# changelog

author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-560.el9]
changelog:
  - rhel-only: Fix up kfunc definitions in filter.c (Toke Høiland-Jørgensen) [RHEL-65787]
  - selftests/bpf: Test bpf_sock_destroy (Toke Høiland-Jørgensen) [RHEL-65787]
  - selftests/bpf: Add helper to get port using getsockname (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: Add bpf_sock_destroy kfunc (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: Avoid iter->offset making backward progress in bpf_iter_udp (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: iter_udp: Retry with a larger batch size without going back to the previous bucket (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: udp: Implement batching for sockets iterator (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: seq_file: Remove bpf_seq_afinfo from udp_iter_state (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: udp: Encapsulate logic to get udp table (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: seq_file: Helper function to match socket attributes (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: tcp: Avoid taking fast sock lock in iterator (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Access &udp_table via net. (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Set NULL to udp_seq_afinfo.udp_table. (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Set NULL to sk->sk_prot->h.udp_table. (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Clean up some functions. (Toke Høiland-Jørgensen) [RHEL-65787]
  - exfat: fix the infinite loop in exfat_readdir() (CKI Backport Bot) [RHEL-75663] {CVE-2024-57940}
  - exec: Fix ToCToU between perm check and set-uid/gid usage (CKI Backport Bot) [RHEL-55562] {CVE-2024-43882}
  - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (CKI Backport Bot) [RHEL-72355] {CVE-2024-53213}
  - net: xgbe: Convert tasklet API to new bottom half workqueue mechanism (Michal Schmidt) [RHEL-62004]
  - net: xgbe: remove extraneous #ifdef checks (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Avoid potential string truncation in name (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: propagate the correct speed and duplex status (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: handle the corner-case during tx completion (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: handle corner-case during sfp hotplug (Michal Schmidt) [RHEL-62004]
  - net: ethernet: Use device_get_match_data() (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - net: ethernet: amd: Convert to platform remove callback returning void (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: extend 10Mbps support to MAC version 21H (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix the false linkup in xgbe_phy_status (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix mismatched prototype (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: add support for rx-adaptation (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: add 2.5GbE support to 10G BaseT mode (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Replace MII_ADDR_C45 with XGBE_ADDR_C45 (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Separate C22 and C45 transactions (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Delay AN timeout during KR training (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Add support for 10 Mbps speed (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: add missed tasklet_kill (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Check only the minimum speed for active/passive cables (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Fix logic around active and passive cables (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: add the bit rate quirk for Molex cables (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix the SFP compliance codes check for DAC cables (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: enable PLL_CTL for fixed PHY modes only (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: use enums for mailbox cmd and sub_cmds (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Yellow carp devices do not need rrc (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix clang -Wformat warnings (Michal Schmidt) [RHEL-62004]
  - amd/xgbe: fix repeated words in comments (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: fix clang -Wformat warning (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: disable interrupts during pci removal (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: ensure to reset the tx_timer_active flag (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Disable the CDR workaround path for Yellow Carp Devices (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Alter the port speed bit range (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Add Support for Yellow Carp Ethernet device (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Toggle PLL settings during rate change (Michal Schmidt) [RHEL-62004]
  - net: convert users of bitmap_foo() to linkmode_foo() (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - ethernet: constify references to netdev->dev_addr in drivers (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - ethernet: Remove redundant 'flush_workqueue()' calls (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - ethernet: use eth_hw_addr_set() for dev->addr_len cases (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - signal: restore the override_rlimit logic (Radostin Stoyanov) [RHEL-68020] {CVE-2024-50271}
  - ucounts: Split rlimit and ucount values and max values (Radostin Stoyanov) [RHEL-68020] {CVE-2024-50271}
  - virtio_net: Add hash_key_length check (Jon Maloy) [RHEL-68253] {CVE-2024-53082}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-561.el9]
changelog:
  - net: sched: refine software bypass handling in tc_run (Xin Long) [RHEL-60271 RHEL-61181]
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi() (Jocelyn Falempe) [RHEL-53571]
  - drm: adv7511: Drop dsi single lane support (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Wait for migration job before unmapping pages (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Use non-interruptible wait when moving BO to system (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Correct the migration DMA map direction (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: use sjt mec fw on gfx943 for sriov (Jocelyn Falempe) [RHEL-53571]
  - drm/i915/dg1: Fix power gate sequence. (Jocelyn Falempe) [RHEL-53571]
  - drm/i915/cx0_phy: Fix C10 pll programming sequence (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Fix fault on fd close after unbind (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pf: Use correct function to check LMEM provisioning (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Revert some changes that break a mesa debug tool (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix backport of commit 73dae652dcac (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Move the coredump registration to the worker thread (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Take PM ref in delayed snapshot capture worker (Jocelyn Falempe) [RHEL-53571]
  - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (Jocelyn Falempe) [RHEL-53571]
  - udmabuf: also check for F_SEAL_FUTURE_WRITE (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/mmhub4.1: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/gfx12: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/nbio7.0: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/smu14.0.2: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/nbio7.7: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/nbio7.11: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: don't access invalid sched (Jocelyn Falempe) [RHEL-53571]
  - i915/guc: Accumulate active runtime on gt reset (Jocelyn Falempe) [RHEL-53571]
  - i915/guc: Ensure busyness counter increases motonically (Jocelyn Falempe) [RHEL-53571]
  - i915/guc: Reset engine utilization buffer before registration (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: synaptics-r63353: Fix regulator unbalance (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: st7701: Add prepare_prev_first flag to drm_panel (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: novatek-nt35950: fix return value check in nt35950_probe() (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference (Jocelyn Falempe) [RHEL-53571]
  - dma-buf: Fix __dma_buf_debugfs_list_del argument for !CONFIG_DEBUG_FS (Jocelyn Falempe) [RHEL-53571]
  - udmabuf: fix memory leak on last export_udmabuf() error path (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix amdgpu_coredump (Jocelyn Falempe) [RHEL-53571]
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Jocelyn Falempe) [RHEL-53571]
  - drm/amd: Update strapping for NBIO 2.5.0 (Jocelyn Falempe) [RHEL-53571]
  - drm/display: use ERR_PTR on DP tunnel manager creation fail (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/reg_sr: Remove register pool (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: fix the ERR_PTR() returned on failure to allocate tiny pt (Jocelyn Falempe) [RHEL-53571]
  - amdgpu/uvd: get ring reference from rq scheduler (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: hard-code MALL cacheline size for gfx11, gfx12 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: hard-code cacheline size for gfx11 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Dereference null return value (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix when the cleaner shader is emitted (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: Set SMU v13.0.7 default workload type (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix UVD contiguous CS mapping problem (Jocelyn Falempe) [RHEL-53571]
  - drm/i915: Fix NULL pointer dereference in capture_engine (Jocelyn Falempe) [RHEL-53571]
  - drm/i915/color: Stop using non-posted DSB writes for legacy LUT (Jocelyn Falempe) [RHEL-53571]
  - drm/i915: Fix memory leak by correcting cache object name in error handler (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: pause autosuspend when creating pdd (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Call invalidation_fence_fini for PT inval fences in error state (Jocelyn Falempe) [RHEL-53571]
  - drm/panic: remove spurious empty line to clean warning (Jocelyn Falempe) [RHEL-53571]
  - Revert "drm/amd/display: parse umc_info or vram_info based on ASIC" (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: rework resume handling for display (v2) (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Add option to retrieve detile buffer size (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/devcoredump: Update handling of xe_force_wake_get return (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/forcewake: Add a helper xe_force_wake_ref_has_domain() (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/guc: Copy GuC log prior to dumping (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/devcoredump: Add ASCII85 dump helper function (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/devcoredump: Improve section headings and add tile info (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/devcoredump: Use drm_puts and already cached local variables (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: set the right AMDGPU sg segment limitation (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Prune Invalid Modes For HDMI Output (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: parse umc_info or vram_info based on ASIC (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Remove hw w/a toggle if on DP2/HPO (Jocelyn Falempe) [RHEL-53571]
  - drm/panic: Add ABGR2101010 support (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix underflow when playing 8K video in full screen mode (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Dereference the ATCS ACPI buffer (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/gfx9: Add cleaner shader for GFX9.4.2 (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Adding array index check to prevent memory corruption (Jocelyn Falempe) [RHEL-53571]
  - drm/sched: memset() 'job' in drm_sched_job_init() (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Full exit out of IPS2 when all allow signals have been cleared (Jocelyn Falempe) [RHEL-53571]
  - drm/display: Fix building with GCC 15 (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/xe3: Add initial set of workarounds (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/ptl: L3bank mask is not available on the media GT (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: disable SG displays on cyan skillfish (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix garbage or black screen when resetting otg (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: skip disable CRTC in seemless bootup case (Jocelyn Falempe) [RHEL-53571]
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: it6505: Enable module autoloading (Jocelyn Falempe) [RHEL-53571]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK (Jocelyn Falempe) [RHEL-53571]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition (Jocelyn Falempe) [RHEL-53571]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pciid: Add new PCI id for ARL (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pciids: Add PVC's PCI device ID macros (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pciids: separate ARL and MTL PCI IDs (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pciids: separate RPL-U and RPL-P PCI IDs (Jocelyn Falempe) [RHEL-53571]
  - dma-fence: Use kernel's sort for merging fences (Jocelyn Falempe) [RHEL-53571]
  - dma-fence: Fix reference leak on fence merge failure path (Jocelyn Falempe) [RHEL-53571]
  - dma-buf: fix dma_fence_array_signaled v4 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp5.2: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp7.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp5.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp4.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp6.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Add a left edge pixel if in YCbCr422 or YCbCr420 and odm (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Limit VTotal range to max hw cap minus fp (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Correct prefetch calculation (Jocelyn Falempe) [RHEL-53571]
  - drm/dp_mst: Fix resetting msg rx state after topology removal (Jocelyn Falempe) [RHEL-53571]
  - drm/dp_mst: Verify request type in the corresponding down message reply (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: fix and simplify workload handling (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: add MEC version that supports no PCIe atomics for GFX12 (Jocelyn Falempe) [RHEL-53571]
  - drm/dp_mst: Fix MST sideband message body length check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: hard-code cacheline for gc943,gc944 (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Ignore scalar validation failure if pipe is phantom (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: calculate final viewport before TAP optimization (Jocelyn Falempe) [RHEL-53571]
  - Revert "drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs" (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Remove PIPE_DTO_SRC_SEL programming from set_dtbclk_dto (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: update pipe selection policy to check head pipe (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix handling of plane refcount (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: Remove arcturus min power limit (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: disable pcie speed switching on Intel platform for smu v14.0.2/3 (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7 (Jocelyn Falempe) [RHEL-53571]
  - drm/amd: Fix initialization mistake for NBIO 7.11 devices (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: skip setting the power source on smu v14.0.2/3 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix usage slab after free (Jocelyn Falempe) [RHEL-53571]
  - drm/amd: Add some missing straps from NBIO 7.11.0 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/pm: add gen5 display to the user on smu v14.0.2/3 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Use the correct wptr size (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/guc_submit: fix race around suspend_pending (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/migrate: use XE_BO_FLAG_PAGETABLE (Jocelyn Falempe) [RHEL-53571]
  - Revert "drm/radeon: Delay Connector detecting when HPD singals is unstable" (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/migrate: fix pat index usage (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: it6505: Fix inverted reset polarity (Jocelyn Falempe) [RHEL-53571]
  - drm/fbdev-dma: Select FB_DEFERRED_IO (Jocelyn Falempe) [RHEL-53571]
  - drm: panel: jd9365da-h3: Remove unused num_init_cmds structure member (Jocelyn Falempe) [RHEL-53571]
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Jocelyn Falempe) [RHEL-53571]
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Jocelyn Falempe) [RHEL-53571]
  - drm/panic: Fix uninitialized spinlock acquisition with CONFIG_DRM_PANIC=n (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/ufence: Wake up waiters after setting ufence->signalled (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe (Jocelyn Falempe) [RHEL-53571]
  - drm/radeon: Fix spurious unplug event on radeon HDMI (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Fix wrong usage of INIT_WORK() (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Fix map/unmap queue logic (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix ACA bank count boundary check error (Jocelyn Falempe) [RHEL-53571]
  - drm/panthor: Fix OPP refcnt leaks in devfreq initialisation (Jocelyn Falempe) [RHEL-53571]
  - drm/panthor: record current and maximum device clock frequencies (Jocelyn Falempe) [RHEL-53571]
  - drm/panthor: introduce job cycle and timestamp accounting (Jocelyn Falempe) [RHEL-53571]
  - drm: use ATOMIC64_INIT() for atomic64_t (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfd_get_cu_occupancy()' (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info() (Jocelyn Falempe) [RHEL-53571]
  - drm/vkms: Drop unnecessary call to drm_crtc_cleanup() (Jocelyn Falempe) [RHEL-53571]
  - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Reduce HPD Detection Interval for IPS (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Increase idle worker HPD detection time (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/hdcp: Fix gsc structure check in fw check status (Jocelyn Falempe) [RHEL-53571]
  - drm: panel: nv3052c: correct spi_device_id for RG35XX panel (Jocelyn Falempe) [RHEL-53571]
  - drm/panic: Select ZLIB_DEFLATE for DRM_PANIC_SCREEN_QR_CODE (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: tc358767: Fix link properties discovery (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: fix a memleak issue when driver is removed (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: it6505: Drop EDID cache on bridge power off (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: anx7625: Drop EDID cache on bridge power off (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfx_v9_0 Module (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Fix JPEG v4.0.3 register write (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: nt35510: Make new commands optional (Jocelyn Falempe) [RHEL-53571]
  - udmabuf: fix vmap_udmabuf error page set (Jocelyn Falempe) [RHEL-53571]
  - udmabuf: change folios array from kmalloc to kvmalloc (Jocelyn Falempe) [RHEL-53571]
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix incorrect DSC recompute trigger (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Skip Invalid Streams from DSC Policy (Jocelyn Falempe) [RHEL-53571]
  - redhat/configs: Enable CONFIG_TZMEM_MODE_GENERIC on aarch64 (Jennifer Berringer) [RHEL-73299]
  - redhat/configs: Add CONFIG_QCOM_QSEECOM for aarch64 (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: smc: Narrow 'mempool' variable scope (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: smc: Handle missing SCM device (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Cleanup global '__scm' on probe failures (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool() (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available() (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM bridge enabling (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: fix a NULL-pointer dereference (Jennifer Berringer) [RHEL-73299] {CVE-2024-53069}
  - firmware: qcom: scm: suppress download mode error (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire() (Jennifer Berringer) [RHEL-73299] {CVE-2024-46868}
  - firmware: qcom: tzmem: don't ask about allocator mode when not enabled (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Add multiple download mode support (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Refactor code to support multiple dload mode (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Disable SDI and write no dump to dump mode (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qseecom: remove unused functions (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: fix virtual-to-physical address conversion (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: blacklist more platforms for SHM Bridge (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: simplify returning pointer without cleanup (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: export devm_qcom_tzmem_pool_new() (Jennifer Berringer) [RHEL-73299]
  - arm64: dts: qcom: sa8775p: add a dedicated memory carveout for TZ (Jennifer Berringer) [RHEL-73299]
  - arm64: defconfig: enable SHM Bridge support for the TZ memory allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: clarify the comment in qcom_scm_pas_init_image() (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: add support for SHM bridge memory carveout (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: enable SHM Bridge support (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: add support for SHM bridge operations (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qseecom: convert to using the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: make qcom_scm_qseecom_app_get_id() use the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: make qcom_scm_lmh_dcvsh() use the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: make qcom_scm_ice_set_key() use the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: make qcom_scm_assign_mem() use the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: smc: switch to using the SCM allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: enable the TZ mem allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: add a dedicated TrustZone buffer allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Modify only the download bits in TCSR register (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Fix __scm and waitq completion variable initialization (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Rework dload mode availability check (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Remove redundant scm argument from qcom_scm_waitq_wakeup() (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Remove log reporting memory allocation failure (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: uefisecapp: Fix memory related IO errors and crashes (Jennifer Berringer) [RHEL-73299] {CVE-2024-35994}
  - firmware: qcom: qseecom: fix memory leaks in error paths (Jennifer Berringer) [RHEL-73299] {CVE-2023-52684}
  - firmware: qcom: scm: Add gpu_init_regs call (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qcm: fix unused qcom_scm_qseecom_allowlist (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: remove unneeded 'extern' specifiers (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: add a missing forward declaration for struct device (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: move Qualcomm code into its own directory (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qseecom: add missing include guards (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qseecom: Add missing AUXILIARY_BUS dependency (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom-scm: order includes alphabetically (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom-scm: drop unneeded 'extern' specifiers (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom_scm: Add missing extern specifier (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom_scm: Convert all symbols to EXPORT_SYMBOL_GPL (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom_scm: disable SDI if required (Jennifer Berringer) [RHEL-73299]
  - firmware: Add support for Qualcomm UEFI Secure Application (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom_scm: Add support for Qualcomm Secure Execution Environment SCM interface (Jennifer Berringer) [RHEL-73299]
  - lib/ucs2_string: Add UCS-2 strscpy function (Jennifer Berringer) [RHEL-73299]
  - cpuidle: remove dead code from cpuidle_enter_state() (Mark Langsdorf) [RHEL-64032]
  - cpuidle: dt_idle_genpd: Simplify with scoped for each OF child loop (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Simplify with scoped for each OF child loop (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Enable the hierarchical topology for s2idle on PREEMPT_RT (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Enable the hierarchical topology for s2ram on PREEMPT_RT (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Drop redundant assignment of CPUIDLE_FLAG_RCU_IDLE (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci-domain: Enable system-wide suspend on PREEMPT_RT (Mark Langsdorf) [RHEL-64032]
  - cpuidle: haltpoll: add missing MODULE_DESCRIPTION() macro (Mark Langsdorf) [RHEL-64032]
  - cpuidle: menu: Cleanup after loadavg removal (Mark Langsdorf) [RHEL-64032]
  - cpuidle: ladder: fix ladder_do_selection() kernel-doc (Mark Langsdorf) [RHEL-64032]
  - cpuidle: Avoid explicit cpumask allocation on stack (Mark Langsdorf) [RHEL-64032]
  - cpumask: Introduce cpumask_first_and_and() (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Update init level to core_initcall() (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Drop superfluous wrappers psci_dt_attach|detach_cpu() (Mark Langsdorf) [RHEL-64032]
  - cpuidle: Avoid potential overflow in integer multiplication (Mark Langsdorf) [RHEL-64032]
  - cpuidle: haltpoll: do not shrink guest poll_limit_ns below grow_start (Mark Langsdorf) [RHEL-64032]
  - cpuidle: haltpoll: Do not enable interrupts when entering idle (Mark Langsdorf) [RHEL-64032]
  - cpuidle: pseries: Mark pseries_idle_proble() as __init (Mark Langsdorf) [RHEL-64032]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-562.el9]
changelog:
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Olga Kornievskaia) [RHEL-76402] {CVE-2024-56779}
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads (Tomas Glozar) [RHEL-72939]
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads (Tomas Glozar) [RHEL-72939]
  - rtla/osnoise: Distinguish missing workload option (Tomas Glozar) [RHEL-72939]
  - rtla: Report missed event count (Tomas Glozar) [RHEL-75777]
  - rtla: Add function to report missed events (Tomas Glozar) [RHEL-75777]
  - rtla: Count all processed events (Tomas Glozar) [RHEL-75777]
  - rtla: Count missed trace events (Tomas Glozar) [RHEL-75777]
  - tools/rtla: Add osnoise_trace_is_off() (Tomas Glozar) [RHEL-75777]
  - rtla/timerlat_top: Abort event processing on second signal (Tomas Glozar) [RHEL-75777]
  - rtla/timerlat_hist: Abort event processing on second signal (Tomas Glozar) [RHEL-75777]
  - rtla/timerlat_top: Stop timerlat tracer on signal (Tomas Glozar) [RHEL-75777]
  - rtla/timerlat_hist: Stop timerlat tracer on signal (Tomas Glozar) [RHEL-75777]
  - rtla: Add trace_instance_stop (Tomas Glozar) [RHEL-75777]
  - selinux: ignore unknown extended permissions (Ondrej Mosnacek) [RHEL-75631] {CVE-2024-57931}
  - rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (Rafael Aquini) [RHEL-72196] {CVE-2024-53160}
  - initramfs: avoid filename buffer overrun (Rafael Aquini) [RHEL-70275] {CVE-2024-53142}
  - libperf: evlist: Fix --cpu argument on hybrid platform (Michael Petlan) [RHEL-71069]
  - scsi: lpfc: Fix spelling errors 'asynchronously' (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Copyright updates for 14.4.0.6 patches (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Update lpfc version to 14.4.0.6 (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Dick Kennedy) [RHEL-70003]
  - Revert "scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo" (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Modify CGN warning signal calculation based on EDC response (Dick Kennedy) [RHEL-70003]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-563.el9]
changelog:
  - redhat: set aarch64 variants of kernel-rt as Tech Preview (Luis Claudio R. Goncalves) [RHEL-77160]
  - drm/ast: Fix ast_dp connection status (Jocelyn Falempe) [RHEL-76831]
  - Revert "perf util: Make util its own library" (Michael Petlan) [RHEL-65742]
  - octeontx2-af: fix a use-after-free in rvu_npa_register_reporters (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Remove dead code and semi-colon from rsrc_name() (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: fix error handling of devlink port in rvu_rep_create() (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: fix netdev memory leak in rvu_rep_create() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix build regression without CONFIG_DCB (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Fix compilation error when CONFIG_XFRM_OFFLOAD disabled (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix installation of PF multicast rule (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Enable outbound ipsec crypto offload (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Allow ipsec crypto offload for skb with SA (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Process outbound ipsec crypto offload (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Add SA add/del support for outb ipsec crypto offload (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Init hardware for outbound ipsec crypto offload (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Disable backpressure between CPT and NIX (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Move skb fragment map/unmap to common code (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: map skb data as device writeable (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix SDP MAC link credits configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Quiesce traffic before NIX block reset (Sai Krishna) [RHEL-23617]
  - octeontx2-af: RPM: fix stale FCFEC counters (Sai Krishna) [RHEL-23617]
  - octeontx2-af: RPM: fix stale RSFEC counters (Sai Krishna) [RHEL-23617]
  - octeontx2-af: RPM: Fix low network performance (Sai Krishna) [RHEL-23617]
  - octeontx2-af: RPM: Fix mismatch in lmac type (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix spelling mistake "reprentator" -> "representor" (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Adds TC offload support (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Implement offload stats ndo for representors (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add devlink port support (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add representors for sdp MAC (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Configure VF mtu via representor (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add support to sync link state between representor and VFs (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Get VF stats via representor (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add packet path between representor and VF (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add basic net_device_ops (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Create representor netdev (Sai Krishna) [RHEL-23617]
  - redhat/configs: enable CONFIG_RVU_ESWITCH on RHEL (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: RVU representor driver (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Vary completion queue event size (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Refactor few NPC mcam APIs (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Move shared APIs to header file (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Reuse PF max mtu value (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add new APIs for queue memory alloc/free. (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Define common API for HW resources configuration (Sai Krishna) [RHEL-23617]
  - net: marvell: use ethtool string helpers (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix potential integer overflows on integer shifts (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Change block parameter to const pointer in get_lf_str_list (Sai Krishna) [RHEL-23617]
  - octeontx2-af: debugfs: Add Channel info to RPM map (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Modify SMQ flush sequence to drop packets (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Make iplen __be16 in otx2_sqe_add_ext() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Pass string literal as format argument of alloc_workqueue() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: configure default CPT credits for CN10KA B0 (Sai Krishna) [RHEL-23617]
  - octeontx2-af: avoid RXC register access for CN10KB (Sai Krishna) [RHEL-23617]
  - octeontx2-af: use dynamic interrupt vectors for CN10K (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix CPT AF register offset calculation (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix issue with IPv4 match for RSS (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix issue with IPv6 ext match for RSS (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix detection of IP layer (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix a issue with cpt_lf_alloc mailbox (Sai Krishna) [RHEL-23617]
  - octeontx2-af: replace cpt slot with lf id on reg write (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Sync NIX and NPA contexts from NDC to LLC/DRAM (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix coverity and klockwork issues in octeon PF driver (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix linking objects into multiple modules (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add error handling to VLAN unoffload handling (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add debugfs support to dump NIX TM topology (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Always allocate PF entries from low prioriy zone (Sai Krishna) [RHEL-23617]
  - Octeontx2-pf: Free send queue buffers incase of leaf to inner (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Reuse Transmit queue/Send queue index of HTB class (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Treat truncation of IRQ name as an error (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: flower: check for unsupported control flags (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add support for offload tc with skbedit mark action (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: fix FLOW_DIS_IS_FRAGMENT implementation (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix NIX SQ mode and BP config (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix transmit scheduler resource leak (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Reset MAC stats during probe (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add array index check (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: remove unused variables req_hdr and rsp_hdr (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: check negative error code in otx2_open() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Increase maximum BPID channels (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix issue with loading coalesced KPU profiles (Sai Krishna) [RHEL-23617]
  - Octeontx2-af: fix pause frame configuration in GMP mode (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Send UP messages to VF only when VF is up. (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Use default max_active works instead of one (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Wait till detach_resources msg is complete (Sai Krishna) [RHEL-23617]
  - octeontx2: Detect the mbox up or down message via register (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Use matching wake_up API variant in CGX command interface (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add TC flower offload support for TCP flags (Sai Krishna) [RHEL-23617]
  - Octeontx2-af: Fix an issue in firmware shared data reserved space (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Consider the action set by PF (Sai Krishna) [RHEL-23617]
  - Octeontx2-af: Fetch MAC channel info from firmware (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Remove the PF_FUNC validation for NPC transmit rules (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix a memleak otx2_sq_init (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Cleanup loopback device checks (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Create BPIDs free pool (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Remove xdp queues on program detach (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add filter profiles in hardware to extract packet headers (Sai Krishna) [RHEL-23617]
  - net: fill in MODULE_DESCRIPTION()s for rvu_mbox (Sai Krishna) [RHEL-23617]
  - octeontx2-af: CN10KB: Fix FIFO length calculation for RPM2 (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Re-enable MAC TX in otx2_stop processing (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Always configure NIX TX link credits based on max frame size (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix max NPC MCAM entry check while validating ref_entry (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix marking couple of structure as __packed (Sai Krishna) [RHEL-23617]
  - octeontx2-af: insert space after include (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix graceful exit during PFC configuration failure (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix multicast/mirror group lock/unlock issue (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix pause frame configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Update RSS algorithm index (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix promisc mcam entry action (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Update Tx link register range (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add missing mcs flr handler call (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix mcs stats register address (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix mcs sa cam entries size (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Adjust Tx credits when MCS external bypass is disabled (Sai Krishna) [RHEL-23617]
  - octeontx2-af: cn10k: Increase outstanding LMTST transactions (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix a use-after-free in rvu_nix_register_reporters (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: TC flower offload support for mirror (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add new mbox to support multicast/mirror offload (Sai Krishna) [RHEL-23617]
  - octeontx2-af: debugfs: update CQ context fields (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Check return value of nix_get_nixlf before using nixlf (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Restore TC ingress police rules when interface is up (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64 (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix possible buffer overflow (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: TC flower offload support for ICMP type and code (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix ntuple rule creation to direct packet to VF with higher Rx queue than its PF (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix memory leak during interface down (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Free pending and dropped SQEs (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix holes in error code (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix error codes (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Enable hardware timestamping for VFs (Sai Krishna) [RHEL-23617]
  - octeontx2-af: replace deprecated strncpy with strscpy (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: update PN only when update_pn is true (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Tc flower offload support for MPLS (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Do xdp_do_flush() after redirects. (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Enable PTP PPS output support (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler (Sai Krishna) [RHEL-23617]
  - octeontx2-af: print error message incase of invalid pf mapping (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add validation of lmac (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Don't treat lack of CGX interfaces as error (Sai Krishna) [RHEL-23617]
  - octeontx2-af: CN10KB: Add USGMII LMAC mode (Sai Krishna) [RHEL-23617]
  - cteonxt2-pf: Fix backpressure config for multiple PFC priorities to work simultaneously (Sai Krishna) [RHEL-23617]
  - octeontx2-af: CN10KB: fix PFC configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix PFC TX scheduler free (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Use PTP HW timestamp counter atomic update feature (Sai Krishna) [RHEL-23617]
  - octeontx2-af: SDP: fix receive link config (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Allow both ntuple and TC features on the interface (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Harden rule validation. (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Remove redundant functions rvu_npc_exact_mac2u64() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Use u64_to_ether_addr() to convert ethernet address (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Remove redundant functions mac2u64() and cfg2mac() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: TC flower offload support for inner VLAN (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Code restructure to handle TC outer VLAN offload (Sai Krishna) [RHEL-23617]
  - octeontx2: Remove unnecessary ternary operators (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: TC flower offload support for SPI field (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Initialize 'cntr_val' to fix uninitialized symbol error (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix hash extraction enable configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Install TC filter rules in hardware based on priority (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: htb offload support for Round Robin scheduling (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: implement transmit schedular allocation algorithm (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Generate hash key using ecb(aes) (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Dont allocate BPIDs for LBK interfaces (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add additional check for MCAM rules (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Move validation of ptp pointer before its usage (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Promisc enable/disable through mbox (Sai Krishna) [RHEL-23617]
  - octeontx-af: fix hardware timestamp configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Reset MAC features in FLR (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add validation before accessing cgx and lmac (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix mapping for NIX block from CGX connection (Sai Krishna) [RHEL-23617]
  - octeontx2-af: cn10kb: fix interrupt csr addresses (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: TC flower offload support for rxqueue mapping (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush (Sai Krishna) [RHEL-23617]
  - octeontx2-af: add option to toggle DROP_RE enable in rx cfg (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Enable LBK links only when switch mode is on. (Sai Krishna) [RHEL-23617]
  - octeontx2-af: cn10k: Set NIX DWRR MTU for CN10KB silicon (Sai Krishna) [RHEL-23617]
  - octeontx2-af: extend RSS supported offload types (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix lbk link credits on cn10k (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fixed resource availability check (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix promiscuous mode (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Support VLAN in clear text (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Remove unneeded semicolon (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: ethtool expose qos stats (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add support for HTB offload (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Prepare for QOS offload (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Refactor schedular queue alloc/free calls (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: qos send queues management (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Rename tot_tx_queues to non_qos_queues (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Offload extended packet number(XPN) feature (Sai Krishna) [RHEL-23617]
  - macsec: Use helper macsec_netdev_priv for offload drivers (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Do not reset PN while updating secy (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Fix shared counters logic (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Clear stats before freeing resource (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Match macsec ethertype along with DMAC (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Fix NULL pointer dereferences (Sai Krishna) [RHEL-23617]
  - octeontx2-af: add mbox to return CPT_AF_FLT_INT info (Sai Krishna) [RHEL-23617]
  - octeontx2-af: update cpt lf alloc mailbox (Sai Krishna) [RHEL-23617]
  - octeontx2-af: restore rxc conf after teardown sequence (Sai Krishna) [RHEL-23617]
  - octeontx2-af: optimize cpt pf identification (Sai Krishna) [RHEL-23617]
  - octeontx2-af: modify FLR sequence for CPT (Sai Krishna) [RHEL-23617]
  - octeontx2-af: recover CPT engine when it gets fault (Sai Krishna) [RHEL-23617]
  - octeontx2-af: update CPT inbound inline IPsec config mailbox (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Remove duplicate MACSEC setting (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: fix build error when CONFIG_OCTEONTX2_PF=y (Sai Krishna) [RHEL-23617]
  - net: octeontx2-pf: mcs: consider MACSEC setting (Sai Krishna) [RHEL-23617]
  - ethernet: marvell: octeontx2 Fix resource not freed after malloc (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: fix possible memory leak in otx2_probe() (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: fix missing unlock in some error paths (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: remove unneeded semicolon (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Introduce MACSEC hardware offloading (Sai Krishna) [RHEL-23617]
  - ice: stop storing XDP verdict within ice_rx_buf (Petr Oros) [RHEL-65102]
  - ice: gather page_count()'s of each frag right before XDP prog call (Petr Oros) [RHEL-65102]
  - ice: put Rx buffers after being done with current frame (Petr Oros) [RHEL-65102]
  - wifi: iwlwifi: bump FW API to 94 for BZ/SC devices (CKI Backport Bot) [RHEL-74377]
  - net: add reserved fields to psample_metadata (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to ethtool_keee (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to page_pool_stats and page_pool_params (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to devlink_ops (Sabrina Dubroca) [RHEL-60372]
  - Revert "net: exclude TC from kABI" (Sabrina Dubroca) [RHEL-60372]
  - Revert "net: exclude BPF/XDP from kABI" (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to kernel_hwtstamp_config (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to ip_tunnel_parm_kern (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to netdev_stat_ops and netdev_queue_mgmt_ops (Sabrina Dubroca) [RHEL-60372]
  - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73912]
  - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73270]
  - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73270]
  - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73270]
  - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73270]
  - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73270]
  - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73270]
  - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73270] {CVE-2024-40937}
  - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73270]
  - EDAC/igen6: Add Intel Meteor Lake-P SoCs support (Joel Savitz) [RHEL-53588]
  - EDAC/igen6: Add Intel Meteor Lake-PS SoCs support (Joel Savitz) [RHEL-53588]
  - EDAC/igen6: Add Intel Raptor Lake-P SoCs support (Joel Savitz) [RHEL-53588]
  - EDAC/igen6: Add Intel Alder Lake-N SoCs support (Joel Savitz) [RHEL-53588]
  - EDAC/igen6: Make get_mchbar() helper function (Joel Savitz) [RHEL-53588]
  - Revert "net: wwan: mark Qualcomm driver as tech preview" (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - Revert "net: wwan: mark t7xx driver as tech preview" (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - Revert "net: wwan: mark iosm driver as tech preview" (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc() (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: fix global oob in wwan_rtnl_policy (Jose Ignacio Tornos Martinez) [RHEL-66001 RHEL-67116] {CVE-2024-50128}
  - net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable() (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: t7xx: PCIe reset rescan (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: t7xx: add support for Dell DW5933e (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: mhi: make default data link id configurable (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: t7xx: Un-embed dummy device (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - HID: bpf: drop unneeded casts discarding const (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: fix kfunc inclusions with newer bpftool (Benjamin Tissoires) [RHEL-53898]
  - Input: fix regression when re-registering input handlers (Benjamin Tissoires) [RHEL-53898]
  - HID: Ignore battery for all ELAN I2C-HID devices (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: fix cfi stubs for hid_bpf_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Hardcode (non-inverted) AES pens as BTN_TOOL_PEN (Benjamin Tissoires) [RHEL-53898]
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add support for B2402FVA track point (Benjamin Tissoires) [RHEL-53898]
  - HID: core: zero-initialize the report buffer (Benjamin Tissoires) [RHEL-53898]
  - selftest: hid: add the missing tests directory (Benjamin Tissoires) [RHEL-53898]
  - HID: plantronics: Workaround for an unexcepted opposite volume key (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (Benjamin Tissoires) [RHEL-53898 RHEL-66678] {CVE-2024-50189}
  - selftest: hid: add missing run-hid-tools-tests.sh (Benjamin Tissoires) [RHEL-53898]
  - HID: i2c-hid: ensure various commands do not interfere with each other (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Do not warn about dropped packets for first packet (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Support sequence numbers smaller than 16-bit (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Defer calculation of resolution until resolution_code is known (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: more appropriate tool type categorization (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Modify pen IDs (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add support for GT7868Q (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: free driver_data after destroying hid device (Benjamin Tissoires) [RHEL-53898] {CVE-2024-46746}
  - hid-asus: add ROG Ally X prod ID to quirk list (Benjamin Tissoires) [RHEL-53898]
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Benjamin Tissoires) [RHEL-53898 RHEL-59317] {CVE-2024-46747}
  - selftests/hid: add test for attaching multiple time the same struct_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: prevent the same struct_ops to be attached more than once (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: disable struct_ops auto-attach (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: fix bpf_wq new API (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Move sensor discovery before HID device initialization (Benjamin Tissoires) [RHEL-53898]
  - hid: bpf: add BPF_JIT dependency (Benjamin Tissoires) [RHEL-53898]
  - Merge tag 'for-linus-2024071601' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-steam: Fix typo in goto label (Benjamin Tissoires) [RHEL-53898]
  - HID: mcp2221: Remove unnecessary semicolon (Benjamin Tissoires) [RHEL-53898]
  - HID: Fix spelling mistakes "Kensigton" -> "Kensington" (Benjamin Tissoires) [RHEL-53898]
  - HID: add more missing MODULE_DESCRIPTION() macros (Benjamin Tissoires) [RHEL-53898]
  - HID: samples: fix the 2 struct_ops definitions (Benjamin Tissoires) [RHEL-53898]
  - HID: apple: Add support for magic keyboard backlight on T2 Macs (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: doc fixes for hid_hw_request() hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: doc fixes for hid_hw_request() hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: fix gcc warning and unify __u64 into u64 (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: ensure CKI can compile our new tests on old kernels (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add an infinite loop test for hid_bpf_try_input_report (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add another test for injecting an event from an event hook (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: allow hid_device_event hooks to inject input reports on self (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add wq test for hid_bpf_input_report() (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: make hid_bpf_input_report() sleep until the device is ready (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add tests for hid_hw_output_report HID-BPF hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: add HID-BPF hooks for hid_hw_output_report (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add tests for hid_hw_raw_request HID-BPF hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: prevent infinite recursions with hid_hw_raw_requests hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: add HID-BPF hooks for hid_hw_raw_requests (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: protect HID-BPF prog_list access by a SRCU (Benjamin Tissoires) [RHEL-53898]
  - HID: add source argument to HID low level functions (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: fix dispatch_hid_bpf_device_event uninitialized ret value (Benjamin Tissoires) [RHEL-53898]
  - HID: uclogic: Add module description (Benjamin Tissoires) [RHEL-53898]
  - HID: uclogic: Avoid linking common code into multiple modules (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: make part of struct hid_device writable (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: rework hid_bpf_ops_btf_struct_access (Benjamin Tissoires) [RHEL-53898]
  - bpf: allow bpf helpers to be used into HID-BPF struct_ops (Benjamin Tissoires) [RHEL-53898]
  - Documentation: HID: add a small blurb on udev-hid-bpf (Benjamin Tissoires) [RHEL-53898]
  - Documentation: HID: amend HID-BPF for struct_ops (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add subprog call test (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: remove tracing HID-BPF capability (Benjamin Tissoires) [RHEL-53898]
  - HID: samples: convert the 2 HID-BPF samples into struct_ops (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: convert the hid_bpf selftests with struct_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: implement HID-BPF through bpf_struct_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: add hid_get/put_device() helpers (Benjamin Tissoires) [RHEL-53898]
  - HID: rename struct hid_bpf_ops into hid_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: Ignore battery for ELAN touchscreens 2F2C and 4116 (Benjamin Tissoires) [RHEL-53898]
  - HID: i2c-hid: elan: fix reset suspend current leakage (Benjamin Tissoires) [RHEL-53898]
  - hid: asus: asus_report_fixup: fix potential read out of bounds (Benjamin Tissoires) [RHEL-53898]
  - HID: add missing MODULE_DESCRIPTION() macros (Benjamin Tissoires) [RHEL-53898]
  - HID: logitech-dj: add missing MODULE_DESCRIPTION() macro (Benjamin Tissoires) [RHEL-53898]
  - HID: lg-g15: add missing MODULE_DESCRIPTION() macro (Benjamin Tissoires) [RHEL-53898]
  - HID: letsketch: add missing MODULE_DESCRIPTION() macro (Benjamin Tissoires) [RHEL-53898]
  - HID: usbhid: Share USB device firmware node with child HID device (Benjamin Tissoires) [RHEL-53898]
  - HID: logitech-hidpp: add missing MODULE_DESCRIPTION() macro (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: Fix an error handling path in nintendo_hid_probe() (Benjamin Tissoires) [RHEL-53898]
  - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() (Benjamin Tissoires) [RHEL-53898] {CVE-2024-40934}
  - HID: uclogic: Use Rx and Ry for touch strips (Benjamin Tissoires) [RHEL-53898]
  - HID: uclogic: Support HUION devices with up to 20 buttons (Benjamin Tissoires) [RHEL-53898]
  - HID: Use kvzalloc instead of kzalloc in hid_register_field() (Benjamin Tissoires) [RHEL-53898]
  - HID: core: remove unnecessary WARN_ON() in implement() (Benjamin Tissoires) [RHEL-53898] {CVE-2024-39509}
  - selftests/hid: skip tests with HID-BPF if udev-hid-bpf is not installed (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add tests for the Raptor Mach 2 joystick (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: move the gamepads definitions in the test file (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: import base_gamepad.py from hid-tools (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add Huion Kamvas Pro 19 tests (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: tablets: also check for XP-Pen offset correction (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: tablets: add a couple of XP-PEN tablets (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: tablets: reduce the number of pen state (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add support for HID-BPF pre-loading before starting a test (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: import base_device.py from hid-tools (Benjamin Tissoires) [RHEL-53898]
  - HID: do not assume HAT Switch logical max < 8 (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Use amd_get_c2p_val() to read C2P register (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Modify and log error only if case of functionality failures (Benjamin Tissoires) [RHEL-53898]
  - HID: kye: Change Device Usage from Puck to Mouse (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Fix calibration workaround for clone devices (Benjamin Tissoires) [RHEL-53898]
  - HID: i2c-hid: Retry address probe after delay (Benjamin Tissoires) [RHEL-53898]
  - HID: asus: add ROG Z13 lightbar (Benjamin Tissoires) [RHEL-53898]
  - HID: asus: add ROG Ally N-Key ID and keycodes (Benjamin Tissoires) [RHEL-53898]
  - HID: asus: make asus_kbd_init() generic, remove rog_nkey_led_init() (Benjamin Tissoires) [RHEL-53898]
  - HID: asus: fix more n-key report descriptors if n-key quirked (Benjamin Tissoires) [RHEL-53898]
  - HID: logitech: add a few Logitech HID++ device IDs (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-debug: add EV_FF and FF_STATUS mappings (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-debug: more informative output for EV_KEY (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-debug: fix Moir -> Moire typo (Benjamin Tissoires) [RHEL-53898]
  - HID: Add quirk for Logitech Casa touchpad (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-steam: Add Deck IMU support (Benjamin Tissoires) [RHEL-53898]
  - HID: sony: remove redundant assignment (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: Remove unused function (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: fix hid_bpf_input_report() when hid-core is not ready (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: allow to use bpf_timer_set_sleepable_cb() in tracing callbacks. (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add tests for hid_bpf_input_report (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: allow to inject HID event from BPF (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: Add test for hid_bpf_hw_output_report (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add KASAN to the VM tests (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: export hid_hw_output_report as a BPF kfunc (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf/dispatch: regroup kfuncs definitions (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: Simplify device type ID (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Parse minimal report 0x01 (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Don't fail on calibration data request (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Don't fail on FW/HW version request (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Fix LED blinking (Benjamin Tissoires) [RHEL-53898]
  - HID: uclogic: Expose firmware name (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-debug: add missing evdev and HID codes (Benjamin Tissoires) [RHEL-53898]
  - HID: corsair,lenovo: Convert sprintf() family to sysfs_emit() family (Benjamin Tissoires) [RHEL-53898]
  - HID: roccat: Convert sprintf() family to sysfs_emit() family (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-sensor-custom: Convert sprintf() family to sysfs_emit() family (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-picolcd*: Convert sprintf() family to sysfs_emit() family (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: Don't fail on setting baud rate (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: use ida for LED player id (Benjamin Tissoires) [RHEL-53898]
  - HID: surface-hid: kbd: Convert to platform remove callback returning void (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-sensor-custom: Convert to platform remove callback returning void (Benjamin Tissoires) [RHEL-53898]
  - HID: google: hammer: Convert to platform remove callback returning void (Benjamin Tissoires) [RHEL-53898]
  - hid: hid-picolcd: Remove struct backlight_ops.check_fb (Benjamin Tissoires) [RHEL-53898]
  - hid: hid-picolcd: Fix initialization order (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Set the AMD SFH driver to depend on x86 (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Extend MP2 register access to SFH (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Improve boot time when SFH is available (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Increase sensor command timeout (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: Remove some unused functions (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-prodikeys: remove struct pk_device (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-prodikeys: remove unused struct pcmidi_snd members (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-multitouch: remove unused mt_application::dev_time (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-lg3ff: remove unused struct lg3ff_device (Benjamin Tissoires) [RHEL-53898]
  - HID: protect hid_device::bpf by CONFIG_HID_BPF (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: remove unused hid_data::pressure (Benjamin Tissoires) [RHEL-53898]
  - HID: apple: remove unused members from struct apple_sc_backlight (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Clean up use of struct->wacom_wac (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Add Samsung wireless bookcover and universal keyboard support (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Add Samsung wireless action mouse support (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Add Samsung wireless gamepad support (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Add Samsung wireless keyboard support (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Rewrite rdesc checking code using memcmp() (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Broaden device compatibility in samsung driver (Benjamin Tissoires) [RHEL-53898]
  - input: Add support for "Do Not Disturb" (Benjamin Tissoires) [RHEL-53898]
  - input: Add event code for accessibility key (Benjamin Tissoires) [RHEL-53898]
  - Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination (Benjamin Tissoires) [RHEL-53898]
  - Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3 (Benjamin Tissoires) [RHEL-53898]
  - Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table (Benjamin Tissoires) [RHEL-53898]
  - Input: uinput - reject requests with unreasonable number of slots (Benjamin Tissoires) [RHEL-53898 RHEL-59311] {CVE-2024-46745}
  - Input: MT - limit max slots (Benjamin Tissoires) [RHEL-53898] {CVE-2024-45008}
  - Input: synaptics - enable SMBus for HP Elitebook 840 G2 (Benjamin Tissoires) [RHEL-53898]
  - Input: do not check number of events in input_pass_values() (Benjamin Tissoires) [RHEL-53898]
  - Input: preallocate memory to hold event values (Benjamin Tissoires) [RHEL-53898]
  - Input: rearrange input_alloc_device() to prepare for preallocating of vals (Benjamin Tissoires) [RHEL-53898]
  - Input: simplify event handling logic (Benjamin Tissoires) [RHEL-53898]
  - Input: make events() method return number of events processed (Benjamin Tissoires) [RHEL-53898]
  - Input: make sure input handlers define only one processing method (Benjamin Tissoires) [RHEL-53898]
  - Input: evdev - remove ->event() method (Benjamin Tissoires) [RHEL-53898]
  - Input: elan_i2c - do not leave interrupt disabled on suspend failure (Benjamin Tissoires) [RHEL-53898]
  - coresight: Make trace ID map spinlock local to the map (Mark Salter) [RHEL-21456]
  - coresight: Emit sink ID in the HW_ID packets (Mark Salter) [RHEL-21456]
  - coresight: Remove pending trace ID release mechanism (Mark Salter) [RHEL-21456]
  - coresight: Use per-sink trace ID maps for Perf sessions (Mark Salter) [RHEL-21456]
  - coresight: Make CPU id map a property of a trace ID map (Mark Salter) [RHEL-21456]
  - coresight: Expose map arguments in trace ID API (Mark Salter) [RHEL-21456]
  - coresight: Move struct coresight_trace_id_map to common header (Mark Salter) [RHEL-21456]
  - coresight: Clarify comments around the PID of the sink owner (Mark Salter) [RHEL-21456]
  - coresight: Remove unused ETM Perf stubs (Mark Salter) [RHEL-21456]
  - coresight: tmc: sg: Do not leak sg_table (Mark Salter) [RHEL-21456]
  - Coresight: Set correct cs_mode for dummy source to fix disable issue (Mark Salter) [RHEL-21456]
  - Coresight: Set correct cs_mode for TPDM to fix disable issue (Mark Salter) [RHEL-21456]
  - device property: Don't use "proxy" headers (Mark Salter) [RHEL-21456]
  - device property: Replace custom implementation of COUNT_ARGS() (Mark Salter) [RHEL-21456]
  - device property: Move enum dev_dma_attr to fwnode.h (Mark Salter) [RHEL-21456]
  - hwtracing: use for_each_endpoint_of_node() (Mark Salter) [RHEL-21456]
  - coresight: constify the struct device_type usage (Mark Salter) [RHEL-21456]
  - coresight: tmc: Remove duplicated include in coresight-tmc-core.c (Mark Salter) [RHEL-21456]
  - coresight: Fix ref leak when of_coresight_parse_endpoint() fails (Mark Salter) [RHEL-21456]
  - coresight: tmc: Enable SG capability on ACPI based SoC-400 TMC ETR devices (Mark Salter) [RHEL-21456]
  - coresight: Docs/ABI/testing/sysfs-bus-coresight-devices: Fix spelling errors (Mark Salter) [RHEL-21456]
  - coresight: tpiu: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: tmc: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: stm: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: debug: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: Remove duplicate linux/amba/bus.h header (Mark Salter) [RHEL-21456]
  - coresight: stm: Remove duplicate linux/acpi.h header (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix access to resource selector registers (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Safe access for TRCQCLTR (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Do not save/restore Data trace control registers (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Do not hardcode IOMEM access for register restore (Mark Salter) [RHEL-21456]
  - coresight: debug: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: stm: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: tmc: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: tpiu: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: catu: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: funnel: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: replicator: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: Add helpers registering/removing both AMBA and platform drivers (Mark Salter) [RHEL-21456]
  - coresight: tmc: Extract device properties from AMBA pid based table lookup (Mark Salter) [RHEL-21456]
  - coresight: stm: Extract device name from AMBA pid based table lookup (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix unbalanced pm_runtime_enable() (Mark Salter) [RHEL-21456]
  - ARM: 9379/1: coresight: tpda: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9378/1: coresight: etm4x: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9376/1: coresight: tpdm: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9375/1: coresight: stm: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9374/1: coresight: etb10: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9373/1: coresight: funnel: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9371/1: coresight: cti: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9366/1: coresight: tpiu: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9365/1: coresight: tmc: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9364/1: coresight: replicator: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9363/1: coresight: etm3x: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9362/1: coresight: catu: drop owner assignment (Mark Salter) [RHEL-21456]
  - coresight-tpda: Change qcom,dsb-element-size to qcom,dsb-elem-bits (Mark Salter) [RHEL-21456]
  - coresight: tpdm: Fix build break due to uninitialised field (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Set skip_power_up in etm4_init_arch_data function (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add msr register support for CMB (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add timestamp control register support for the CMB (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add pattern registers support for CMB (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add support to configure CMB (Mark Salter) [RHEL-21456]
  - coresight-tpda: Add support to configure CMB element (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add CMB dataset support (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Optimize the useage of tpdm_has_dsb_dataset (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Optimize the store function of tpdm simple dataset (Mark Salter) [RHEL-21456]
  - coresight: Add helper for setting csdev->mode (Mark Salter) [RHEL-21456]
  - coresight: Add a helper for getting csdev->mode (Mark Salter) [RHEL-21456]
  - coresight: Add helper for atomically taking the device (Mark Salter) [RHEL-21456]
  - coresight: Add explicit member initializers to coresight_dev_type (Mark Salter) [RHEL-21456]
  - coresight: Remove unused stubs (Mark Salter) [RHEL-21456]
  - coresight: Remove atomic type from refcnt (Mark Salter) [RHEL-21456]
  - coresight: Move all sysfs code to sysfs file (Mark Salter) [RHEL-21456]
  - coresight: Remove the 'enable' field. (Mark Salter) [RHEL-21456]
  - coresight: Move mode to struct coresight_device (Mark Salter) [RHEL-21456]
  - coresight: Remove ops callback checks (Mark Salter) [RHEL-21456]
  - coresight: Make language around "activated" sinks consistent (Mark Salter) [RHEL-21456]
  - coresight: make coresight_bustype const (Mark Salter) [RHEL-21456]
  - coresight: Fix undeclared variable warnings from sparse checker (Mark Salter) [RHEL-21456]
  - coresight: etm3x: Fix build warning (Mark Salter) [RHEL-21456]
  - coresight: Fix uninitialized struct warnings (Mark Salter) [RHEL-21456]
  - coresight: Fix issue where a source device's helpers aren't disabled (Mark Salter) [RHEL-21456]
  - redhat/configs: add new coresight configs (Mark Salter) [RHEL-21456]
  - redhat/configs: add CONFIG_ULTRASOC_SMB as disabled (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Use guards to cleanup (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: trbe: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: replicator: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: funnel: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: dummy: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix width of CCITMIN field (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Correct the property name of MSR number (Mark Salter) [RHEL-21456]
  - Documentation: ABI: coresight-tpdm: Fix Bit[3] description indentation (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes for dsb msr support (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes for timestamp request (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes to configure pattern match output (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes for dsb edge control (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add node to set dsb programming mode (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes to set trigger timestamp and type (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add reset node to TPDM node (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Initialize DSB subunit configuration (Mark Salter) [RHEL-21456]
  - coresight-tpda: Add DSB dataset support (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Introduce TPDM subtype to TPDM driver (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Remove the unnecessary lock (Mark Salter) [RHEL-21456]
  - coresight: tmc: Make etr buffer mode user configurable from sysfs (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Add cc_threshold tunable (Mark Salter) [RHEL-21456]
  - coresight: etm: Make cycle count threshold user configurable (Mark Salter) [RHEL-21456]
  - coresight: etm: Override TRCIDR3.CCITMIN on errata affected cpus (Mark Salter) [RHEL-21456]
  - coresight: trbe: Enable ACPI based TRBE devices (Mark Salter) [RHEL-21456]
  - coresight: trbe: Add a representative coresight_platform_data for TRBE (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Fix uninitialized before use buf_hw_base (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Config SMB buffer before register sink (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Fix sleep while close preempt in enable_smb (Mark Salter) [RHEL-21456]
  - Documentation: coresight: fix `make refcheckdocs` warning (Mark Salter) [RHEL-21456]
  - coresight: Fix crash when Perf and sysfs modes are used concurrently (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Remove bogous __exit annotation for some functions (Mark Salter) [RHEL-21456]
  - coresight: tmc-etr: Disable warnings for allocation failures (Mark Salter) [RHEL-21456]
  - coresight: Fix run time warnings while reusing ETR buffer (Mark Salter) [RHEL-21456]
  - coresight: trbe: Fix TRBE potential sleep in atomic context (Mark Salter) [RHEL-21456]
  - coresight: Fix memory leak in acpi_buffer->pointer (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Ensure valid drvdata and clock before clk_put() (Mark Salter) [RHEL-21456]
  - coresight: trbe: Allocate platform data per device (Mark Salter) [RHEL-21456]
  - coresight: dummy: simplify the code with module_platform_driver (Mark Salter) [RHEL-21456]
  - coresight: tmc: Explicit type conversions to prevent integer overflow (Mark Salter) [RHEL-21456]
  - coresight: trbe: Directly use ID_AA64DFR0_EL1_TraceBuffer_IMP (Mark Salter) [RHEL-21456]
  - coresight: Fix all W=1 build warnings (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Add ACPI support in platform driver (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Change etm4_platform_driver driver for MMIO devices (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Drop pid argument from etm4_probe() (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Drop iomem 'base' argument from etm4_probe() (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Allocate and device assign 'struct etmv4_drvdata' earlier (Mark Salter) [RHEL-21456]
  - hwtracing: coresight: Explicitly include correct DT includes (Mark Salter) [RHEL-21456]
  - coresight: dummy: Update type of mode parameter in dummy_{sink,source}_enable() (Mark Salter) [RHEL-21456]
  - Documentation: trace: Add documentation for Coresight Dummy Trace (Mark Salter) [RHEL-21456]
  - Coresight: Add coresight dummy driver (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Match all ETM4 instances based on DEVARCH and DEVTYPE (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Make etm4_remove_dev() return void (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix missing trctraceidr file in sysfs (Mark Salter) [RHEL-21456]
  - coresight: Fix CTI module refcount leak by making it a helper device (Mark Salter) [RHEL-21456]
  - coresight: Enable and disable helper devices adjacent to the path (Mark Salter) [RHEL-21456]
  - coresight: Refactor out buffer allocation function for ETR (Mark Salter) [RHEL-21456]
  - coresight: Make refcount a property of the connection (Mark Salter) [RHEL-21456]
  - coresight: Store in-connections as well as out-connections (Mark Salter) [RHEL-21456]
  - coresight: Simplify connection fixup mechanism (Mark Salter) [RHEL-21456]
  - coresight: Store pointers to connections rather than an array of them (Mark Salter) [RHEL-21456]
  - coresight: Dynamically add connections (Mark Salter) [RHEL-21456]
  - coresight: Rename connection members to make the direction explicit (Mark Salter) [RHEL-21456]
  - coresight: Rename nr_outports to nr_outconns (Mark Salter) [RHEL-21456]
  - coresight: Change name of pdata->conns (Mark Salter) [RHEL-21456]
  - coresight: Use enum type for cs_mode wherever possible (Mark Salter) [RHEL-21456]
  - coresight: Fix loss of connection info when a module is unloaded (Mark Salter) [RHEL-21456]
  - coresight: perf: Release Coresight path when alloc trace id failed (Mark Salter) [RHEL-21456]
  - coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() (Mark Salter) [RHEL-21456]
  - coresight: etm_pmu: Set the module field (Mark Salter) [RHEL-21456]
  - MAINTAINERS: Remove Mathieu Poirier as coresight maintainer (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Do not access TRCIDR1 for identification (Mark Salter) [RHEL-21456]
  - coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug (Mark Salter) [RHEL-21456]
  - coresight: tmc: Don't enable TMC when it's not ready. (Mark Salter) [RHEL-21456]
  - coresight: tpda: fix return value check in tpda_probe() (Mark Salter) [RHEL-21456]
  - Coresight: tpda/tpdm: remove incorrect __exit annotation (Mark Salter) [RHEL-21456]
  - coresight: perf: Output trace id only once (Mark Salter) [RHEL-21456]
  - coresight: Fix uninitialised variable use in coresight_disable (Mark Salter) [RHEL-21456]
  - Documentation: coresight: tpdm: Add dummy comment after sysfs list (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Extend title heading syntax in TPDM and TPDA documentation (Mark Salter) [RHEL-21456]
  - Documentation: trace: Add documentation for TPDM and TPDA (Mark Salter) [RHEL-21456]
  - Coresight: Add TPDA link driver (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add integration test support (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add DSB dataset support (Mark Salter) [RHEL-21456]
  - Coresight: Add coresight TPDM source driver (Mark Salter) [RHEL-21456]
  - coresight: core: Use IDR for non-cpu bound sources' paths. (Mark Salter) [RHEL-21456]
  - coresight: trace-id: Add debug & test macros to Trace ID allocation (Mark Salter) [RHEL-21456]
  - coresight: events: PERF_RECORD_AUX_OUTPUT_HW_ID used for Trace ID (Mark Salter) [RHEL-21456]
  - coresight: trace id: Remove legacy get trace ID function. (Mark Salter) [RHEL-21456]
  - coresight: etmX.X: stm: Remove trace_id() callback (Mark Salter) [RHEL-21456]
  - coresight: etm3x: Update ETM3 driver to use Trace ID API (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Update ETM4 driver to use Trace ID API (Mark Salter) [RHEL-21456]
  - coresight: stm: Update STM driver to use Trace ID API (Mark Salter) [RHEL-21456]
  - coresight: perf: traceid: Add perf ID allocation and notifiers (Mark Salter) [RHEL-21456]
  - coresight: Remove obsolete Trace ID unniqueness checks (Mark Salter) [RHEL-21456]
  - coresight: trace-id: Add API to dynamically assign Trace ID values (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: fix return value check in smb_init_data_buffer() (Mark Salter) [RHEL-21456]
  - Documentation: Add document for UltraSoc SMB driver (Mark Salter) [RHEL-21456]
  - drivers/coresight: Add UltraSoc System Memory Buffer driver (Mark Salter) [RHEL-21456]
  - coresight: cti: Remove atomic type from enable_req_count (Mark Salter) [RHEL-21456]
  - coresight: cti: Add PM runtime call in enable_store (Mark Salter) [RHEL-21456]
  - coresight: cti: Prevent negative values of enable count (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR (Mark Salter) [RHEL-21456]
  - coresight: etm4x: fix repeated words in comments (Mark Salter) [RHEL-21456]
  - coresight: cti: Fix null pointer error on CTI init before ETM (Mark Salter) [RHEL-21456]
  - coresight: trbe: remove cpuhp instance node before remove cpuhp state (Mark Salter) [RHEL-21456]
  - coresight: etm4x: add CPU hotplug support for probing (Mark Salter) [RHEL-21456]
  - coresight: cti: Fix hang in cti_disable_hw() (Mark Salter) [RHEL-21456]
  - coresight: Fix possible deadlock with lock dependency (Mark Salter) [RHEL-21456]
  - coresight: cti-sysfs: Mark coresight_cti_reg_store() as __maybe_unused (Mark Salter) [RHEL-21456]
  - coresight: Make new csdev_access offsets unsigned (Mark Salter) [RHEL-21456]
  - coresight: cti-sysfs: Re-use same functions for similar sysfs register accessors (Mark Salter) [RHEL-21456]
  - coresight: Re-use same function for similar sysfs register accessors (Mark Salter) [RHEL-21456]
  - coresight: Simplify sysfs accessors by using csdev_access abstraction (Mark Salter) [RHEL-21456]
  - coresight: Remove unused function parameter (Mark Salter) [RHEL-21456]
  - coresight: etm4x: docs: Add documentation for 'ts_source' sysfs interface (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Expose default timestamp source in sysfs (Mark Salter) [RHEL-21456]
  - coresight: docs: Fix a broken reference (Mark Salter) [RHEL-21456]
  - coresight: trbe: fix Kconfig "its" grammar (Mark Salter) [RHEL-21456]
  - coresight: etm4x: avoid build failure with unrolled loops (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Expand branch broadcast documentation (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Link config options to existing documentation (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Turn numbered subsections into real subsections (Mark Salter) [RHEL-21456]
  - coresight: Add config flag to enable branch broadcast (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Escape coresight bindings file wildcard (Mark Salter) [RHEL-21456]
  - dt-bindings: arm: Convert CoreSight CPU debug to DT schema (Mark Salter) [RHEL-21456]
  - dt-bindings: arm: Convert CoreSight bindings to DT schema (Mark Salter) [RHEL-21456]
  - dt-bindings: arm: Rename Coresight filenames to match compatible (Mark Salter) [RHEL-21456]
  - coresight: Clear the connection field properly (Mark Salter) [RHEL-21456]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-564.el9]
changelog:
  - tg3: Disable tg3 PCIe AER on system reboot (Lenny Szubowicz) [RHEL-63747]
  - of: Add for_each_reserved_child_of_node() (Radu Rendec) [RHEL-77190]
  - of: Add of_get_next_status_child() and makes more generic of_get_next (Radu Rendec) [RHEL-77190]
  - of: Add __of_device_is_status() and makes more generic status check (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Fix 'soc' node handling in cpg_mssr_reserved_init() (Radu Rendec) [RHEL-77190]
  - clk: Use of_property_present() (Radu Rendec) [RHEL-77190]
  - clk: renesas: mstp: Remove obsolete clkdev registration (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Ignore all clocks assigned to non-Linux system (Radu Rendec) [RHEL-77190]
  - clk: renesas: mstp: Convert to readl_poll_timeout_atomic() (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Convert to readl_poll_timeout_atomic() (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Remove superfluous check in resume code (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Remove unused default PLL2/3/4/6 configs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Remove unused fixed PLL clock types (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Remove unused variable PLL2 clock type (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779f0: Model PLL1/2/3/6 as fractional PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Use defines for PLL control registers (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for fractional 9.24 PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for fixed variable PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for variable fractional PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for fractional multiplication (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Use defines for common CPG registers (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Add the DSI clocks (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Add the DU clock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779f0: cpg_pll_configs should be __initconst (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: cpg_pll_configs should be __initconst (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Fix CANFD parent clock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Add PWM clock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Tidy up DMAC name on SYS-DMAC (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Use FIELD_GET() (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Clarify custom PLL clock support (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Removed unused SSMODE_* definitions (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Restore PLL enum sort order (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen2: Use DEFINE_SPINLOCK() for static spinlock (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-lib: Use DEFINE_SPINLOCK() for global spinlock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a77970: Use common cpg_lock (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for FRQCRC1 (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779g0: Add custom clock for PLL2 (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Fix initconst confusion for cpg_pll_config (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: propagate return value of_genpd_add_provider_simple() (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Check return value of pm_genpd_init() (Radu Rendec) [RHEL-77190]
  - nfp: use irq_update_affinity_hint() (Mohammad Heib) [RHEL-40873]
  - PCI: imx6: Fix suspend/resume support on i.MX6QDL (Myron Stowe) [RHEL-73709] {CVE-2024-57809}
  - PCI: dwc: Rename 'dw_pcie::link_gen' to 'dw_pcie::max_link_speed' (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Add i.MX8Q PCIe Root Complex (RC) support (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Call common PHY API to set mode, speed, and submode (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Consolidate redundant if-checks (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Improve comment for workaround ERR010728 (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Simplify switch-case logic by involve core_reset callback (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Introduce SoC specific callbacks for controlling REFCLK (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Rename imx6_* with imx_* (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Fix missing call to phy_power_off() in error handling (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Fix i.MX8MP PCIe EP's occasional failure to trigger MSI (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Fix establish link failure in EP mode for i.MX8MM and i.MX8MP (Myron Stowe) [RHEL-73709]
  - PCI/MSI: Handle lack of irqdomain gracefully (Myron Stowe) [RHEL-72850] {CVE-2024-56760}
  - PCI: Fix use-after-free of slot->bus on hot remove (Myron Stowe) [RHEL-72370] {CVE-2024-53194}
  - PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert() (Myron Stowe) [RHEL-72122] {CVE-2024-53152}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-565.el9]
changelog:
  - net: renesas: rswitch: add mdio C22 support (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: use generic MPSM operation for mdio C45 (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: align mdio C45 operations with datasheet (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: use FIELD_PREP for remaining MPIC register fields (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: do not write to MPSM register at init time (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: remove speed from gwca structure (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: do not deinit disabled ports (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: rework ts tags management (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix initial MPIC register setting (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: enable only used MFWD features (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: handle stop vs interrupt race (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: avoid use-after-put for a device tree node (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix leaked pointer on error path (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix race window between tx start and complete (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix possible early skb release (Radu Rendec) [RHEL-78074]
  - net: mdiobus: fix an OF node reference leak (Jared Kangas) [RHEL-78049]
  - net: mdiobus: Debug print fwnode handle instead of raw pointer (Jared Kangas) [RHEL-78049]
  - net: mdiobus: Convert to use fwnode_device_is_compatible() (Jared Kangas) [RHEL-78049]
  - Revert "kbuild: use $(src) instead of $(srctree)/$(src) for source directory" (Jocelyn Falempe) [RHEL-76500]
  - PM: hibernate: Use kernel_can_power_off() (Maxim Levitsky) [RHEL-63107]
  - Bluetooth: btmtk: avoid UAF in btmtk_process_coredump (CKI Backport Bot) [RHEL-75872] {CVE-2024-56653}
  - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (CKI Backport Bot) [RHEL-75848] {CVE-2024-53208}
  - Bluetooth: fix use-after-free in device_for_each_child() (CKI Backport Bot) [RHEL-75844] {CVE-2024-53237}
  - KVM: arm64: Fix set_id_regs selftest for ASIDBITS becoming unwritable (Eric Auger) [RHEL-75792]
  - KVM: arm64: selftests: Add tests for MMIO external abort injection (Eric Auger) [RHEL-75792]
  - KVM: arm64: selftests: Convert to kernel's ESR terminology (Eric Auger) [RHEL-75792]
  - tools: arm64: Grab a copy of esr.h from kernel (Eric Auger) [RHEL-75792]
  - KVM: arm64: vgic-its: Add error handling in vgic_its_cache_translation (Eric Auger) [RHEL-75792]
  - KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden (Eric Auger) [RHEL-75792]
  - KVM: arm64: vgic: Don't check for vgic_ready() when setting NR_IRQS (Eric Auger) [RHEL-75792]
  - KVM: selftests: aarch64: Add writable test for ID_AA64PFR1_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Allow userspace to change ID_AA64PFR1_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Use kvm_has_feat() to check if FEAT_SSBS is advertised to the guest (Eric Auger) [RHEL-75792]
  - KVM: arm64: Disable fields that KVM doesn't know how to handle in ID_AA64PFR1_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Make the exposed feature bits in AA64DFR0_EL1 writable from userspace (Eric Auger) [RHEL-75792]
  - KVM: arm64: Honor trap routing for TCR2_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Initialize the hypervisor's VM state at EL2 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Refactor kvm_vcpu_enable_ptrauth() for hyp use (Eric Auger) [RHEL-75792]
  - Bluetooth: iso: Always release hdev at the end of iso_listen_bis (CKI Backport Bot) [RHEL-73635] {CVE-2024-57879}
  - xfrm: Export symbol xfrm_dev_state_delete. (Felix Maurer) [RHEL-68939]
  - xfrm: Fix unregister netdevice hang on hardware offload. (Felix Maurer) [RHEL-68939]
  - kasan: make report_lock a raw spinlock (Jared Kangas) [RHEL-70564]
  - config: wifi: enable ath12k driver (Jose Ignacio Tornos Martinez) [RHEL-37773]
  - wifi: ath12k: fix crash when unbinding (Jose Ignacio Tornos Martinez) [RHEL-37773]
  - wifi: ath12k: fix warning when unbinding (Jose Ignacio Tornos Martinez) [RHEL-37773]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-566.el9]
changelog:
  - redhat/configs: add CONFIG_CIFS_COMPRESSION (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-76046]
  - cifs: support reconnect with alternate password for SMB1 (Paulo Alcantara) [RHEL-76046]
  - smb: client: sync the root session and superblock context passwords before automounting (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove unused is_server_using_iface() (Paulo Alcantara) [RHEL-76046]
  - smb: enable reuse of deferred file handles for write operations (Paulo Alcantara) [RHEL-76046]
  - smb: use macros instead of constants for leasekey size and default cifsattrs value (Paulo Alcantara) [RHEL-76046]
  - smb: client: destroy cfid_put_wq on module exit (Paulo Alcantara) [RHEL-76046]
  - cifs: Use str_yes_no() helper in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-76046]
  - smb3: fix compiler warning in reparse code (Paulo Alcantara) [RHEL-76046]
  - smb3.1.1: fix posix mounts to older servers (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: Implement new SMB3 POSIX type (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX (Paulo Alcantara) [RHEL-76046]
  - cifs: unlock on error in smb3_reconfigure() (Paulo Alcantara) [RHEL-76046]
  - cifs: during remount, make sure passwords are in sync (Paulo Alcantara) [RHEL-76046]
  - cifs: support mounting with alternate password to allow password rotation (Paulo Alcantara) [RHEL-76046]
  - smb: During unmount, ensure all cached dir instances drop their dentry (Paulo Alcantara) [RHEL-76046] {CVE-2024-53176}
  - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of WSL reparse point buffers (Paulo Alcantara) [RHEL-76046]
  - cifs: Improve guard for excluding $LXDEV xattr (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for parsing WSL-style symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of native symlink (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix parsing native symlinks relative to the export (Paulo Alcantara) [RHEL-76046]
  - Update misleading comment in cifs_chan_update_iface (Paulo Alcantara) [RHEL-76046]
  - smb: client: change return value in open_cached_dir_by_dentry() if !cfids (Paulo Alcantara) [RHEL-76046]
  - smb: client: disable directory caching when dir_cache_timeout is zero (Paulo Alcantara) [RHEL-76046]
  - smb: client: remove unnecessary checks in open_cached_dir() (Paulo Alcantara) [RHEL-76046]
  - smb: prevent use-after-free due to open_cached_dir error paths (Paulo Alcantara) [RHEL-76046] {CVE-2024-53177}
  - smb: Don't leak cfid when reconnect races with open_cached_dir (Paulo Alcantara) [RHEL-76046] {CVE-2024-53178}
  - smb: client: handle max length for SMB symlinks (Paulo Alcantara) [RHEL-76046]
  - smb: client: get rid of bounds check in SMB2_ioctl_init() (Paulo Alcantara) [RHEL-76046]
  - smb: client: improve compound padding in encryption (Paulo Alcantara) [RHEL-76046]
  - smb3: request handle caching when caching directories (Paulo Alcantara) [RHEL-76046]
  - cifs: Recognize SFU char/block devices created by Windows NFS server on Windows Server <<2012 (Paulo Alcantara) [RHEL-76046]
  - CIFS: New mount option for cifs.upcall namespace resolution (Paulo Alcantara) [RHEL-76046]
  - smb/client: Prevent error pointer dereference (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: implement chmod() for SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-76046]
  - smb: cached directories can be more than root file handle (Paulo Alcantara) [RHEL-76046]
  - smb: client: Use str_yes_no() helper function (Paulo Alcantara) [RHEL-76046]
  - smb: client: memcpy() with surrounding object base address (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove pre-historic unused CIFSSMBCopy (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove unused functions (Paulo Alcantara) [RHEL-76046]
  - smb/client: Fix logically dead code (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix creating native symlinks pointing to current or parent directory (Paulo Alcantara) [RHEL-76046]
  - cifs: Improve creating native symlinks pointing to directory (Paulo Alcantara) [RHEL-76046]
  - cifs: Do not convert delimiter when parsing NFS-style symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of NFS reparse point buffer (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix buffer overflow when parsing NFS reparse points (Paulo Alcantara) [RHEL-76046] {CVE-2024-49996}
  - smb: client: Correct typos in multiple comments across various files (Paulo Alcantara) [RHEL-76046]
  - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove intermediate object of failed create reparse call (Paulo Alcantara) [RHEL-76046]
  - Revert "smb: client: make SHA-512 TFM ephemeral" (Paulo Alcantara) [RHEL-76046]
  - smb: Update comments about some reparse point tags (Paulo Alcantara) [RHEL-76046]
  - cifs: Check for UTF-16 null codepoint in SFU symlink target location (Paulo Alcantara) [RHEL-76046]
  - smb: client: make SHA-512 TFM ephemeral (Paulo Alcantara) [RHEL-76046]
  - smb: client: make HMAC-MD5 TFM ephemeral (Paulo Alcantara) [RHEL-76046]
  - smb: client: allocate crypto only for primary server (Paulo Alcantara) [RHEL-76046]
  - ksmbd: Correct typos in multiple comments across various files (Paulo Alcantara) [RHEL-76046]
  - smb3: fix incorrect mode displayed for read-only files (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix parsing of device numbers (Paulo Alcantara) [RHEL-76046]
  - smb: client: set correct device number on nfs reparse points (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix compression heuristic functions (Paulo Alcantara) [RHEL-76046]
  - cifs: Update SFU comments about fifos and sockets (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for creating SFU symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Recognize SFU socket type (Paulo Alcantara) [RHEL-76046]
  - cifs: Show debug message when SFU Fifo type was detected (Paulo Alcantara) [RHEL-76046]
  - cifs: Put explicit zero byte into SFU block/char types (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for reading SFU symlink location (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix recognizing SFU symlinks (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: fix an "illegal accesses" issue (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: fix a potential issue of freeing an invalid pointer (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: LZ77 code improvements cleanup (Paulo Alcantara) [RHEL-76046]
  - smb: client: insert compression check/call on write requests (Paulo Alcantara) [RHEL-76046]
  - smb3: mark compression as CONFIG_EXPERIMENTAL and fix missing compression operation (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove obsoleted declaration for cifs_dir_open (Paulo Alcantara) [RHEL-76046]
  - smb: client: Use min() macro (Paulo Alcantara) [RHEL-76046]
  - smb: add comment to STATUS_MCA_OCCURED (Paulo Alcantara) [RHEL-76046]
  - smb: move SMB2 Status code to common header file (Paulo Alcantara) [RHEL-76046]
  - smb: move some duplicate definitions to common/smbacl.h (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_ace to smb_ace (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_acl to smb_acl (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_sid to smb_sid (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_ntsd to smb_ntsd (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix FALLOC_FL_PUNCH_HOLE support (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix missing set of remote_i_size (Paulo Alcantara) [RHEL-76046]
  - cifs: Share server EOF pos with netfslib (Paulo Alcantara) [RHEL-76046]
  - ALSA: change configuration CONFIG_SND_HDA_SCODEC_TAS2781_SPI (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: fixup ASUS H7606W (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: fixup ASUS GA605W (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (Jaroslav Kysela) [RHEL-76110]
  - ASoC: rt722: add delay time to wait for the calibration procedure (Jaroslav Kysela) [RHEL-76110]
  - ALSA: seq: oss: Send fragmented SysEx messages immediately (Jaroslav Kysela) [RHEL-76110]
  - ALSA: seq: oss: Fix races at processing SysEx messages (Jaroslav Kysela) [RHEL-76110] {CVE-2024-57893}
  - ALSA: seq: Check UMP support for midi_version change (Jaroslav Kysela) [RHEL-76110]
  - sound: usb: format: don't warn that raw DSD is unsupported (Jaroslav Kysela) [RHEL-76110]
  - ASoC: audio-graph-card: Call of_node_put() on correct node (Jaroslav Kysela) [RHEL-76110]
  - sound: usb: enable DSD output for ddHiFi TC44C (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (Jaroslav Kysela) [RHEL-76110]
  - ALSA: usb-audio: US16x08: Initialize array before use (Jaroslav Kysela) [RHEL-76110]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 83JX, 83MC and 83NM (Jaroslav Kysela) [RHEL-76110]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 83LC (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Delete some dead code (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix bogus error handling in tas2781_hda_spi_probe() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix error code in tas2781_read_acpi() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix -Wsometimes-uninitialized in tasdevice_spi_switch_book() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: select CRC32 instead of CRC32_SARWATE (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/tas2781: Add tas2781 hda SPI driver (Jaroslav Kysela) [RHEL-76110]
  - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one (CKI Backport Bot) [RHEL-75898] {CVE-2024-56663}
  - perf/x86/intel: Add Arrow Lake U support (Michael Petlan) [RHEL-33309]
  - wifi: cfg80211: clear link ID from bitmap during link delete after clean up (Jose Ignacio Tornos Martinez) [RHEL-73817 RHEL-74089] {CVE-2024-57898}
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Jose Ignacio Tornos Martinez) [RHEL-72282 RHEL-73817] {CVE-2024-56602}
  - wifi: rtw89: coex: initialize local .dbcc_2g_phy in _set_btg_ctrl() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (Jose Ignacio Tornos Martinez) [RHEL-73669 RHEL-73817] {CVE-2024-48873}
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (Jose Ignacio Tornos Martinez) [RHEL-72421 RHEL-73817] {CVE-2024-53190}
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jose Ignacio Tornos Martinez) [RHEL-72111 RHEL-73817] {CVE-2024-53156}
  - wifi: iwlwifi: fix CRF name for Bz (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: sme: init n_channels before channels[] access (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: wake the queues in case of failure in resume (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: fix a queue stall in certain cases of CSA (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: fix station NSS capability initialization order (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: Remove the Medium Synchronization Delay validity check (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg() (Jose Ignacio Tornos Martinez) [RHEL-72322 RHEL-73817] {CVE-2024-56535}
  - wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: mvm: tell iwlmei when we finished suspending (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: allow fast resume on ax200 (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: Fix TX fail with A2DP after scanning (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: remove msdu_end structure for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - bus: mhi: host: Switch trace_mhi_gen_tre fields to native endian (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: fix one more memcpy size error (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: check radio iface combination for multi radio per wiphy (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: Skip Rx TID cleanup for self peer (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_* (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - perf test: Remove cpu-list BPF cgroup counter test (Michael Petlan) [RHEL-33006]
  - loop: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - loop: refactor queue limits updates (Ming Lei) [RHEL-71345]
  - usb-storage: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - nbd: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - nvme: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - block: fix queue freeze vs limits lock order in sysfs store methods (Ming Lei) [RHEL-71345]
  - block: add a store_limit operations for sysfs entries (Ming Lei) [RHEL-71345]
  - block: don't update BLK_FEAT_POLL in __blk_mq_update_nr_hw_queues (Ming Lei) [RHEL-71345]
  - block: check BLK_FEAT_POLL under q_usage_count (Ming Lei) [RHEL-71345]
  - block: add a queue_limits_commit_update_frozen helper (Ming Lei) [RHEL-71345]
  - block: fix docs for freezing of queue limits updates (Ming Lei) [RHEL-71345]
  - block: return void from the queue_sysfs_entry load_module method (Ming Lei) [RHEL-71345]
  - loop: Fix ABBA locking race (Ming Lei) [RHEL-71345]
  - loop: Simplify discard granularity calc (Ming Lei) [RHEL-71345]
  - loop: Use bdev limit helpers for configuring discard (Ming Lei) [RHEL-71345]
  - nvme-rdma: unquiesce admin_q before destroy it (CKI Backport Bot) [RHEL-73644] {CVE-2024-49569}
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington) [RHEL-60028]
  - SUNRPC: Fix a hang in TLS sock_close if sk_write_pending (Benjamin Coddington) [RHEL-60028]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-567.el9]
changelog:
  - spi: pxa2xx: Add MTP-S, ARL-H, LNL-M support (David Arcari) [RHEL-78311]
  - erofs: promote to full support (Ian Kent) [RHEL-78339]
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-78016] {CVE-2024-43871}
  - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75825]
  - RDMA/mlx5: Move events notifier registration to be after device registration (CKI Backport Bot) [RHEL-72349] {CVE-2024-53224}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-568.el9]
changelog:
  - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix parsing native symlinks directory/file type (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating WSL-style symlinks (Paulo Alcantara) [RHEL-78655]
  - smb3: add support for IAKerb (Paulo Alcantara) [RHEL-78655]
  - oid_registry: Add OIDs for missing Spnego auth mechanisms to Macs (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix struct FILE_ALL_INFO (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating NFS-style symlinks (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating native Windows sockets (Paulo Alcantara) [RHEL-78655]
  - cifs: Add mount option -o reparse=none (Paulo Alcantara) [RHEL-78655]
  - cifs: Add mount option -o symlink= for choosing symlink create type (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix creating and resolving absolute NT-style symlinks (Paulo Alcantara) [RHEL-78655]
  - cifs: Simplify reparse point check in cifs_query_path_info() function (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove symlink member from cifs_open_info_data union (Paulo Alcantara) [RHEL-78655]
  - cifs: Update description about ACL permissions (Paulo Alcantara) [RHEL-78655]
  - cifs: Rename struct reparse_posix_data to reparse_nfs_data_buffer and move to common/smb2pdu.h (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove struct reparse_posix_data from struct cifs_open_info_data (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove unicode parameter from parse_reparse_point() function (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix getting and setting SACLs over SMB1 (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove intermediate object of failed create SFU call (Paulo Alcantara) [RHEL-78655]
  - cifs: Validate EAs for WSL reparse points (Paulo Alcantara) [RHEL-78655]
  - cifs: Change translation of STATUS_PRIVILEGE_NOT_HELD to -EPERM (Paulo Alcantara) [RHEL-78655]
  - cifs: Change translation of STATUS_NOT_A_REPARSE_POINT to -ENODATA (Paulo Alcantara) [RHEL-78655]
  - smb: client: handle lack of EA support in smb2_query_path_info() (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-78655]
  - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove duplicate struct reparse_symlink_data and SYMLINK_FLAG_RELATIVE (Paulo Alcantara) [RHEL-78655]
  - cifs: Do not attempt to call CIFSGetSrvInodeNumber() without CAP_INFOLEVEL_PASSTHRU (Paulo Alcantara) [RHEL-78655]
  - cifs: Do not attempt to call CIFSSMBRenameOpenFile() without CAP_INFOLEVEL_PASSTHRU (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove declaration of dead CIFSSMBQuerySymLink function (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix printing Status code into dmesg (Paulo Alcantara) [RHEL-78655]
  - cifs: Add missing NT_STATUS_* codes from nterr.h to nterr.c (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix endian types in struct rfc1002_session_packet (Paulo Alcantara) [RHEL-78655]
  - cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c (Paulo Alcantara) [RHEL-78655]
  - smb3: add missing tracepoint for querying wsl EAs (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix order of arguments of tracepoints (Paulo Alcantara) [RHEL-78655]
  - smb: client: correctly handle ErrorContextData as a flexible array (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-78655]
  - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-78655]
  - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-78655]
  - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-78655]
  - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-78655]
  - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-78655]
  - thermal/drivers/rcar_gen3: Update temperature approximation calculation (Radu Rendec) [RHEL-78506]
  - thermal/drivers/rcar_gen3: Move Tj_T storage to shared private data (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: checker: Rework drive and bias pin iteration (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: checker: Fix miscalculation of number of states (Radu Rendec) [RHEL-78506]
  - i2c: rcar: fix NACK handling when being a target (Radu Rendec) [RHEL-78506]
  - i2c: rcar: ensure Gen3+ reset does not disturb local targets (Radu Rendec) [RHEL-78506]
  - i2c: rcar: clear NO_RXDMA flag after resetting (Radu Rendec) [RHEL-78506]
  - i2c: rcar: bring hardware to known state when probing (Radu Rendec) [RHEL-78506]
  - i2c: rcar: add FastMode+ support for Gen4 (Radu Rendec) [RHEL-78506]
  - i2c: rcar: introduce Gen4 devices (Radu Rendec) [RHEL-78506]
  - gpio: rcar: drop of_match_ptr for ID table (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_tmu: Mark driver as non-removable (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_cmt: Address race condition for clock events (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_cmt: Mark driver as non-removable (Radu Rendec) [RHEL-78506]
  - serial: sh-sci: Increment the runtime usage counter for the earlycon device (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Move runtime PM enable to sci_probe_single() (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Drop __initdata macro for port_cfg (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Use plain struct copy in early_console_setup() (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: simplify locking when re-issuing RXDMA fails (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: let timeout timer only run when DMA is scheduled (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: describe locking requirements for invalidating RXDMA (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: protect invalidating RXDMA on shutdown (Jared Kangas) [RHEL-78246]
  - rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack (Marc Dionne) [RHEL-78217]
  - rxrpc, afs: Fix peer hash locking vs RCU callback (Marc Dionne) [RHEL-78217]
  - afs: Add more tracepoints to do with tracking validity (Marc Dionne) [RHEL-78217]
  - netfs: Remove some extraneous directory invalidations (Marc Dionne) [RHEL-78217]
  - afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (Marc Dionne) [RHEL-78217]
  - afs: Add rootcell checks (Marc Dionne) [RHEL-78217]
  - afs: Make /afs/.<cell> as well as /afs/<cell> mountpoints (Marc Dionne) [RHEL-78217]
  - afs: Fix the maximum cell name length (Marc Dionne) [RHEL-78217] {CVE-2025-21646}
  - afs: Fix cleanup of immediately failed async calls (Marc Dionne) [RHEL-78217]
  - afs: Fix directory format encoding struct (Marc Dionne) [RHEL-78217]
  - afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (Marc Dionne) [RHEL-78217]
  - afs: Don't use mutex for I/O operation lock (Marc Dionne) [RHEL-78217]
  - rxrpc: Use a large kvec[] in rxrpc_local rather than every rxrpc_txbuf (Marc Dionne) [RHEL-78217]
  - rxrpc: Request an ACK on impending Tx stall (Marc Dionne) [RHEL-78217]
  - rxrpc: Show stats counter for received reason-0 ACKs (Marc Dionne) [RHEL-78217]
  - rxrpc: Don't set the MORE-PACKETS rxrpc wire header flag (Marc Dionne) [RHEL-78217]
  - rxrpc: Clean up Tx header flags generation handling (Marc Dionne) [RHEL-78217]
  - rxrpc: Fix handling of received connection abort (Marc Dionne) [RHEL-78217]
  - rxrpc: Add a tracepoint for aborts being proposed (Marc Dionne) [RHEL-78217]
  - afs: Fix missing subdir edit when renamed between parent dirs (Marc Dionne) [RHEL-78217]
  - rxrpc: Fix uninitialised variable in rxrpc_send_data() (Marc Dionne) [RHEL-78217]
  - afs: Fix the setting of the server responding flag (Marc Dionne) [RHEL-64506 RHEL-78217] {CVE-2024-49999}
  - afs: Remove unused struct and function prototype (Marc Dionne) [RHEL-78217]
  - afs: Fix possible infinite loop with unresponsive servers (Marc Dionne) [RHEL-78217]
  - rxrpc: Remove unused function declarations (Marc Dionne) [RHEL-78217]
  - afs: drop usage of folio_file_pos (Marc Dionne) [RHEL-78217]
  - afs: Convert comma to semicolon (Marc Dionne) [RHEL-78217]
  - afs: Add __counted_by for struct afs_acl and use struct_size() (Marc Dionne) [RHEL-78217]
  - afs: move afs_xattr_handlers to .rodata (Marc Dionne) [RHEL-78217]
  - afs: Annotate struct afs_permits with __counted_by (Marc Dionne) [RHEL-78217]
  - afs: convert to ctime accessor functions (Marc Dionne) [RHEL-78217]
  - afs: Don't use folio->private to record partial modification (Marc Dionne) [RHEL-78217]
  - afs: Remove whitespace before most ')' from the trace header (Marc Dionne) [RHEL-78217]
  - firmware: psci: Fix return value from psci_system_suspend() (Jared Kangas) [RHEL-78060]
  - libperf cpumap: Grow array of read CPUs in smaller increments (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Remove perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Remove use of perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - perf pmu: Remove use of perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Be tolerant of newline at the end of a cpumask (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Hide/reduce scope of MAX_NR_CPUS (Michael Petlan) [RHEL-71187]
  - perf cpumap: Reduce transitive dependencies on libperf MAX_NR_CPUS (Michael Petlan) [RHEL-71187]
  - perf: Increase MAX_NR_CPUS to 4096 (Michael Petlan) [RHEL-71187]
  - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-74147]
  - dev: Acquire netdev_rename_lock before restoring dev->name in dev_change_name(). (Toke Høiland-Jørgensen) [RHEL-77329]
  - Enable CONFIG_INTEL_MEI_PXP and CONFIG_DRM_I915_PXP on rhel (David Arcari) [RHEL-77170]
  - redhat/configs: disable CONFIG_INTEL_MEI_VSC_HW (David Arcari) [RHEL-77170]
  - mei: vsc: Fix typo "maintstepping" -> "mainstepping" (David Arcari) [RHEL-77170]
  - mei: vsc: Improve error logging in vsc_identify_silicon() (David Arcari) [RHEL-77170]
  - mei: vsc: Do not re-enable interrupt from vsc_tp_reset() (David Arcari) [RHEL-77170]
  - mei: clean pending read with vtag on bus (David Arcari) [RHEL-77170]
  - mei: use kvmalloc for read buffer (David Arcari) [RHEL-77170]
  - mei: bus: Reorganize kerneldoc parameter names (David Arcari) [RHEL-77170]
  - finally take no_llseek out [partial] (David Arcari) [RHEL-77170]
  - mei: vsc: Fix spelling error (David Arcari) [RHEL-77170]
  - mei: vsc: Enhance SPI transfer of IVSC ROM (David Arcari) [RHEL-77170]
  - mei: vsc: Utilize the appropriate byte order swap function (David Arcari) [RHEL-77170]
  - mei: vsc: Prevent timeout error with added delay post-firmware download (David Arcari) [RHEL-77170]
  - mei: vsc: Enhance IVSC chipset stability during warm reboot (David Arcari) [RHEL-77170]
  - mei: bus-fixup: set timeout for MKHI send operations (David Arcari) [RHEL-77170]
  - mei: vsc: Fix wrong invocation of ACPI SID method (David Arcari) [RHEL-77170]
  - mei: vsc: Don't stop/restart mei device during system suspend/resume (David Arcari) [RHEL-77170]
  - mei: me: release irq in mei_me_pci_resume error path (David Arcari) [RHEL-77170]
  - mei: demote client disconnect warning on suspend to debug (David Arcari) [RHEL-77170]
  - mei: pxp: match against PCI_CLASS_DISPLAY_OTHER (David Arcari) [RHEL-77170]
  - mei: bus: constify the struct mei_cl_bus_type usage (David Arcari) [RHEL-77170]
  - mei: vsc: Unregister interrupt handler for system suspend (David Arcari) [RHEL-77170]
  - Revert "mei: vsc: Call wake_up() in the threaded IRQ handler" (David Arcari) [RHEL-77170]
  - mei: Avoid a bunch of -Wflex-array-member-not-at-end warnings (David Arcari) [RHEL-77170]
  - mei: gsc_proxy: match component when GSC is on different bus (David Arcari) [RHEL-77170]
  - mei: vsc: Convert to platform remove callback returning void (David Arcari) [RHEL-77170]
  - mei: vsc: Assign pinfo fields in variable declaration (David Arcari) [RHEL-77170]
  - mei: vsc: Don't use sleeping condition in wait_event_timeout() (David Arcari) [RHEL-77170]
  - mei: vsc: Call wake_up() in the threaded IRQ handler (David Arcari) [RHEL-77170]
  - mei: me: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: txe: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: gsc: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: Add Meteor Lake support for IVSC device (David Arcari) [RHEL-77170]
  - mei: pxp: add dependency on Xe driver (David Arcari) [RHEL-77170]
  - mei: hdcp: add dependency on Xe driver (David Arcari) [RHEL-77170]
  - mei: pxp: match without driver name (David Arcari) [RHEL-77170]
  - mei: hdcp: match without driver name (David Arcari) [RHEL-77170]
  - mei: gsc: add support for auxiliary device created by Xe driver (David Arcari) [RHEL-77170]
  - mei: rework Kconfig dependencies (David Arcari) [RHEL-77170]
  - mei: fix vsc dependency (David Arcari) [RHEL-77170]
  - mei: vsc: Rework firmware image names (David Arcari) [RHEL-77170]
  - mei: pxp: spdx should be at first line (David Arcari) [RHEL-77170]
  - mei: Add MEI hardware support for IVSC device (David Arcari) [RHEL-77170]
  - mei: Add transport driver for IVSC device (David Arcari) [RHEL-77170]
  - misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write (David Arcari) [RHEL-77170]
  - misc: mei: client.c: return negative error code in mei_cl_write (David Arcari) [RHEL-77170]
  - mei: pxp: fix mei_pxp_send_message return value (David Arcari) [RHEL-77170]
  - mei: me: emit error only if reset was unexpected (David Arcari) [RHEL-77170]
  - misc: mei: main.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: interrupt.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hw-me.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hbm.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: dma-ring.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: client.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hw.h: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - mei: update mei-pxp's component interface with timeouts [partial] (David Arcari) [RHEL-77170]
  - mei: pxp: re-enable client on errors (David Arcari) [RHEL-77170]
  - mei: pxp: recover from recv fail under memory pressure (David Arcari) [RHEL-77170]
  - mei: bus: add send and recv api with timeout (David Arcari) [RHEL-77170]
  - mei: docs: fix spelling errors (David Arcari) [RHEL-77170]
  - mei: docs: add missing entries to kdoc in struct mei_cfg_idx (David Arcari) [RHEL-77170]
  - mei: docs: use correct structures name in kdoc (David Arcari) [RHEL-77170]
  - mei: make mei_class a static const structure (David Arcari) [RHEL-77170]
  - mei: gsc: add module description (David Arcari) [RHEL-77170]
  - mei: pxp: Keep a const qualifier when calling mei_cldev_send() (David Arcari) [RHEL-77170]
  - mei: obtain firmware version only on gsc. (David Arcari) [RHEL-77170]
  - mei: bus: enable asynchronous suspend. (David Arcari) [RHEL-77170]
  - mei: log firmware status on hw_start failure. (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Move away from master naming to arbiter [partial] (David Arcari) [RHEL-77170]
  - mei: bus-fixup: fix buffer type (David Arcari) [RHEL-77170]
  - mei: bus: drop useless cldev null check (David Arcari) [RHEL-77170]
  - virt: acrn: Mark the uuid field as unused (David Arcari) [RHEL-77170]
  - mei: Move uuid.h to the MEI namespace (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Refactor HDCP API structures [partial] (David Arcari) [RHEL-77170]
  - uuid: remove licence boilerplate text from the header (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Use generic names for HDCP helpers and structs [partial] (David Arcari) [RHEL-77170]
  - mei: lower the log level for non-fatal failed messages (David Arcari) [RHEL-77170]
  - mei: bus: disallow driver match while dismantling device (David Arcari) [RHEL-77170]
  - mei: Move uuid_le_cmp() to its only user (David Arcari) [RHEL-77170]
  - uuid: Decouple guid_t and uuid_le types and respective macros (David Arcari) [RHEL-77170]
  - uuid: discourage people from using UAPI header in new code (David Arcari) [RHEL-77170]
  - mei: mei-me: resume device in prepare (David Arcari) [RHEL-77170]
  - mei: gsc: Remove redundant dev_err call (David Arcari) [RHEL-77170]
  - mei: fix repeated words in comments (David Arcari) [RHEL-77170]
  - misc: move from strlcpy with unused retval to strscpy [partial] (David Arcari) [RHEL-77170]
  - sunrpc: simplify one-level sysctl registration for xs_tunables_table (Benjamin Coddington) [RHEL-73723]
  - sunrpc: simplify one-level sysctl registration for xr_tunables_table (Benjamin Coddington) [RHEL-73723]
  - sunrpc: move sunrpc_table and proc routines above (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Silence compiler complaints about tautological comparisons (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Revert e0a912e8ddba (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Remove unused declarations (Benjamin Coddington) [RHEL-73723]
  - sunrpc: Remove unused extern declarations (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: change svc_xprt::xpt_flags bits to enum (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Remove unused declaration rpc_modcount() (Benjamin Coddington) [RHEL-73723]
  - lockd: define nlm_port_min,max with CONFIG_SYSCTL (Benjamin Coddington) [RHEL-73723]
  - nfs/blocklayout: Limit repeat device registration on failure (Benjamin Coddington) [RHEL-73723]
  - nfs/blocklayout: Don't attempt unregister for invalid block device (Benjamin Coddington) [RHEL-73723]
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (Benjamin Coddington) [RHEL-73723]
  - nfsd: fix refcount leak when file is unhashed after being found (Benjamin Coddington) [RHEL-73723]
  - net: initialize net->notrefcnt_tracker earlier (Benjamin Coddington) [RHEL-73723]
  - mptcp: fix tracking issue in mptcp_subflow_create_socket() (Benjamin Coddington) [RHEL-73723]
  - net: add a refcount tracker for kernel sockets (Benjamin Coddington) [RHEL-73723]
  - NFSD: Fix nfsd4_shutdown_copy() (Benjamin Coddington) [RHEL-73723]
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Benjamin Coddington) [RHEL-73723]
  - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work" (Benjamin Coddington) [RHEL-73723]
  - nfsd: release svc_expkey/svc_export with rcu_work (Benjamin Coddington) [RHEL-73723]
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Benjamin Coddington) [RHEL-73723]
  - nfsd: restore callback functionality for NFSv4.0 (Benjamin Coddington) [RHEL-73723]
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Benjamin Coddington) [RHEL-73723]
  - NFSD: Remove a never-true comparison (Benjamin Coddington) [RHEL-73723]
  - Revert "nfs: don't reuse partially completed requests in nfs_lock_and_join_requests" (Benjamin Coddington) [RHEL-73723]
  - nfsd: drop inode parameter from nfsd4_change_attribute() (Benjamin Coddington) [RHEL-73723]
  - svcrdma: Address an integer overflow (Benjamin Coddington) [RHEL-73723]
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Benjamin Coddington) [RHEL-73723]
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Benjamin Coddington) [RHEL-73723]
  - NFSv3: only use NFS timeout for MOUNT when protocols are compatible (Benjamin Coddington) [RHEL-73723]
  - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Fix integer overflow in decode_rc_list() (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: clnt.c: Remove misleading comment (Benjamin Coddington) [RHEL-73723]
  - nfs: fix memory leak in error path of nfs4_do_reclaim (Benjamin Coddington) [RHEL-73723]
  - nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net() failed (Benjamin Coddington) [RHEL-73723]
  - NFSD: Mark filecache "down" if init fails (Benjamin Coddington) [RHEL-73723]
  - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Benjamin Coddington) [RHEL-73723]
  - NFSD: Fix NFSv4's PUTPUBFH operation (Benjamin Coddington) [RHEL-73723]
  - nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (Benjamin Coddington) [RHEL-73723]
  - Revert "net/tls: fix tls_sk_proto_close executed repeatedly" (Benjamin Coddington) [RHEL-73723]
  - net/tls: fix tls_sk_proto_close executed repeatedly (Benjamin Coddington) [RHEL-73723]
  - hugetlb: prioritize surplus allocation from current node (Aristeu Rozanski) [RHEL-68966]
  - net: tun: call napi_schedule_prep() to ensure we own a napi (Jared Kangas) [RHEL-76236]
  - net: tun: Fix memory leaks of napi_get_frags (Jared Kangas) [RHEL-76236]
  - virtio-net: fix overflow inside virtnet_rq_alloc (Jon Maloy) [RHEL-73638] {CVE-2024-57843}
  - RDMA/uverbs: Prevent integer overflow issue (CKI Backport Bot) [RHEL-74224] {CVE-2024-57890}
  - EDAC/igen6: Add Intel Arrow Lake-U/H SoCs support (Joel Savitz) [RHEL-33317 RHEL-52289]
  - EDAC/bluefield: Fix potential integer overflow (Aristeu Rozanski) [RHEL-72108] {CVE-2024-53161}
  - virtio/vsock: Improve MSG_ZEROCOPY error handling (Jon Maloy) [RHEL-69661] {CVE-2024-53117}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68028] {CVE-2024-50264}
  - powerpc/boot: Fix incorrect version calculation issue in ld_version (Waiman Long) [RHEL-68367]
  - powerpc: suppress some linker warnings in recent linker versions (Waiman Long) [RHEL-68367]
  - Makefile: link with -z noexecstack --no-warn-rwx-segments (Waiman Long) [RHEL-68367]
  - fs: Fix file_set_fowner LSM hook inconsistencies (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add layout1.refer_mount_root (Ryan Sullivan) [RHEL-8810]
  - fs/ioctl: Add a comment to keep the logic in sync with LSM policies (Ryan Sullivan) [RHEL-8810]
  - landlock: Document IOCTL support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Exhaustive test for the IOCTL allow-list (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTLs on named pipes (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTL with memfds (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTL support (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add cred_transfer test (Ryan Sullivan) [RHEL-8810]
  - landlock: Don't lose track of restrictions on cred_transfer (Ryan Sullivan) [RHEL-8810]
  - Enable CONFIG_SECURITY_LANDLOCK for RHEL (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Handle TEST_F()'s explicit exit codes (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix tests timeout and race condition (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix vfork() side effects (Ryan Sullivan) [RHEL-8810]
  - selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix port parsing in sandboxer (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix d_parent walk (Ryan Sullivan) [RHEL-8810]
  - hostfs: fix dev_t handling (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix fixture teardown (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix interleaved scheduling leading to race conditions (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Prevent infinite loop due to Assert in FIXTURE_TEARDOWN (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Share _metadata between forked processes (Ryan Sullivan) [RHEL-8810]
  - landlock: Add IOCTL access right for character and block devices (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix incorrect free in populate_ruleset_net (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Do not allocate memory in fixture data (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix FS tests when run on a private mount point (Ryan Sullivan) [RHEL-8810]
  - fs: Return ENOTTY directly if FS_IOC_GETUUID or FS_IOC_GETFSSYSFSPATH fail (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Don't error out if a file path cannot be opened (Ryan Sullivan) [RHEL-8810]
  - landlock: Use f_cred in security_file_open() hook (Ryan Sullivan) [RHEL-8810]
  - landlock: Rename "ptrace" files to "task" (Ryan Sullivan) [RHEL-8810]
  - landlock: Simplify current_check_access_socket() (Ryan Sullivan) [RHEL-8810]
  - landlock: Warn once if a Landlock action is requested while disabled (Ryan Sullivan) [RHEL-8810]
  - landlock: Extend documentation for kernel support (Ryan Sullivan) [RHEL-8810]
  - landlock: Add support for KUnit tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Clean up error logs related to capabilities (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix TEST_F()'s vfork handling (Ryan Sullivan) [RHEL-8810]
  - selftests: kselftest_harness: use exit code to store skip (Ryan Sullivan) [RHEL-8810]
  - selftests: kselftest_harness: save full exit code in metadata (Jakub Kicinski) [RHEL-8810]
  - selftests/harness: Merge TEST_F_FORK() into TEST_F() (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Redefine TEST_F() as TEST_F_FORK() (Ryan Sullivan) [RHEL-8810]
  - fs: add FS_IOC_GETFSSYSFSPATH (Ryan Sullivan) [RHEL-8810]
  - fs: super_set_uuid() (Ryan Sullivan) [RHEL-8810]
  - kernfs: attach uuid for every kernfs and report it in fsid (Ryan Sullivan) [RHEL-8810]
  - fs: FS_IOC_GETUUID (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix asymmetric private inodes referring (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix fs_test build with old libc (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix net_test build with old libc (Ryan Sullivan) [RHEL-8810]
  - landlock: Optimize the number of calls to get_access_mask slightly (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Rename "permitted" to "allowed" in ftruncate tests (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v6.6] (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v6.1] (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v5.15] (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests to check unhandled rule's access rights (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests to check unknown rule's access rights (Ryan Sullivan) [RHEL-8810]
  - lsm: new security_file_ioctl_compat() hook (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix capability for net_test (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for FS topology changes with network rules (Ryan Sullivan) [RHEL-8810]
  - landlock: Document network support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Support TCP restrictions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add network tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Share enforce_ruleset() helper (Ryan Sullivan) [RHEL-8810]
  - landlock: Support network rules with TCP bind and connect (Ryan Sullivan) [RHEL-8810]
  - hostfs: Fix ephemeral inodes (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor landlock_add_rule() syscall (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor layer helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Move and rename layer helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor merge/inherit_ruleset helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor landlock_find_rule/insert_rule helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Allow FS topology changes for domains without such rule type (Ryan Sullivan) [RHEL-8810]
  - landlock: Make ruleset's access masks more generic (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix a resource leak (Ryan Sullivan) [RHEL-8810]
  - landlock: Annotate struct landlock_rule with __counted_by (Ryan Sullivan) [RHEL-8810]
  - security: Create file_truncate hook from path_truncate hook (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add hostfs tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for pseudo filesystems (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Make mounts configurable (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add supports_filesystem() helper (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Don't create useless file layouts (Ryan Sullivan) [RHEL-8810]
  - landlock: Clarify documentation for the LANDLOCK_ACCESS_FS_REFER right (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ptrace as much as possible with Yama (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Skip overlayfs tests when not supported (Ryan Sullivan) [RHEL-8810]
  - landlock: Explain file descriptor access rights (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Document best-effort approach for LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Document Landlock's file truncation support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Extend sample tool to support LANDLOCK_ACCESS_FS_TRUNCATE (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ftruncate on FDs created by memfd_create(2) (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test FD passing from restricted to unrestricted processes (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Locally define __maybe_unused (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test open() and ftruncate() in multiple scenarios (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test file truncation support (Ryan Sullivan) [RHEL-8810]
  - landlock: Support file truncation (Ryan Sullivan) [RHEL-8810]
  - landlock: Document init_layer_masks() helper (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor check_access_path_dual() into is_access_to_paths_allowed() (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix documentation style (Ryan Sullivan) [RHEL-8810]
  - landlock: Slightly improve documentation and fix spelling (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Print hints about ABI versions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix out-of-tree builds (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Explain how to support Landlock (Ryan Sullivan) [RHEL-8810]
  - landlock: Add design choices documentation for filesystem access rights (Ryan Sullivan) [RHEL-8810]
  - landlock: Document good practices about filesystem policies (Ryan Sullivan) [RHEL-8810]
  - landlock: Document LANDLOCK_ACCESS_FS_REFER and ABI versioning (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add support for file reparenting (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add 11 new test suites dedicated to file reparenting (Ryan Sullivan) [RHEL-8810]
  - landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Move filesystem helpers and add a new one (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix same-layer rule unions (Ryan Sullivan) [RHEL-8810]
  - landlock: Create find_rule() from unmask_layers() (Ryan Sullivan) [RHEL-8810]
  - landlock: Reduce the maximum number of layers to 16 (Ryan Sullivan) [RHEL-8810]
  - landlock: Define access_mask_t to enforce a consistent access mask size (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test landlock_create_ruleset(2) argument check ordering (Ryan Sullivan) [RHEL-8810]
  - landlock: Change landlock_restrict_self(2) check ordering (Ryan Sullivan) [RHEL-8810]
  - landlock: Change landlock_add_rule(2) argument check ordering (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for O_PATH (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fully test file rename with "remove" access (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Extend access right tests to directories (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for unknown access rights (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Extend tests for minimal valid attribute size (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Make tests build with old libc (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix landlock_add_rule(2) documentation (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Format with clang-format (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Format with clang-format (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Normalize array assignment (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - fs: fix an infinite loop in iomap_fiemap (Ryan Sullivan) [RHEL-8810]
  - landlock: Use square brackets around "landlock-ruleset" (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix path_list memory leak (Ryan Sullivan) [RHEL-8810]
  - fs/ioctl: remove unnecessary __user annotation (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: remove ARRAY_SIZE define from common.h (Ryan Sullivan) [RHEL-8810]
  - fs: forbid invalid project ID (Ryan Sullivan) [RHEL-8810]
  - fs: remove generic_block_fiemap (Ryan Sullivan) [RHEL-8810]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-569.el9]
changelog:
  - scsi: ufs: core: Store min and max clk freq from OPP table (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Cancel RTC work during ufshcd_remove() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix the build for the old ARM OABI (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Improve ufshcd_mcq_sq_cleanup() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Start the RTC update work later (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix another deadlock during RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Requeue aborted request (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix the issue of ICU failure (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove ufshcd_urgent_bkops() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Move UFS trace events to private header (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Add HCI capabilities sysfs group (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Prepare to add HCI capabilities sysfs (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Support Updating UIC Command Timeout (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Do not set link to OFF state while waking up from hibernation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix deadlock during RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Bypass quick recovery if force reset is needed (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Check LSDBS cap when !mcq (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add fill_crypto_prdt variant op (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Make .get_hba_mac() optional (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Inline ufshcd_mcq_vops_get_hba_mac() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Move the ufshcd_mcq_enable() call (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Move the "hba->mcq_enabled = true" assignment (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Inline is_mcq_enabled() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Initialize hba->reserved_slot earlier (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename the MASK_TRANSFER_REQUESTS_SLOTS constant (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove two constants (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Initialize struct uic_command once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Declare functions once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove SCSI host only if added (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Suspend clk scaling on no request (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Prevent no I/O queue case for MCQ (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Convert MCQ_CFG_n to an inline function (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix missing argument 'hba' in MCQ_OPR_OFFSET_n (Radu Rendec) [RHEL-79078]
  - scsi: ufs: sysfs: Make max_number_of_rtt read-write (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Maximum RTT supported by the host driver (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Allow RTT negotiation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_abort_one racing issue (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_clear_cmd racing issue (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Free memory allocated for model before reinit (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Quiesce request queues before checking pending cmds (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix error output and clean up ufshcd_mcq_abort() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: mcq: Fix ufshcd_mcq_sqe_search() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Changing the status to check inflight (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove support for old UFSHCI versions (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unnecessary wmb() prior to writing run/stop regs (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unnecessary wmb() after ringing doorbell (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after disabling interrupts (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after writing UTP_TASK_REQ_LIST_BASE_H (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Drop driver owner initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Reuse compose_devman_upiu (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Reuse compose_dev_cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Reuse exec_dev_cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Reuse device management locking code (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ mode dev command timeout (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: WLUN suspend dev/link state error recovery (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ MAC configuration (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Remove unused parameters (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use ufshcd_mcq_req_to_hwq() to simplify updating hwq (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add definition for REG_UFS_MEM_CFG register (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Migrate to UFSHCD generic CPU latency PM QoS support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add CPU latency QoS support for UFS driver (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Uninitialized variable in ufshcd_devfreq_target() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove the ufshcd_release() in ufshcd_err_handling_prepare() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify power management during async scan (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify ufshcd_auto_hibern8_update() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename ufshcd_auto_hibern8_enable() and make it static (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add sysfs node for UFS RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFS RTC support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add ufshcd_is_ufs_dev_busy() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Warn if the request tag is truncated (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Make fault injection dynamically configurable per HBA (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-sysfs: Expose UFS power info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Let the sq_lock protect sq_tail_slot access (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Clear cmd if abort succeeds in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Expand MCQ queue slot to DeviceQueueDepth + 1 (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Leave space for '\0' in utf8 desc string (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Conversion to bool not necessary (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix race between force complete and ISR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove dev cmd clock scaling busy (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: WLUN send SSU timeout recovery (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set the Command Priority (CP) flag for RT requests (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify ufshcd_comp_scsi_upiu() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove request tag range checks (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Include the SCSI ID in UFS command tracing output (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Correct clear TM error log (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: No need to update UPIU.header.flags and lun in advanced RPMB handler (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add advanced RPMB support where UFSHCI 4.0 does not support EHS length in UTRD (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix the build for gcc 9 and before (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify response header parsing (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify transfer request header initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove a member variable (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify ufshcd_abort_all() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove a local variable from ufshcd_abort_all() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Improve type safety (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify zero-initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Minimize #include directives (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Rename a function argument (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix kernel-doc headers (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Document all return values (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Follow the kernel-doc syntax for documenting return values (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix residual handling (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove HPB support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix some kernel-doc comments (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Add MCQ support for MTK platform (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Export symbols for MTK driver module (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Convert UPIU_HEADER_DWORD() into a function (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix the search/wrap around logic (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add support for qTimestamp attribute (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unused function declaration (Radu Rendec) [RHEL-79078]
  - scsi: ufs: wb: Add explicit flush_threshold sysfs attribute (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Set UFSHCD_QUIRK_MCQ_BROKEN_RTC quirk (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Set UFSHCD_QUIRK_MCQ_BROKEN_INTR quirk (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add host quirk UFSHCD_QUIRK_MCQ_BROKEN_RTC (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add host quirk UFSHCD_QUIRK_MCQ_BROKEN_INTR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove dedicated hwq for dev command (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: mcq: Fix the incorrect OCS value for the device command (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Combine ufshcd_mq_poll_cqe functions (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_inc_sq_tail() function bug (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove a ufshcd_add_command_trace() call (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify driver shutdown (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Move ufshcd_wl_shutdown() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix handling of lrbp->cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Increase the START STOP UNIT timeout from one to ten seconds (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add error handling for MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use ufshcd_mcq_poll_cqe_lock() in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Added ufshcd_mcq_abort() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add support for cleaning up MCQ resources (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add supporting functions for MCQ abort (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Update the ufshcd_clear_cmds() functionality (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Combine 32-bit command_desc_base_addr_lo/hi (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Replace all non-returning strlcpy() with strscpy() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Do not open code SZ_x (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Ungate the clock synchronously (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Declare ufshcd_{hold,release}() once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Conditionally enable the BLK_MQ_F_BLOCKING flag (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Return earlier if ufshcd_hba_init_crypto_capabilities() fails (Radu Rendec) [RHEL-79078]
  - scsi: ufs: hwmon: Constify pointers to hwmon_channel_info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Change the module parameter macro of use_mcq_mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ nr_hw_queues (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ tag calculation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use pointer arithmetic in ufshcd_send_command() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Annotate ufshcd_inc_sq_tail() appropriately (Radu Rendec) [RHEL-79078]
  - scsi: core: Clean up struct ufs_saved_pwr_info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add trace event for MCQ (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Print trs for pending requests in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set the residual byte count (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Disable the reset settle delay (Radu Rendec) [RHEL-79078]
  - scsi: mpi3mr: Avoid reply queue full condition (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Fix possible crash when setting up bsg fails (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update driver version to 8.12.0.3.50 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Handling of fault code for insufficient power (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Start controller indexing from 0 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Chandrakanth Patil) [RHEL-49780] {CVE-2024-57804}
  - scsi: mpi3mr: Synchronize access to ioctl data buffer (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Validate SAS port assignments (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Improve wait logic while controller transitions to READY state (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update MPI Headers to revision 34 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Use firmware-provided timestamp update interval (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Enhance the Enable Controller retry logic (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: A performance fix (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update consumer index of reply queues after every 100 replies (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Return complete ioc_status for ioctl commands (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Avoid MAX_PAGE_ORDER WARNING for buffer allocations (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Add missing spin_lock_init() for mrioc->trigger_lock (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Prevent PCI writes from driver during PCI error recovery (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Support PCI Error Recovery callback handlers (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Correct a test in mpi3mr_sas_port_add() (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Add ioctl support for HDB (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Trigger support (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: HDB allocation and posting for hardware and firmware buffers (Chandrakanth Patil) [RHEL-49780]
  - rpmsg: virtio: Free driver_override when rpmsg_remove() (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Replace deprecated strncpy with strscpy/_pad (Jared Kangas) [RHEL-78824]
  - rpmsg: Replace deprecated strncpy with strscpy_pad (Jared Kangas) [RHEL-78824]
  - rpmsg: core: Replace deprecated strncpy with strscpy (Jared Kangas) [RHEL-78824]
  - rpmsg: glink: Release driver_override (Jared Kangas) [RHEL-78824]
  - rpmsg: ctrl: Add lock to rpmsg_ctrldev_remove (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Add lock to avoid race when rpmsg device is released (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Avoid double destroy of default endpoint (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (Jared Kangas) [RHEL-78824]
  - rpmsg: Strcpy is not safe, use strscpy_pad() instead (Jared Kangas) [RHEL-78824]
  - rpmsg: mtk_rpmsg: Fix circular locking dependency (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Add mutex protection for rpmsg_eptdev_open() (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge (Jared Kangas) [RHEL-78824]
  - rpmsg: use local 'dev' variable (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix calling device_lock() on non-initialized device (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev() (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix possible double free in rpmsg_probe() (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix parameter naming for announce_create/destroy ops (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix kfree() of static memory on setting driver_override (Jared Kangas) [RHEL-78824]
  - rpmsg: Constify local variable in field store macro (Jared Kangas) [RHEL-78824]
  - clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (Waiman Long) [RHEL-76143]
  - clocksource: Use pr_info() for "Checking clocksource synchronization" message (Waiman Long) [RHEL-76143]
  - clocksource: Make watchdog and suspend-timing multiplication overflow safe (Waiman Long) [RHEL-76143]
  - clocksource: Scale the watchdog read retries automatically (Waiman Long) [RHEL-76143]
  - clocksource: Skip watchdog check for large watchdog intervals (Waiman Long) [RHEL-76143]
  - torture: Enable clocksource watchdog with "tsc=watchdog" (Waiman Long) [RHEL-76143]
  - clocksource: Suspend the watchdog temporarily when high read latency detected (Waiman Long) [RHEL-76143]
  - clocksource: Loosen clocksource watchdog constraints (Waiman Long) [RHEL-76143]
  - clocksource: Replace cpumask_weight() with cpumask_empty() (Waiman Long) [RHEL-76143]
  - clocksource: Add a Kconfig option for WATCHDOG_MAX_SKEW (Waiman Long) [RHEL-76143]
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (CKI Backport Bot) [RHEL-77211] {CVE-2025-21666}
  - net: atlantic: use irq_update_affinity_hint() (Izabela Bakollari) [RHEL-73855 RHEL-76480]
  - net: atlantic: convert comma to semicolon (Izabela Bakollari) [RHEL-73855]
  - net: atlantic: Avoid warning about potential string truncation (Izabela Bakollari) [RHEL-73855]
  - net: atlantic: use ethtool_sprintf (Izabela Bakollari) [RHEL-73855]
  - x86: bring back rep movsq for user access on CPUs without ERMS (Herton R. Krzesinski) [RHEL-74389]
  - x86/retpolines: Enable the default thunk warning only on relevant configs (Waiman Long) [RHEL-71467]
  - x86/vdso: Fix rethunk patching for vdso-image-{32,64}.o (Waiman Long) [RHEL-71467]
  - x86/retpoline: Ensure default return thunk isn't used at runtime (Waiman Long) [RHEL-71467]
  - objtool: Revert "skip non-text sections when adding return-thunk sites" (Waiman Long) [RHEL-71467]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-570.el9]
changelog:
  - rhel-9: gate on kernel-qe tests results not cki ones (Bruno Goncalves)
  - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (CKI Backport Bot) [RHEL-78682] {CVE-2025-21689}
  - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (CKI Backport Bot) [RHEL-78307]
  - pmdomain: imx8mp-blk-ctrl: add missing loop break condition (CKI Backport Bot) [RHEL-77237] {CVE-2025-21668}
  - vsock/virtio: discard packets if the transport changes (CKI Backport Bot) [RHEL-77228] {CVE-2025-21669}
  - s390/mm/hugetlbfs: Add missing includes (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Add PTE_MARKER support for hugetlbfs mappings (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Introduce region-third and segment table swap entries (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Introduce region-third and segment table entry present bits (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Rearrange region-third and segment table entry SW bits (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() (Aristeu Rozanski) [RHEL-74362]
  - s390/pgtable: Switch read and write softbits for puds (Aristeu Rozanski) [RHEL-74362]
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (CKI Backport Bot) [RHEL-75840] {CVE-2024-56611}
  - workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (Waiman Long) [RHEL-74107] {CVE-2024-57888}
  - ovl: Filter invalid inodes with missing lookup function (Miklos Szeredi) [RHEL-72307] {CVE-2024-56570}
  - pmdomain: imx93-blk-ctrl: correct remove path (CKI Backport Bot) [RHEL-70045] {CVE-2024-53134}
  - i2c: tegra: Do not mark ACPI devices as irq safe (Mark Salter) [RHEL-50601]
  - i2c: tegra: allow VI support to be compiled out (Mark Salter) [RHEL-50601]
  - i2c: tegra: allow DVC support to be compiled out (Mark Salter) [RHEL-50601]
  - i40e: fix race condition by adding filter's intermediate sync state (CKI Backport Bot) [RHEL-68274] {CVE-2024-53088}


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-571.el9]
changelog:
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (Eric Auger) [RHEL-68997]
  - PCI: qcom: Update ICC and OPP values after Link Up event (Myron Stowe) [RHEL-67693]
  - PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy() (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Enable MSI interrupts together with Link up if 'Global IRQ' is supported (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: mediatek-gen3: Allow exact number of clocks only (Myron Stowe) [RHEL-67693]
  - PCI: Fix pci_enable_acs() support for the ACS quirks (Myron Stowe) [RHEL-67693]
  - PCI: Hold rescan lock while adding devices during host probe (Myron Stowe) [RHEL-67693]
  - tools: PCI: Remove unused BILLION macro (Myron Stowe) [RHEL-67693]
  - tools: PCI: Remove .*.cmd files with make clean (Myron Stowe) [RHEL-67693]
  - PCI: Fix typos (Myron Stowe) [RHEL-67693]
  - PCI/VPD: Remove pci_vpd_release() unused declarations (Myron Stowe) [RHEL-67693]
  - PCI/PM: Remove __pci_pme_wakeup() unused declarations (Myron Stowe) [RHEL-67693]
  - PCI: Make pci_bus_type constant (Myron Stowe) [RHEL-67693]
  - x86/PCI: Check pcie_find_root_port() return for NULL (Myron Stowe) [RHEL-67693]
  - PCI: Mark Creative Labs EMU20k2 INTx masking as broken (Myron Stowe) [RHEL-67693]
  - PCI: Add ACS quirk for Qualcomm SA8775P (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: xilinx-xdma: Add schemas for Xilinx QDMA PCIe Root Port Bridge (Myron Stowe) [RHEL-67693]
  - arm64: zynqmp: Add PCIe phys property for ZCU102 (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Add PHY support (Myron Stowe) [RHEL-67693]
  - dt-bindings: pci: xilinx-nwl: Add phys property (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Clean up clock on probe failure/removal (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Rate-limit misc interrupt messages (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Fix register misspelling (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler (Myron Stowe) [RHEL-67693]
  - PCI: vmd: Fix indentation issue in vmd_shutdown() (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: rcar-gen4-pci-ep: Add R-Car V4M compatible (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: rcar-gen4-pci-host: Add R-Car V4M compatible (Myron Stowe) [RHEL-67693]
  - PCI: rcar-gen4: Make read-only const array check_addr static (Myron Stowe) [RHEL-67693]
  - PCI: Pass domain number to pci_bus_release_domain_nr() explicitly (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Add RX lane margining settings for 16.0 GT/s (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Add equalization settings for 16.0 GT/s (Myron Stowe) [RHEL-67693]
  - PCI: dwc: Always cache the maximum link speed value in dw_pcie::max_link_speed (Myron Stowe) [RHEL-67693]
  - PCI: qcom-ep: Enable controller resources like PHY only after refclk is available (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Enumerate endpoints based on Link up event in 'global_irq' interrupt (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: qcom,pcie-sm8450: Add 'global' interrupt (Myron Stowe) [RHEL-67693]
  - PCI: qcom-ep: Modify 'global_irq' and 'perst_irq' IRQ device names (Myron Stowe) [RHEL-67693]
  - PCI: endpoint: Assign PCI domain number for endpoint controllers (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: pci-ep: Document 'linux,pci-domain' property (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: pci-ep: Update Maintainers (Myron Stowe) [RHEL-67693]
  - PCI: qcom-ep: Reword the error message for receiving unknown global IRQ event (Myron Stowe) [RHEL-67693]
  - PCI: qcom-ep: Drop the redundant masking of global IRQ events (Myron Stowe) [RHEL-67693]
  - PCI: mediatek-gen3: Add Airoha EN7581 support (Myron Stowe) [RHEL-67693]
  - PCI: mediatek-gen3: Rely on reset_bulk APIs for PHY reset lines (Myron Stowe) [RHEL-67693]
  - PCI: mediatek-gen3: Add mtk_gen3_pcie_pdata data structure (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: mediatek-gen3: Add support for Airoha EN7581 (Myron Stowe) [RHEL-67693]
  - PCI: mediatek: Drop excess mtk_pcie.mem kerneldoc description (Myron Stowe) [RHEL-67693]
  - PCI/ACPI: Increase Loongson max PCI hosts to 8 (Myron Stowe) [RHEL-67693]
  - PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Add suspend and resume support (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Use T_PERST_CLK_US macro (Myron Stowe) [RHEL-67693]
  - PCI: Add T_PERST_CLK_US macro (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Add reset GPIO to struct j721e_pcie (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Use dev_err_probe() in the probe() function (Myron Stowe) [RHEL-67693]
  - PCI: cadence: Set cdns_pcie_host_init() global (Myron Stowe) [RHEL-67693]
  - PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup() (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: ti,j721e-pci-host: Add ACSPCIE proxy control property (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: imx6q-pcie: Add i.MX8Q PCIe compatible string (Myron Stowe) [RHEL-67693]
  - PCI: dra7xx: Fix error handling when IRQ request fails in probe (Myron Stowe) [RHEL-67693]
  - PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ (Myron Stowe) [RHEL-67693]
  - PCI: cadence: Drop excess cdns_pcie_rc.dev kerneldoc description (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Sort enums, pcie_offsets[], pcie_cfg_data, .compatible strings (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Enable 7712 SoCs (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Change field name from 'type' to 'soc_base' (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Check return value of all reset_control_* calls (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Refactor for chips with many regular inbound windows (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Don't conflate the reset rescal with PHY ctrl (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Remove two unused constants from driver (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: PCI: brcmstb: Make HARD_DEBUG, INTR2_CPU_BASE offsets SoC-specific (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Use swinit reset if available (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Use bridge reset if available (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Use common error handling code in brcm_pcie_probe() (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: brcm,stb-pcie: Add 7712 SoC description (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: brcm,stb-pcie: Use maxItems for reset controllers (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: brcm,stb-pcie: Change brcmstb maintainer and cleanup (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: brcmstb: compatible is required (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: Add compatible string for Brcmstb 74[23]5 MIPs SOCs (Myron Stowe) [RHEL-67693]
  - PCI: altera: Replace TLP_REQ_ID() with macro PCI_DEVID() (Myron Stowe) [RHEL-67693]
  - PCI: xilinx: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: vmd: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: tegra: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: rcar-host: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: mobiveil: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: mediatek: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: mediatek-gen3: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: dwc: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: altera-msi: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: aardvark: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - genirq/msi: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: endpoint: Fix enum pci_epc_bar_type kerneldoc (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: qcom: Allow 'vddpe-3v3-supply' again (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: imx6q-pcie: Add reg-name "dbi2" and "atu" for i.MX8M PCIe Endpoint (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: altera: msi: Convert to YAML (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: altera: Convert to YAML (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: qcom,pcie-sc7280: Update bindings adding eight interrupts (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: layerscape-pci: Change property 'fsl,pcie-scfg' type (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: layerscape-pci: Add deprecated property 'num-viewport' (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: layerscape-pci: Replace fsl,lx2160a-pcie with fsl,lx2160ar2-pcie (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: socionext,uniphier-pcie-ep: Add top-level constraints (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: renesas,pci-rcar-gen2: Add top-level constraints (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: hisilicon,kirin-pcie: Add top-level constraints (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: host-generic-pci: Drop minItems and maxItems of ranges (Myron Stowe) [RHEL-67693]
  - s390/pci: Stop usurping pdev->dev.groups (Myron Stowe) [RHEL-67693]
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (Myron Stowe) [RHEL-67693]
  - PCI: shpchp: Remove hpc_ops (Myron Stowe) [RHEL-67693]
  - drm/ast: Request PCI BAR with devres (Myron Stowe) [RHEL-67693]
  - PCI: Deprecate pcim_iomap_regions() in favor of pcim_iomap_region() (Myron Stowe) [RHEL-67693]
  - PCI: Make pcim_request_region() a public function (Myron Stowe) [RHEL-67693]
  - PCI: Rename CRS Completion Status to RRS (Myron Stowe) [RHEL-67693]
  - PCI: aardvark: Correct Configuration RRS checking (Myron Stowe) [RHEL-67693]
  - PCI/AER: Use PCI_DEVID() macro in aer_inject() (Myron Stowe) [RHEL-67693]
  - s390/pci: Drop unneeded reference to CONFIG_DMI (Myron Stowe) [RHEL-67693]
  - cpufreq/amd-pstate: Fix cpufreq_policy ref counting (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix max_perf updation with schedutil (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the goto label in amd_pstate_update_limits (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix per-policy boost flag incorrect when fail (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Refactor max frequency calculation (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix prefcore rankings (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Drop boost_state variable (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Set different default EPP policy for Epyc and Ryzen (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Drop ret variable from amd_pstate_set_energy_pref_index() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Always write EPP value when updating perf (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Cache EPP value and use that everywhere (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Move limit updating code (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Change amd_pstate_update_perf() to return an int (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: store all values in cpudata struct in khz (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Only update the cached value in msr_set_epp() on success (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Use FIELD_PREP and FIELD_GET macros (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Drop cached epp_policy variable (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: convert mutex use to guard() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Merge amd_pstate_epp_cpu_offline() and amd_pstate_epp_offline() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Add trace event for EPP perf updates (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the cppc_state check in offline/online functions (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Refactor amd_pstate_epp_reenable() and amd_pstate_epp_offline() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Move the invocation of amd_pstate_update_perf() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Convert the amd_pstate_get/set_epp() to static calls (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Use boost numerator for upper bound of frequencies (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Store the boost numerator as highest perf again (David Arcari) [RHEL-75923]
  - amd-pstate: Add missing documentation for `amd_pstate_prefcore_ranking` (David Arcari) [RHEL-75923]
  - cpufreq: amd-pstate: Add documentation for `amd_pstate_hw_prefcore` (David Arcari) [RHEL-75923]
  - Documentation: cpufreq: amd-pstate: update doc for Per CPU boost control method (David Arcari) [RHEL-75923]
  - Documentation: PM: amd-pstate: add guided mode to the Operation mode (David Arcari) [RHEL-75923]
  - Documentation: PM: amd-pstate: Fix section title underline (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: introduce amd-pstate preferred core (David Arcari) [RHEL-75923]
  - Documentation: admin-guide: PM: Fix two typos (David Arcari) [RHEL-75923]
  - Documentation: cpufreq: amd-pstate: Update amd_pstate status sysfs for guided (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: disambiguate user space sections (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: introduce new global sysfs attributes (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: add amd pstate driver mode introduction (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: add EPP profiles introduction (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: Add tbench and gitsource test introduction (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Detect preferred core support before driver registration (David Arcari) [RHEL-75923]
  - ACPI: processor: Move arch_init_invariance_cppc() call later (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Move registration after static function call update (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Push adjust_perf vfunc init into cpu_init (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Align offline flow of shared memory and MSR based systems (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Call cppc_set_epp_perf in the reenable function (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Do not attempt to clear MSR_AMD_CPPC_ENABLE (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Rename functions that enable CPPC (David Arcari) [RHEL-75923]
  - amd-pstate: Switch to amd-pstate by default on some Server platforms (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate-ut: Add fix for min freq unit test (David Arcari) [RHEL-75923]
  - amd-pstate: Set min_perf to nominal_perf for active mode performance gov (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the redundant amd_pstate_set_driver() call (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the switch case in amd_pstate_init() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Call amd_pstate_set_driver() in amd_pstate_register_driver() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Call amd_pstate_register() in amd_pstate_init() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Set the initial min_freq to lowest_nonlinear_freq (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the redundant verify() function (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Drop needless EPP initialization (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Use amd_pstate_update_min_max_limit() for EPP limits (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Don't update CPPC request in amd_pstate_cpu_boost_update() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Rename MSR and shared memory specific functions (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix non kerneldoc comment (David Arcari) [RHEL-75923]
  - x86/cpufeatures: Rename X86_FEATURE_FAST_CPPC to have AMD prefix (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Use nominal perf for limits when boost is disabled (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate-ut: Fix an "Uninitialized variables" issue (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate-ut: Add test case for mode switches (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Export symbols for changing modes (David Arcari) [RHEL-75923]
  - cpufreq: amd-pstate: Optimize amd_pstate_update_limits() (David Arcari) [RHEL-75923]
  - cpufreq: amd-pstate: Merge amd_pstate_highest_perf_set() into amd_get_boost_ratio_numerator() (David Arcari) [RHEL-75923]
  - x86/amd: Detect preferred cores in amd_get_boost_ratio_numerator() (David Arcari) [RHEL-75923]
  - x86/amd: Move amd_get_highest_perf() out of amd-pstate (David Arcari) [RHEL-75923]
  - x86/amd: Rename amd_get_highest_perf() to amd_get_boost_ratio_numerator() (David Arcari) [RHEL-75923]
  - x86/amd: Move amd_get_highest_perf() from amd.c to cppc.c (David Arcari) [RHEL-75923]
  - MAINTAINERS: adjust file entry in INTEL TPMI DRIVER (David Arcari) [RHEL-79669]
  - redhat: handle rename of intel_vsec.ko and intel_vsec_tpmi.ko (David Arcari) [RHEL-79669]
  - tools/power/x86/intel-speed-select: v1.21 release (David Arcari) [RHEL-79669]
  - tools/power/x86/intel-speed-select: Fix TRL restore after SST-TF disable (David Arcari) [RHEL-79669]
  - platform/x86/intel: power-domains: Add Diamond Rapids support (David Arcari) [RHEL-79669]
  - platform/x86/intel/tpmi/plr: Make char[] longer to silence warning (David Arcari) [RHEL-79669]
  - platform/x86: intel: Add 'intel' prefix to the modules automatically (David Arcari) [RHEL-79669]
  - platform/x86/intel/Makefile: cleanup (David Arcari) [RHEL-79669]
  - platform/x86/intel: power-domains: Add Clearwater Forest support (David Arcari) [RHEL-74191]
  - platform/x86: ISST: Add Clearwater Forest to support list (David Arcari) [RHEL-74191]
  - platform/x86: ISST: Use in_range() to check package ID validity (David Arcari) [RHEL-79669]
  - platform/x86/intel: pmt: Use y instead of objs in Makefile (David Arcari) [RHEL-79553]
  - platform/x86/intel/pmt: Correct the typo 'ACCCESS_LOCAL' (David Arcari) [RHEL-79553]
  - platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show() (David Arcari) [RHEL-79553]
  - platform/x86: intel/pmc: Fix ioremap() of bad address (David Arcari) [RHEL-79553]
  - x86/tsc: Move away from TSC leaf magic numbers (David Arcari) [RHEL-79553]
  - x86/cpu: Move TSC CPUID leaf definition (David Arcari) [RHEL-79553]
  - platform/x86/intel/pmt: allow user offset for PMT callbacks (David Arcari) [RHEL-79553]
  - redhat: fix build/install targets in netfilter kselftest (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: make first pass deterministic (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_vrf.sh: add fib test case (Florian Westphal) [RHEL-21061]
  - selftests: add regression test for br_netfilter panic (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: Avoid hanging ipvs.sh (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_tproxy.sh: add tcp tests (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: add test for br_netfilter+conntrack+queue combination (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_queue.sh: add test for disappearing listener (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: bump socat timeout to 1m (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_tcp_unreplied.sh: wait for initial connection attempt (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_concat_range.sh: reduce debug kernel run time (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: avoid test timeouts on debug kernels (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_zones_many.sh: set ct sysctl after ruleset load (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_vrf.sh: prefer socat, not iperf3 (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: re-run with random mtu sizes (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_concat_range.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_concat_range.sh: drop netcat support (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_concat_range.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: update makefiles and kernel config (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_meta.sh: small shellcheck cleanup (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_fib.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_ipip_mtu.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_nat_zones.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_zones_many.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_synproxy.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_queue.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_queue.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_nat.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: move test to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_fib.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_conntrack_helper.sh: test to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nf_nat_edemux.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: ipvs.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: place checktool helper in lib.sh (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_ipip_mtu.sh" move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_vrf.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_sctp_collision.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_tcp_unreplied.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_icmp_related.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: br_netfilter.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: bridge_brouter.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: move to net subdir (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: synproxy test requires nf_conntrack (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: add bridge conntrack + multicast test case (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: test for sctp collision processing in nf_conntrack (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: fix libmnl pkg-config usage (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: fix a build error on openSUSE (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: add synproxy test (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: reduce zone stress test running time (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: check ingress/egress chain too (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: monitor result file sizes (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: wait for specific nc pids (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: no need for ps -x option (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: use /proc for pid checking (Florian Westphal) [RHEL-21061]
  - testing: selftests: nft_flowtable.sh: rework test to detect offload failure (Florian Westphal) [RHEL-21061]
  - testing: selftests: nft_flowtable.sh: use random netns names (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: add fib expression forward test case (Florian Westphal) [RHEL-21061]
  - selftests: nft_concat_range: add socat support (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: extend nfqueue tests to cover vrf device (Florian Westphal) [RHEL-21061]
  - thermal: Drop spaces before TABs (David Arcari) [RHEL-61357]
  - thermal/debugfs: Fix the NULL vs IS_ERR() confusion in debugfs_create_dir() (David Arcari) [RHEL-61357]
  - thermal: core: Drop thermal_zone_device_is_enabled() (David Arcari) [RHEL-61357]
  - thermal: core: Check passive delay in monitor_thermal_zone() (David Arcari) [RHEL-61357]
  - thermal: core: Drop dead code from monitor_thermal_zone() (David Arcari) [RHEL-61357]
  - thermal: core: Drop redundant lockdep_assert_held() (David Arcari) [RHEL-61357]
  - thermal: sysfs: Add sanity checks for trip temperature and hysteresis (David Arcari) [RHEL-61357]
  - thermal/of: Use the .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
  - thermal: core: Fix rounding of delay jiffies (David Arcari) [RHEL-61357]
  - thermal: core: Drop tz field from struct thermal_instance (David Arcari) [RHEL-61357]
  - thermal: core: Drop redundant checks from thermal_bind_cdev_to_trip() (David Arcari) [RHEL-61357]
  - thermal: core: Rename cdev-to-thermal-zone bind/unbind functions (David Arcari) [RHEL-61357]
  - thermal: core: Clean up trip bind/unbind functions (David Arcari) [RHEL-61357]
  - thermal: core: Drop unused bind/unbind functions and callbacks (David Arcari) [RHEL-61357]
  - mlxsw: core_thermal: Use the .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
  - thermal: core: Unexport thermal_bind_cdev_to_trip() and thermal_unbind_cdev_from_trip() (David Arcari) [RHEL-61357]
  - thermal: ACPI: Use the .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
  - thermal: core: Introduce .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
  - thermal: core: Move thermal zone locking out of bind/unbind functions (David Arcari) [RHEL-61357]
  - thermal: sysfs: Use the dev argument in instance-related show/store (David Arcari) [RHEL-61357]
  - thermal: core: Drop redundant thermal instance checks (David Arcari) [RHEL-61357]
  - thermal: core: Rearrange checks in thermal_bind_cdev_to_trip() (David Arcari) [RHEL-61357]
  - thermal: core: Fold two functions into their respective callers (David Arcari) [RHEL-61357]
  - thermal/core: Compute low and high boundaries in thermal_zone_device_update() (David Arcari) [RHEL-61357]
  - thermal: of: Fix OF node leak in of_thermal_zone_find() error paths (David Arcari) [RHEL-61357]
  - thermal: of: Fix OF node leak in thermal_of_zone_register() (David Arcari) [RHEL-61357]
  - thermal: of: Fix OF node leak in thermal_of_trips_init() error path (David Arcari) [RHEL-61357]
  - thermal: gov_bang_bang: Use governor_data to reduce overhead (David Arcari) [RHEL-61357]
  - thermal: helpers: Drop get_thermal_instance() (David Arcari) [RHEL-61357]
  - thermal: trip: Avoid skipping trips in thermal_zone_set_trips() (David Arcari) [RHEL-61357]
  - thermal: sysfs: Refine the handling of trip hysteresis changes (David Arcari) [RHEL-61357]
  - thermal: sysfs: Get to trips via attribute pointers (David Arcari) [RHEL-61357]
  - thermal: core: Store trip sysfs attributes in thermal_trip_desc (David Arcari) [RHEL-61357]
  - thermal: trip: Drop thermal_zone_get_trip() (David Arcari) [RHEL-61357]
  - thermal: qcom: Use thermal_zone_get_crit_temp() in qpnp_tm_init() (David Arcari) [RHEL-61357]
  - thermal: trip: Get rid of thermal_zone_get_num_trips() (David Arcari) [RHEL-61357]
  - thermal: tegra: Use thermal_zone_for_each_trip() for walking trip points (David Arcari) [RHEL-61357]
  - thermal: core: Back off when polling thermal zones on errors (David Arcari) [RHEL-61357]
  - thermal: trip: Split thermal_zone_device_set_mode() (David Arcari) [RHEL-61357]
  - thermal: core: Allow thermal zones to tell the core to ignore them (David Arcari) [RHEL-61357]
  - thermal: core: Add sanity checks for polling_delay and passive_delay (David Arcari) [RHEL-61357]
  - thermal: core: Fix list sorting in __thermal_zone_device_update() (David Arcari) [RHEL-61357]
  - thermal: core: Change passive_delay and polling_delay data type (David Arcari) [RHEL-61357]
  - thermal: core: constify 'type' in devm_thermal_of_cooling_device_register() (David Arcari) [RHEL-61357]
  - thermal: trip: Fold __thermal_zone_get_trip() into its caller (David Arcari) [RHEL-61357]
  - thermal: core: Call monitor_thermal_zone() if zone temperature is invalid (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Go straight to instance->lower when mitigation is over (David Arcari) [RHEL-61357]
  - thermal: core: Change PM notifier priority to the minimum (David Arcari) [RHEL-61357]
  - thermal: core: Synchronize suspend-prepare and post-suspend actions (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Restore passive polling management (David Arcari) [RHEL-61357]
  - thermal: ACPI: Invalidate trip points with temperature of 0 or below (David Arcari) [RHEL-61357]
  - thermal: core: Do not fail cdev registration because of invalid initial state (David Arcari) [RHEL-61357]
  - thermal: core: Avoid calling .trip_crossed() for critical and hot trips (David Arcari) [RHEL-61357]
  - thermal: trip: Use READ_ONCE() for lockless access to trip properties (David Arcari) [RHEL-61357]
  - thermal: trip: Make thermal_zone_set_trips() use trip thresholds (David Arcari) [RHEL-61357]
  - thermal: trip: Rename __thermal_zone_set_trips() to thermal_zone_set_trips() (David Arcari) [RHEL-61357]
  - thermal: trip: Use common set of trip type names (David Arcari) [RHEL-61357]
  - thermal/debugfs: Move some statements from under thermal_dbg->lock (David Arcari) [RHEL-61357]
  - thermal/debugfs: Compute maximum temperature for mitigation episode as a whole (David Arcari) [RHEL-61357]
  - thermal/debugfs: Adjust check for trips without statistics in tze_seq_show() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Fix up units in "mitigations" files (David Arcari) [RHEL-61357]
  - thermal/debugfs: Print mitigation timestamp value in milliseconds (David Arcari) [RHEL-61357]
  - thermal/debugfs: Do not extend mitigation episodes beyond system resume (David Arcari) [RHEL-61357]
  - thermal/debugfs: Use helper to update trip point overstepping duration (David Arcari) [RHEL-61357]
  - thermal: trip: Trigger trip down notifications when trips involved in mitigation become invalid (David Arcari) [RHEL-61357]
  - thermal: core: Introduce thermal_trip_crossed() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Allow tze_seq_show() to print statistics for invalid trips (David Arcari) [RHEL-61357]
  - thermal/debugfs: Print initial trip temperature and hysteresis in tze_seq_show() (David Arcari) [RHEL-61357]
  - thermal: core: Fix the handling of invalid trip points (David Arcari) [RHEL-61357]
  - thermal: core: Move passive polling management to the core (David Arcari) [RHEL-61357]
  - thermal: core: Do not call handle_thermal_trip() if zone temperature is invalid (David Arcari) [RHEL-61357]
  - thermal: trip: Add missing empty code line (David Arcari) [RHEL-61357]
  - thermal/debugfs: Pass cooling device state to thermal_debug_cdev_add() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Create records for cdev states as they get used (David Arcari) [RHEL-61357]
  - thermal/debugfs: Avoid printing zero duration for mitigation events in progress (David Arcari) [RHEL-61357]
  - thermal: core: Introduce thermal_governor_trip_crossed() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Make tze_seq_show() skip invalid trips and trips with no stats (David Arcari) [RHEL-61357]
  - thermal/debugfs: Rename thermal_debug_update_temp() to thermal_debug_update_trip_stats() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Clean up thermal_debug_update_temp() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Avoid excessive updates of trip point statistics (David Arcari) [RHEL-61357]
  - thermal/debugfs: Add missing count increment to thermal_debug_tz_trip_up() (David Arcari) [RHEL-61357]
  - thermal: core: Relocate critical and hot trip handling (David Arcari) [RHEL-61357]
  - thermal: core: Drop the .throttle() governor callback (David Arcari) [RHEL-61357]
  - thermal: gov_user_space: Use .trip_crossed() instead of .throttle() (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Eliminate unnecessary integer divisions (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Use trip thresholds instead of trip temperatures (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Use .manage() callback instead of .throttle() (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Clean up thermal_zone_trip_update() (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Use trip thresholds instead of trip temperatures (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Use .manage() callback instead of .throttle() (David Arcari) [RHEL-61357]
  - thermal: core: Introduce .manage() callback for thermal governors (David Arcari) [RHEL-61357]
  - thermal: core: Introduce .trip_crossed() callback for thermal governors (David Arcari) [RHEL-61357]
  - thermal: core: Relocate the struct thermal_governor definition (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Simplify checks related to passive trips (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Simplify get_target_state() (David Arcari) [RHEL-61357]
  - thermal: core: Sort trip point crossing notifications by temperature (David Arcari) [RHEL-61357]
  - thermal: core: Send trip crossing notifications at init time if needed (David Arcari) [RHEL-61357]
  - thermal: core: Rewrite comments in handle_thermal_trip() (David Arcari) [RHEL-61357]
  - thermal: core: Make struct thermal_zone_device definition internal (David Arcari) [RHEL-61357]
  - thermal: core: Move threshold out of struct thermal_trip (David Arcari) [RHEL-61357]
  - thermal: netlink: Rename thermal_gnl_family (David Arcari) [RHEL-61357]
  - thermal/of: Assume polling-delay(-passive) 0 when absent (David Arcari) [RHEL-61357]
  - thermal: core: Eliminate writable trip points masks (David Arcari) [RHEL-61357]
  - thermal: of: Set THERMAL_TRIP_FLAG_RW_TEMP directly (David Arcari) [RHEL-61357]
  - thermal: ACPI: Discard trips table after zone registration (David Arcari) [RHEL-61357]
  - thermal: ACPI: Constify acpi_thermal_zone_ops (David Arcari) [RHEL-61357]
  - wifi: iwlwifi: mvm: Set THERMAL_TRIP_FLAG_RW_TEMP directly (David Arcari) [RHEL-61357]
  - thermal: core: Change governor name to const char pointer (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Fix dependency on trip points ordering (David Arcari) [RHEL-61357]
  - thermal/hwmon: Add error information printing for devm_thermal_add_hwmon_sysfs() (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Fold update_passive_instance() into its caller (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Rearrange get_trip_level() (David Arcari) [RHEL-61357]
  - thermal: core: Drop thermal_zone_device_register() (David Arcari) [RHEL-61357]
  - thermal: Allow selecting the bang-bang governor as default (David Arcari) [RHEL-61357]
  - thermal: helpers: Use for_each_trip() in __thermal_zone_get_temp() (David Arcari) [RHEL-61357]
  - thermal: trip: Drop redundant __thermal_zone_get_trip() header (David Arcari) [RHEL-61357]
  - thermal/hwmon: Use the thermal_core.h header (David Arcari) [RHEL-61357]
  - thermal/hwmon: Use the right device for devm_thermal_add_hwmon_sysfs() (David Arcari) [RHEL-61357]
  - thermal/core: Use the thermal zone 'devdata' accessor in hwmon located drivers (David Arcari) [RHEL-61357]
  - thermal/drivers/rcar: Use generic thermal_zone_get_trip() function (David Arcari) [RHEL-61357]
  - thermal/drivers/rcar_thermal: Constify static thermal_zone_device_ops (David Arcari) [RHEL-61357]
  - thermal: hisi: Use thermal_zone_for_each_trip() in hisi_thermal_register_sensor() (David Arcari) [RHEL-61357]
  - thermal/core: Use the thermal zone 'devdata' accessor in thermal located drivers [partial] (David Arcari) [RHEL-61357]
  - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (Jon Maloy) [RHEL-67470] {CVE-2024-53114}
  - powerpc/xics: fix refcount leak in icp_opal_init() (Mamatha Inamdar) [RHEL-80861] {CVE-2022-49432}
  - powerpc/papr_scm: don't requests stats with '0' sized stats buffer (Mamatha Inamdar) [RHEL-81000] {CVE-2022-49353}
  - powerpc/papr_scm: Fix leaking nvdimm_events_map elements (Mamatha Inamdar) [RHEL-81000] {CVE-2022-49353}
  - powerpc/xive: Fix refcount leak in xive_spapr_init (Mamatha Inamdar) [RHEL-80849] {CVE-2022-49437}
  - powerpc/xive: Add some error handling code to 'xive_spapr_init()' (Mamatha Inamdar) [RHEL-80849] {CVE-2022-49437}
  - zram: fix potential UAF of zram table (Ming Lei) [RHEL-77216] {CVE-2025-21671}
  - zram: fix uninitialized ZRAM not releasing backing device (Ming Lei) [RHEL-77216]
  - block: fix uaf for flush rq while iterating tags (Ming Lei) [RHEL-75854] {CVE-2024-53170}
  - blk-cgroup: Fix UAF in blkcg_unpin_online() (Ming Lei) [RHEL-75869] {CVE-2024-56672}
  - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (Ming Lei) [RHEL-77310] {CVE-2025-21631}
  - bonding: Correctly support GSO ESP offload (CKI Backport Bot) [RHEL-75544]
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CKI Backport Bot) [RHEL-77915] {CVE-2024-53680}
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CKI Backport Bot) [RHEL-77891] {CVE-2025-21648}
  - rxrpc: Fix a race between socket set up and I/O thread creation (Marc Dionne) [RHEL-63629] {CVE-2024-49864}
  - afs: Fix merge preference rule failure condition (Marc Dionne) [RHEL-77202] {CVE-2025-21672}
  - afs: Fix lock recursion (Marc Dionne) [RHEL-68562] {CVE-2024-53090}
  - rxrpc: Fix missing locking causing hanging calls (Marc Dionne) [RHEL-67999] {CVE-2024-50294}
  - SUNRPC: Handle -ETIMEDOUT return from tlshd (Benjamin Coddington) [RHEL-73706]
  - redhat: bump RHEL_MINOR for 9.7 (Augusto Caringi)
  - ice: Add correct PHY lane assignment (Petr Oros) [RHEL-62750]
  - ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-62750]
  - ice: Fix quad registers read on E825 (Petr Oros) [RHEL-62750]
  - ice: Fix E825 initialization (Petr Oros) [RHEL-62750]
  - powerpc/pseries/dlpar: Add device tree nodes for DLPAR IO add (Mamatha Inamdar) [RHEL-77266]
  - powerpc/pseries/dlpar: Remove device tree node for DLPAR IO remove (Mamatha Inamdar) [RHEL-77266]
  - powerpc/pseries: Use correct data types from pseries_hp_errorlog struct (Mamatha Inamdar) [RHEL-77266]
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (David Arcari) [RHEL-66942] {CVE-2024-50195}
  - posix-clock: Fix missing timespec64 check in pc_clock_settime() (David Arcari) [RHEL-66942] {CVE-2024-50195}
  - powerpc/64s/radix/kfence: map __kfence_pool at page granularity (Mamatha Inamdar) [RHEL-73626]
  - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-72325] {CVE-2024-56603}
  - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-72261] {CVE-2024-56645}
  - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-72057] {CVE-2023-52922}
  - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79811]
  - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79813]
  - s390/pai: export number of sysfs attribute files (Mete Durlu) [RHEL-79808]
  - s390/pai: fix attr_event_free upper limit for pai device drivers (Mete Durlu) [RHEL-79808]
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Paulo Alcantara) [RHEL-78507]
  - s390/topology: Improve topology detection (Mete Durlu) [RHEL-76350]
  - ice: Fix signedness bug in ice_init_interrupt_scheme() (Petr Oros) [RHEL-63642]
  - ice: init flow director before RDMA (Petr Oros) [RHEL-63642]
  - ice: simplify VF MSI-X managing (Petr Oros) [RHEL-63642]
  - ice: enable_rdma devlink param (Petr Oros) [RHEL-63642]
  - ice: treat dyn_allowed only as suggestion (Petr Oros) [RHEL-63642]
  - ice, irdma: move interrupts code to irdma (Petr Oros) [RHEL-63642]
  - ice: get rid of num_lan_msix field (Petr Oros) [RHEL-63642]
  - ice: remove splitting MSI-X between features (Petr Oros) [RHEL-63642]
  - ice: devlink PF MSI-X max and min parameter (Petr Oros) [RHEL-63642]
  - ice: ice_probe: init ice_adapter after HW init (Petr Oros) [RHEL-63642]
  - ice: minor: rename goto labels from err to unroll (Petr Oros) [RHEL-63642]
  - ice: split ice_init_hw() out from ice_init_dev() (Petr Oros) [RHEL-63642]
  - ice: c827: move wait for FW to ice_init_hw() (Petr Oros) [RHEL-63642]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-572.el9]
changelog:
  - sched: Don't define sched_clock_irqtime as static key (Phil Auld) [RHEL-78821]
  - sched/fair: Do not compute overloaded status unnecessarily during lb (Phil Auld) [RHEL-78821]
  - sched/fair: Do not compute NUMA Balancing stats unnecessarily during lb (Phil Auld) [RHEL-78821]
  - sched, psi: Don't account irq time if sched_clock_irqtime is disabled (Phil Auld) [RHEL-78821]
  - sched: Don't account irq time if sched_clock_irqtime is disabled (Phil Auld) [RHEL-78821]
  - sched: Define sched_clock_irqtime as static key (Phil Auld) [RHEL-78821]
  - sched/debug: Change need_resched warnings to pr_err (Phil Auld) [RHEL-78821]
  - sched: Fix race between yield_to() and try_to_wake_up() (Phil Auld) [RHEL-78821]
  - topology: Keep the cpumask unchanged when printing cpumap (Phil Auld) [RHEL-78821]
  - sched/fair: Update comments after sched_tick() rename. (Phil Auld) [RHEL-78821]
  - cpufreq: schedutil: Fix superfluous updates caused by need_freq_update (Phil Auld) [RHEL-78821]
  - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-78821]
  - sched: deadline: Cleanup goto label in pick_earliest_pushable_dl_task (Phil Auld) [RHEL-78821]
  - sched/fair: Mark m*_vruntime() with __maybe_unused (Phil Auld) [RHEL-78821]
  - sched: Unify HK_TYPE_{TIMER|TICK|MISC} to HK_TYPE_KERNEL_NOISE (Phil Auld) [RHEL-78821]
  - sched/isolation: Consolidate housekeeping cpumasks that are always identical (Phil Auld) [RHEL-78821]
  - sched/isolation: Make "isolcpus=nohz" equivalent to "nohz_full" (Phil Auld) [RHEL-78821]
  - sched/core: Remove HK_TYPE_SCHED (Phil Auld) [RHEL-78821]
  - sched/deadline: Consolidate Timer Cancellation (Phil Auld) [RHEL-78821]
  - sched/fair: Remove CONFIG_CFS_BANDWIDTH=n definition of cfs_bandwidth_used() (Phil Auld) [RHEL-78821]
  - sched: Don't try to catch up excess steal time. (Phil Auld) [RHEL-78821]
  - sched: add READ_ONCE to task_on_rq_queued (Phil Auld) [RHEL-78821]
  - sched/cpufreq: Ensure sd is rebuilt for EAS check (Phil Auld) [RHEL-78821]
  - sched: Initialize idle tasks only once (Phil Auld) [RHEL-78821]
  - sched/uclamp: Fix unnused variable warning (Phil Auld) [RHEL-78821]
  - sched_getattr: port to copy_struct_to_user (Phil Auld) [RHEL-78821]
  - uaccess: add copy_struct_to_user helper (Phil Auld) [RHEL-78821]
  - sched: Consolidate pick_*_task to task_is_pushable helper (Phil Auld) [RHEL-78821]
  - sched: Add move_queued_task_locked helper (Phil Auld) [RHEL-78821]
  - sched: idle: Optimize the generic idle loop by removing needless memory barrier (Phil Auld) [RHEL-78821]
  - sched/wait: Remove unused bit_wait_io_timeout (Phil Auld) [RHEL-78821]
  - sched/deadline: Fix schedstats vs deadline servers (Phil Auld) [RHEL-78821]
  - timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() (Phil Auld) [RHEL-78821]
  - sched/deadline: Comment sched_dl_entity::dl_server variable (Phil Auld) [RHEL-78821]
  - sched/core: Add clearing of ->dl_server in put_prev_task_balance() (Phil Auld) [RHEL-78821]
  - sched/core: Clear prev->dl_server in CFS pick fast path (Phil Auld) [RHEL-78821]
  - sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy (Phil Auld) [RHEL-78821]
  - sched: remove HZ_BW feature hedge (Phil Auld) [RHEL-78821]
  - lib: bitmap: fix many kernel-doc warnings (Phil Auld) [RHEL-78821]
  - docs/scheduler: fix typo and warning in sched-bwc (Phil Auld) [RHEL-78821]
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-81666] {CVE-2025-21785}
  - irqchip/gic-v3: Fix rk3399 workaround when secure interrupts are enabled (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Charles Mirabile) [RHEL-62922]
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Fix irq_complete_ack() comment (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Rely on genpool alignment (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Fix over allocation in itt_alloc_pool() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Share ITS tables with a non-trusted hypervisor (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Force propagation of the active state with a read-back (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4.1: Replace bare number with ID_AA64PFR0_EL1_GIC_V4P1 (Charles Mirabile) [RHEL-62922]
  - irqchip: Remove asmlinkage for handlers registered with set_handle_irq() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Pass #redistributor-regions to gic_of_setup_kvm_info() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4: Fix ordering between vmapp and vpe locks (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4: Always configure affinity on VPE activation (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Enable non-coherent redistributors/ITSes ACPI probing (Charles Mirabile) [RHEL-62922]
  - ACPICA: MADT: Add new MADT GICC/GICR/ITS non-coherent flags handling (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Fix 'broken_rdists' unused warning when !SMP and !ACPI (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Add support for ACPI's disabled but 'online capable' CPUs (Charles Mirabile) [RHEL-62922]
  - ACPICA: MADT: Add GICC online capable bit handling (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Don't return errors from gic_acpi_match_gicc() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Work around insecure GIC integrations (Charles Mirabile) [RHEL-62922]
  - arm64: irqchip/gic-v3: Select priorities at boot time (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Init SRE before poking sysregs (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Detect GICD_CTRL.DS and SCR_EL3.FIQ earlier (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Make distributor priorities variables (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-common: Remove sync_access callback (Charles Mirabile) [RHEL-62922]
  - wordpart.h: Add REPEAT_BYTE_U32() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Remove usage of the deprecated ida_simple_xx() API (Charles Mirabile) [RHEL-62922]
  - irqchip/gic(v3): Replace gic_irq() with irqd_to_hwirq() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Use readl_relaxed_poll_timeout_atomic() (Charles Mirabile) [RHEL-62922]
  - iopoll: Do not use timekeeping in read_poll_timeout_atomic() (Charles Mirabile) [RHEL-62922]
  - iopoll: Call cpu_relax() in busy loops (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Make gic_irq_domain_select() robust for zero parameter count (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Do not assume vPE tables are preallocated (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Flush ITS tables correctly in non-coherent GIC designs (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Handle non-coherent GICv4 redistributors (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Enable non-coherent redistributors/ITSes DT probing (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Don't override quirk settings with default values (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Split allocation from initialisation of its_node (Charles Mirabile) [RHEL-62922]
  - block: Add common atomic writes enable flag (Nigel Croxon) [RHEL-73514]
  - block: Ensure start sector is aligned for stacking atomic writes (Nigel Croxon) [RHEL-73514]
  - block: Support atomic writes limits for stacked devices (Nigel Croxon) [RHEL-73514]
  - md/raid*: Fix the set_queue_limits implementations (Nigel Croxon) [RHEL-73514]
  - md: Fix linear_set_limits() (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime (Nigel Croxon) [RHEL-73514]
  - md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add() (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-73514]
  - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-73514]
  - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-73514]
  - md: Replace deprecated kmap_atomic() with kmap_local_page() (Nigel Croxon) [RHEL-73514]
  - md/raid10: Atomic write support (Nigel Croxon) [RHEL-73514]
  - md/raid1: Atomic write support (Nigel Croxon) [RHEL-73514]
  - md/raid0: Atomic write support (Nigel Croxon) [RHEL-73514]
  - md/raid5: Increase r5conf.cache_name size (Nigel Croxon) [RHEL-73514]
  - md/raid10: Handle bio_split() errors (Nigel Croxon) [RHEL-73514]
  - md/raid1: Handle bio_split() errors (Nigel Croxon) [RHEL-73514]
  - md/raid0: Handle bio_split() errors (Nigel Croxon) [RHEL-73514]
  - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: Add missing destroy_work_on_stack() (Nigel Croxon) [RHEL-73514]
  - md/raid5: don't set Faulty rdev for blocked_rdev (Nigel Croxon) [RHEL-73514]
  - md/raid10: don't wait for Faulty rdev in wait_blocked_rdev() (Nigel Croxon) [RHEL-73514]
  - md/raid1: don't wait for Faulty rdev in wait_blocked_rdev() (Nigel Croxon) [RHEL-73514]
  - md/raid1: factor out helper to handle blocked rdev from raid1_write_request() (Nigel Croxon) [RHEL-73514]
  - md: don't record new badblocks for faulty rdev (Nigel Croxon) [RHEL-73514]
  - md: don't wait faulty rdev in md_wait_for_blocked_rdev() (Nigel Croxon) [RHEL-73514]
  - md: add a new helper rdev_blocked() (Nigel Croxon) [RHEL-73514]
  - md/raid5-ppl: Use atomic64_inc_return() in ppl_new_iounit() (Nigel Croxon) [RHEL-73514]
  - md: ensure child flush IO does not affect origin bio->bi_status (Nigel Croxon) [RHEL-73514]
  - mm/mm_init: use node's number of cpus in deferred_page_init_max_threads (Eric Chanudet) [RHEL-77271]
  - selftests/net: convert test_vxlan_mdb.sh to run it in unique namespace (CKI Backport Bot) [RHEL-77173]
  - powerpc/xive/spapr: correct bitmap allocation size (Mamatha Inamdar) [RHEL-80803] {CVE-2022-49623}
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-80098]
  - RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (Maxim Levitsky) [RHEL-80098]
  - RDMA/mana_ib: use the correct page table index based on hardware page size (Maxim Levitsky) [RHEL-80098]
  - net: mana: Cleanup "mana" debugfs dir after cleanup of all children (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix memory leak in mana_gd_setup_irqs (Maxim Levitsky) [RHEL-80098]
  - net :mana :Request a V2 response version for MANA_QUERY_GF_STAT (Maxim Levitsky) [RHEL-80098]
  - net: mana: use ethtool string helpers (Maxim Levitsky) [RHEL-80098]
  - net: mana: Enable debugfs files for MANA device (Maxim Levitsky) [RHEL-80098]
  - net: mana: Add get_link and get_link_ksettings in ethtool (Maxim Levitsky) [RHEL-80098]
  - net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (Maxim Levitsky) [RHEL-80098]
  - net: mana: Improve mana_set_channels() in low mem conditions (Maxim Levitsky) [RHEL-80098]
  - net: mana: Implement get_ringparam/set_ringparam for mana (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix RX buf alloc_size alignment and atomic op panic (Maxim Levitsky) [RHEL-80098]
  - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81935]
  - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81935]
  - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81935]
  - io_uring: check if iowq is killed before queuing (Jeff Moyer) [RHEL-72430] {CVE-2024-56709}
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jeff Moyer) [RHEL-68164] {CVE-2024-53052}
  - io_uring: check if we need to reschedule during overflow flush (Jeff Moyer) [RHEL-63824] {CVE-2024-50060}
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Herbert Xu) [RHEL-78983] {CVE-2024-56690}
  - soc: qcom: cmd-db: Map shared memory as WC, not WB (CKI Backport Bot) [RHEL-58876] {CVE-2024-46689}


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-573.el9]
changelog:
  - rhel_files: ensure all qdiscs are in modules-core (Davide Caratti) [RHEL-79818]
  - Revert "mm: add vma_has_recency()" (Luiz Capitulino) [RHEL-80655]
  - Revert "mm: support POSIX_FADV_NOREUSE" (Luiz Capitulino) [RHEL-80655]
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE (Rupinderjit Singh) [RHEL-80628]
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Jay Shin) [RHEL-80527 RHEL-78507]
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21980] {CVE-2024-57807}
  - scsi: core: Fix command pass through retry regression (Ewan D. Milne) [RHEL-77122]
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Baoquan He) [RHEL-79112] {CVE-2025-21694}
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Benjamin Poirier) [RHEL-49958 RHEL-6641 RHEL-77115]
  - CVE-2025-1272: security: Re-enable lockdown LSM in some setup_arch() (Lenny Szubowicz) [RHEL-78974] {CVE-2025-1272}
  - redhat/self-test: Remove --all from git query (Prarit Bhargava)
  - redhat: fix selftest git command so it picks the right commit (Patrick Talbert)
  - arm64: mm: Fix zone_dma_limit calculation (Luiz Capitulino) [RHEL-71914]
  - Documentation/powerpc/fadump: add additional parameter feature details (Mamatha Inamdar) [RHEL-74219]
  - powerpc: increase MIN RMA size for CAS negotiation (Mamatha Inamdar) [RHEL-74219]
  - powerpc/fadump: fix additional param memory reservation for HASH MMU (Mamatha Inamdar) [RHEL-74219]
  - powerpc: export MIN RMA size (Mamatha Inamdar) [RHEL-74219]
  - cxgb4: use port number to set mac addr (Michal Schmidt) [RHEL-75514]
  - pps: Fix a use-after-free (Michal Schmidt) [RHEL-9309]
  - gitlab-ci: add jobs for rhel9 automotive pipelines (Michael Hofmann)
  - gitlab-ci: clean up trigger job naming and template inheritance (Michael Hofmann)
  - can: bcm: Fix UAF in bcm_proc_show() (Michal Schmidt) [RHEL-80748] {CVE-2023-52922}
  - Revert "x86/kvm: Override default caching mode for SEV-SNP and TDX" (Vitaly Kuznetsov) [RHEL-75512]
  - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-68688]
  - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78429]
  - scsi: sg: Fix slab-use-after-free read in sg_release() (Ewan D. Milne) [RHEL-75864] {CVE-2024-56631}
  - RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (Aristeu Rozanski) [RHEL-22695]
  - ACPI: PRM: Add PRM handler direct call support (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrappers: Clean up white space and add __init annotation (Aristeu Rozanski) [RHEL-22695]
  - acpi/prmt: Use EFI runtime sandbox to invoke PRM handlers (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrappers: Don't duplicate setup/teardown code (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrapper: Move workqueue manipulation out of line (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrappers: Use type safe encapsulation of call arguments (Aristeu Rozanski) [RHEL-22695]
  - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-82537]
  - tcp: fix excessive TLP and RACK timeouts from HZ rounding (CKI Backport Bot) [RHEL-83546]
  - pm: cpupower: Add missing residency header changes in cpuidle.h to SWIG (David Arcari) [RHEL-80660]
  - pm: cpupower: Add header changes for cpufreq.h to SWIG bindings (David Arcari) [RHEL-80660]
  - pm: cpupower: Add install and uninstall options to bindings makefile (David Arcari) [RHEL-80660]
  - cpupower: Adjust whitespace for amd-pstate specific prints (David Arcari) [RHEL-80660]
  - cpupower: Don't fetch maximum latency when EPP is enabled (David Arcari) [RHEL-80660]
  - cpupower: Add support for showing energy performance preference (David Arcari) [RHEL-80660]
  - cpupower: Don't try to read frequency from hardware when kernel uses aperfmperf (David Arcari) [RHEL-80660]
  - cpupower: Add support for amd-pstate preferred core rankings (David Arcari) [RHEL-80660]
  - cpupower: Add support for parsing 'enabled' or 'disabled' strings from table (David Arcari) [RHEL-80660]
  - cpupower: Remove spurious return statement (David Arcari) [RHEL-80660]
  - cpupower: fix TSC MHz calculation (David Arcari) [RHEL-80660]
  - cpupower: revise is_valid flag handling for idle_monitor (David Arcari) [RHEL-80660]
  - pm: cpupower: Makefile: Fix cross compilation (David Arcari) [RHEL-80660]
  - cpupower: add checks for xgettext and msgfmt (David Arcari) [RHEL-80660]
  - cpupower: Add Chinese Simplified translation (David Arcari) [RHEL-80660]
  - pm: cpupower: bindings: Add test to confirm cpu state is disabled (David Arcari) [RHEL-80660]
  - pm: cpupower: bindings: Improve disable c_state block (David Arcari) [RHEL-80660]
  - pm: cpupower: gitignore: Add compile_commands.json (David Arcari) [RHEL-80660]
  - pm: cpupower: Makefile: Allow overriding cross-compiling env params (David Arcari) [RHEL-80660]
  - pm: cpupower: bench: print config file path when open cpufreq-bench.conf fails (David Arcari) [RHEL-80660]
  - tools/power/cpupower: Add documentation for some recently introduced options (David Arcari) [RHEL-80660]
  - pm: cpupower: Clean up bindings gitignore (David Arcari) [RHEL-80660]
  - pm: cpupower: rename raw_pylibcpupower.i (David Arcari) [RHEL-80660]
  - pm:cpupower: Add error warning when SWIG is not installed (David Arcari) [RHEL-80660]
  - pm:cpupower: Include test_raw_pylibcpupower.py (David Arcari) [RHEL-80660]
  - pm:cpupower: Add SWIG bindings files for libcpupower (David Arcari) [RHEL-80660]
  - pm:cpupower: Add missing powercap_set_enabled() stub function (David Arcari) [RHEL-80660]
  - cpupower: fix lib default installation path (David Arcari) [RHEL-80660]
  - cpupower: Disable direct build of the 'bench' subproject (David Arcari) [RHEL-80660]
  - cpupower: Remove absent 'v' parameter from monitor man page (David Arcari) [RHEL-80660]
  - cpupower: Improve cpupower build process description (David Arcari) [RHEL-80660]
  - cpupower: Add 'help' target to the main Makefile (David Arcari) [RHEL-80660]
  - cpupower: Replace a dead reference link with working ones (David Arcari) [RHEL-80660]
  - Fix cpupower-frequency-info.1 man page typo (David Arcari) [RHEL-80660]
  - tools cpupower bench: Override CFLAGS assignments (David Arcari) [RHEL-80660]
  - cpupower: fix reference to nonexistent document (David Arcari) [RHEL-80660]
  - EDAC/amd64: Simplify ECC check on unified memory controllers (Aristeu Rozanski) [RHEL-73049]
  - PCI: vmd: Set devices to D0 before enabling PM L1 Substates (Myron Stowe) [RHEL-47438]
  - PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (Myron Stowe) [RHEL-47438]
  - can: isotp: fix support for transmission of SF without flow control (Radu Rendec) [RHEL-80832]
  - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (Radu Rendec) [RHEL-80832]
  - can: isotp: restore accidentally removed MSG_PEEK feature (Radu Rendec) [RHEL-80832]
  - can: isotp: fix race between isotp_sendsmg() and isotp_release() (Radu Rendec) [RHEL-80832]
  - can: isotp: handle wait_event_interruptible() return values (Radu Rendec) [RHEL-80832]
  - can: isotp: split tx timer into transmission and timeout (Radu Rendec) [RHEL-80832]
  - can: isotp: fix potential CAN frame reception race in isotp_rcv() (Radu Rendec) [RHEL-80832]
  - can: isotp: fix tx state handling for echo tx processing (Radu Rendec) [RHEL-80832]
  - can: isotp: isotp_bind(): do not validate unused address information (Radu Rendec) [RHEL-80832]
  - can: isotp: add support for transmission without flow control (Radu Rendec) [RHEL-80832]
  - can: isotp: remove re-binding of bound socket (Radu Rendec) [RHEL-80832]
  - can: isotp: stop timeout monitoring when no first frame was sent (Radu Rendec) [RHEL-80832]
  - can: isotp: support MSG_TRUNC flag when reading from socket (Radu Rendec) [RHEL-80832]
  - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket (Radu Rendec) [RHEL-80832]
  - can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting (Radu Rendec) [RHEL-80832]
  - can: isotp: sanitize CAN ID checks in isotp_bind() (Radu Rendec) [RHEL-80832] {CVE-2022-49269}
  - can: isotp: set max PDU size to 64 kByte (Radu Rendec) [RHEL-80832]
  - can: isotp: set default value for N_As to 50 micro seconds (Radu Rendec) [RHEL-80832]
  - can: isotp: add local echo tx processing for consecutive frames (Radu Rendec) [RHEL-80832]
  - selftests: livepatch: test livepatching a kprobed function (Denis Aleksandrov) [RHEL-80215]
  - selftests: livepatch: save and restore kprobe state (Denis Aleksandrov) [RHEL-80215]
  - selftests: livepatch: rename KLP_SYSFS_DIR to SYSFS_KLP_DIR (Denis Aleksandrov) [RHEL-80215]
  - Documentation: livepatch: Correct release locks antonym (Denis Aleksandrov) [RHEL-80215]
  - EDAC/mce_amd: Add support for FRU text in MCA (Aristeu Rozanski) [RHEL-52657]
  - x86/mce/apei: Handle variable SMCA BERT record size (Aristeu Rozanski) [RHEL-52657]
  - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers (Aristeu Rozanski) [RHEL-52657]
  - tracing: Add __print_dynamic_array() helper (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Add wrapper for struct mce to export vendor specific info (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Rename mce_setup() to mce_prep_record() (Aristeu Rozanski) [RHEL-52657]
  - workqueue: Put the pwq after detaching the rescuer from the pool (CKI Backport Bot) [RHEL-81472] {CVE-2025-21786}
  - EDAC/{i10nm,skx,skx_common}: Support UV systems (Aristeu Rozanski) [RHEL-73892]
  - x86/xen: add FRAME_END to xen_hypercall_hvm() (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/asm: Make serialize() always_inline (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/static-call: fix 32-bit build (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: add central hypercall functions (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: don't do PV iret hypercall through hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/static-call: provide a way to do very early static-call updates (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - objtool/x86: allow syscall instruction (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86: make get_cpu_vendor() accessible from Xen code (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: Avoid relocatable quantities in Xen ELF notes (Vitaly Kuznetsov) [RHEL-70669]
  - tracing: Fix bad hist from corrupting named_triggers list (Tomas Glozar) [RHEL-81911]
  - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Tomas Glozar) [RHEL-81911]
  - tracing/histograms: Add histograms to hist_vars if they have referenced variables (Tomas Glozar) [RHEL-81911]
  - Documentation/sysctl: Add timer_migration to kernel.rst (Phil Auld) [RHEL-11707]
  - netfilter: nfnetlink_queue: drop bogus WARN_ON (Florian Westphal) [RHEL-80104]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1827949)
  - drop obsolete patch
  - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866


author: Dodji Seketeli <dodji@redhat.com> - 2.1-1
changelog:
  - Update to upstream 2.1 release.
  - Remove the now useless text about getting the source from git.
  - Update the license reference.
  - Resolves: rhbz#1944096


author: Dodji Seketeli <dodji@redhat.com> - 2.3-1
changelog:
  - Update to upstream 2.3
  - Remove the dos2unix surgery as it's now useless
  - Update for the soname bump
  - Resolves: RHELPLAN-154803


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4
  - Use SPDX licensing naming
  - Build BTF support
  - Add BuildRequires: libbpf-devel
  - Update for SONAME bump
  - Show details about the check and check-self-targets targets
    separatly.
  - Resolves: RHEL-12491


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16614
  - Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16629
  - Add git as a build requirement as we need git to apply the patches
    aboves that apply binaries.
  - Use %autosetup to handle applying the patches using git.
  - autoreconf after the patches touched at least one Makefile.am file.


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Add BuildRequires: python3-devel
  - Remove BuildRequires: %{_bindir}/python3


author: Dodji Seketeli <dodji@redhat.com> - 2.6.1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel
  - Disable abidb as its dependencies are not present in RHEL 9.6
  - Resolves https://issues.redhat.com/browse/RHEL-64069


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-4
changelog:
  - Rebase libguestfs to 1.50.1
    resolves: rhbz#2168625
  - Use q35 machine type for libguestfs appliance
    resolves: rhbz#2168578
  - Run SELinux relabelling in parallel [for virt-v2v]
    resolves: rhbz#2190276


author: Laszlo Ersek <lersek@redhat.com> - 1:1.50.1-5
changelog:
  - let "guestfish -i" recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable quickcheck; we now use "-cpu max" (upstream 30f74f38bd6e)
    resolves: rhbz#2209279


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-2
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.18-1
changelog:
  - New upstream release
  - Add ability to change crypto configuration at runtime without
    restarting knet and without packet drop
  - Add compatibility support for openssl 3.0
  - Add functional testing framework and new test cases
  - Minor build fixes
  - Fix BuildRequires to use libqb doxygen2man vs internal copy


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Remi Collet <remi@remirepo.net> - 1.1.0-5
changelog:
  - fix missing HAVE_SSIZE_T macro using patch from
    https://github.com/awesomized/libmemcached/pull/117


author: Remi Collet <remi@remirepo.net> - 1.1.0-2
changelog:
  - remove internal AES implementation and use libcrypto
    https://github.com/awesomized/libmemcached/pull/114
  - fix build ussing upstream patch to update catch version


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
  - qemu_domain: Strip <acpi/> from s390(x) definitions (RHEL-49516)
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
  - vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-1
changelog:
  - Rebased to libvirt-10.8.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-688, RHEL-7122, RHEL-19379, RHEL-22166, RHEL-24746
      RHEL-28827, RHEL-45200, RHEL-45952, RHEL-53964, RHEL-54550
      RHEL-56611, RHEL-58446


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61576)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61576)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61576)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61576)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61576)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-7036, RHEL-7122, RHEL-35752, RHEL-46870, RHEL-52314
      RHEL-60030, RHEL-60033, RHEL-64341


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-23607, RHEL-24850, RHEL-29267, RHEL-30842, RHEL-53963
      RHEL-54325, RHEL-54326, RHEL-55240, RHEL-64341, RHEL-65372
      RHEL-65780, RHEL-65844, RHEL-67702, RHEL-67836, RHEL-68614
      RHEL-69417


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69938)
  - qemu: tpm: do not update profile name for transient domains (RHEL-71072)
  - qemu: Enable I/O APIC if needed (RHEL-65844)
  - cpu_map: Sort data files in meson.build (RHEL-70052)
  - sync_qemu_models_i386: Update meson.build (RHEL-70052)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70052)
  - cpu_map: Add 486-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70052)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70052)
  - cpu_map: Add n270-v1 CPU model (RHEL-70052)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70052)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70052)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70052)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70052)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70052)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70052)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70052)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-2
changelog:
  - domain_conf: Format <defaultiothread/> more often (rhbz#2059511)
  - domain_conf: Format iothread IDs more often (rhbz#2059511)
  - qemu: Make IOThread changing more robust (rhbz#2059511)
  - qemuDomainSetIOThreadParams: Accept VIR_DOMAIN_AFFECT_CONFIG flag (rhbz#2059511)
  - virsh: Implement --config for iothreadset (rhbz#2059511)
  - docs: Document TPM portion of domcaps (rhbz#2103119)
  - virtpm: Introduce TPM-1.2 and TPM-2.0 capabilieis (rhbz#2103119)
  - domcaps: Introduce TPM backendVersion (rhbz#2103119)
  - qemu: Report supported TPM version in domcaps (rhbz#2103119)
  - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2105231)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-3
changelog:
  - qemu: introduce capability QEMU_CAPS_MIGRATION_BLOCKED_REASONS (rhbz#2092833)
  - qemu: new function to retrieve migration blocker reasons from QEMU (rhbz#2092833)
  - qemu: query QEMU for migration blockers before our own harcoded checks (rhbz#2092833)
  - qemu: remove hardcoded migration fail for vDPA devices if we can ask QEMU (rhbz#2092833)
  - qemu_migration: Use EnterMonitorAsync in qemuDomainGetMigrationBlockers (rhbz#2092833)
  - qemu: don't try to query QEMU about migration blockers during offline migration (rhbz#2092833)
  - qemu_migration: Acquire correct job in qemuMigrationSrcIsAllowed (rhbz#2092833)
  - virsh: Require --xpath for *dumpxml (rhbz#2103524)
  - qemu: skip hardcoded hostdev migration check if QEMU can do it for us (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-4
changelog:
  - qemu: Pass migration flags to qemuMigrationParamsApply (rhbz#2111070)
  - qemu_migration_params: Replace qemuMigrationParamTypes array (rhbz#2111070)
  - qemu_migration: Pass migParams to qemuMigrationSrcResume (rhbz#2111070)
  - qemu_migration: Apply max-postcopy-bandwidth on post-copy resume (rhbz#2111070)
  - qemu: Always assume support for QEMU_CAPS_MIGRATION_PARAM_XBZRLE_CACHE_SIZE (rhbz#2107892)
  - qemu_migration: Store original migration params in status XML (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsApply (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsReset (rhbz#2107892)
  - qemu_migration_params: Avoid deadlock in qemuMigrationParamsReset (rhbz#2107892)
  - qemu: Restore original memory locking limit on reconnect (rhbz#2107424)
  - qemu: Properly release job in qemuDomainSaveInternal (rhbz#1497907)
  - qemu: don't call qemuMigrationSrcIsAllowedHostdev() from qemuMigrationDstPrepareFresh() (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.7.0-1
changelog:
  - Rebased to libvirt-8.7.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2084046, rhbz#2108483, rhbz#2123371, rhbz#2101633, rhbz#1988211
      rhbz#2086677, rhbz#2103132, rhbz#2078805, rhbz#2111301, rhbz#2094641


author: Jiri Denemark <jdenemar@redhat.com> - 8.8.0-1
changelog:
  - Rebased to libvirt-8.8.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2122534, rhbz#2121262, rhbz#2130089, rhbz#2121276, rhbz#2121627
      rhbz#2125111, rhbz#2129239, rhbz#1964855, rhbz#2114866


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-1
changelog:
  - Rebased to libvirt-8.9.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2074559, rhbz#2134009, rhbz#1777212, rhbz#2013523, rhbz#2114866
      rhbz#1964855


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-2
changelog:
  - RHEL: rpminspect: Disable abidiff inspection (rhbz#2124466)
  - spec: Fix python3-libvirt requirement in client-qemu package (rhbz#2124466)


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-1
changelog:
  - Rebased to libvirt-8.10.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2128993, rhbz#2143235, rhbz#2143840, rhbz#1874163, rhbz#2000075
      rhbz#2143838, rhbz#2104919, rhbz#2072204, rhbz#2137298


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-2
changelog:
  - qemu_process: Document qemuProcessPrepare{Domain,Host}() order (rhbz#2150760)
  - qemu_extdevice: Init paths in qemuExtDevicesPrepareDomain() (rhbz#2150760)
  - qemu_extdevice: Expose qemuExtDevicesInitPaths() (rhbz#2150760)
  - qemu: Init ext devices paths on reconnect (rhbz#2150760)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-1
changelog:
  - Rebased to libvirt-9.0.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2151064, rhbz#1874163, rhbz#2130192, rhbz#2111948, rhbz#1824722
      rhbz#2150455, rhbz#2063723, rhbz#1717611, rhbz#2160448, rhbz#2151869
      rhbz#2040272, rhbz#2144738, rhbz#2159851, rhbz#2156289, rhbz#2033879
      rhbz#1820437, rhbz#2151202


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-2
changelog:
  - vircgroupv2: fix cpu.weight limits check (rhbz#2037998)
  - domain_validate: drop cpu.shares cgroup check (rhbz#2037998)
  - docs: document correct cpu shares limits with both cgroups v1 and v2 (rhbz#2037998)
  - qemu_interface: Fix managed='no' case when creating an ethernet interface (rhbz#2144738)
  - conf: clarify some external TPM error messages (rhbz#2063723)
  - qemu: hotplug: Remove legacy quirk for 'dimm' address generation (rhbz#2158701)
  - qemu: alias: Remove 'oldAlias' argument of qemuAssignDeviceMemoryAlias (rhbz#2158701)
  - qemu: Remove 'memAliasOrderMismatch' field from VM private data (rhbz#2158701)
  - rpc: Fix error message in virNetServerSetClientLimits (rhbz#2033879)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-3
changelog:
  - src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266)
  - qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266)
  - virsh: Make domif-setlink work more than once (rhbz#2165466)
  - qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272)
  - qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272)
  - qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272)
  - qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272)
  - qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272)
  - qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272)
  - qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-4
changelog:
  - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
  - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
  - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
  - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
  - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
  - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-5
changelog:
  - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
  - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-6
changelog:
  - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
  - rpc: Don't warn about "max_client_requests" in single-threaded daemons (rhbz#2145188)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-7
changelog:
  - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
  - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "i686-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "x86_64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.78.0-1
changelog:
  - Bump glib2 version 2.78.0
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2023-32636, CVE-2023-29499, CVE-2023-32611, CVE-2023-32665, DoS
  - Resolves: RHEL-5019
  - Resolves: RHEL-5020
  - Resolves: RHEL-5092
  - Resolves: RHEL-5093
  - Resolves: RHEL-5094


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 0.42.2-3
changelog:
  - Bump pixman version 0.42.2
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2022-44638
  - Resolves: RHEL-5013


author: Sandro Mani <manisandro@gmail.com> - 115-1
changelog:
  - Add -fstack-protector to LDFLAGS (since we carry -D_FORTIFY_SOURCE=2 in cflags, see https://sourceforge.net/p/mingw-w64/bugs/818/)


author: Sandro Mani <manisandro@gmail.com> - 140-1
changelog:
  - Don't unset _PREFIX in mingw-env macro, it leads to ${_PREFIX}
    being empty when evaluated the lines above


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com>) - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-13
changelog:
  - tests: extend dtype test case to cover expression with integer type
  - evaluate: set evaluation context for set elements


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-1
changelog:
  - new version 1.20.1
  - Resolves: #1964814 - CVE-2021-23017 nginx: Off-by-one in ngx_resolver_copy()
    when labels are followed by a pointer to a root domain name


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Gris Ge <fge@redhat.com> - 2.2.27-1
changelog:
  - N/A

   - Support TCP congestion window(cwnd) in route. (59f99632)
   - Support query interface driver. (67817c23)
   - New API to generate changed state. (fe5327a2)

   - Include driver information for `persist-nic-names` subcommand. (1129e46b)
   - nm: Protect global DNS config in checkpoint. (881373ba)
   - route rule: Append rule instead of overriding when iface defined. (88d3d3ef)
  - Resolves RHEL-19409


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.36-1
changelog:
  - Upgrade to 2.2.36
  - Support route source. RHEL-56258
  - Fix setting empty MPTCP flags. RHEL-38607
  - Fix gc mode on blackhole route. RHEL-56727
  - Support ipsec require-id-on-certificate. RHEL-50696
  - Reselect iface DNS if desired. RHEL-56557


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Do not deactivate connection when removing routes. RHEL-70138
  - Use specific libnmstate logger. RHEL-72016
  - Do not deactivate connection if mptcp flags didn't change. RHEL-53211


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41
  - Fix the lose of OVS DB system-id. RHEL-78652
  - Support overriding interface config. RHEL-59935


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110314, rebase to 3.19.0
  - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110476, openCryptoki ep11 token: master key consistency
  - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Ondřej Sloup <osloup@redhat.com> - 1.3.2-71
changelog:
  - Add %verify to ignore modified socket file after install
  - Remove unused OpenSP-1.5 from sources
    Related: rhbz#2193429


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-72
changelog:
  - Add an environment variable to prevent gating from complaining about rpaths  (rhbz#2193429)
    Related: RHEL-11772


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Alex Macdonald <almacdon@redhat.com> - 1.2.2-3
changelog:
  - Remove osgi metadata patch0 that previously added a manifest
  - Include patch (courtesy of jkang) to package as a bundle instead of a jar
  - Update maven-compiler-plugin source/target version for builds in f33


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Paul Howarth <paul@city-fan.org> - 7.17-1
changelog:
  - Update to 7.17
    - Work around antique openssl version in RHEL-7 by formatting dh parameters
      differently
    - Add t/13_weaken.t


author: Petr Pisar <ppisar@redhat.com> - 7.17-6
changelog:
  - Conditionalize POE support
  - Conditionalize Tk support
  - Conditionalize Glib support
  - Conditionalize Event support


author: Paul Howarth <paul@city-fan.org> - 2.13-1
changelog:
  - Update to 2.13
    - Bypass prototypes when testing for lvalue attribute
    - Fixed a class name in tests to avoid conflicting with a core module


author: Paul Howarth <paul@city-fan.org> - 1.6-1
changelog:
  - Update to 1.6
    - Fixed confusing Changes entry about Perl's licensing terms (CPAN RT#132843)
    - Added optional Changes testing (skipped unless AUTHOR_TESTING)
    - Reformatted Changes file as per CPAN::Changes::Spec
    - Added optional POD coverage testing (skipped unless AUTHOR_TESTING)
    - Added optional Perl::Critic testing (skipped unless AUTHOR_TESTING)
    - Made code Perl::Critic clean
    - Added optional POD testing (skipped unless AUTHOR_TESTING)
    - Included GitHub repository URLs in metadata now that source code has been
      uploaded to GitHub (as of version 1.5)
    - Included META.json file in addition to META.yml
    - Set minimum required ExtUtils::MakeMaker version to 6.64 to ensure that all
      parameters used are supported, to save jumping through hoops to support
      earlier versions (this should not be a problem since ExtUtils::MakeMaker
      6.64 is easily installed into Perl 5.8.1 and above, that being the whole
      point of the new choice of minimum supported Perl version)
    - Set minimum required Perl version to 5.8.1; this is in line with the
      minimum requirement of the "Perl Toolchain"
    - Corrected typo in a comment (CPAN RT#86336)
  - Use author-independent source URL
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely
  - Package Artistic, Copying and LICENCE licence files


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.318-1
changelog:
  - Update to 0.318
  - Add perl(File::Slurper) as a dependency
  - Use /usr/bin/perl instead of perl
  - Use %{make_install} instead of make pure_install
  - Use %{make_build} instead of make


author: Paul Howarth <paul@city-fan.org> - 2:1.52-1
changelog:
  - Update to 1.52
    - Added a $dt->is_between($dt1, $dt2) method (based on GH#97)
    - Simplify the calculation of leap seconds in XS (GH#91); this is a little
      more efficient for most use cases (anything with future or recent past
      datetimes)


author: Paul Howarth <paul@city-fan.org> - 0.8200-4
changelog:
  - Fix License: tag to reflect content of actual shipped files, not just what
    the LICENSE file says (#1600504, CPAN RT#125832)


author: Paul Howarth <paul@city-fan.org> - 1:1.77-1
changelog:
  - Update to 1.77
    - When the parsed string contained an invalid time zone offset (parsed with
      "%z") like "-9999", the error handling set in the parser's constructor was
      ignored and an exception was always thrown (GH#25)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1:1.78-1
changelog:
  - Update to 1.78
    - Fix tests for new failure caused by locale data changes in DateTime::Locale
      1.29 (GH#28)
    - Added a warning about using locale-specific patterns; some of these patterns
      can change quite a bit as the locale data is updated, so using them for
      parsing does not produce stable results across time - this is what caused
      the test failures that this release fixes


author: Michal Josef Spacek <mspacek@redhat.com> - 1:1.79-1
changelog:
  - Update to 1.79
    - Fix too-strict type checking for time zones: this module now uses the same
      check as DateTime itself, which allows for things that don't subclass
      DateTime::TimeZone as long as they provide the same API (GH#30) (rhbz#1964546)


author: Paul Howarth <paul@city-fan.org> - 0.11-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 0.3.4-1
changelog:
  - Update to 0.3.4
    - Now at https://github.com/shlomif/perl-file-find-object
    - tidyall
    - Add *~ files to MANIFEST.SKIP (GH#1)


author: Paul Howarth <paul@city-fan.org> - 0.3.5-1
changelog:
  - Update to 0.3.5
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.14-1
changelog:
  - Update to 1.14
    - Remove MAP_TARGET from Makefile.PL (CPAN RT#91590)
    - Fix for Solaris setuid when root running as other user (CPAN RT#88271)
    - Add strict/warnings to Tty.pm
    - Fix pod errors
    - Typo: s/dependend/dependent/
    - Prevent spurious warning from get_winsize()
    - Fix usage of setsid
    - Github actions testing; Windows is off of course
    - Make README.md
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.14-5
changelog:
  - Fix FTBFS due to false detection of strlcpy() and _getpty()
    https://github.com/toddr/IO-Tty/pull/24
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to 1.15
    - Skip winsize test on Solaris and QNX NTO (GH#22)
    - Make function tests more robust (GH#24)
    - Work around a header name collision on util.h; this is breaking on recent
      OSX (GH#26)


author: Paul Howarth <paul@city-fan.org> - 1.16-1
changelog:
  - Update to 1.16
    - Switch to GitHub for issue tracker
    - Switch to testsuite CI workflow
    - Tidy


author: Paul Howarth <paul@city-fan.org> - 2.112-1
changelog:
  - Update to 2.112
    - Added the change log from any prior source that could be found, and
      formatted the log to fit metacpan.org loose standards
    - Change use vars qw() to our $whatever instead
    - Hide IO::WrapTie subclasses from PAUSE
    - Rebuild Makefile.PL to contain all of the prerequisites
    - Convert README to README.md
    - Fix the documentation in the main module, IO::Stringy to better indicate
      where to get info and how to use the module
    - Fix the dist's META information to indicate the original author and license
    - Add a LICENSE file
    - Add AppVeyor CI testing
    - Add Travis CI testing
    - Update t/IO_InnerFile.t to use Test::More and a proper TEMP file
      (CPAN RT#103895)
  - Use author-independent source URL
  - Simplify find command using -delete
  - Add Provides: for perl-IO-Stringy
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.113-1
changelog:
  - Update to 2.113
    - Get rid of use of Common and TBone in all tests
    - Convert to Dist::Zilla for authoring
    - Cleaned up some of the docs (needs more)


author: Paul Howarth <paul@city-fan.org> - 20200505.0-1
changelog:
  - Update to 20200505.0
    - Fix syntax errors in POD examples (GH#125)
    - Switch Readonly testing requirement to a recommends (GH#127)
    - Fix full_result to always return $? (GH#129)
    - kill_kill: Immediately KILL the child process as documented for Win32 (GH#136)
    - Switch to GitHub actions for CI testing
    - Re-structure shipped files into eg/
    - Move author tests into xt/ and test them separately


author: Paul Howarth <paul@city-fan.org> - 2.18-1
changelog:
  - Update to 2.18
    - Update with newest data
    - Mojo 6.0 changed types() into mapping()
    - Mojo 7.94 adds experimental file_type()
    - Mojo 7.94 adds experimental content_type()


author: Paul Howarth <paul@city-fan.org> - 0.39-1
changelog:
  - Update to 0.39
    - Updated distribution metadata and packaging
    - Configuration phase now uses ExtUtils::HasCompiler


author: Paul Howarth <paul@city-fan.org> - 0.112-1
changelog:
  - Update to 0.112
    - Another test fix on Windows, possibly due to a behavior change in
      Cwd::getdcwd


author: Paul Howarth <paul@city-fan.org> - 0.118-1
changelog:
  - Update to 0.118
    - Skip symlink tests on Windows by actually testing symlinks, as Perl 5.33.5
      adds notional support but it's not possible without elevated privileges


author: Paul Howarth <paul@city-fan.org> - 0.008-1
changelog:
  - Update to 0.008
    - Make unread by :crlf on top of :utf8_strict reliable
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.47-1
changelog:
  - Update to 0.47
    - Change Specio constraint object's stringification overloading to return the
      type name rather than the default Perl object stringification, which gives
      you something like
      "Specio::Constraint::Parameterized=HASH(0x564d258efb48)"; anonymous are
      special cased to return something you can print
    - All types now overload the 'eq' comparison operator: Moose expects types to
      be comparable in this manner when doing role summation (GH#18)


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - %DB::sub is now populated correctly for sub names with wide characters or
      nulls (GH#9)
    - Better Perl 5.6 compatibility by lowering prereqs of core modules
    - Test for renaming lexical subs, which should work on Perl 5.22+ (GH#10)
    - Small internal changes to bring implementation in line with changes to
      Sub::Util
    - Fix "Undefined symbol "DPPP_my_croak_xs_usage"" error on some perls
      (CPAN RT#125158)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.130-1
changelog:
  - Update to 1.128
    - Allow 'use Test::Deep' while other modules use Test::Deep::NoTest (GH#76)
    - Added true/false optional imports (GH#41, GH#44)
    - Documentation fixes (GH#79)
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.016-1
changelog:
  - Update to 0.016
    - Add default descriptions to tests
    - Work on ancient Test::Builder code
  - Use author-independent source URL
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Re-packaging
  - Drop running of extra tests at package build time to avoid need for
    bootstrapping
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.027-1
changelog:
  - Update to 0.027
    - New :fail_on_warning feature, for more easily seeing where the surprising
      warning appeared during testing
  - Use author-independent source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.029-1
changelog:
  - Update to 0.029
    - New :report_warnings feature, for printing all of the (unexpected) warning
      content when had_no_warnings() is called (GH#10)


author: Paul Howarth <paul@city-fan.org> - 0.030-1
changelog:
  - Update to 0.030
    - Fix tests that can fail when there is already an installed module named
      Foo::Bar::Baz (CPAN RT#132140)


author: Paul Howarth <paul@city-fan.org> - 1.01-1
changelog:
  - Update to 1.01
    - Implement Types::Serialiser::as_bool
    - Slight documentation tweaks
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.002-2
changelog:
  - Incorporate feedback from package review (#1776513)
    - BR: findutils
    - BR: perl(CPAN::Meta::Prereqs)
    - Need perl(ExtUtils::MakeMaker) >= 6.76
    - Add reference to upstream ticket about unnecessary build requirements
      https://github.com/atoomic/XString/issues/2
    - Add run-time dependency on perl(XSLoader)


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - Fix cstring for Perl 5.32 (GH#6, GH#7)
    - Remove unneeded module dependencies (GH#2)
    - Add compatibility with Perl 5.8 (GH#9)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:0.81-1
changelog:
  - Update to 0.81
    - Breaking Change: Set $YAML::XS::LoadBlessed default to false to make it
      more secure


author: Paul Howarth <paul@city-fan.org> - 1:0.82-1
changelog:
  - Update to 0.82
    - Updated libyaml sources to 0.2.4; changes affecting YAML::XS are:
      - Output '...' at the stream end after a block scalar with trailing empty
        lines
      - Accept '%YAML 1.2' directives (they are ignored and do not change
        behaviour though)


author: Paul Howarth <paul@city-fan.org> - 3.7.5-1
changelog:
  - Update to 3.75
    - Make build (more) reproducible
    - Removed "portable" from the warnings list, as 32-bit perls (as opposed to
      32-bit platforms) are practically extinct and it warns about a weird subset
      of operations, e.g. 64-bit hex() is not ok, 64-bit addition is fine, makes
      no sense; additionally, other than hex/oct etc. harassment, there is
      nothing in this category that otherwise could be useful
  - Specify all build dependencies
  - Drop ancient obsoletes/provides for removed tests sub-package
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Switch from Test::Requires to Test::Needs
    - Report on the installed versions of more optional modules


author: Mat Booth <mat.booth@redhat.com> - 0.0.7-29
changelog:
  - Unecessary restriction on plexus-util, with the patch it's actually still
    source compatible with older versions


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Petr Viktorin <pviktori@redhat.com> - 1.1-1
changelog:
  - Update to 1.1 to fix Python 3.8 compatibility in tests
    https://bugzilla.redhat.com/show_bug.cgi?id=1758446


author: Miro Hrončok <mhroncok@redhat.com> - 2.6.2-6
changelog:
  - Introduce epoch to pybind11-devel to sort newer than python3.11-pybind11-devel
  - Resolves: RHEL-38108


author: Tomas Orsava <torsava@redhat.com> - 2.6.2-4
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Manually add Provides and Obsoletes for python39-pybind11-devel
  - Related: rhbz#1990421


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.0-1
changelog:
  - %pyproject_buildrequires: Add provisional -w flag for build backends without
    prepare_metadata_for_build_wheel hook
    When used, the wheel is built in %pyproject_buildrequires
    and information about runtime requires and extras is read from that wheel.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Charalampos Stratakis <cstratak@redhat.com> - 1:3.4.3-7
changelog:
  - Obsolete and provide the python-sphinx-locale package to fix the upgrade path
  Related: rhbz#1985219


author: Jerry James <loganjerry@gmail.com> - 0.5.0-1
changelog:
  - Version 0.5.0
  - Drop upstreamed -script patch
  - Do not even link to fonts; modify the CSS to point to system fonts
  - Remove all traces of html5shiv


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0-5
changelog:
  - Initial package for RHEL 9
  - Resolves: RHEL-12338
  - Fedora+EPEL contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 0.4.14-5
changelog:
  - Subpackages python2-greenlet, python2-greenlet-devel have been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-1
changelog:
  - Resolves: RHEL-54546 Covscan issues: Resource Leak
  - Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-40359 With unreachable AD, ipa trust returns an internal error


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-2
changelog:
  - Related: RHEL-59788 Rebase Samba to the latest 4.21.x release
  - Resolves: RHEL-61642 Uninstall ACME separately during PKI uninstallation
  - Resolves: RHEL-56963 SSSD offline causing test-adtrust-install failure
  - Resolves: RHEL-56473 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-48104 Default hbac rules are duplicated on remote server post ipa-migrate in prod-mode
  - Resolves: RHEL-45330 [RFE] add a tool to quickly detect and fix issues with IPA ID ranges
  - Resolves: RHEL-40376 SID generation task is failing when SELinux is in Enforcing mode
  - Resolves: RHEL-4915 Last expired OTP token would be considered as still assigned to the user


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-5
changelog:
  - Resolves: RHEL-67414 ipa dns-zone --allow-query '!198.18.2.0/24;any;' fails with Unrecognized IPAddress flags
  - Resolves: RHEL-67410 ipa-migrate should also migrate DNS forward zones
  - Resolves: RHEL-67409 ipa-migrate in stage mode fails with TypeError: 'NoneType' object is not iterable
  - Resolves: RHEL-66964 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-64135 IDP configuration in the IdM WebUI shows Organization is required


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-6
changelog:
  - Resolves: RHEL-68448 ipa trust-add fails in FIPS mode with an internal error has occurred
  - Resolves: RHEL-69301 Support GSSAPI in Cockpit on IPA servers


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-7
changelog:
  - Resolves: RHEL-70760 Fix typo in ipa-migrate log file i.e 'Privledges' to 'Privileges'
  - Resolves: RHEL-70481 ipa-server-upgrade fails after established trust with ad
  - Resolves: RHEL-69927 add support for python cryptography 44.0.0
  - Resolves: RHEL-69908 All user groups are not being included during HSM token validation
  - Resolves: RHEL-69900 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-8
changelog:
  - Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking [rhel-9]
  - Resolves: RHEL-71261 [RHEL-9.6] Include latest fixes in python3-ipatests package
  - Resolves: RHEL-67191 CVE-2024-11029 ipa: Administrative user data leaked through systemd journal [rhel-9.6]
  - Resolves: RHEL-59040 KRA installation failure caused by a certificate mismatch in NSS DB and configuration file.


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-9
changelog:
  - Resolves: RHEL-74465 kinit with external idp user is failing
  - Resolves: RHEL-75656 Include latest fixes in python3-ipatests package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-10
changelog:
  - Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking


author: Julien Rische <jrische@redhat.com> - 4.12.0-4
changelog:
  - Resolves: RHEL-29928 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  - Resolves: RHEL-29691 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-5
changelog:
  - Resolves: RHEL-37285 IPA Web UI not showing replication agreement for non-admin users
  - Resolves: RHEL-42703 PSKC.xml issues with ipa_otptoken_import.py
  - Resolves: RHEL-41194 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
  - Resolves: RHEL-39477 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
  - Resolves: RHEL-46559 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-22188 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-6
changelog:
  - Resolves: RHEL-47292 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-47146 Syntax error uninstalling the selinux-luna subpackage
  - Resolves: RHEL-46009 ipa-migrate with -Z option fails with ValueError: option error
  - Resolves: RHEL-46003 ipa-migrate -V options fails to display version
  - Resolves: RHEL-45463 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
  - Resolves: RHEL-40890 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check
  - Resolves: RHEL-40661 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-7
changelog:
  - Resolves: RHEL-53500 adtrustinstance only prints issues in check_inst() and does not log them
  - Resolves: RHEL-52306 Unconditionally add MS-PAC to global config
  - Resolves: RHEL-52300 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync"
  - Resolves: RHEL-52222 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure
  - Resolves: RHEL-51944 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-50804 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
  - Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-27856 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Charalampos Stratakis <cstratak@redhat.com> - 6.2.2-2
changelog:
  - Disable tests and documentation generation on RHEL9 to avoid pulling in dependencies
  - Drop redundant build dependency on wcwidth (unused since 6.0.0rc1)


author: Dan Čermák <dan.cermak@cgc-instruments.com> - 0.7.1-5
changelog:
  - BuildRequire python3-setuptools besides python3-devel
    (see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Francisco Triviño <ftrivino@redhat.com> - 0.12.1-5
changelog:
  - Rebuilt needed for moving buildroot package to CRB
  - Resolves: RHEL-70463 python3-setuptools-rust is not signed
  - Resolves: RHEL-67341 move python3-setuptools-rust to CRB [rhel-9]


author: Francisco Triviño <ftrivino@redhat.com> - 0.12.1-6
changelog:
  - Rebuilt needed to trigger signing of the package
  - Resolves: RHEL-70463 python3-setuptools-rust is not signed


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.4-3
changelog:
  - Update runtime and buildtime dependencies
  - Remove sqlalchemy, whoosh and xapian dependencies from RHEL9


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-5
changelog:
  - Make the python-wheel-wheel subpackage versioned (python3-wheel-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-6
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33677, RHEL-33689


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.5-1
changelog:
  - Rebase to 3.11.5
  - Security fixes for CVE-2023-40217 and CVE-2023-41105
  Resolves: RHEL-3045, RHEL-3269


author: Charalampos Stratakis <cstratak@redhat.com> - 0.29.32-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        nbecker <ndbecker2@gmail.com>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 22.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomas Hrnciar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.10.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        jonathanspw <jonathan@almalinux.org>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.0.7-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alan Pevec <alan.pevec@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David King <amigadave@amigadave.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        José Abílio Oliveira Matos <jamatos@fedoraproject.org>
        José Matos <jamatos@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Terje Røsten <terje.rosten@ntnu.no>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        yatin <ykarel@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 7.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.8.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Davide Cavalca <dcavalca@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Javier Pena <jpena@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.5.2-1
changelog:
  - Initial import
  - Fedora contributions by:
        Christian Heimes <cheimes@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 0.38.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.2-3
changelog:
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64886, RHEL-70320


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.29.35-2
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <i.gnatenko.brain@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@gmail.com>
        Tomas Hrcka <thrcka@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.1-1
changelog:
  - Initial package
  - Fedora contributions by:
       Lumir Balhar <lbalhar@redhat.com>
       Miro Hrončok <miro@hroncok.cz>
       Tomas Hrnciar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeroen van Meeuwen (Kolab Systems) <vanmeeuwen@kolabsys.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Pavel Šimovec <psimovec@redhat.com>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 7.4.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.7.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Christian Heimes <cheimes@redhat.com>
        Fabio Valentini <decathorpe@gmail.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 68.2.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.41.2-1
changelog:
  - Initial package.
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Vladis Dronov <vdronov@redhat.com> - 21.05.0-1
changelog:
  - Update to qatlib 21.05 with openssl-3 support (bz 1920444, bz 1953498)
  - Add documentation files to a package


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20174)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40255)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladis Dronov <vdronov@redhat.com> - 1.0.7-1
changelog:
  - Rebuild for qatzip v1.0.7
  - Fix snprintf truncation check (bz 2046925)
  - Add -fstack-protector-strong build option (bz 2044889)


author: Vladis Dronov <vdronov@redhat.com> - 1.0.9-1
changelog:
  - Rebuild for qatzip v1.0.9 (bz 2047744)
  - Update to require qatlib-devel >= 22.07.0 due to soversion bump


author: Vladis Dronov <vdronov@redhat.com> - 1.1.2-1
changelog:
  - Update to qatzip 1.1.2 (bz 2082438)
  - Update README, update driver configure files
  - Fix some bugs
  - Add support for pkgconfig


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-27
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch patches
    - validate configure results (base, egl-x11)

    Resolves: bz#2014991


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Pavel Valena <pvalena@redhat.com> - 3.0.1-154
changelog:
  - Upgrade to Ruby 3.0.2.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix dependencies of gems with explicit source installed from a
    different source.
    Resolves: CVE-2020-36327
  - Pass ldflags to gem install via CONFIGURE_ARGS.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-160
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2096347
  - OpenSSL test suite fixes due to disabled SHA1.
    Resolves: rbhz#2107696
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-160
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix File.utime test.


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-161
changelog:
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-12724
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-12724


author: Jun Aruga <jaruga@redhat.com> - 3.0.7-162
changelog:
  - Upgrade to Ruby 3.0.7.
    Resolves: RHEL-35740
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-35741
  - Fix ReDoS vulnerability in URI.
    Resolves: RHEL-35742
  - Fix ReDoS vulnerability in Time.
    Resolves: RHEL-35743
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-35744
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-35746
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-35747


author: Pavel Valena <pvalena@redhat.com> - 3.10.1-7
changelog:
  - Re-add Requires: rubygem(rake), as it's needed for runtime.
    Resolves: rhbz#1982410
    Resolves: rhbz#1982419


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-7
changelog:
  - useradd: check if subid range exists for user. Resolves: #2179987
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.8.1-9
changelog:
  - libsubid: creation and nsswitch support. Resolves: #1859252
  - Creation of subid and subid-devel subpackages
  - man: mention NSS in new[ug]idmap manpages
  - libsubid: move development header to shadow folder
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - useradd: fix SUB_UID_COUNT=0
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - man: clarify subid delegation
  - libsubid: make shadow_logfd not extern
  - login.defs: include HMAC_CRYPTO_ALGO key


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-1
changelog:
  - Rebase to version 4.9. Resolves: #1989556
  - usermod: allow all group types with -G option. Resolves: #1975329
  - useradd: avoid generating an empty subid range
  - Clean spec file


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-3
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013015
  - useradd: generate home and mail directories with selinux user attribute. Resolves: #1993081
  - useradd: revert fix memleak of grp. Resolves: #2020238
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #2024834
  - pwck: fix segfault when calling fprintf()
  - newgrp: fix segmentation fault
  - Clean spec file: organize dependencies and move License location


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-4
changelog:
  - useradd: modify check ID range for system users. Resolves: #2004911
  - Fix release sources
  - Add subid requirement for subid-devel


author: Peter Jones <pjones@redhat.com> - 15.3-0~1
changelog:
  - Update to shim 15.3
    - Support for revocations via the ".sbat" section and SBAT EFI variable
    - A new unit test framework and a bunch of unit tests
    - No external gnu-efi dependency
    - Better CI
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-1
changelog:
  - Update to shim 15.4
    - Support for revocations via the ".sbat" section and SBAT EFI variable
    - A new unit test framework and a bunch of unit tests
    - No external gnu-efi dependency
    - Better CI
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-2
changelog:
  - Fix the ia32 build.
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-3
changelog:
  - Build with the correct certificate trust list for this OS.
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-4
changelog:
  - Fix the sbat data to actually match /this/ product.
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Orion Poplawski <orion@nwra.com> - 5.4.0-1
changelog:
  - Update to 5.4.0
  - Use upstream shared library builds
  - Build with metis
  - Explicitly list libraries and soname versions


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Robert-André Mauchin <zebob.m@gmail.com> - 4.0.2-16
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
    CVE-2022-29526, CVE-2022-30629


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.7-4
changelog:
  - Move texlive-tex files to more approriate location again, this
    time in sync with dropping texlive-texinfo from texlive
    Resolves: #1719379


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Štěpán Horáček <shoracek@redhat.com> - 3.2.2-1
changelog:
  - Rebase to 3.2.2
  - Use systemd-sysusers to create user
    Resolves: CVE-2023-22745
    Resolves: rhbz#2095479
    Resolves: rhbz#2160307
    Resolves: rhbz#2162613


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Hans de Goede <hdegoede@redhat.com> - 1:3.2.7b-1
changelog:
  - New upstream release 3.2.7b
  - Add patch fixing CVE-2019-19746 (rhbz#1787040)
  - Add patch fixing CVE-2019-19797 (rhbz#1786726)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-7
changelog:
  - Fixed CVE-2020-21681 (#1998350)
  - Fixed CVE-2020-21683 (#1998594)
  - Fixed CVE-2020-21680 (#1998306)
  - Fixed CVE-2020-21684 (#2000747)
  - Fixed CVE-2020-21678 (#2000741)
  - Fixed CVE-2020-21676 (#2000751)
  - Fixed CVE-2020-21682 (#2000738)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-8
changelog:
  - Fixed CVE-2020-21529 (#2005518)
  - Fixed CVE-2020-21532 (#2006007)
  - Fixed CVE-2020-21531 (#2006002)


author: Andreas Schneider <asn@redhat.com> - 1.2.7-1
changelog:
  - Update to version 1.2.7
    * Fix unsetting initial XIDs
    * Fix manpage installation
    * Fix cmake-config installation
    * Fixed running with sanitizers
  - resolves: #1690028 - Allow running without RTLD_DEEPBIND


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25671
  - Resolves: RHEL-25643


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-2
changelog:
  - Add systemd service snippets
  - Use macros for _unitdir and _udevrulesdir
  - Mark _datadir/gtk-doc as directory


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 6.5.1-2
changelog:
  - Pulled support for el6
  - Pulled support for sysvinit
  - aarch64 builds now with jemalloc again on el7


author: Luboš Uhliarik <luhliari@redhat.com> - 6.5.2-1
changelog:
  - new version 6.5.2
  - Resolves: #1984185 - Rebase varnish to 6.5.2
  - Resolves: #1982858 - CVE-2021-36740 varnish: HTTP/2 request smuggling attack
    via a large Content-Length header for a POST request


author: Tomas Korbar <tkorbar@redhat.com> - 6.6.2-5
changelog:
  - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487
  - Resolves: RHEL-12818


author: Luboš Uhliarik <luhliari@redhat.com> - 6.6.2-6
changelog:
  - Resolves: RHEL-30337 - varnish: HTTP/2 Broken Window Attack may result
    in denial of service (CVE-2024-30156)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.4-2
changelog:
  - Package virt-v2v-in-place in libexec as unsupported tool
  - Add warning about virt-v2v-in-place not being supported
    resolves: RHEL-40903
  - Add more fields to virt-inspector output
    related: MTV-1079
  - Revert "docs: Remove paragraph about -ip passwords and ssh/scp"
    resolves: RHEL-45527


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.6-1
changelog:
  - Further fixes for QEMU Guest Agent
    resolves: RHEL-49761
  - Place Windows firstboot files under C:\Program Files\Guestfs\Firstboot
  - Improve debugging output


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.6-3
changelog:
  - Further fixes for QEMU Guest Agent install & VMware Tools removal
    resolves: RHEL-49761, RHEL-51169


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.9-1
changelog:
  - Rebase to upstream development version 2.5.9
  - Fix display of incorrect Windows 11 version
    resolves: RHEL-56784
  - Add customization options for post-conversion modification
    resolves: RHEL-55761
  - convert: windows: Ignore sriov drivers on virtio-win disk
    resolves: RHEL-56383


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-1
changelog:
  - Rebase to upstream development version 2.7.1
    resolves: RHEL-56813
  - Replace Jansson with json-c
    resolves: RHEL-65296
  - Find drivers for win2025 guests
    resolves: RHEL-65010


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-2
changelog:
  - Rebase to upstream development version 2.7.1
    resolves: RHEL-56813
  - Replace Jansson with json-c
    resolves: RHEL-65296
  - Find drivers for win2025 guests
    resolves: RHEL-65010
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-58032


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-4
changelog:
  - Rebase to upstream development version 2.7.1
    resolves: RHEL-56813
  - Replace Jansson with json-c
    resolves: RHEL-65296
  - Find drivers for win2025 guests
    resolves: RHEL-65010
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-58032
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-77989
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-71522


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-5
changelog:
  - Rebase to upstream development version 2.7.1
    resolves: RHEL-56813
  - Replace Jansson with json-c
    resolves: RHEL-65296
  - Find drivers for win2025 guests
    resolves: RHEL-65010
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-58032
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-77989
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-71522
  - Fix failure if the kernel-source package is installed in the source VM
    resolves: RHEL-80080


author: Debarshi Ray <rishi@fedoraproject.org> - 0.64.2-1
changelog:
  - Update to 0.64.2
  - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174)
  - Fix the License fields and ship the correct license texts (#1973299)


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-4
changelog:
  - Resolves: #2152064 - CVE-2022-3190 wireshark: f5ethtrailer Infinite loop in legacy style dissector


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-5
changelog:
  - Resolves: #2210864 - Candump log file parser crash
    Resolves: #2210865 - VMS TCPIPtrace file parser crash
    Resolves: #2210868 - NetScaler file parser crash
    Resolves: #2210870 - RTPS dissector crash
    Resolves: #2210871 - IEEE C37.118 Synchrophasor dissector crash


author: Tomas Popela <tpopela@redhat.com> - 1.0.2-8
changelog:
  - Package woff2_decompress, woff2_compress and woff2_info in a tools subpackage.
    Thanks to Tomasz Gąsior <kontakt@tomaszgasior.pl>


author: Mat Booth <mat.booth@redhat.com> - 4.15-5
changelog:
  - Remove springframework conditionals, the deps are a long time removed from
    Fedora and this simplifies the spec a bit
  - Disable unused modules that can't build on JDK 11


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Merlin Mathesius <mmathesi@redhat.com> - 0:2.7.0-6
changelog:
  - Fix FTBFS by patching ValueAssertTest to adjust for changed format of
    mismatched string exception


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-3
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
                 CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
                 CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
                 CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.3-5
changelog:
  - CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778),
    CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786),
    CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.11-13
changelog:
  - Drop dependency on xorg-x11-font-utils, it was only there for one pkgconfig
    query for a variable that never changes value (#2148292)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.11-14
changelog:
  - CVE fix for: CVE-2022-4283 (#2151801), CVE-2022-46340 (#2151776),
    CVE-2022-46341 (#2151781), CVE-2022-46342 (#2151788),
    CVE-2022-46343 (#2151791), CVE-2022-46344 (#2151798)


author: José Expósito <jexposit@redhat.com> - 1.20.11-22
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18322
    Resolves: https://issues.redhat.com/browse/RHEL-18329


author: José Expósito <jexposit@redhat.com> - 1.20.11-23
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21203
    Resolves: https://issues.redhat.com/browse/RHEL-20531
    Resolves: https://issues.redhat.com/browse/RHEL-20380
    Resolves: https://issues.redhat.com/browse/RHEL-20386
    Resolves: https://issues.redhat.com/browse/RHEL-21193
    Resolves: https://issues.redhat.com/browse/RHEL-21200


author: José Expósito <jexposit@redhat.com> - 1.20.11-25
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-28
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
                 CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
                 CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
                 CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)


author: Vladis Dronov <vdronov@redhat.com> - 0.8.2-1
changelog:
  - Update to version 0.8.2
  - Drop patch 1-fix-man-page-installation.patch
  - Use SPDX license identifiers


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


