set version to 105.0.1
  - Remove redundant package
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.2
changelog:
  - Set version to 105.0.2
  - Fix wrong requires
  - Fix missing patch0002
  - Remove extra Summary
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.3
changelog:
  - Set version to 105.0.3
  - BZ#2090250 - mingw-qemu-ga-win: Add Provides: bundled() to rpm packages [rhel-9]


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Jakub Kadlcik <frostyx@email.cz> 0.5-1
changelog:
  - Release for epel8 as well (frostyx@email.cz)
  - Require createrepo_c for the createrepo_mod package (frostyx@email.cz)
  - modulemd-merge: improve README.md file (frostyx@email.cz)
  - repo2module: improve README.md file (frostyx@email.cz)
  - dir2module: improve README.md file (frostyx@email.cz)
  - Improve README.md file (frostyx@email.cz)
  - createrepo_mod: improve README.md file (frostyx@email.cz)
  - Loosen the python3-libmodulemd dependency to just libmodulemd
    (frostyx@email.cz)
  - createrepo_mod: use just createrepo_c if it has built-in module support
    (frostyx@email.cz)
  - Explicitly depend on python3-setuptools (frostyx@email.cz)
  - createrepo_mod: dump modules.yaml into the correct directory
    (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6-1
changelog:
  - Generate manpages for all tools in this repository 
  - modulemd-generate-macros: add a tool for generating module-build-macros
  - modulemd_tools: add the first pieces of a python library (for internal usage only)


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com>) - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Gris Ge <fge@redhat.com> - 2.2.27-1
changelog:
  - N/A

   - Support TCP congestion window(cwnd) in route. (59f99632)
   - Support query interface driver. (67817c23)
   - New API to generate changed state. (fe5327a2)

   - Include driver information for `persist-nic-names` subcommand. (1129e46b)
   - nm: Protect global DNS config in checkpoint. (881373ba)
   - route rule: Append rule instead of overriding when iface defined. (88d3d3ef)
  - Resolves RHEL-19409


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.36-1
changelog:
  - Upgrade to 2.2.36
  - Support route source. RHEL-56258
  - Fix setting empty MPTCP flags. RHEL-38607
  - Fix gc mode on blackhole route. RHEL-56727
  - Support ipsec require-id-on-certificate. RHEL-50696
  - Reselect iface DNS if desired. RHEL-56557


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
  - Resolves: rhbz#2153714
  - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
  - Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2159389
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.8.1-1
changelog:
  - Update node and nghttp
  - Add fips patch
  - Fixes CVE-2023-44487 (nghttp)
  - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes CVE-2024-25629 (c-ares)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.0-1
changelog:
  - Update to v20.5.0
  - Remove dtrace support
  - bcond corepack, so we don't provide it by default
  - Decrease debuginfo verbosity for all arches
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.1-1
changelog:
  - Rebase to new security release
  - Address CVE-2023-32002, CVE-2023-32004, CVE-2023-32558 (high)
  - Address CVE-2023-32006, CVE-2023-32559 (medium)
  - Address CVE-2023-32005, CVE-2023-32003 (low)
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Jan Staněk <jstanek@redhat.com> - 2.0.3-6
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jerry James <loganjerry@gmail.com> - 8.0.1-1
changelog:
  - Version 8.0.1
  - Add 0002-Catch-CompileException-in-test.patch to fix compilation of a test
  - Make generate-tarball.sh actually compress the tarball


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-30
changelog:
  - Some non-terminating processes were listening on ports.
    Resolves: rhbz#2177768
  - On sshd startup, we check whether signing using the SHA1 for signing is
    available and don't use it when it isn't.
  - On ssh private key conversion we explicitly use SHA2 for testing RSA keys.
  - In sshd, when SHA1 signatures are unavailable, we fallback (fall forward :) )
    to SHA2 on host keys proof confirmation.
  - On a client side we permit SHA2-based proofs from server when requested SHA1
    proof (or didn't specify the hash algorithm that implies SHA1 on the client
    side). It is aligned with already present exception for RSA certificates.
  - We fallback to SHA2 if SHA1 signatures is not available on the client side
    (file sshconnect2.c).
  - We skip dss-related tests (they don't work without SHA1).
    Resolves: rhbz#2070163
  - FIPS compliance efforts for dh, ecdh and signing
    Resolves: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-31
changelog:
  - Fix minor issues with openssh-8.7p1-evp-fips-compl-dh.patch:
  - Check return values
  - Use EVP API to get the size of DH
  - Add some log debug lines
  - Related: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-19
changelog:
  - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode
    Resolves: rhbz#2169757


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-20
changelog:
  - Fix possible DoS translating ASN.1 object identifiers
    Resolves: CVE-2023-2650
  - Release the DRBG in global default libctx early
    Resolves: rhbz#2211340


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Benedikt Bongartz <bongartz@redhat.com> - 0.95.0
changelog:
  - add observability user that is part of the systemd-journal group
  - add opentelemetry collector config folder (`/etc/opentelemetry-collector/configs`)
  - add opentelemetry collector default config
  - add microshift manifests


author: Felix Kolwa <fkolwa@redhat.com> - 0.102.1-4
changelog:
  - Fix SELinux policy resource names
  - Use sources for SELinux resources in spec file
  - Bump revision


author: Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
changelog:
  - Version bump to 0.107.0
  - Reset release to 1
  - Update addresses the following CVEs:
  - CVE-2024-34155
  - CVE-2024-34156
  - CVE-2024-42368


author: Matej Tyc <matyc@redhat.com> - 2.0.0-5
changelog:
  - Fix handling of content archives
    Resolves: rhbz#1996129
  - Fix handling of content fingerprint
    Resolves: rhbz#1993065
  - Fix crash when a previously selected hardening has been cancelled
    Resolves: rhbz#2014108
  - Pull latest translations


author: Matej Tyc <matyc@redhat.com> - 2.0.0-8
changelog:
  - Introduce unified help support
    Resolves: rhbz#2043512
  - Update translations
    Resolves: rhbz#2017374


author: Matej Tyc <matyc@redhat.com> - 2.0.0-9
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1999587
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2042334


author: Matej Tyc <matyc@redhat.com> - 2.0.0-12
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2065751


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210809-1
changelog:
  - Update for new release (v20210809) [bz#1970881]
  - Resolves: bz#1970881
    ([RHEL-9] virt-install --location fails with Could not find an installable distribution at URL '/var/lib/libvirt/images/boot.iso')


author: Victor Toso <victortoso@redhat.com> - 20221130-1
changelog:
  - Update for new release (v20221130)
    Resolves: rhbz#2135751
  - Add rhel-8.8 and rhel-9.2 prereleases
    Related: rhbz#2135751


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Alex Macdonald <almacdon@redhat.com> - 1.2.2-3
changelog:
  - Remove osgi metadata patch0 that previously added a manifest
  - Include patch (courtesy of jkang) to package as a bundle instead of a jar
  - Update maven-compiler-plugin source/target version for builds in f33


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-2
changelog:
  - udp: Actually use host resolver to forward DNS queries (rhbz#2177075)
  - conf: Split add_dns{4,6}() out of get_dns() (rhbz#2177075)
  - conf, udp: Allow any loopback address to be used as resolver (rhbz#2177075)
  - tcp, tcp_splice: Get rid of false positive CWE-394 Coverity warning from fls() (rhbz#2177084)
  - tcp: Avoid false (but convoluted) positive Coverity CWE-476 warning (rhbz#2177084)
  - tcp: Avoid (theoretical) resource leak (CWE-772) Coverity warning (rhbz#2177084)
  - Fix definitions of SOCKET_MAX, TCP_MAX_CONNS (rhbz#2177084)
  - doc/demo: Fix and suppress ShellCheck warnings (rhbz#2177084)
  - contrib/selinux: Drop duplicate init_daemon_domain() rule (rhbz#2176813)
  - contrib/selinux: Let passt write to stdout and stderr when it starts (rhbz#2176813)
  - contrib/selinux: Allow binding and connecting to all UDP and TCP ports (rhbz#2176813)
  - contrib/selinux: Let interface users set paths for log, PID, socket files (rhbz#2176813)
  - contrib/selinux: Drop "example" from headers: this is the actual policy (rhbz#2176813)
  - contrib/selinux: Drop unused passt_read_data() interface (rhbz#2176813)
  - contrib/selinux: Split interfaces into smaller bits (rhbz#2176813)
  - fedora: Install SELinux interface files to shared include directory (rhbz#2176813)
  - tcp, udp, util: Pass socket creation errors all the way up (rhbz#2177080)
  - tcp, udp: Fix partial success return codes in {tcp,udp}_sock_init() (rhbz#2177080)
  - conf: Terminate on EMFILE or ENFILE on sockets for port mapping (rhbz#2177080)
  - tcp: Clamp MSS value when queueing data to tap, also for pasta (rhbz#2177083)
  - Fix up SELinux labels on install/uninstall, require matching -selinux package (rhbz#2176813)
  - Resolves: rhbz#2177075 rhbz#2177084 rhbz#2177080 rhbz#2177083 rhbz#2176813


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-3
changelog:
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-4
changelog:
  - Drop (pointless) patches 20, 21, 22, actually apply changes to the spec file!
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-2
changelog:
  - Drop user_namespace create allow rule, incompatible with current el9 kernel
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-3
changelog:
  - Explicit restorecon in scriptlet as rpm(8) mix up contexts with hard links
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-4
changelog:
  - Switch to copies instead of links for pasta: previous workaround unreliable
  - Resolves: RHELPLAN-155811


author: Nathan Scott <nathans@redhat.com> - 6.1.1-1
changelog:
  - Improve pmlogcheck performance with compressed archives (RHEL-3930)
  - Fix pcp-ss(1) utility handling of duplicate sources (RHEL-7498)
  - Fine-tune PCP python wrapper path resolution (RHEL-7509)
  - Rebase to latest stable version of PCP (RHEL-2317)


author: Nathan Scott <nathans@redhat.com> - 6.1.1-2
changelog:
  - Fix pcp-ss(1) default handling of listen state (RHEL-17335)
  - Added pcp package dependency on diffutils for diffstat(1)


author: Nathan Scott <nathans@redhat.com> - 6.2.1-1
changelog:
  - Rebase to latest stable version of PCP (RHEL-30198)
  - Disable pmproxy(1) RESP proxying by default (RHEL-30720)
  - Add pmcheck(1) utility to check installation (RHEL-25497)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-1
changelog:
  - Rebase to latest stable version of PCP (RHEL-30198)
  - Fix pcp2openmetrics on s390x reading from an archive (RHEL-32407)
  - Fix pcp2openmetrics -F output file option (RHEL-32674)
  - Fix pmlogdump version reporting (RHEL-32381)
  - Add timestamps for pcp2openmetrics archive option (RHEL-32369)
  - Add new metrics to monitor VMware balloon usage (RHEL-32198)


author: Lauren Chilton <lchilton@redhat.com> - 6.2.2-4
changelog:
  - Removed excess headers for pcp2openmetrics tool (RHEL-39159)
  - Fix pcp2openmetrics '-s' option (RHEL-39132)
  - Fix pcp2openmetrics timestamps in archive mode (RHEL-32983)
  - Fix pcp2openmetrics output to adhere to prometheus parser (RHEL-39293)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-5
changelog:
  - Add rpm dependency on package providing ps(1) tool (RHEL-39491)
  - Update Java bytecode in pcp-testasuite package (RHEL-40718)


author: Nathan Scott <nathans@redhat.com> - 6.3.1-1
changelog:
  - New pcp-xsos utility for rapid system summaries (RHEL-30590)
  - Fix Upgrade scripts to not rewrite pmcd.conf (RHEL-40631)
  - Add new Hyper-V balloon usage metrics (RHEL-45715)
  - Auto-load pmdaproc in local context (RHEL-50941)
  - Fix a benign potential libpcp buffer overflow (RHEL-58914)
  - Fix pcp-zeroconf pmie.config write permission (RHEL-59366)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Add proc PMDA access control for IO metrics (RHEL-60891)
  - Fix pmdastatsd segfaults within pmdaRehash (RHEL-57717)
  - Multiple hugepage size NUMA metric support (RHEL-45876)
  - Improve pcp-xsos command line diagnostics (RHEL-61597, RHEL-61598)
  - Add pmlogger_farm_check service selinux policy (RHEL-61885)
  - Fix v3 archive replay on big endian machines (RHEL-61501)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-1
changelog:
  - Added conditional lockdown policy access by pmdakvm (BZ 1940971)
  - Added spec file dependency on cyrus-sasl-scram (BZ 1942879)
  - Update to latest PCP sources (BZ 1957575)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-2
changelog:
  - Improve pmchart duplicate archive diagnostics (BZ 1615718)
  - Save pmchart users prefered archive locations (BZ 1615742)
  - Remove libvarlink dependency from podman PMDA (BZ 1956608)
  - Correct pcp-testsuite file permissions (BZ 1922040)
  - Resolve pcp-testsuite linkage problems (BZ 1950263)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-3
changelog:
  - Fix pmproxy parallel TLS requests bug (BZ 1947989)
  - Backport pmrep archive creation fix (BZ 1974266)
  - Related: rhbz#1957575


author: Mark Goodwin <mgoodwin@redhat.com> - 5.3.1-4
changelog:
  - Improve pmproxy and libpcp_web scalability (BZ 1975069)
  - Provide a pcp-ss(1) tool in pcp-system-tools (BZ 1879350)


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.014-14
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions of installed files


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.17029-1
changelog:
  - Update to 0.17029
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.002002-1
changelog:
  - Update to 1.002002
    - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps
      like /foo/i but not /foo/; having trailing flags is now optional! (GH#6)
    - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set;
      this is because bareword '-default' was being interpreted as the Perl
      'default' keyword (GH#5)
  - Unbundle newly-bundled test modules


author: Paul Howarth <paul@city-fan.org> - 1.16-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.72-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Socket::Utils CERT_asHash and CERT_create now support subject and
      issuer with multiple same parts (like multiple OU); in this case an array
      ref instead of a scalar is used as hash value (GH#95)


author: Michal Josef Špaček <mspacek@redhat.com> - 2.070-4
changelog:
  - Remove failing tests in openssl 3.0.0-alpha16. Related: rhbz#1968046
    - Provisional for mass rebuild of openssl3.


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.03-1
changelog:
  - Update to 4.03
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Petr Pisar <ppisar@redhat.com> - 1:0.68-3
changelog:
  - Fix resolving localhost on loopback-only machines
    (https://github.com/perl-ldap/perl-ldap/pull/60)


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix failing installation in parallel make (GH#38)
    - Infrastructure improvements and tooling updates, lots of author tests with
      corresponding fixes added
    - Added slide and slideatatime functions
    - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043,
      CPAN RT#132940)
    - Bump List::MoreUtils::XS requirement to 0.430
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.86-1
changelog:
  - Update to 0.86
    - Update PAUSE and ANDK keys to 2020
    - Update documentation pertaining to SHA1
    - Fix compatibility with Crypt::OpenPGP
  - Use mktemp to create temporary GPG directory


author: Paul Howarth <paul@city-fan.org> - 0.21-26
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 1.106-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license macro


author: Paul Howarth <paul@city-fan.org> - 1:0.38-458
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Breaking Change: Set $YAML::LoadBlessed default to false to make it more
      secure


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Filip Janus <fjanus@redhat.com> - 1.7.0-1
changelog:
  - Initial import for postgresql 15 module
  - Update to 1.7.0
  - Support postgresql 15
  - Related: #2128410


author: Remi Collet <rcollet@redhat.com> - 8.0.10-1
changelog:
  - rebase to 8.0.10 #1992513
  - compatibility with OpenSSL 3.0 #1992492
  - snmp:  add sha256 / sha512 security protocol #1936635
  - phar: implement openssl_256 and openssl_512 for phar signatures
  - phar: use sha256 signature by default


author: Remi Collet <rcollet@redhat.com> - 8.0.20-1
changelog:
  - rebase to 8.0.20 #2095752
  - clean unneeded dependency on useradd command #2095447
  - add upstream patch to initialize pcre before mbstring
  - retrieve tzdata version from /usr/share/zoneinfo/tzdata.zi


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.30-1
changelog:
  - Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
  - Update to JWS 5.3.0 distribution
  - Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-1
changelog:
  - Update to JWS 5.5, and drop jakarta-saaj dependency
  - Updates to javapackages-local removed %add_maven_depmap which broke the build,
    so I removed most of the maven artifacts as they aren't very useful anyway
  - Cleaned up a few unnecessary patches


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-2
changelog:
  - Related: rhbz#1977948 Cleanup unused tomcat-juli.jar copy now that the maven artifacts have been removed


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-1
changelog:
  - stick with the v5.2-rhel branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Resolves: RHEL-60965


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-3
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175074
  - Resolves: #2179966
  - Resolves: #2187322
  - Resolves: #2187383
  - Resolves: #2203702
  - Resolves: #2207522


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-5
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175071
  - Resolves: #2179950
  - Resolves: #2187318
  - Resolves: #2187366
  - Resolves: #2203681
  - Resolves: #2207512


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-2
changelog:
  - gettext: handle unsupported languages properly (#2100378)
  - semodule: rename --rebuild-if-modules-changed to --refresh
  - python: Split "semanage import" into two transactions (#2063353)
  - selinux-autorelabel: Do not force reboot (#2093133)


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


author: Masahiro Matsuya <mmatsuya@redhat.com> - 15.5-1
changelog:
  - update to 15.5
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Jan Rybar <jrybar@redhat.com> - 3.6-16
changelog:
  - output is not redirected when ps_mem is killed
  - cmdline unwanted blank spaces fixed
  - Resolves: rhbz#2033997
  - Resolves: rhbz#2049743


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Brian C. Lane <bcl@redhat.com> - 3.32.1-1
changelog:
  - Use .z version for new builds, start with 3.32.0 (bcl)
    Related: rhbz#1968762
  - tests: Use pykickstart/commands relative to the import (bcl)
    Related: rhbz#1968762


author: Brian C. Lane <bcl@redhat.com> - 3.32.2-1
changelog:
  - Add RHEL 9 handler (mkolman)
    Resolves: rhbz#1966730
  - Add RHEL 9 version for commands that had a RHEL version in the past (mkolman)
    Related: rhbz#1966730
  - Add RHEL 9 version for BTRFS related commands (mkolman)
    Related: rhbz#1966730


author: Brian C. Lane <bcl@redhat.com> - 3.32.4-1
changelog:
  - github: Add rhel9-branch to the list of branches (bcl)
    Related: rhbz#2054906
  - Fix validation of packages arguments (bcl)
    Resolves: rhbz#2054906


author: Brian C. Lane <bcl@redhat.com> - 3.32.5-1
changelog:
  - Tools should default to RHEL9 not DEVEL (bcl)
    Resolves: rhbz#2060779
  - Default to RHEL9 for docs and ksshell test. (bcl)
    Related: rhbz#2060779
  - Set default version to RHEL9 (bcl)
    Related: rhbz#2060779
  - Remove the --ignorebroken option from RHEL handlers (vponcova)
    Related: rhbz#2060779
  - Add the isRHEL function (vponcova)
    Related: rhbz#2060779


author: Brian C. Lane <bcl@redhat.com> - 3.32.6-1
changelog:
  - tests: Update ksvalidator tests to allow new wording for help output (bcl)
    Related: rhbz#2083269
  - rootpw: Use RHEL9 instead of F37 for new rootpw feature (bcl)
    Related: rhbz#2083269
  - rootpw: Add an --allow-ssh argument (bcl)
    Resolves: rhbz#2083269
  - github: Fix workflow to only send coverage for python 3.9 (bcl)
    Related: rhbz#2083269


author: Brian C. Lane <bcl@redhat.com> - 3.32.10-1
changelog:
  - Add DNS handling options to the network command (vslavik)
    Resolves: rhbz#2172531
  - whitelist_externals has changed to allowlist_externals (bcl)
    Related: rhbz#2172531


author: Brian C. Lane <bcl@redhat.com> - 3.32.11-1
changelog:
  - tox: Only run unit tests for python 3.6 (bcl)
    Related: RHEL-17662
  - Add conflict test between ostree sources (#2125655) (jkonecny)
    Related: RHEL-17662
  - Fix missing seen check for output generation (#2125655) (jkonecny)
    Related: RHEL-17662
  - Add new ostreecontainer command (#2125655) (jkonecny)
    Resolves: RHEL-17662
  - Check the conflicting commands automatically (vponcova)
    Related: RHEL-17662
  - Fix tests for conflicting commands (vponcova)
    Related: RHEL-17662
  - Add conflicting commands support (bcl)
    Related: RHEL-17662


author: Brian C. Lane <bcl@redhat.com> - 3.32-1
changelog:
  - Conditionally BuildRequire coverage and sphinx for runtests (bcl)
    Resolves: rhbz#1916735
  - Change the lilo command removal to use RemovedCommand (vslavik)
  - Change the lilocheck command removal to use RemovedCommand (vslavik)
  - Fix test for the removed "interactive" command (vslavik)
  - Change the langsupport command removal to use RemovedCommand (vslavik)
  - Change the monitor command removal to use RemovedCommand (vslavik)
  - Change the mouse command removal to use RemovedCommand (vslavik)
  - Change the upgrade command removal to use RemovedCommand (vslavik)
  - Fix ksverdiff detection of removed commands (vslavik)
  - Check warnings of the deprecated kickstart commands (vponcova)
  - Remove the install command (vslavik)
  - Remove the deviceprobe command (vslavik)
  - Remove the device command (vslavik)
  - Remove the dmraid command (vslavik)
  - Remove the multipath command (vslavik)
  - Fix deprecation test for removed commands (vslavik)
  - Switch interactive removal to use RemovedCommand (bcl)
  - Add RemovedCommand for removing commands and documenting them (bcl)
  - Remove support for the updates command without an URL (vponcova)
  - Document how to deprecate commands and options (bcl)
  - Remove the ignoredisk --interactive option (vslavik)
  - Remove the partition --active option (vslavik)
  - Deprecate the %traceback section (vslavik)
  - Add missing .coveragerc file (bcl)
  - Switch to using GitHub Actions instead of Travis CI (bcl)
  - Add support for running via tox (bcl)
  - Deprecate the method command (vslavik)
  - Remove the bootloader option --upgrade (vslavik)


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-44
changelog:
  - Set $RPM_BUILD_ROOT in %{python3_...} macros
    to allow selecting alternate sysconfig install scheme based on that variable


author: Karolina Surma <ksurma@redhat.com> - 3.9-45
changelog:
  - Introduce -f (read from file) option to %py{3}_check_import
  - Introduce -t (filter top-level modules) option to %py{3}_check_import
  - Introduce -e (exclude module globs) option to %py{3}_check_import


author: Karolina Surma <ksurma@redhat.com> - 3.9-46
changelog:
  - Fix multiline arguments processing for %py_check_import
  - Fix %py_shebang_flags handling within %py_check_import
  - Process .pth files in buildroot's sitedirs in %py_check_import
  - Move import_all_modules.py from python-srpm-macros to python-rpm-macros


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-47
changelog:
  - Set %__python3 value according to %python3_pkgversion
    I.e. when %python3_pkgversion is 3.12, %__python3 is /usr/bin/python3.12


author: Tomas Orsava <torsava@redhat.com> - 3.9-49
changelog:
  - Add lua helper functions to make it possible to automatically generate
    Obsoletes tags
  - Modify the %py_provides macro to also generate Obsoletes tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Tomas Orsava <torsava@redhat.com> - 3.9-51
changelog:
  - Add Obsoletes tags with the python39- prefix for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.3-12
changelog:
  - Subpackage python2-appdirs has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.0-18
changelog:
  - Subpackage python2-augeas has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Pino Toscano <ptoscano@redhat.com> - 0.5.0-20
changelog:
  - Backport upstream commit d93e1563add8c40450556b7d74520439ee792bd9 to fix
    the discovery of location in the test
  - Execute the tests at build time
  - Add a simple gating test to execute the test script, and make it gating for
    the python-augeas source


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Miro Hrončok <mhroncok@redhat.com> - 5.0.6-19
changelog:
  - Subpackage python2-configobj has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Vendula Poncova <vponcova@redhat.com> - 0.4-1
changelog:
  - Replace the error register with the error mapper (vponcova)
  - Propagate additional arguments for the client handler factory (vponcova)
  - Propagate additional arguments in the class AddressedMessageBus (vponcova)
  - Generate the documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.0-1
changelog:
  - Fix the documentation (vponcova)
  - Fix minor typos (yurchor)
  - Enable Codecov (vponcova)
  - Test the documentation build (vponcova)
  - Extend the documentation (vponcova)
  - Add configuration files for Read the Docs and Conda (vponcova)
  - Fix all warnings from the generated documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.1-1
changelog:
  - Include tests and examples in the source distribution (vponcova)
  - Fix the pylint warning signature-differs (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.2-1
changelog:
  - Replace ABC with ABCMeta (vponcova)
  - Fix typing tests (vponcova)
  - Run tests on the latest CentOS (vponcova)
  - Install sphinx from PyPI (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.3-1
changelog:
  - Document differences between dasbus and pydbus (vponcova)
  - Improve the support for interface proxies in the service identifier (vponcova)
  - Improve the support for interface proxies in the message bus (vponcova)
  - Test the interface proxies (vponcova)
  - Make the message bus of a service identifier accessible (vponcova)
  - Fix the testing environment for Fedora Rawhide (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.4-1
changelog:
  - Handle all errors of the DBus call (vponcova)
  - Fix tests for handling DBus errors on the server side (vponcova)
  - Run packit smoke tests for all Fedora (jkonecny)
  - Fix packit archive creation (jkonecny)
  - Add possibility to change setup.py arguments (jkonecny)


author: Bryan Gurney <bgurney@redhat.com> - 0.8-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus and python3-into-dbus-python
  - Resolves: rhbz#1986608


author: Bryan Gurney <bgurney@redhat.com> - 0.04-4
changelog:
  - Remove check test
  - Remove Requires and BuildRequires for python3-pyparsing
  - Resolves: rhbz#1986574


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
changelog:
  - Fix Python configuration for ELN/RHEL 9
  - Rework bconds for Python now that there are no Fedoras left that should
    use Python2


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-6
changelog:
  - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157)
  - system-upgrade: Add --poweroff option to reboot subcommand (RhBug:2157844)
  - Doc update for reposync (RhBug:2132383,2182004)
  - reposync: Implement --safe-write-path option (RhBug:1898089,2203766)
  - Enable the leaves and show-leaves DNF plugins (RhBug:2134638)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-7
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2207946)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-12
changelog:
  - Fix incorrect spanish translation file (RHEL-6394)
  - Fix for strange issue with binary garbage in smaps files (RHEL-6420, RhBug:2231923)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-14
changelog:
  - needs-restarting prefers to obtain a boot time from systemd to deal with
    RTCs running in local time (RHEL-14900)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-16
changelog:
  - Revert needs-restarting prefers to obtain a boot time from systemd to deal
    with RTCs running in local time (RHEL-39775)


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Bryan Gurney <bgurney@redhat.com> - 0.08-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus-signature-pyparsing and python3-dbus
  - Resolves: rhbz#1986609


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Miro Hrončok <mhroncok@redhat.com> - 1.10-18
changelog:
  - Subpackage python2-jsonpointer has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Bryan Gurney <bgurney@redhat.com> - 0.15-5
changelog:
  - Remove check test
  - Remove BuildRequires and Requires for python3-justbases
  - Resolves: rhbz#1986913


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-python-8.5.0 (rhbz#2060316)
  - The rebase also fixes the following bugs:
      rhbz#2092752


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Petr Viktorin <pviktori@redhat.com> - 1.1.4-1
changelog:
  - Update to version 1.1.4
  - Avoids test warnings on Python 3.10
    Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1907474


author: Martin Kolman <mkolman@redhat.com> - 0.48-1
changelog:
  - Merge pull request #23 from poncovka/master-decode_bytes (mkolman)
  - Handle bytes and strings from RPM (#1764642) (vponcova)


author: Martin Kolman <mkolman@redhat.com> - 0.49-1
changelog:
  - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman)
  - Fix make archive command after pot file removal (jkonecny)
  - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny)
  - Add Readme with description and translation badge (jkonecny)
  - Add pot file to the git ignore (jkonecny)
  - Pause release when making bumpver to check and solve translations (jkonecny)
  - Remove unused PREFIX from Makefile (jkonecny)
  - Remove Zanata (jkonecny)
  - Push translations to our translation repository (jkonecny)
  - Download translations from Weblate (jkonecny)
  - Remove pot file (jkonecny)
  - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman)
  - Fix Zanata client detection in Makefile (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.50-1
changelog:
  - Merge pull request #33 from mzidek-gh/master (mkolman)
  - dump: Use exception's type and value when calculating hash (mzidek)


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Tom Stellard <tstellar@redhat.com> - 4.6.8-3
changelog:
  - Use make_build macro instead of just make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Limit BuildRequires to necessary minimum in Red Hat Enterprise Linux
  - Skip pytest in Red Hat Enterprise Linux
  - Do not build -doc subpackage for Red Hat Enterprise Linux


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.0-1
changelog:
  - Resolves: rhbz#1922352 - python-oauthlib requires python-mock
  - Update to upstream 3.1.0
  - Gets rid of obsolete python-nose dependency
  - Nuke the python2/python3 conditionals, let's only support python3


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.0-2
changelog:
  - Remove the python3-oauthlib+signedtoken package
  - When building, skip tests that require jwt
  - Resolves: rhbz#1966407 - Drop python-jwt dependency from python-oauthlib


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.1-1
changelog:
  - Resolves: rhbz#1935433 - python-oauthlib implements and/or uses the
                             deprecated SHA1 algorithm by default


author: TomasHalman <thalman@redhat.com> - 3.1.1-3
changelog:
  - Remove RSA support
  - Remove build dependency on blinker
    Resolves: rhbz#1984046 - python-oauthlib depends on jwt for RSA


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-6
changelog:
  - Subpackage python2-ply has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:4.8.0.post1-1
changelog:
  - update to https://github.com/containers/podman-py/releases/tag/v4.8.0.post1
  - Related: Jira:RHEL-2112


author: Miro Hrončok <mhroncok@redhat.com> - 0.7.2-21
changelog:
  - Subpackage python2-prettytable has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Dominik Mierzejewski <rpm@greysector.net> - 0.26-1
changelog:
  - update to 0.26 (#1780153)
  - make main package archful to run tests on all arches
    (pythonN-pyelftools subpackages are still noarch)
  - run readelf tests on x86_64 only for now
  - rename binaries to conform to Python packaging guidelines
  - enable python3 subpackage for EPEL7
  - declare bundled old construct module instead of needlessly requiring it


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Miro Hrončok <mhroncok@redhat.com> - 3.4-6
changelog:
  - Subpackage python2-pyserial has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Charalampos Stratakis <cstratak@redhat.com> - 6.2.2-2
changelog:
  - Disable tests and documentation generation on RHEL9 to avoid pulling in dependencies
  - Drop redundant build dependency on wcwidth (unused since 6.0.0rc1)


author: Tony Asleson <tasleson@redhat.com> - 0.14.6-6
changelog:
  - Fix build failure
    Bad source: /builddir/build/SOURCES/pywbem-0.14.6.tar.gz: No such file or directory


author: Miro Hrončok <mhroncok@redhat.com> - 0.26-8
changelog:
  - Subpackage python2-pyxdg has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 6.1-10
changelog:
  - Resolves: #1935839 Remove python-imaging build requirements for RHEL
  - Run unit tests during build


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.0-11
changelog:
  - Don't use SIGNATURE_RSA
  - Related: #1935433 - python-oauthlib implements and/or uses the deprecated
                        SHA1 algorithm by default


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Miro Hrončok <mhroncok@redhat.com> - 12-1
changelog:
  - Disable the dist generators for Python 2
  - https://fedoraproject.org/wiki/Changes/Disable_Python_2_Dist_RPM_Generators_and_Freeze_Python_2_Macros


author: Tomas Orsava <torsava@redhat.com> - 12-2
changelog:
  - scripts/pythondistdeps: Switch from using pkg_resources to importlib.metadata
    for reading the egg/dist-info metadata
  - The script no longer requires setuptools but instead requires packaging


author: Tomas Orsava <torsava@redhat.com> - 12-4
changelog:
  - scripts/pythondistdeps: Treat extras names case-insensitively and always
    output them in lower case (#1936875)


author: Miro Hrončok <mhroncok@redhat.com> - 12-5.1
changelog:
  - Do not generate setuptools requirement for console_scripts on Python 3.10+
  - See https://fedoraproject.org/wiki/Changes/Reduce_dependencies_on_python3-setuptools


author: Miro Hrončok <mhroncok@redhat.com> - 12-6
changelog:
  - Get rid of distutils deprecation warning (by not using it)
  - The distutils module is deprecated in Python 3.10+
  - https://www.python.org/dev/peps/pep-0632/


author: Tomas Orsava <torsava@redhat.com> - 12-8
changelog:
  - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes
    tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Andrea Claudi <aclaudi@redhat.com> - [2.4.4-4.el9]
changelog:
  - Don't build scapy-doc package on rhel (Andrea Claudi) [1973720]
  - Enable gating test on RHEL9 (Jianwen Ji) [1974642]


author: Andrea Claudi <aclaudi@redhat.com> - 2.5.0-1.el9
changelog:
  - Don't package scapy tests (Andrea Claudi)
  - Fix scapy compliance with pep-0440 (Andrea Claudi) [2162667]
  - New version 2.5.0 (Andrea Claudi) [RHEL-657]


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.8-1
changelog:
  - New version - 1.8 (Jiri Konecny)
  - Add missing make command to spec file (Jiri Konecny)
  - Don't translate the prompt keys (Vendula Poncova)
  - Enable daily build for Anaconda-devel COPR repository (Jiri Konecny)
  - Use Fedora container registry instead of Dockerhub (Jiri Konecny)
  - Migrate COPR daily COPR builds to Packit (Jiri Konecny)
  - Test build on Fedora ELN (Jiri Konecny)
  - Remove packit get-current-action (Jiri Konecny)
  - Run tests in GitHub workflow (Martin Pitt)
  - Fix raise-missing-from (W0707) pylint warnings (Martin Pitt)
  - Fix pylint to check test code correctly (Jiri Konecny)
  - Use script to run unit tests (Jiri Konecny)
  - Use relative imports in tests (Jiri Konecny)
  - Change directory structure of unit tests (Jiri Konecny)
  - Fix documentation of _process_screen method (Jiri Konecny)
  - Fix pylint issues (Jiri Konecny)
  - Use pylint instead of pocketlint (Jiri Konecny)
  - Add coverage support (Jiri Konecny)
  - Make link to exmples directory in Readme (Jiri Konecny)
  - Fix homepage of the project in setup.py (Jiri Konecny)
  - Fix classifiers in setup.py (Jiri Konecny)
  - Add pypi-upload to Makefile (Jiri Konecny)
  - Use correct variant of the field (Jiri Konecny)
  - Propose Fedora update only to Fedora in development (Jiri Konecny)
  - Add upstream tag template to packit for releasing (Jiri Konecny)
  - Packit will download archive from Source0 if needed (Jiri Konecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.8.3-1
changelog:
  - Fix bumpver Makefile target (Jiri Konecny)
  - Add tests for UIScreen wide disabling of concurrency check (Jiri Konecny)
    Related: rhbz#2134889
  - Abstract registering signal handler in the InputHandler constructor (Jiri Konecny)
    Related: rhbz#2134889
  - Allow to disable concurrency check for all UIScreen inputs (Jiri Konecny)
    Resolves: rhbz#2134889
  - Add Makefile target for local container tests (Jiri Konecny)
  - Use localization from rhel-9 weblate translation component (Jiri Konecny)
  - Remove changelog from the upstream spec file (Jiri Konecny)
  - Fix spec file archive link (Jiri Konecny)
  - Include also documentation to the tarball (Jiri Konecny)
  - Rename doc directory to docs (Jiri Konecny)
  - Add explanations of what is included in the MANIFEST.in file (Jiri Konecny)
  - Update packit config to reflect new tag naming (Jiri Konecny)
  - Change tag name to just version (Jiri Konecny)
  - Fix GitHub workflow checkout (Jiri Konecny)
  - Switch to packit new fedora-latest alias (Jiri Konecny)
  - Disable duplicate-code in pylint test (Jiri Konecny)
  - Remove duplicate of code between event loops (Jiri Konecny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


