# changelog

author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-442.el9]
changelog:
  - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30031] {CVE-2024-25743 CVE-2024-25742}
  - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-9872]
  - integrity: eliminate unnecessary "Problem loading X.509 certificate" msg (Coiby Xu) [RHEL-12346]
  - smb: client: instantiate when creating SFU files (Paulo Alcantara) [RHEL-31245]
  - smb: client: fix NULL ptr deref in cifs_mark_open_handles_for_deleted_file() (Paulo Alcantara) [RHEL-31245]
  - cifs: Fix duplicate fscache cookie warnings (Paulo Alcantara) [RHEL-31245]
  - smb3: add trace event for mknod (Paulo Alcantara) [RHEL-31245]
  - smb311: additional compression flag defined in updated protocol spec (Paulo Alcantara) [RHEL-31245]
  - smb311: correct incorrect offset field in compression header (Paulo Alcantara) [RHEL-31245]
  - cifs: Move some extern decls from .c files to .h (Paulo Alcantara) [RHEL-31245]
  - cifs: remove redundant variable assignment (Paulo Alcantara) [RHEL-31245]
  - cifs: fixes for get_inode_info (Paulo Alcantara) [RHEL-31245]
  - cifs: open_cached_dir(): add FILE_READ_EA to desired access (Paulo Alcantara) [RHEL-31245]
  - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-31245]
  - cifs: make sure server interfaces are requested only for SMB3+ (Paulo Alcantara) [RHEL-31245]
  - cifs: defer close file handles having RH lease (Paulo Alcantara) [RHEL-31245]
  - cifs: update internal module version number for cifs.ko (Paulo Alcantara) [RHEL-31245]
  - smb: common: simplify compression headers (Paulo Alcantara) [RHEL-31245]
  - smb: common: fix fields sizes in compression_pattern_payload_v1 (Paulo Alcantara) [RHEL-31245]
  - smb: client: negotiate compression algorithms (Paulo Alcantara) [RHEL-31245]
  - smb3: add dynamic trace point for ioctls (Paulo Alcantara) [RHEL-31245]
  - smb: client: return reparse type in /proc/mounts (Paulo Alcantara) [RHEL-31245]
  - smb: client: set correct d_type for reparse DFS/DFSR and mount point (Paulo Alcantara) [RHEL-31245]
  - smb: client: parse uid, gid, mode and dev from WSL reparse points (Paulo Alcantara) [RHEL-31245]
  - smb: client: introduce SMB2_OP_QUERY_WSL_EA (Paulo Alcantara) [RHEL-31245]
  - smb: client: Fix a NULL vs IS_ERR() check in wsl_set_xattrs() (Paulo Alcantara) [RHEL-31245]
  - smb: client: add support for WSL reparse points (Paulo Alcantara) [RHEL-31245]
  - smb: client: reduce number of parameters in smb2_compound_op() (Paulo Alcantara) [RHEL-31245]
  - smb: client: fix potential broken compound request (Paulo Alcantara) [RHEL-31245]
  - smb: client: move most of reparse point handling code to common file (Paulo Alcantara) [RHEL-31245]
  - smb: client: introduce reparse mount option (Paulo Alcantara) [RHEL-31245]
  - smb: client: retry compound request without reusing lease (Paulo Alcantara) [RHEL-31245]
  - smb: client: do not defer close open handles to deleted files (Paulo Alcantara) [RHEL-31245]
  - smb: client: reuse file lease key in compound operations (Paulo Alcantara) [RHEL-31245]
  - smb3: update allocation size more accurately on write completion (Paulo Alcantara) [RHEL-31245]
  - cifs: allow changing password during remount (Paulo Alcantara) [RHEL-31245]
  - cifs: prevent updating file size from server if we have a read/write lease (Paulo Alcantara) [RHEL-31245]
  - cifs_get_link(): bail out in unsafe case (Paulo Alcantara) [RHEL-31245]
  - smb: Fix regression in writes when non-standard maximum write size negotiated (Paulo Alcantara) [RHEL-31245]
  - smb: client: handle path separator of created SMB symlinks (Paulo Alcantara) [RHEL-31245]
  - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-31245]
  - cifs: update the same create_guid on replay (Paulo Alcantara) [RHEL-31245]
  - cifs: fix underflow in parse_server_interfaces() (Paulo Alcantara) [RHEL-31245]
  - smb3: clarify mount warning (Paulo Alcantara) [RHEL-31245]
  - cifs: handle cases where multiple sessions share connection (Paulo Alcantara) [RHEL-31245]
  - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-31245]
  - smb: client: set correct d_type for reparse points under DFS mounts (Paulo Alcantara) [RHEL-31245]
  - smb3: add missing null server pointer check (Paulo Alcantara) [RHEL-31245]
  - smb: client: increase number of PDUs allowed in a compound request (Paulo Alcantara) [RHEL-31245]
  - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-31245]
  - cifs: do not search for channel if server is terminating (Paulo Alcantara) [RHEL-31245]
  - cifs: avoid redundant calls to disable multichannel (Paulo Alcantara) [RHEL-31245]
  - cifs: make sure that channel scaling is done only once (Paulo Alcantara) [RHEL-31245]
  - cifs: fix stray unlock in cifs_chan_skip_or_disable (Paulo Alcantara) [RHEL-31245]
  - cifs: set replay flag for retries of write command (Paulo Alcantara) [RHEL-31245]
  - cifs: commands that are retried should have replay flag set (Paulo Alcantara) [RHEL-31245]
  - cifs: helper function to check replayable error codes (Paulo Alcantara) [RHEL-31245]
  - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-31245]
  - cifs: cifs_pick_channel should try selecting active channels (Paulo Alcantara) [RHEL-31245]
  - smb: Work around Clang __bdos() type confusion (Paulo Alcantara) [RHEL-31245]
  - smb: client: delete "true", "false" defines (Paulo Alcantara) [RHEL-31245]
  - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-31245]
  - cifs: handle servers that still advertise multichannel after disabling (Paulo Alcantara) [RHEL-31245]
  - cifs: new mount option called retrans (Paulo Alcantara) [RHEL-31245]
  - cifs: reschedule periodic query for server interfaces (Paulo Alcantara) [RHEL-31245]
  - smb: client: don't clobber ->i_rdev from cached reparse points (Paulo Alcantara) [RHEL-31245]
  - smb: client: get rid of smb311_posix_query_path_info() (Paulo Alcantara) [RHEL-31245]
  - smb: client: parse owner/group when creating reparse points (Paulo Alcantara) [RHEL-31245]
  - cifs: new nt status codes from MS-SMB2 (Paulo Alcantara) [RHEL-31245]
  - cifs: pick channel for tcon and tdis (Paulo Alcantara) [RHEL-31245]
  - cifs: open_cached_dir should not rely on primary channel (Paulo Alcantara) [RHEL-31245]
  - cifs: minor comment cleanup (Paulo Alcantara) [RHEL-31245]
  - smb3: show beginning time for per share stats (Paulo Alcantara) [RHEL-31245]
  - cifs: remove redundant variable tcon_exist (Paulo Alcantara) [RHEL-31245]
  - cifs: update internal module version number for cifs.ko (Paulo Alcantara) [RHEL-31245]
  - cifs: remove unneeded return statement (Paulo Alcantara) [RHEL-31245]
  - cifs: make cifs_chan_update_iface() a void function (Paulo Alcantara) [RHEL-31245]
  - cifs: delete unnecessary NULL checks in cifs_chan_update_iface() (Paulo Alcantara) [RHEL-31245]
  - cifs: get rid of dup length check in parse_reparse_point() (Paulo Alcantara) [RHEL-31245]
  - smb: client: stop revalidating reparse points unnecessarily (Paulo Alcantara) [RHEL-31245]
  - cifs: Pass unbyteswapped eof value into SMB2_set_eof() (Paulo Alcantara) [RHEL-31245]
  - smb3: Improve exception handling in allocate_mr_list() (Paulo Alcantara) [RHEL-31245]
  - cifs: fix in logging in cifs_chan_update_iface (Paulo Alcantara) [RHEL-31245]
  - smb: client: handle special files and symlinks in SMB3 POSIX (Paulo Alcantara) [RHEL-31245]
  - smb: client: cleanup smb2_query_reparse_point() (Paulo Alcantara) [RHEL-31245]
  - smb: client: allow creating symlinks via reparse points (Paulo Alcantara) [RHEL-31245]
  - smb: client: fix hardlinking of reparse points (Paulo Alcantara) [RHEL-31245]
  - smb: client: fix renaming of reparse points (Paulo Alcantara) [RHEL-31245]
  - smb: client: optimise reparse point querying (Paulo Alcantara) [RHEL-31245]
  - smb: client: allow creating special files via reparse points (Paulo Alcantara) [RHEL-31245]
  - smb: client: extend smb2_compound_op() to accept more commands (Paulo Alcantara) [RHEL-31245]
  - smb: client: Fix minor whitespace errors and warnings (Paulo Alcantara) [RHEL-31245]
  - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-31245]
  - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-31245]
  - cifs: after disabling multichannel, mark tcon for reconnect (Paulo Alcantara) [RHEL-31245]
  - cifs: do not let cifs_chan_update_iface deallocate channels (Paulo Alcantara) [RHEL-31245]
  - cifs: fix a pending undercount of srv_count (Paulo Alcantara) [RHEL-31245]
  - fs: cifs: Fix atime update check (Paulo Alcantara) [RHEL-31245]
  - smb: client: fix OOB in SMB2_query_info_init() (Paulo Alcantara) [RHEL-31245]
  - smb: client: fix OOB in cifsd when receiving compounded resps (Paulo Alcantara) [RHEL-31245]
  - smb: client: fix OOB in smb2_query_reparse_point() (Paulo Alcantara) [RHEL-31245]
  - smb: client: fix NULL deref in asn1_ber_decoder() (Paulo Alcantara) [RHEL-31245]
  - cifs: reconnect worker should take reference on server struct unconditionally (Paulo Alcantara) [RHEL-31245]
  - Revert "cifs: reconnect work should have reference on server struct" (Paulo Alcantara) [RHEL-31245]
  - cifs: Fix non-availability of dedup breaking generic/304 (Paulo Alcantara) [RHEL-31245]
  - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-31245]
  - cifs: Fix flushing, invalidation and file size with FICLONE (Paulo Alcantara) [RHEL-31245]
  - cifs: Fix flushing, invalidation and file size with copy_file_range() (Paulo Alcantara) [RHEL-31245]
  - smb: client, common: fix fortify warnings (Paulo Alcantara) [RHEL-31245]
  - cifs: Fix FALLOC_FL_INSERT_RANGE by setting i_size after EOF moved (Paulo Alcantara) [RHEL-31245]
  - cifs: Fix FALLOC_FL_ZERO_RANGE by setting i_size if EOF moved (Paulo Alcantara) [RHEL-31245]
  - smb: client: report correct st_size for SMB and NFS symlinks (Paulo Alcantara) [RHEL-31245]
  - smb: client: fix missing mode bits for SMB symlinks (Paulo Alcantara) [RHEL-31245]
  - smb: client: introduce cifs_sfu_make_node() (Paulo Alcantara) [RHEL-31245]
  - smb: client: set correct file type from NFS reparse points (Paulo Alcantara) [RHEL-31245]
  - smb: client: introduce ->parse_reparse_point() (Paulo Alcantara) [RHEL-31245]
  - smb: client: implement ->query_reparse_point() for SMB1 (Paulo Alcantara) [RHEL-31245]
  - cifs: fix use after free for iface while disabling secondary channels (Paulo Alcantara) [RHEL-31245]
  - cifs: fix lock ordering while disabling multichannel (Paulo Alcantara) [RHEL-31245]
  - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-31245]
  - cifs: fix check of rc in function generate_smb3signingkey (Paulo Alcantara) [RHEL-31245]
  - cifs: spnego: add ';' in HOST_KEY_LEN (Paulo Alcantara) [RHEL-31245]
  - cifs: update internal module version number for cifs.ko (Paulo Alcantara) [RHEL-31245]
  - cifs: handle when server stops supporting multichannel (Paulo Alcantara) [RHEL-31245]
  - cifs: handle when server starts supporting multichannel (Paulo Alcantara) [RHEL-31245]
  - Missing field not being returned in ioctl CIFS_IOC_GET_MNT_INFO (Paulo Alcantara) [RHEL-31245]
  - smb3: allow dumping session and tcon id to improve stats analysis and debugging (Paulo Alcantara) [RHEL-31245]
  - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-31245]
  - smb3: fix caching of ctime on setxattr (Paulo Alcantara) [RHEL-31245]
  - smb3: minor cleanup of session handling code (Paulo Alcantara) [RHEL-31245]
  - cifs: reconnect work should have reference on server struct (Paulo Alcantara) [RHEL-31245]
  - cifs: do not pass cifs_sb when trying to add channels (Paulo Alcantara) [RHEL-31245]
  - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-31245]
  - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-31245]
  - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-31245]
  - smb3: more minor cleanups for session handling routines (Paulo Alcantara) [RHEL-31245]
  - smb3: minor RDMA cleanup (Paulo Alcantara) [RHEL-31245]
  - fs: add ctime accessors infrastructure (Paulo Alcantara) [RHEL-31245]
  - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-31245]
  - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-31245]
  - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-31245]
  - smb: client: fix use-after-free in smb2_query_info_compound() (Paulo Alcantara) [RHEL-31245]
  - smb: client: remove extra @chan_count check in __cifs_put_smb_ses() (Paulo Alcantara) [RHEL-31245]
  - cifs: add xid to query server interface call (Paulo Alcantara) [RHEL-31245]
  - cifs: print server capabilities in DebugData (Paulo Alcantara) [RHEL-31245]
  - smb: use crypto_shash_digest() in symlink_hash() (Paulo Alcantara) [RHEL-31245]
  - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-31245]
  - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-31245]
  - smb3: fix creating FIFOs when mounting with "sfu" mount option (Paulo Alcantara) [RHEL-31245]
  - Add definition for new smb3.1.1 command type (Paulo Alcantara) [RHEL-31245]
  - SMB3: clarify some of the unused CreateOption flags (Paulo Alcantara) [RHEL-31245]
  - cifs: Add client version details to NTLM authenticate message (Paulo Alcantara) [RHEL-31245]
  - smb3: fix touch -h of symlink (Paulo Alcantara) [RHEL-31245]
  - smb: client: prevent new fids from being removed by laundromat (Paulo Alcantara) [RHEL-31245]
  - smb: client: make laundromat a delayed worker (Paulo Alcantara) [RHEL-31245]
  - smb: use kernel_connect() and kernel_bind() (Paulo Alcantara) [RHEL-31245]
  - smb3: fix confusing debug message (Paulo Alcantara) [RHEL-31245]
  - smb: client: handle STATUS_IO_REPARSE_TAG_NOT_HANDLED (Paulo Alcantara) [RHEL-31245]
  - smb3: remove duplicate error mapping (Paulo Alcantara) [RHEL-31245]
  - smb3: Add dynamic trace points for RDMA (smbdirect) reconnect (Paulo Alcantara) [RHEL-31245]
  - smb3: fix some minor typos and repeated words (Paulo Alcantara) [RHEL-31245]
  - smb3: correct places where ENOTSUPP is used instead of preferred EOPNOTSUPP (Paulo Alcantara) [RHEL-31245]
  - smb3: move server check earlier when setting channel sequence number (Paulo Alcantara) [RHEL-31245]
  - cifs: update internal module version number for cifs.ko (Paulo Alcantara) [RHEL-31245]
  - smb3: allow controlling maximum number of cached directories (Paulo Alcantara) [RHEL-31245]
  - smb3: add trace point for queryfs (statfs) (Paulo Alcantara) [RHEL-31245]
  - smb3: allow controlling length of time directory entries are cached with dir leases (Paulo Alcantara) [RHEL-31245]
  - SMB3: rename macro CIFS_SERVER_IS_CHAN to avoid confusion (Paulo Alcantara) [RHEL-31245]
  - send channel sequence number in SMB3 requests after reconnects (Paulo Alcantara) [RHEL-31245]
  - cifs: update desired access while requesting for directory lease (Paulo Alcantara) [RHEL-31245]
  - smb: client: reduce stack usage in smb2_query_reparse_point() (Paulo Alcantara) [RHEL-31245]
  - smb: client: reduce stack usage in smb2_query_info_compound() (Paulo Alcantara) [RHEL-31245]
  - smb: client: reduce stack usage in smb2_set_ea() (Paulo Alcantara) [RHEL-31245]
  - smb: client: reduce stack usage in smb_send_rqst() (Paulo Alcantara) [RHEL-31245]
  - smb: client: reduce stack usage in cifs_demultiplex_thread() (Paulo Alcantara) [RHEL-31245]
  - smb: client: reduce stack usage in cifs_try_adding_channels() (Paulo Alcantara) [RHEL-31245]
  - smb: cilent: set reparse mount points as automounts (Paulo Alcantara) [RHEL-31245]
  - smb: client: query reparse points in older dialects (Paulo Alcantara) [RHEL-31245]
  - smb: client: do not query reparse points twice on symlinks (Paulo Alcantara) [RHEL-31245]
  - smb: client: parse reparse point flag in create response (Paulo Alcantara) [RHEL-31245]
  - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-31245]
  - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-31245]
  - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-31245]
  - smb: client: make smb2_compound_op() return resp buffer on success (Paulo Alcantara) [RHEL-31245]
  - smb: client: move some params to cifs_open_info_data (Paulo Alcantara) [RHEL-31245]
  - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-31245]
  - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-31245]
  - cifs: update the ctime on a partial page write (Paulo Alcantara) [RHEL-31245]
  - blk-mq: don't change nr_hw_queues and nr_maps for kdump kernel (Mamatha Inamdar) [RHEL-15845]
  - powerpc/smp: Remap boot CPU onto core 0 if >= nr_cpu_ids (Mamatha Inamdar) [RHEL-15845]
  - powerpc/smp: Factor out assign_threads() (Mamatha Inamdar) [RHEL-15845]
  - powerpc/smp: Lookup avail once per device tree node (Mamatha Inamdar) [RHEL-15845]
  - powerpc/smp: Increase nr_cpu_ids to include the boot CPU (Mamatha Inamdar) [RHEL-15845]
  - powerpc/smp: Adjust nr_cpu_ids to cover all threads of a core (Mamatha Inamdar) [RHEL-15845]
  - net: Convert some ethtool_sprintf() to ethtool_puts() (Ivan Vecera) [RHEL-31886]
  - checkpatch: add ethtool_sprintf rules (Ivan Vecera) [RHEL-31886]
  - ethtool: Implement ethtool_puts() (Ivan Vecera) [RHEL-31886]
  - intel: fix format warnings (Ivan Vecera) [RHEL-31886]
  - net: phy: smsc: replace deprecated strncpy with ethtool_sprintf (Ivan Vecera) [RHEL-31886]
  - net: phy: tja11xx: replace deprecated strncpy with ethtool_sprintf (Ivan Vecera) [RHEL-31886]
  - net: sparx5: replace deprecated strncpy with ethtool_sprintf (Ivan Vecera) [RHEL-31886]
  - net: dsa: vsc73xx: replace deprecated strncpy with ethtool_sprintf (Ivan Vecera) [RHEL-31886]
  - net: fec: replace deprecated strncpy with ethtool_sprintf (Ivan Vecera) [RHEL-31886]
  - net: dsa: mt7530: replace deprecated strncpy with ethtool_sprintf (Ivan Vecera) [RHEL-31886]
  - net: dsa: lantiq_gswip: replace deprecated strncpy with ethtool_sprintf (Ivan Vecera) [RHEL-31886]
  - ptp: Speed up vclock lookup (Ivan Vecera) [RHEL-32107]
  - ptp: Support late timestamp determination (Ivan Vecera) [RHEL-32107]
  - ptp: Pass hwtstamp to ptp_convert_timestamp() (Ivan Vecera) [RHEL-32107]
  - ptp: Request cycles for TX timestamp (Ivan Vecera) [RHEL-32107]
  - ptp: Add cycles support for virtual clocks (Ivan Vecera) [RHEL-32107]
  - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY (Benjamin Coddington) [RHEL-31513]
  - NFSD: CREATE_SESSION must never cache NFS4ERR_DELAY replies (Benjamin Coddington) [RHEL-31513]
  - NFSD: Document the phases of CREATE_SESSION (Benjamin Coddington) [RHEL-31513]
  - NFSD: Fix the NFSv4.1 CREATE_SESSION operation (Benjamin Coddington) [RHEL-31513]
  - cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Laurent Vivier) [RHEL-31381]
  - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31712] {CVE-2024-26744}
  - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-23910]
  - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-23910]
  - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-23910]
  - powerpc/cputable: Split cpu_specs[] out of cputable.h (Mamatha Inamdar) [RHEL-23910]
  - powerpc/cputable: Move __cpu_setup() prototypes out of cputable.h (Mamatha Inamdar) [RHEL-23910]
  - powerpc/cputable: Remove __machine_check_early_realmode_p{7/8/9} prototypes (Mamatha Inamdar) [RHEL-23910]
  - powerpc/64e: Remove unnecessary #ifdef CONFIG_PPC_FSL_BOOK3E (Mamatha Inamdar) [RHEL-23910]
  - powerpc/64e: Tie PPC_BOOK3E_64 to PPC_E500MC (Mamatha Inamdar) [RHEL-23910]
  - powerpc/Kconfig: Fix non existing CONFIG_PPC_FSL_BOOKE (Mamatha Inamdar) [RHEL-23910]
  - powerpc/64e: Tie PPC_BOOK3E_64 to PPC_FSL_BOOK3E (Mamatha Inamdar) [RHEL-23910]
  - powerpc: Remove remaining parts of oprofile (Mamatha Inamdar) [RHEL-23910]
  - powerpc: fix typos in comments (Mamatha Inamdar) [RHEL-23910]
  - powerpc: Enable the DAWR on POWER9 DD2.3 and above (Mamatha Inamdar) [RHEL-23910]
  - vhost: Add smp_rmb() in vhost_enable_notify() (Gavin Shan) [RHEL-26104]
  - vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan) [RHEL-26104]
  - bpf, tcx: Get rid of tcx_link_const (Felix Maurer) [RHEL-28590]
  - selftests/bpf: Add additional mprog query test coverage (Felix Maurer) [RHEL-28590]
  - selftests/bpf: Make seen_tc* variable tests more robust (Felix Maurer) [RHEL-28590]
  - selftests/bpf: Test query on empty mprog and pass revision into attach (Felix Maurer) [RHEL-28590]
  - selftests/bpf: Adapt assert_mprog_count to always expect 0 count (Felix Maurer) [RHEL-28590]
  - selftests/bpf: Test bpf_mprog query API via libbpf and raw syscall (Felix Maurer) [RHEL-28590]
  - selftest/bpf: Add various selftests for program limits (Felix Maurer) [RHEL-28590]
  - bpf: Refuse unused attributes in bpf_prog_{attach,detach} (Felix Maurer) [RHEL-28590]
  - bpf: Handle bpf_mprog_query with NULL entry (Felix Maurer) [RHEL-28590]
  - net: Fix skb consume leak in sch_handle_egress (Felix Maurer) [RHEL-28590]
  - selftests/bpf: Add various more tcx test cases (Felix Maurer) [RHEL-28590]
  - selftests/bpf: Add test for detachment on empty mprog entry (Felix Maurer) [RHEL-28590]
  - tcx: Fix splat during dev unregister (Felix Maurer) [RHEL-28590]
  - tcx: Fix splat in ingress_destroy upon tcx_entry_free (Felix Maurer) [RHEL-28590]
  - selftests/bpf: Add mprog API tests for BPF tcx links (Felix Maurer) [RHEL-28590]
  - selftests/bpf: Add mprog API tests for BPF tcx opts (Felix Maurer) [RHEL-28590]
  - bpf: Add fd-based tcx multi-prog infra with link support (Felix Maurer) [RHEL-28590]
  - cpuset: Allow setscheduler regardless of manipulated task (Waiman Long) [RHEL-26668]
  - sched/psi: Update poll => rtpoll in relevant comments (Phil Auld) [RHEL-29552]
  - sched/psi: Bail out early from irq time accounting (Phil Auld) [RHEL-29552]
  - sched/psi: Delete the 'update_total' function parameter from update_triggers() (Phil Auld) [RHEL-29552]
  - sched/psi: Avoid updating PSI triggers and ->rtpoll_total when there are no state changes (Phil Auld) [RHEL-29552]
  - sched/psi: Change update_triggers() to a 'void' function (Phil Auld) [RHEL-29552]
  - sched/psi: make psi_cgroups_enabled static (Phil Auld) [RHEL-29552]
  - sched/psi: Allow unprivileged polling of N*2s period (Phil Auld) [RHEL-29552]
  - sched/psi: Extract update_triggers side effect (Phil Auld) [RHEL-29552]
  - sched/psi: Rename existing poll members in preparation (Phil Auld) [RHEL-29552]
  - sched/psi: Rearrange polling code in preparation (Phil Auld) [RHEL-29552]
  - arm64/sme: Always exit sme_alloc() early with existing storage (Mark Salter) [RHEL-28881] {CVE-2024-26618}
  - overflow: add DEFINE_FLEX() for on-stack allocs (Petr Oros) [RHEL-30138]
  - overflow: Add struct_size_t() helper (Petr Oros) [RHEL-30138]
  - mm/filemap.c: fix update prev_pos after one read request done (Nico Pache) [RHEL-29229]
  - sched: Misc cleanups (Phil Auld) [RHEL-29017]
  - sched: Simplify tg_set_cfs_bandwidth() (Phil Auld) [RHEL-29017]
  - sched: Simplify sched_move_task() (Phil Auld) [RHEL-29017]
  - sched: Simplify sched_rr_get_interval() (Phil Auld) [RHEL-29017]
  - sched: Simplify yield_to() (Phil Auld) [RHEL-29017]
  - sched: Simplify sched_{set,get}affinity() (Phil Auld) [RHEL-29017]
  - sched: Simplify syscalls (Phil Auld) [RHEL-29017]
  - sched: Simplify set_user_nice() (Phil Auld) [RHEL-29017]
  - sched: Simplify sched_core_cpu_{starting,deactivate}() (Phil Auld) [RHEL-29017]
  - sched: Simplify try_steal_cookie() (Phil Auld) [RHEL-29017]
  - sched: Simplify sched_tick_remote() (Phil Auld) [RHEL-29017]
  - sched: Simplify sched_exec() (Phil Auld) [RHEL-29017]
  - sched: Simplify ttwu() (Phil Auld) [RHEL-29017]
  - sched: Simplify wake_up_if_idle() (Phil Auld) [RHEL-29017]
  - sched: Simplify: migrate_swap_stop() (Phil Auld) [RHEL-29017]
  - sched: Simplify sysctl_sched_uclamp_handler() (Phil Auld) [RHEL-29017]
  - sched: Simplify get_nohz_timer_target() (Phil Auld) [RHEL-29017]
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera) [RHEL-26830 RHEL-26834] {CVE-2024-24858 CVE-2024-24857}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-443.el9]
changelog:
  - Revert "net: rtnetlink: Enslave device before bringing it up" (Ivan Vecera) [RHEL-30344]
  - netlink: Reverse the patch which removed filtering (Ivan Vecera) [RHEL-30344]
  - tools: ynl-gen: fix enum index in _decode_enum(..) (Ivan Vecera) [RHEL-30344]
  - tools: ynl: fix setting presence bits in simple nests (Ivan Vecera) [RHEL-30344]
  - netlink: add nla be16/32 types to minlen array (Ivan Vecera) [RHEL-30344]
  - rtnetlink: Restore RTM_NEW/DELLINK notification behavior (Ivan Vecera) [RHEL-30344]
  - netlink: annotate lockless accesses to nlk->max_recvmsg_len (Ivan Vecera) [RHEL-30344]
  - tools: ynl: Fix genlmsg header encoding formats (Ivan Vecera) [RHEL-30344]
  - ynl: make the tooling check the license (Ivan Vecera) [RHEL-30344]
  - ynl: broaden the license even more (Ivan Vecera) [RHEL-30344]
  - tools: ynl: make definitions optional again (Ivan Vecera) [RHEL-30344]
  - tools: ynl: fix get_mask utility routine (Ivan Vecera) [RHEL-30344]
  - tools: ynl: fix render-max for flags definition (Ivan Vecera) [RHEL-30344]
  - tools: ynl: fix enum-as-flags in the generic CLI (Ivan Vecera) [RHEL-30344]
  - tools: ynl: move the enum classes to shared code (Ivan Vecera) [RHEL-30344]
  - ynl: re-license uniformly under GPL-2.0 OR BSD-3-Clause (Ivan Vecera) [RHEL-30344]
  - netlink: specs: update for codegen enumerating from 1 (Ivan Vecera) [RHEL-30344]
  - tools: ynl: use 1 as the default for first entry in attrs/ops (Ivan Vecera) [RHEL-30344]
  - tools: ynl: fully inherit attrs in subsets (Ivan Vecera) [RHEL-30344]
  - tools: net: add __pycache__ to gitignore (Ivan Vecera) [RHEL-30344]
  - tools: ynl-gen: re-raise the exception instead of printing (Ivan Vecera) [RHEL-30344]
  - tools: ynl-gen: fix single attribute structs with attr 0 only (Ivan Vecera) [RHEL-30344]
  - genetlink: Use string_is_terminated() helper (Ivan Vecera) [RHEL-30344]
  - string_helpers: Move string_is_valid() to the header (Ivan Vecera) [RHEL-30344]
  - tools: net: use python3 explicitly (Ivan Vecera) [RHEL-30344]
  - docs: netlink: add a starting guide for working with specs (Ivan Vecera) [RHEL-30344]
  - netlink: specs: finish up operation enum-models (Ivan Vecera) [RHEL-30344]
  - tools: ynl: load jsonschema on demand (Ivan Vecera) [RHEL-30344]
  - tools: ynl: use operation names from spec on the CLI (Ivan Vecera) [RHEL-30344]
  - tools: ynl: support pretty printing bad attribute names (Ivan Vecera) [RHEL-30344]
  - tools: ynl: support multi-attr (Ivan Vecera) [RHEL-30344]
  - tools: ynl: support directional enum-model in CLI (Ivan Vecera) [RHEL-30344]
  - tools: ynl: add support for types needed by ethtool (Ivan Vecera) [RHEL-30344]
  - tools: ynl: use the common YAML loading and validation code (Ivan Vecera) [RHEL-30344]
  - tools: ynl: add an object hierarchy to represent parsed spec (Ivan Vecera) [RHEL-30344]
  - tools: ynl: move the cli and netlink code around (Ivan Vecera) [RHEL-30344]
  - tools: ynl-gen: prevent do / dump reordering (Ivan Vecera) [RHEL-30344]
  - net: netlink: recommend policy range validation (Ivan Vecera) [RHEL-30344]
  - tools: ynl: store ops in ordered dict to avoid random ordering (Ivan Vecera) [RHEL-30344]
  - tools: ynl: rename ops_list -> msg_list (Ivan Vecera) [RHEL-30344]
  - tools: ynl: support kdocs for flags in code generation (Ivan Vecera) [RHEL-30344]
  - tools: ynl: add a completely generic client (Ivan Vecera) [RHEL-30344]
  - net: fou: use policy and operation tables generated from the spec (Ivan Vecera) [RHEL-30344]
  - net: fou: rename the source for linking (Ivan Vecera) [RHEL-30344]
  - net: fou: regenerate the uAPI from the spec (Ivan Vecera) [RHEL-30344]
  - netlink: add a proto specification for FOU (Ivan Vecera) [RHEL-30344]
  - net: add basic C code generators for Netlink (Ivan Vecera) [RHEL-30344]
  - netlink: add schemas for YAML specs (Ivan Vecera) [RHEL-30344]
  - docs: add more netlink docs (incl. spec docs) (Ivan Vecera) [RHEL-30344]
  - netlink: annotate data races around sk_state (Ivan Vecera) [RHEL-30344]
  - netlink: annotate data races around dst_portid and dst_group (Ivan Vecera) [RHEL-30344]
  - netlink: annotate data races around nlk->portid (Ivan Vecera) [RHEL-30344]
  - netlink: prevent potential spectre v1 gadgets (Ivan Vecera) [RHEL-30344]
  - netlink: remove the flex array from struct nlmsghdr (Ivan Vecera) [RHEL-30344]
  - treewide: use get_random_u32_below() instead of deprecated function (Ivan Vecera) [RHEL-30344]
  - lib: Fix some kernel-doc comments (Ivan Vecera) [RHEL-30344]
  - netlink: Fix potential skb memleak in netlink_ack (Ivan Vecera) [RHEL-30344]
  - netlink: introduce bigendian integer types (Ivan Vecera) [RHEL-30344]
  - rtnetlink: Honour NLM_F_ECHO flag in rtnl_delete_link (Ivan Vecera) [RHEL-30344]
  - rtnetlink: Honour NLM_F_ECHO flag in rtnl_newlink_create (Ivan Vecera) [RHEL-30344]
  - net: add new helper unregister_netdevice_many_notify (Ivan Vecera) [RHEL-30344]
  - rtnetlink: pass netlink message header and portid to rtnl_configure_link() (Ivan Vecera) [RHEL-30344]
  - netlink: split up copies in the ack construction (Ivan Vecera) [RHEL-30344]
  - netlink: hide validation union fields from kdoc (Ivan Vecera) [RHEL-30344]
  - docs: netlink: clarify the historical baggage of Netlink flags (Ivan Vecera) [RHEL-30344]
  - net: rtnetlink: Enslave device before bringing it up (Ivan Vecera) [RHEL-30344]
  - netfilter: nft_payload: reject out-of-range attributes via policy (Ivan Vecera) [RHEL-30344]
  - netlink: introduce NLA_POLICY_MAX_BE (Ivan Vecera) [RHEL-30344]
  - netlink: Bounds-check struct nlmsgerr creation (Ivan Vecera) [RHEL-30344]
  - net: rtnetlink: use netif_oper_up instead of open code (Ivan Vecera) [RHEL-30344]
  - genetlink: hold read cb_lock during iteration of genl_fam_idr in genl_bind() (Ivan Vecera) [RHEL-30344]
  - netlink: fix some kernel-doc comments (Ivan Vecera) [RHEL-30344]
  - net: improve and fix netlink kdoc (Ivan Vecera) [RHEL-30344]
  - net: add missing kdoc for struct genl_multicast_group::flags (Ivan Vecera) [RHEL-30344]
  - genetlink: correct uAPI defines (Ivan Vecera) [RHEL-30344]
  - netlink: do not reset transport header in netlink_recvmsg() (Ivan Vecera) [RHEL-30344]
  - rtnl: move rtnl_newlink_create() (Ivan Vecera) [RHEL-30344]
  - rtnl: split __rtnl_newlink() into two functions (Ivan Vecera) [RHEL-30344]
  - rtnl: allocate more attr tables on the heap (Ivan Vecera) [RHEL-30344]
  - Revert "rtnetlink: return EINVAL when request cannot succeed" (Ivan Vecera) [RHEL-30344]
  - netlink: reset network and mac headers in netlink_dump() (Ivan Vecera) [RHEL-30344]
  - rtnetlink: return EINVAL when request cannot succeed (Ivan Vecera) [RHEL-30344]
  - rtnetlink: return ENODEV when IFLA_ALT_IFNAME is used in dellink (Ivan Vecera) [RHEL-30344]
  - rtnetlink: enable alt_ifname for setlink/newlink (Ivan Vecera) [RHEL-30344]
  - rtnetlink: return ENODEV when ifname does not exist and group is given (Ivan Vecera) [RHEL-30344]
  - net: ensure net_todo_list is processed quickly (Ivan Vecera) [RHEL-30344]
  - af_netlink: Fix shift out of bounds in group mask calculation (Ivan Vecera) [RHEL-30344]
  - net: limit altnames to 64k total (Ivan Vecera) [RHEL-30344]
  - net: account alternate interface name memory (Ivan Vecera) [RHEL-30344]
  - rtnetlink: add new rtm tunnel api for tunnel id filtering (Ivan Vecera) [RHEL-30344]
  - net: make net->dev_unreg_count atomic (Ivan Vecera) [RHEL-30344]
  - netlink: remove nl_set_extack_cookie_u32() (Ivan Vecera) [RHEL-30344]
  - net: netlink: af_netlink: Prevent empty skb by adding a check on len. (Ivan Vecera) [RHEL-30344]
  - net: rtnetlink: use __dev_addr_set() (Ivan Vecera) [RHEL-30344]
  - net/core: Remove unused assignment operations and variable (Ivan Vecera) [RHEL-30344]
  - netlink: remove netlink_broadcast_filtered (Ivan Vecera) [RHEL-30344]
  - netlink: annotate data races around nlk->bound (Ivan Vecera) [RHEL-30344]
  - net: rtnetlink: convert rcu_assign_pointer to RCU_INIT_POINTER (Ivan Vecera) [RHEL-30344]
  - net: Support filtering interfaces on no master (Ivan Vecera) [RHEL-30344]
  - net: netlink: Remove unused function (Ivan Vecera) [RHEL-30344]
  - net: netlink: add the case when nlh is NULL (Ivan Vecera) [RHEL-30344]
  - netlink: Deal with ESRCH error in nlmsg_notify() (Ivan Vecera) [RHEL-30344]
  - rtnetlink: use nlmsg_notify() in rtnetlink_send() (Ivan Vecera) [RHEL-30344]
  - net: lan78xx: fix runtime PM count underflow on link stop (Jamie Bainbridge) [RHEL-33332]
  - net: lan78xx: fix "softirq work is pending" error (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: remove redundant statement in lan78xx_get_eee (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: replace deprecated strncpy with strscpy (Jamie Bainbridge) [RHEL-33332]
  - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (Jamie Bainbridge) [RHEL-33332]
  - net: usb: lan78xx: Limit packet length to skb->len (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: drop the weight argument from netif_napi_add (Jamie Bainbridge) [RHEL-33332]
  - usb: lan78xx: remove a copy of the NAPI_POLL_WEIGHT define (Jamie Bainbridge) [RHEL-33332]
  - net: usb: lan78xx: Use generic_handle_irq_safe(). (Jamie Bainbridge) [RHEL-33332]
  - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jamie Bainbridge) [RHEL-33332]
  - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ is available (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Clean up some inconsistent indenting (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Introduce NAPI polling support (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Remove hardware-specific header update (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Re-order rx_submit() to remove forward declaration (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Introduce Rx URB processing improvements (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Introduce Tx URB processing improvements (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Fix memory allocation bug (Jamie Bainbridge) [RHEL-33332]
  - net: lan78xx: fix division by zero in send path (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Limit number of driver warning messages (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Fix race condition in disconnect handling (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Fix race conditions in suspend/resume handling (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Fix partial packet errors on suspend/resume (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Add missing return code checks (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Remove unused pause frame queue (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Set flow control threshold to prevent packet loss (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Remove unused timer (Jamie Bainbridge) [RHEL-33332]
  - lan78xx: Fix white space and style issues (Jamie Bainbridge) [RHEL-33332]
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. (Mamatha Inamdar) [RHEL-33704]
  - powerpc/kasan: Don't instrument non-maskable or raw interrupts (Mamatha Inamdar) [RHEL-33704]
  - wireguard: netlink: access device through ctx instead of peer (Hangbin Liu) [RHEL-31053]
  - wireguard: netlink: check for dangling peer via is_dead instead of empty list (Hangbin Liu) [RHEL-31053]
  - wireguard: receive: annotate data-race around receiving_counter.counter (Hangbin Liu) [RHEL-31053]
  - wireguard: use DEV_STATS_INC() (Hangbin Liu) [RHEL-31053]
  - platform/x86: think-lmi: Fix reference leak (David Arcari) [RHEL-28032] {CVE-2023-52520}
  - platform/x86: think-lmi: Fix issues with duplicate attributes (David Arcari) [RHEL-28032] {CVE-2023-52520}
  - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22775 RHEL-31844] {CVE-2024-26782}
  - selftests/mm: Update va_high_addr_switch.sh to check CPU for la57 flag (Audra Mitchell) [RHEL-23078]
  - ceph: switch to use cap_delay_lock for the unlink delay list (Jay Shin) [RHEL-32997]
  - dm-crypt, dm-integrity, dm-verity: bump target version (Benjamin Marzinski) [RHEL-30951]
  - dm-verity, dm-crypt: align "struct bvec_iter" correctly (Benjamin Marzinski) [RHEL-30951]
  - dm writecache: allow allocations larger than 2GiB (Benjamin Marzinski) [RHEL-22581 RHEL-30951] {CVE-2024-23851}
  - dm stats: limit the number of entries (Benjamin Marzinski) [RHEL-22581 RHEL-30951] {CVE-2024-23851}
  - dm: limit the number of targets and parameter size area (Benjamin Marzinski) [RHEL-22581 RHEL-30951] {CVE-2024-23851}
  - MAINTAINERS: remove stale info for DEVICE-MAPPER (Benjamin Marzinski) [RHEL-30951]
  - dm audit: fix Kconfig so DM_AUDIT depends on BLK_DEV_DM (Benjamin Marzinski) [RHEL-30951]
  - dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() (Benjamin Marzinski) [RHEL-30951]
  - dm-raid: delay flushing event_work() after reconfig_mutex is released (Benjamin Marzinski) [RHEL-30951]
  - dm-flakey: start allocating with MAX_ORDER (Benjamin Marzinski) [RHEL-30951]
  - dm-verity: align struct dm_verity_fec_io properly (Benjamin Marzinski) [RHEL-30951]
  - dm verity: don't perform FEC for failed readahead IO (Benjamin Marzinski) [RHEL-30951]
  - dm-crypt: start allocating with MAX_ORDER (Benjamin Marzinski) [RHEL-30951]
  - dm-delay: avoid duplicate logic (Benjamin Marzinski) [RHEL-30951]
  - dm-delay: fix bugs introduced by kthread mode (Benjamin Marzinski) [RHEL-30951]
  - dm-delay: fix a race between delay_presuspend and delay_bio (Benjamin Marzinski) [RHEL-30951]
  - dm integrity: use crypto_shash_digest() in sb_mac() (Benjamin Marzinski) [RHEL-30951]
  - dm crypt: use crypto_shash_digest() in crypt_iv_tcw_whitening() (Benjamin Marzinski) [RHEL-30951]
  - dm delay: for short delays, use kthread instead of timers and wq (Benjamin Marzinski) [RHEL-30951]
  - MAINTAINERS: add Mikulas Patocka as a DM maintainer (Benjamin Marzinski) [RHEL-30951]
  - dm: respect REQ_NOWAIT flag in normal bios issued to DM (Benjamin Marzinski) [RHEL-30951]
  - dm: enhance alloc_multiple_bios() to be more versatile (Benjamin Marzinski) [RHEL-30951]
  - dm: make __send_duplicate_bios return unsigned int (Benjamin Marzinski) [RHEL-30951]
  - dm log userspace: replace deprecated strncpy with strscpy (Benjamin Marzinski) [RHEL-30951]
  - dm ioctl: replace deprecated strncpy with strscpy_pad (Benjamin Marzinski) [RHEL-30951]
  - dm crypt: replace open-coded kmemdup_nul (Benjamin Marzinski) [RHEL-30951]
  - dm cache metadata: replace deprecated strncpy with strscpy (Benjamin Marzinski) [RHEL-30951]
  - dm: shortcut the calls to linear_map and stripe_map (Benjamin Marzinski) [RHEL-30951]
  - selftests/bpf: Fix up xdp bonding test wrt feature flags (Hangbin Liu) [RHEL-31051]
  - selftests/bpf: Add xdp_feature selftest for bond device (Hangbin Liu) [RHEL-31051]
  - xdp, bonding: Fix feature flags when there are no slave devs anymore (Hangbin Liu) [RHEL-31051]
  - bonding: rate-limit bonding driver inspect messages (Hangbin Liu) [RHEL-31051]
  - bonding: do not report NETDEV_XDP_ACT_XSK_ZEROCOPY (Hangbin Liu) [RHEL-31051]
  - bonding: remove print in bond_verify_device_path (Hangbin Liu) [RHEL-31051]
  - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk (Hangbin Liu) [RHEL-31051]
  - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-31051]
  - tracing/hist: Fix issue of losting command info in error_log (Jerome Marchand) [RHEL-3224]
  - tracing/histograms: String compares should not care about signed values (Jerome Marchand) [RHEL-3224]
  - tracing: Add length protection to histogram string copies (Jerome Marchand) [RHEL-3224]
  - tracing/histogram: Do not copy the fixed-size char array field over the field size (Jerome Marchand) [RHEL-3224]
  - net: deal with integer overflows in kmalloc_reserve() (Antoine Tenart) [RHEL-28786]
  - net: factorize code in kmalloc_reserve() (Antoine Tenart) [RHEL-28786]
  - net: remove osize variable in __alloc_skb() (Antoine Tenart) [RHEL-28786]
  - net: add SKB_HEAD_ALIGN() helper (Antoine Tenart) [RHEL-28786]
  - skbuff: Proactively round up to kmalloc bucket size (Antoine Tenart) [RHEL-28786]
  - skbuff: pass the result of data ksize to __build_skb_around (Antoine Tenart) [RHEL-28786]
  - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-27529] {CVE-2023-52445}
  - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-28811 RHEL-31517]
  - net: ena: Remove unlikely() from IS_ERR() condition (Kamal Heib) [RHEL-28811]
  - net: ena: Remove redundant assignment (Kamal Heib) [RHEL-28811]
  - net: ena: Reduce lines with longer column width boundary (Kamal Heib) [RHEL-28811]
  - net: ena: handle ena_calc_io_queue_size() possible errors (Kamal Heib) [RHEL-28811]
  - net: ena: Change default print level for netif_ prints (Kamal Heib) [RHEL-28811]
  - net: ena: Relocate skb_tx_timestamp() to improve time stamping accuracy (Kamal Heib) [RHEL-28811]
  - net: ena: Add more information on TX timeouts (Kamal Heib) [RHEL-28811]
  - net: ena: Change error print during ena_device_init() (Kamal Heib) [RHEL-28811]
  - net: ena: Remove CQ tail pointer update (Kamal Heib) [RHEL-28811]
  - net: ena: Enable DIM by default (Kamal Heib) [RHEL-28811]
  - net: ena: Minor cosmetic changes (Kamal Heib) [RHEL-28811]
  - net: ena: Add more documentation for RX copybreak (Kamal Heib) [RHEL-28811]
  - net: ena: Remove an unused field (Kamal Heib) [RHEL-28811]
  - net: ena: Take xdp packets stats into account in ena_get_stats64() (Kamal Heib) [RHEL-28811]
  - net: ena: Make queue stats code cleaner by removing the if block (Kamal Heib) [RHEL-28811]
  - net: ena: Always register RX queue info (Kamal Heib) [RHEL-28811]
  - net: ena: Add more debug prints to XDP related function (Kamal Heib) [RHEL-28811]
  - net: ena: Refactor napi functions (Kamal Heib) [RHEL-28811]
  - net: ena: Don't check if XDP program is loaded in ena_xdp_execute() (Kamal Heib) [RHEL-28811]
  - net: ena: Use tx_ring instead of xdp_ring for XDP channel TX (Kamal Heib) [RHEL-28811]
  - net: ena: Introduce total_tx_size field in ena_tx_buffer struct (Kamal Heib) [RHEL-28811]
  - net: ena: Put orthogonal fields in ena_tx_buffer in a union (Kamal Heib) [RHEL-28811]
  - net: ena: Pass ena_adapter instead of net_device to ena_xmit_common() (Kamal Heib) [RHEL-28811]
  - net: ena: Move XDP code to its new files (Kamal Heib) [RHEL-28811]
  - net: ena: Fix XDP redirection error (Kamal Heib) [RHEL-28811]
  - net: ena: Fix DMA syncing in XDP path when SWIOTLB is on (Kamal Heib) [RHEL-28811]
  - net: ena: Fix xdp drops handling due to multibuf packets (Kamal Heib) [RHEL-28811]
  - net: ena: Destroy correct number of xdp queues upon failure (Kamal Heib) [RHEL-28811]
  - net: ena: replace deprecated strncpy with strscpy (Kamal Heib) [RHEL-28811]
  - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). (Kamal Heib) [RHEL-28811]
  - net: ena: Flush XDP packets on error. (Kamal Heib) [RHEL-28811]
  - net: ena: Use pci_dev_id() to simplify the code (Kamal Heib) [RHEL-28811]
  - eth: add missing xdp.h includes in drivers (Kamal Heib) [RHEL-28811]
  - net: ena: fix shift-out-of-bounds in exponential backoff (Kamal Heib) [RHEL-28811]
  - net: ena: Fix rst format issues in readme (Kamal Heib) [RHEL-28811]
  - net: ena: Add dynamic recycling mechanism for rx buffers (Kamal Heib) [RHEL-28811]
  - net: ena: removed unused tx_bytes variable (Kamal Heib) [RHEL-28811]
  - net: ena: Advertise TX push support (Kamal Heib) [RHEL-28811]
  - net: ena: Add support to changing tx_push_buf_len (Kamal Heib) [RHEL-28811]
  - net: ena: Recalculate TX state variables every device reset (Kamal Heib) [RHEL-28811]
  - net: ena: Add an option to configure large LLQ headers (Kamal Heib) [RHEL-28811]
  - net: ena: Make few cosmetic preparations to support large LLQ (Kamal Heib) [RHEL-28811]
  - redhat: Fix required version of OpenCSD to match expectations (Michael Petlan) [RHEL-25824]
  - perf evlist: Fix evlist__new_default() for > 1 core PMU (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Alderlake/sapphirerapids metric fixes (Michael Petlan) [RHEL-25824]
  - perf tools: Fix calloc() arguments to address error introduced in gcc-14 (Michael Petlan) [RHEL-25824]
  - perf top: Remove needless malloc(0) call that triggers -Walloc-size (Michael Petlan) [RHEL-25824]
  - perf build: Make minimal shellcheck version to v0.6.0 (Michael Petlan) [RHEL-25824]
  - perf test shell daemon: Make signal test less racy (Michael Petlan) [RHEL-25824]
  - perf test shell script: Fix test for python being disabled (Michael Petlan) [RHEL-25824]
  - perf test: Workaround debug output in list test (Michael Petlan) [RHEL-25824]
  - perf list: Add output file option (Michael Petlan) [RHEL-25824]
  - perf list: Switch error message to pr_err() to respect debug settings (-v) (Michael Petlan) [RHEL-25824]
  - perf test: Fix 'perf script' tests on s390 (Michael Petlan) [RHEL-25824]
  - perf test: test case 'Setup struct perf_event_attr' fails on s390 on z/vm (Michael Petlan) [RHEL-25824]
  - perf db-export: Fix missing reference count get in call_path_from_sample() (Michael Petlan) [RHEL-25824]
  - perf tests: Add perf script test (Michael Petlan) [RHEL-25824]
  - libsubcmd: Fix memory leak in uniq() (Michael Petlan) [RHEL-25824]
  - perf TUI: Don't ignore job control (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Update sapphirerapids events to v1.17 (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Update icelakex events to v1.23 (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Update emeraldrapids events to v1.02 (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Alderlake/rocketlake metric fixes (Michael Petlan) [RHEL-25824]
  - perf x86 test: Add hybrid test for conflicting legacy/sysfs event (Michael Petlan) [RHEL-25824]
  - perf x86 test: Update hybrid expectations (Michael Petlan) [RHEL-25824]
  - perf vendor events amd: Add Zen 4 memory controller events (Michael Petlan) [RHEL-25824]
  - perf stat: Fix hard coded LL miss units (Michael Petlan) [RHEL-25824]
  - perf record: Reduce memory for recording PERF_RECORD_LOST_SAMPLES event (Michael Petlan) [RHEL-25824]
  - perf env: Avoid recursively taking env->bpf_progs.lock (Michael Petlan) [RHEL-25824]
  - perf annotate: Add --insn-stat option for debugging (Michael Petlan) [RHEL-25824]
  - perf annotate: Add --type-stat option for debugging (Michael Petlan) [RHEL-25824]
  - perf annotate: Support event group display (Michael Petlan) [RHEL-25824]
  - perf annotate: Add --data-type option (Michael Petlan) [RHEL-25824]
  - perf report: Add 'symoff' sort key (Michael Petlan) [RHEL-25824]
  - perf report: Add 'typeoff' sort key (Michael Petlan) [RHEL-25824]
  - perf annotate-data: Update sample histogram for type (Michael Petlan) [RHEL-25824]
  - perf annotate-data: Add member field in the data type (Michael Petlan) [RHEL-25824]
  - perf report: Support data type profiling (Michael Petlan) [RHEL-25824]
  - perf report: Add 'type' sort key (Michael Petlan) [RHEL-25824]
  - perf annotate: Implement hist_entry__get_data_type() (Michael Petlan) [RHEL-25824]
  - perf annotate: Add annotate_get_insn_location() (Michael Petlan) [RHEL-25824]
  - perf annotate: Factor out evsel__get_arch() (Michael Petlan) [RHEL-25824]
  - perf annotate-data: Add dso->data_types tree (Michael Petlan) [RHEL-25824]
  - perf annotate-data: Add find_data_type() to get type from memory access (Michael Petlan) [RHEL-25824]
  - perf dwarf-regs: Add get_dwarf_regnum() (Michael Petlan) [RHEL-25824]
  - perf dwarf-aux: Factor out die_get_typename_from_type() (Michael Petlan) [RHEL-25824]
  - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Michael Petlan) [RHEL-25824]
  - perf vendor events: Remove UTF-8 characters from cmn.json (Michael Petlan) [RHEL-25824]
  - perf maps: Fix up overlaps during fixup_end (Michael Petlan) [RHEL-25824]
  - perf maps: Reduce scope of map_rb_node and maps internals (Michael Petlan) [RHEL-25824]
  - perf maps: Add find next entry to give entry after the given map (Michael Petlan) [RHEL-25824]
  - perf maps: Add maps__load_first() (Michael Petlan) [RHEL-25824]
  - perf maps: Rename clone to copy from (Michael Petlan) [RHEL-25824]
  - perf maps: Do simple merge if given map doesn't overlap (Michael Petlan) [RHEL-25824]
  - perf maps: Refactor maps__fixup_overlappings() (Michael Petlan) [RHEL-25824]
  - perf debug: Expose debug file (Michael Petlan) [RHEL-25824]
  - perf maps: Add remove maps function to remove a map based on callback (Michael Petlan) [RHEL-25824]
  - perf maps: Reduce scope of maps__for_each_entry() (Michael Petlan) [RHEL-25824]
  - perf vdso: Use function to add missing maps lock (Michael Petlan) [RHEL-25824]
  - perf unwind: Use function to add missing maps lock (Michael Petlan) [RHEL-25824]
  - perf scripts python arm-cs-trace-disasm.py: Do not ignore disam first sample (Michael Petlan) [RHEL-25824]
  - perf scripts python arm-cs-trace-disasm.py: Set start vm addr of exectable file to 0 (Michael Petlan) [RHEL-25824]
  - perf thread: Use function to add missing maps lock (Michael Petlan) [RHEL-25824]
  - perf synthetic-events: Use function to add missing maps lock (Michael Petlan) [RHEL-25824]
  - perf symbol: Use function to add missing maps lock (Michael Petlan) [RHEL-25824]
  - perf probe-event: Use function to add missing maps lock (Michael Petlan) [RHEL-25824]
  - perf machine: Use function to add missing maps lock (Michael Petlan) [RHEL-25824]
  - perf tests: Use function to add missing maps lock (Michael Petlan) [RHEL-25824]
  - perf report: Use function to add missing maps lock (Michael Petlan) [RHEL-25824]
  - perf events x86: Use function to add missing lock (Michael Petlan) [RHEL-25824]
  - perf maps: Add maps__for_each_map to iterate maps holding the lock (Michael Petlan) [RHEL-25824]
  - perf map: Improve map/unmap parameter names (Michael Petlan) [RHEL-25824]
  - libperf cpumap: Document perf_cpu_map__nr()'s behavior (Michael Petlan) [RHEL-25824]
  - perf top: Avoid repeated function calls to perf_cpu_map__nr(). (Michael Petlan) [RHEL-25824]
  - perf tests: Make DSO tests a suite rather than individual (Michael Petlan) [RHEL-25824]
  - perf evlist: Move event attributes to after the / when uniquefying using the PMU name (Michael Petlan) [RHEL-25824]
  - perf top: Uniform the event name for the hybrid machine (Michael Petlan) [RHEL-25824]
  - perf top: Use evsel's cpus to replace user_requested_cpus (Michael Petlan) [RHEL-25824]
  - perf unwind-libunwind: Fix base address for .eh_frame (Michael Petlan) [RHEL-25824]
  - perf unwind-libdw: Handle JIT-generated DSOs properly (Michael Petlan) [RHEL-25824]
  - perf genelf: Set ELF program header addresses properly (Michael Petlan) [RHEL-25824]
  - perf stat: Combine the -A/--no-aggr and --no-merge options (Michael Petlan) [RHEL-25824]
  - perf hisi-ptt: Fix one memory leakage in hisi_ptt_process_auxtrace_event() (Michael Petlan) [RHEL-25824]
  - perf header: Fix one memory leakage in perf_event__fprintf_event_update() (Michael Petlan) [RHEL-25824]
  - libperf cpumap: Add for_each_cpu() that skips the "any CPU" case (Michael Petlan) [RHEL-25824]
  - libperf cpumap: Replace usage of perf_cpu_map__new(NULL) with perf_cpu_map__new_online_cpus() (Michael Petlan) [RHEL-25824]
  - libperf cpumap: Rename perf_cpu_map__empty() to perf_cpu_map__has_any_cpu_or_is_empty() (Michael Petlan) [RHEL-25824]
  - libperf cpumap: Rename perf_cpu_map__default_new() to perf_cpu_map__new_online_cpus() and prefer sysfs (Michael Petlan) [RHEL-25824]
  - libperf cpumap: Rename perf_cpu_map__dummy_new() to perf_cpu_map__new_any_cpu() (Michael Petlan) [RHEL-25824]
  - perf stat: Fix help message for --metric-no-threshold option (Michael Petlan) [RHEL-25824]
  - perf annotate: Get rid of local annotation options (Michael Petlan) [RHEL-25824]
  - perf annotate: Remove remaining usages of local annotation options (Michael Petlan) [RHEL-25824]
  - perf annotate: Ensure init/exit for global options (Michael Petlan) [RHEL-25824]
  - perf ui/browser/annotate: Use global annotation_options (Michael Petlan) [RHEL-25824]
  - perf annotate: Use global annotation_options (Michael Petlan) [RHEL-25824]
  - perf top: Convert to the global annotation_options (Michael Petlan) [RHEL-25824]
  - perf report: Convert to the global annotation_options (Michael Petlan) [RHEL-25824]
  - perf annotate: Introduce global annotation_options (Michael Petlan) [RHEL-25824]
  - perf stat: Exit perf stat if parse groups fails (Michael Petlan) [RHEL-25824]
  - perf thread: Add missing RC_CHK_EQUAL (Michael Petlan) [RHEL-25824]
  - perf maps: Move symbol maps functions to maps.c (Michael Petlan) [RHEL-25824]
  - perf map: Simplify map_ip/unmap_ip and make 'struct map' smaller (Michael Petlan) [RHEL-25824]
  - perf test shell diff: Skip test if test_loop symbol is missing in the perf binary (Michael Petlan) [RHEL-25824]
  - perf symbols: Parse NOTE segments until the build id is found (Michael Petlan) [RHEL-25824]
  - perf record: Be lazier in allocating lost samples buffer (Michael Petlan) [RHEL-25824]
  - perf evsel: Fallback to "task-clock" when not system wide (Michael Petlan) [RHEL-25824]
  - perf test: Add basic 'perf diff' test (Michael Petlan) [RHEL-25824]
  - perf mem: Fix error on hybrid related to availability of mem event in a PMU (Michael Petlan) [RHEL-25824]
  - perf vendor events powerpc: Update datasource event name to fix duplicate events (Michael Petlan) [RHEL-25824]
  - perf test: Add basic 'perf list --json" test (Michael Petlan) [RHEL-25824]
  - perf test: Use common python setup library (Michael Petlan) [RHEL-25824]
  - perf build: Shellcheck support for OUTPUT directory (Michael Petlan) [RHEL-25824]
  - perf vendor events arm64 AmpereOneX: Add core PMU events and metrics (Michael Petlan) [RHEL-25824]
  - perf vendor events arm64 AmpereOne: Rename BPU_FLUSH_MEM_FAULT to GPC_FLUSH_MEM_FAULT (Michael Petlan) [RHEL-25824]
  - perf env: Cache the arch specific strerrno function in perf_env__arch_strerrno() (Michael Petlan) [RHEL-25824]
  - perf env: Introduce perf_env__arch_strerrno() (Michael Petlan) [RHEL-25824]
  - perf beauty: Don't use 'find ... -printf' as it isn't available in busybox (Michael Petlan) [RHEL-25824]
  - perf docs: Fix man page formatting for 'perf lock' (Michael Petlan) [RHEL-25824]
  - tools api fs: Avoid reading whole file for a 1 byte bool (Michael Petlan) [RHEL-25824]
  - tools api fs: Switch filename__read_str to use io.h (Michael Petlan) [RHEL-25824]
  - libperf: Lazily allocate/size mmap event copy (Michael Petlan) [RHEL-25824]
  - libapi: Add missing linux/types.h header to get the __u64 type on io.h (Michael Petlan) [RHEL-25824]
  - perf test record+probe_libc_inet_pton: Fix call chain match on powerpc (Michael Petlan) [RHEL-25824]
  - perf tests sigtrap: Skip if running on a kernel with sleepable spinlocks (Michael Petlan) [RHEL-25824]
  - perf test sigtrap: Generalize the BTF routine to reuse it in this test (Michael Petlan) [RHEL-25824]
  - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-25824]
  - perf dwarf-aux: Add die_find_variable_by_addr() (Michael Petlan) [RHEL-25824]
  - perf tools: Add --debug-file option to redirect debug output (Michael Petlan) [RHEL-25824]
  - perf annotate: Check if operand has multiple regs (Michael Petlan) [RHEL-25824]
  - perf test: Use existing config value for objdump path (Michael Petlan) [RHEL-25824]
  - perf vendor events riscv: add T-HEAD C9xx JSON file (Michael Petlan) [RHEL-25824]
  - perf vendor events: Add skx, clx, icx and spr upi bandwidth metric (Michael Petlan) [RHEL-25824]
  - perf tests: Skip data symbol test if buf1 symbol is missing (Michael Petlan) [RHEL-25824]
  - perf tests: Make data symbol test wait for perf to start (Michael Petlan) [RHEL-25824]
  - perf tests: Skip branch stack sampling test if brstack_bench symbol is missing (Michael Petlan) [RHEL-25824]
  - perf tests: Skip Arm64 callgraphs test if leafloop symbol is missing (Michael Petlan) [RHEL-25824]
  - perf tests: Skip record test if test_loop symbol is missing (Michael Petlan) [RHEL-25824]
  - perf tests: Skip pipe test if noploop symbol is missing (Michael Petlan) [RHEL-25824]
  - perf tests lib: Add perf_has_symbol.sh (Michael Petlan) [RHEL-25824]
  - perf header: Fix segfault on build_mem_topology() error path (Michael Petlan) [RHEL-25824]
  - perf report: Remove warning on missing raw data for s390 (Michael Petlan) [RHEL-25824]
  - perf tools: Add perf binary dependent rule for shellcheck log in Makefile.perf (Michael Petlan) [RHEL-25824]
  - perf vendor events riscv: Add StarFive Dubhe-90 JSON file (Michael Petlan) [RHEL-25824]
  - perf tests coresight: Remove unused variables (Michael Petlan) [RHEL-25824]
  - perf lock: Fix a memory leak on an error path (Michael Petlan) [RHEL-25824]
  - perf parse-events: Make legacy events lower priority than sysfs/JSON (Michael Petlan) [RHEL-25824]
  - perf cs-etm: Enable itrace option 'T' (Michael Petlan) [RHEL-25824]
  - perf auxtrace: Add 'T' itrace option for timestamp trace (Michael Petlan) [RHEL-25824]
  - perf cs-etm: Bump minimum OpenCSD version to ensure a bugfix is present (Michael Petlan) [RHEL-25824]
  - perf script perl: Fail check on dynamic allocation (Michael Petlan) [RHEL-25824]
  - perf script python: Fail check on dynamic allocation (Michael Petlan) [RHEL-25824]
  - perf test: Remove atomics from test_loop to avoid test failures (Michael Petlan) [RHEL-25824]
  - perf tools: Address python 3.6 DeprecationWarning for string scapes (Michael Petlan) [RHEL-25824]
  - perf vendor events riscv: Add StarFive Dubhe-80 JSON file (Michael Petlan) [RHEL-25824]
  - perf report: Add s390 raw data interpretation for PAI counters (Michael Petlan) [RHEL-25824]
  - perf probe: Convert to check dwarf_getcfi feature (Michael Petlan) [RHEL-25824]
  - perf build: Add feature check for dwarf_getcfi() (Michael Petlan) [RHEL-25824]
  - perf dwarf-aux: Add die_find_variable_by_reg() helper (Michael Petlan) [RHEL-25824]
  - perf dwarf-aux: Add die_get_scopes() alternative to dwarf_getscopes() (Michael Petlan) [RHEL-25824]
  - perf dwarf-aux: Move #else block of #ifdef HAVE_DWARF_GETLOCATIONS_SUPPORT code to the header file (Michael Petlan) [RHEL-25824]
  - perf dwarf-aux: Fix die_get_typename() for void * (Michael Petlan) [RHEL-25824]
  - perf tools: Add util/debuginfo.[ch] files (Michael Petlan) [RHEL-25824]
  - perf annotate: Move raw_comment and raw_func_start fields out of 'struct ins_operands' (Michael Petlan) [RHEL-25824]
  - perf annotate: Pass "-l" option to objdump conditionally (Michael Petlan) [RHEL-25824]
  - perf header: Additional note on AMD IBS for max_precise pmu cap (Michael Petlan) [RHEL-25824]
  - perf bpf: Don't synthesize BPF events when disabled (Michael Petlan) [RHEL-25824]
  - perf test: Add support for setting objdump binary via perf config (Michael Petlan) [RHEL-25824]
  - perf test: Add option to change objdump binary (Michael Petlan) [RHEL-25824]
  - perf tests offcpu: Adjust test case perf record offcpu profiling tests for s390 (Michael Petlan) [RHEL-25824]
  - perf tools: Add the python_ext_build directory to .gitignore (Michael Petlan) [RHEL-25824]
  - perf tests attr: Fix spelling mistake "whic" to "which" (Michael Petlan) [RHEL-25824]
  - perf annotate: Move offsets array from 'struct annotation' to 'struct annotated_source' (Michael Petlan) [RHEL-25824]
  - perf annotate: Move some source code related fields from 'struct annotation' to 'struct annotated_source' (Michael Petlan) [RHEL-25824]
  - perf annotate: Move max_coverage from 'struct annotation' to 'struct annotated_branch' (Michael Petlan) [RHEL-25824]
  - perf annotate: Split branch stack cycles info from 'struct annotation' (Michael Petlan) [RHEL-25824]
  - perf annotate: Split branch stack cycles information out of 'struct annotation_line' (Michael Petlan) [RHEL-25824]
  - perf machine thread: Remove exited threads by default (Michael Petlan) [RHEL-25824]
  - perf test: Simplify "object code reading" test (Michael Petlan) [RHEL-25824]
  - perf record: Lazy load kernel symbols (Michael Petlan) [RHEL-25824]
  - perf tools: Fix spelling mistake "parametrized" -> "parameterized" (Michael Petlan) [RHEL-25824]
  - perf build: Warn about missing libelf before warning about missing libbpf (Michael Petlan) [RHEL-25824]
  - perf tests make: Remove the last egrep call, use 'grep -E' instead (Michael Petlan) [RHEL-25824]
  - perf beauty socket/prctl_option: Cope with extended regexp complaint by grep (Michael Petlan) [RHEL-25824]
  - perf vendor events arm64: AmpereOne: Add missing DefaultMetricgroupName fields (Michael Petlan) [RHEL-25824]
  - perf metrics: Avoid segv if default metricgroup isn't set (Michael Petlan) [RHEL-25824]
  - tools: Disable __packed attribute compiler warning due to -Werror=attributes (Michael Petlan) [RHEL-25824]
  - tools perf: Add arm64 sysreg files to MANIFEST (Michael Petlan) [RHEL-25824]
  - tools headers: Update tools's copy of socket.h header (Michael Petlan) [RHEL-25824]
  - tools headers UAPI: Update tools's copy of vhost.h header (Michael Petlan) [RHEL-25824]
  - perf lock contention: Fix a build error on 32-bit (Michael Petlan) [RHEL-25824]
  - perf kwork: Fix a build error on 32-bit (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Update tsx_cycles_per_elision metrics (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Update bonnell version number to v5 (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Update westmereex events to v4 (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Update meteorlake events to v1.06 (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Update knightslanding events to v16 (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Add typo fix for ivybridge FP (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Update a spelling in haswell/haswellx (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Update emeraldrapids to v1.01 (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Update alderlake/alderlake events to v1.23 (Michael Petlan) [RHEL-25824]
  - perf build: Disable BPF skeletons if clang version is < 12.0.1 (Michael Petlan) [RHEL-25824]
  - perf callchain: Fix spelling mistake "statisitcs" -> "statistics" (Michael Petlan) [RHEL-25824]
  - perf report: Fix spelling mistake "heirachy" -> "hierarchy" (Michael Petlan) [RHEL-25824]
  - perf python: Fix binding linkage due to rename and move of evsel__increase_rlimit() (Michael Petlan) [RHEL-25824]
  - perf tests: test_arm_coresight: Simplify source iteration (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Add tigerlake two metrics (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Add broadwellde two metrics (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Fix broadwellde tma_info_system_dram_bw_use metric (Michael Petlan) [RHEL-25824]
  - perf mem_info: Add and use map_symbol__exit and addr_map_symbol__exit (Michael Petlan) [RHEL-25824]
  - perf callchain: Minor layout changes to callchain_list (Michael Petlan) [RHEL-25824]
  - perf callchain: Make brtype_stat in callchain_list optional (Michael Petlan) [RHEL-25824]
  - perf callchain: Make display use of branch_type_stat const (Michael Petlan) [RHEL-25824]
  - perf offcpu: Add missed btf_free (Michael Petlan) [RHEL-25824]
  - perf threads: Remove unused dead thread list (Michael Petlan) [RHEL-25824]
  - perf hist: Add missing puts to hist__account_cycles (Michael Petlan) [RHEL-25824]
  - libperf rc_check: Add RC_CHK_EQUAL (Michael Petlan) [RHEL-25824]
  - libperf rc_check: Make implicit enabling work for GCC (Michael Petlan) [RHEL-25824]
  - perf machine: Avoid out of bounds LBR memory read (Michael Petlan) [RHEL-25824]
  - perf rwsem: Add debug mode that uses a mutex (Michael Petlan) [RHEL-25824]
  - perf build: Address stray '\' before # that is warned about since grep 3.8 (Michael Petlan) [RHEL-25824]
  - perf report: Fix hierarchy mode on pipe input (Michael Petlan) [RHEL-25824]
  - perf lock contention: Use per-cpu array map for spinlocks (Michael Petlan) [RHEL-25824]
  - perf lock contention: Check race in tstamp elem creation (Michael Petlan) [RHEL-25824]
  - perf lock contention: Clear lock addr after use (Michael Petlan) [RHEL-25824]
  - perf evsel: Rename evsel__increase_rlimit to rlimit__increase_nofile (Michael Petlan) [RHEL-25824]
  - perf bench sched pipe: Add -G/--cgroups option (Michael Petlan) [RHEL-25824]
  - perf data: Increase RLIMIT_NOFILE limit when open too many files in perf_data__create_dir() (Michael Petlan) [RHEL-25824]
  - perf trace: Use the right bpf_probe_read(_str) variant for reading user data (Michael Petlan) [RHEL-25824]
  - perf tools: Do not ignore the default vmlinux.h (Michael Petlan) [RHEL-25824]
  - perf: script: fix missing ',' for fields option (Michael Petlan) [RHEL-25824]
  - perf tests: Fix shellcheck warning in stat_all_metricgroups (Michael Petlan) [RHEL-25824]
  - perf tests: Fix shellcheck warning in record_sideband.sh (Michael Petlan) [RHEL-25824]
  - perf cs-etm: Respect timestamp option (Michael Petlan) [RHEL-25824]
  - perf cs-etm: Validate timestamp tracing in per-thread mode (Michael Petlan) [RHEL-25824]
  - perf pmu: Lazily compute default config (Michael Petlan) [RHEL-25824]
  - perf pmu-events: Remember the perf_events_map for a PMU (Michael Petlan) [RHEL-25824]
  - perf pmu: Const-ify perf_pmu__config_terms (Michael Petlan) [RHEL-25824]
  - perf pmu: Const-ify file APIs (Michael Petlan) [RHEL-25824]
  - perf arm-spe: Move PMU initialization from default config code (Michael Petlan) [RHEL-25824]
  - perf intel-pt: Move PMU initialization from default config code (Michael Petlan) [RHEL-25824]
  - perf pmu: Rename perf_pmu__get_default_config to perf_pmu__arch_init (Michael Petlan) [RHEL-25824]
  - perf intel-pt: Prefer get_unaligned_le64 to memcpy_le64 (Michael Petlan) [RHEL-25824]
  - perf intel-pt: Use get_unaligned_le16() etc (Michael Petlan) [RHEL-25824]
  - perf intel-pt: Use existing definitions of le16_to_cpu() etc (Michael Petlan) [RHEL-25824]
  - perf intel-pt: Simplify intel_pt_get_vmcs() (Michael Petlan) [RHEL-25824]
  - perf tools: Add get_unaligned_leNN() (Michael Petlan) [RHEL-25824]
  - perf cs-etm: Fix incorrect or missing decoder for raw trace (Michael Petlan) [RHEL-25824]
  - perf bpf_counter: Fix a few memory leaks (Michael Petlan) [RHEL-25824]
  - perf header: Fix various error path memory leaks (Michael Petlan) [RHEL-25824]
  - perf trace-event-info: Avoid passing NULL value to closedir (Michael Petlan) [RHEL-25824]
  - tools api: Avoid potential double free (Michael Petlan) [RHEL-25824]
  - perf parse-events: Fix unlikely memory leak when cloning terms (Michael Petlan) [RHEL-25824]
  - perf lock: Fix a memory leak on an error path (Michael Petlan) [RHEL-25824]
  - perf svghelper: Avoid memory leak (Michael Petlan) [RHEL-25824]
  - perf hists browser: Avoid potential NULL dereference (Michael Petlan) [RHEL-25824]
  - perf hists browser: Reorder variables to reduce padding (Michael Petlan) [RHEL-25824]
  - perf dlfilter: Be defensive against potential NULL dereference (Michael Petlan) [RHEL-25824]
  - perf mem-events: Avoid uninitialized read (Michael Petlan) [RHEL-25824]
  - perf jitdump: Avoid memory leak (Michael Petlan) [RHEL-25824]
  - perf env: Remove unnecessary NULL tests (Michael Petlan) [RHEL-25824]
  - perf buildid-cache: Fix use of uninitialized value (Michael Petlan) [RHEL-25824]
  - perf bench uprobe: Fix potential use of memory after free (Michael Petlan) [RHEL-25824]
  - perf parse-events: Fix for term values that are raw events (Michael Petlan) [RHEL-25824]
  - perf build: Add missing comment about NO_LIBTRACEEVENT=1 (Michael Petlan) [RHEL-25824]
  - perf symbols: Add 'intel_idle_ibrs' to the list of idle symbols (Michael Petlan) [RHEL-25824]
  - perf parse-events: Avoid erange from hex numbers (Michael Petlan) [RHEL-25824]
  - tools/perf: Update call stack check in builtin-lock.c (Michael Petlan) [RHEL-25824]
  - tools/perf/tests: Fix object code reading to skip address that falls out of text section (Michael Petlan) [RHEL-25824]
  - tools/perf: Add "is_kmod" to struct dso to check if it is kernel module (Michael Petlan) [RHEL-25824]
  - tools/perf: Add text_end to "struct dso" to save .text section size (Michael Petlan) [RHEL-25824]
  - perf test: Avoid system wide when not privileged (Michael Petlan) [RHEL-25824]
  - perf hisi-ptt: Fix memory leak in lseek failure handling (Michael Petlan) [RHEL-25824]
  - perf intel-pt: Fix async branch flags (Michael Petlan) [RHEL-25824]
  - perf pmus: Make PMU alias name loading lazy (Michael Petlan) [RHEL-25824]
  - perf vendor events: Add JSON metrics for Arm CMN (Michael Petlan) [RHEL-25824]
  - perf jevents: Add support for Arm CMN PMU aliasing (Michael Petlan) [RHEL-25824]
  - perf test: Add pmu-event test for "Compat" and new event_field. (Michael Petlan) [RHEL-25824]
  - perf test: Make matching_pmu effective (Michael Petlan) [RHEL-25824]
  - perf jevents: Support EventidCode and NodeType (Michael Petlan) [RHEL-25824]
  - perf metric: "Compat" supports regular expression matching identifiers (Michael Petlan) [RHEL-25824]
  - perf pmu: "Compat" supports regular expression matching identifiers (Michael Petlan) [RHEL-25824]
  - perf record: Fix BTF type checks in the off-cpu profiling (Michael Petlan) [RHEL-25824]
  - perf bench messaging: Kill child processes when exit abnormally in process mode (Michael Petlan) [RHEL-25824]
  - perf bench messaging: Store chlid process pid when creating worker for process mode (Michael Petlan) [RHEL-25824]
  - perf bench messaging: Factor out create_worker() (Michael Petlan) [RHEL-25824]
  - perf bench messaging: Fix coding style issues for sched-messaging (Michael Petlan) [RHEL-25824]
  - tests/shell: Fix shellcheck warnings for SC2153 in multiple scripts (Michael Petlan) [RHEL-25824]
  - tests/shell: Fix shellcheck issues in tests/shell/stat+shadow_stat.sh tetscase (Michael Petlan) [RHEL-25824]
  - tests/shell: Fix shellcheck SC1090 to handle the location of sourced files (Michael Petlan) [RHEL-25824]
  - perf kwork: Fix spelling mistake "Captuer" -> "Capture" (Michael Petlan) [RHEL-25824]
  - perf evlist: Avoid frequency mode for the dummy event (Michael Petlan) [RHEL-25824]
  - perf vendors events: Remove repeated word in comments (Michael Petlan) [RHEL-25824]
  - perf vendor events arm64: Fix for AmpereOne metrics (Michael Petlan) [RHEL-25824]
  - perf parse-events: Fix tracepoint name memory leak (Michael Petlan) [RHEL-25824]
  - perf test: Detect off-cpu support from build options (Michael Petlan) [RHEL-25824]
  - perf test: Ensure EXTRA_TESTS is covered in build test (Michael Petlan) [RHEL-25824]
  - perf test: Update build test for changed BPF skeleton defaults (Michael Petlan) [RHEL-25824]
  - perf build: Default BUILD_BPF_SKEL, warn/disable for missing deps (Michael Petlan) [RHEL-25824]
  - perf version: Add status of bpf skeletons (Michael Petlan) [RHEL-25824]
  - perf kwork top: Simplify bool conversion (Michael Petlan) [RHEL-25824]
  - perf test: Fix test-record-dummy-C0 failure for supported PERF_FORMAT_LOST feature kernel (Michael Petlan) [RHEL-25824]
  - perf kwork: Fix spelling mistake "COMMMAND" -> "COMMAND" (Michael Petlan) [RHEL-25824]
  - perf annotate: Add more x86 mov instruction cases (Michael Petlan) [RHEL-25824]
  - perf pmu: Remove unused function (Michael Petlan) [RHEL-25824]
  - perf pmus: Simplify perf_pmus__find_core_pmu() (Michael Petlan) [RHEL-25824]
  - perf pmu: Move pmu__find_core_pmu() to pmus.c (Michael Petlan) [RHEL-25824]
  - perf symbol: Avoid an undefined behavior warning (Michael Petlan) [RHEL-25824]
  - perf bpf-filter: Add YYDEBUG (Michael Petlan) [RHEL-25824]
  - perf pmu: Add YYDEBUG (Michael Petlan) [RHEL-25824]
  - perf expr: Make YYDEBUG dependent on doing a debug build (Michael Petlan) [RHEL-25824]
  - perf parse-events: Make YYDEBUG dependent on doing a debug build (Michael Petlan) [RHEL-25824]
  - perf parse-events: Remove unused header files (Michael Petlan) [RHEL-25824]
  - perf tools: Add includes for detected configs in Makefile.perf (Michael Petlan) [RHEL-25824]
  - perf test: Update cs_etm testcase for Arm ETE (Michael Petlan) [RHEL-25824]
  - perf vendor events arm64: Add V1 metrics using Arm telemetry repo (Michael Petlan) [RHEL-25824]
  - perf vendor events arm64: Update V1 events using Arm telemetry repo (Michael Petlan) [RHEL-25824]
  - perf test: Add a test for strcmp_cpuid_str() expression (Michael Petlan) [RHEL-25824]
  - perf util: Add a function for replacing characters in a string (Michael Petlan) [RHEL-25824]
  - perf jevents: Remove unused keyword (Michael Petlan) [RHEL-25824]
  - perf test: Check result of has_event(cycles) test (Michael Petlan) [RHEL-25824]
  - perf list pfm: Retry supported test with exclude_kernel (Michael Petlan) [RHEL-25824]
  - perf list: Avoid a hardcoded cpu PMU name (Michael Petlan) [RHEL-25824]
  - perf test shell lock_contention: Add cgroup aggregation and filter tests (Michael Petlan) [RHEL-25824]
  - perf lock contention: Add -G/--cgroup-filter option (Michael Petlan) [RHEL-25824]
  - perf lock contention: Add --lock-cgroup option (Michael Petlan) [RHEL-25824]
  - perf lock contention: Prepare to handle cgroups (Michael Petlan) [RHEL-25824]
  - perf tools: Add read_all_cgroups() and __cgroup_find() (Michael Petlan) [RHEL-25824]
  - perf kwork top: Add BPF-based statistics on softirq event support (Michael Petlan) [RHEL-25824]
  - perf kwork top: Add BPF-based statistics on hardirq event support (Michael Petlan) [RHEL-25824]
  - perf kwork top: Implements BPF-based cpu usage statistics (Michael Petlan) [RHEL-25824]
  - perf kwork top: Add -C/--cpu -i/--input -n/--name -s/--sort --time options (Michael Petlan) [RHEL-25824]
  - perf kwork top: Add statistics on softirq event support (Michael Petlan) [RHEL-25824]
  - perf kwork top: Add statistics on hardirq event support (Michael Petlan) [RHEL-25824]
  - perf evsel: Add evsel__intval_common() helper (Michael Petlan) [RHEL-25824]
  - perf kwork top: Introduce new top utility (Michael Petlan) [RHEL-25824]
  - perf kwork: Add `root` parameter to work_sort() (Michael Petlan) [RHEL-25824]
  - perf kwork: Add sched record support (Michael Petlan) [RHEL-25824]
  - perf kwork: Set default events list if not specified in setup_event_list() (Michael Petlan) [RHEL-25824]
  - perf kwork: Overwrite original atom in the list when a new atom is pushed. (Michael Petlan) [RHEL-25824]
  - perf kwork: Add `kwork` and `src_type` to work_init() for 'struct kwork_class' (Michael Petlan) [RHEL-25824]
  - perf kwork: Set ordered_events to true in 'struct perf_tool' (Michael Petlan) [RHEL-25824]
  - perf kwork: Add the supported subcommands to the document (Michael Petlan) [RHEL-25824]
  - perf kwork: Fix incorrect and missing free atom in work_push_atom() (Michael Petlan) [RHEL-25824]
  - perf test: Add perf_event_attr test for record dummy event (Michael Petlan) [RHEL-25824]
  - perf test: Add test case for record sideband events (Michael Petlan) [RHEL-25824]
  - perf record: Track sideband events for all CPUs when tracing selected CPUs (Michael Petlan) [RHEL-25824]
  - perf record: Move setting tracking events before record__init_thread_masks() (Michael Petlan) [RHEL-25824]
  - perf evlist: Add evlist__findnew_tracking_event() helper (Michael Petlan) [RHEL-25824]
  - perf evlist: Add perf_evlist__go_system_wide() helper (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Fix spelling mistakes (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Add emeraldrapids, update sapphirerapids to v1.16 (Michael Petlan) [RHEL-25824]
  - perf vendor events intel: Add lunarlake v1.0 (Michael Petlan) [RHEL-25824]
  - perf parse-events: Introduce 'struct parse_events_terms' (Michael Petlan) [RHEL-25824]
  - perf parse-events: Copy fewer term lists (Michael Petlan) [RHEL-25824]
  - perf parse-events: Avoid enum casts (Michael Petlan) [RHEL-25824]
  - perf parse-events: Tidy up str parameter (Michael Petlan) [RHEL-25824]
  - perf parse-events: Remove unnecessary __maybe_unused (Michael Petlan) [RHEL-25824]
  - perf shell completion: Support completion of metrics/metricgroups (Michael Petlan) [RHEL-25824]
  - perf completion: Support completion of libpfm4 events (Michael Petlan) [RHEL-25824]
  - perf shell completion: Restrict completion of events to events (Michael Petlan) [RHEL-25824]
  - perf stat: Fix aggr mode initialization (Michael Petlan) [RHEL-25824]
  - perf vendor events: Update metric events for power10 platform (Michael Petlan) [RHEL-25824]
  - perf vendor events power10: Add extra data-source events (Michael Petlan) [RHEL-25824]
  - perf vendor events power10: Update JSON/events (Michael Petlan) [RHEL-25824]
  - perf machine: Use true and false for bool variable (Michael Petlan) [RHEL-25824]
  - perf: Fix the nr_addr_filters fix (Michael Petlan) [RHEL-25824]
  - perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file (Michael Petlan) [RHEL-25824]
  - arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs (Michael Petlan) [RHEL-25824]
  - arm: perf: Remove inlines from arm_pmuv3.c (Michael Petlan) [RHEL-25824]
  - arm64/arm: arm_pmuv3: perf: Don't truncate 64-bit registers (Michael Petlan) [RHEL-25824]
  - perf: arm_cspmu: Reject events meant for other PMUs (Michael Petlan) [RHEL-25824]
  - drivers: perf: arm_pmu: Drop 'pmu_lock' element from 'struct pmu_hw_events' (Michael Petlan) [RHEL-25824]
  - arm: perf: Remove PMU locking (Michael Petlan) [RHEL-25824]
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Michael Petlan) [RHEL-25824]
  - KVM: x86/pmu: fix masking logic for MSR_CORE_PERF_GLOBAL_CTRL (Michael Petlan) [RHEL-25824]
  - perf/core: Fix cpuctx refcounting (Michael Petlan) [RHEL-25824]
  - powerpc/perf: Fix disabling BHRB and instruction sampling (Michael Petlan) [RHEL-25824]
  - powerpc/imc-pmu: Use the correct spinlock initializer. (Michael Petlan) [RHEL-25824]
  - powerpc/perf: Optimize find_alternatives_list() using binary search (Michael Petlan) [RHEL-25824]
  - perf: Optimize perf_cgroup_switch() (Michael Petlan) [RHEL-25824]
  - perf/core: Allow reading package events from perf_event_read_local (Michael Petlan) [RHEL-25824]
  - perf/core: Rename perf_proc_update_handler() -> perf_event_max_sample_rate_handler(), for readability (Michael Petlan) [RHEL-25824]
  - perf/x86/rapl: Fix "Using plain integer as NULL pointer" Sparse warning (Michael Petlan) [RHEL-25824]
  - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-25824]
  - inet: inet_defrag: prevent sk release while still in use (Paolo Abeni) [RHEL-32270]
  - udp: fix busy polling (Paolo Abeni) [RHEL-32270]
  - udp6: Fix race condition in udp6_sendmsg & connect (Paolo Abeni) [RHEL-32270]
  - net: stream: purge sk_error_queue in sk_stream_kill_queues() (Paolo Abeni) [RHEL-32270]
  - eventfd: Remove usage of the deprecated ida_simple_xx() API (Michal Schmidt) [RHEL-31939]
  - eventfd: make eventfd_signal{_mask}() void (Michal Schmidt) [RHEL-31939]
  - eventfd: simplify eventfd_signal_mask() (Michal Schmidt) [RHEL-31939]
  - eventfd: simplify eventfd_signal() (Michal Schmidt) [RHEL-31939]
  - eventfd: prevent underflow for eventfd semaphores (Michal Schmidt) [RHEL-31939]
  - eventfd: add a uapi header for eventfd userspace APIs (Michal Schmidt) [RHEL-31939]
  - eventfd: show the EFD_SEMAPHORE flag in fdinfo (Michal Schmidt) [RHEL-31939]
  - i915: make inject_virtual_interrupt() void (Michal Schmidt) [RHEL-31939]
  - fs: use correct __poll_t type (Michal Schmidt) [RHEL-31939]
  - eventfd: use wait_event_interruptible_locked_irq() helper (Michal Schmidt) [RHEL-31939]
  - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD (Michal Schmidt) [RHEL-31939]
  - eventfd: guard wake_up in eventfd fs calls as well (Michal Schmidt) [RHEL-31939]
  - iio: core: fix memleak in iio_device_register_sysfs (David Arcari) [RHEL-33153] {CVE-2023-52643}
  - serial: imx: fix detach/attach of serial console (Steve Best) [RHEL-32592] {CVE-2021-47185}
  - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Steve Best) [RHEL-32592] {CVE-2021-47185}
  - sysctl: allow to change limits for posix messages queues (Alexey Gladkov) [RHEL-8705]
  - sysctl: allow change system v ipc sysctls inside ipc namespace (Alexey Gladkov) [RHEL-8705]
  - ipc: fix memory leak in init_mqueue_fs() (Alexey Gladkov) [RHEL-8705]
  - ipc: mqueue: fix possible memory leak in init_mqueue_fs() (Alexey Gladkov) [RHEL-8705]
  - ipc: Remove extra braces (Alexey Gladkov) [RHEL-8705]
  - ipc: Check permissions for checkpoint_restart sysctls at open time (Alexey Gladkov) [RHEL-8705]
  - ipc: Remove extra1 field abuse to pass ipc namespace (Alexey Gladkov) [RHEL-8705]
  - ipc: Use the same namespace to modify and validate (Alexey Gladkov) [RHEL-8705]
  - ipc: Store ipc sysctls in the ipc namespace (Alexey Gladkov) [RHEL-8705]
  - ipc: Store mqueue sysctls in the ipc namespace (Alexey Gladkov) [RHEL-8705]
  - ipc/ipc_sysctl.c: remove fallback for !CONFIG_PROC_SYSCTL (Alexey Gladkov) [RHEL-8705]
  - ipc: check checkpoint_restore_ns_capable() to modify C/R proc files (Alexey Gladkov) [RHEL-8705]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-444.el9]
changelog:
  - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (Mamatha Inamdar) [RHEL-23763]
  - smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() (Paulo Alcantara) [RHEL-7986]
  - smb: client: fix potential UAF in smb2_is_network_name_deleted() (Paulo Alcantara) [RHEL-7986]
  - smb: client: fix potential UAF in is_valid_oplock_break() (Paulo Alcantara) [RHEL-7986]
  - smb: client: fix potential UAF in smb2_is_valid_oplock_break() (Paulo Alcantara) [RHEL-7986]
  - smb: client: fix potential UAF in smb2_is_valid_lease_break() (Paulo Alcantara) [RHEL-7986]
  - smb: client: fix potential UAF in cifs_stats_proc_show() (Paulo Alcantara) [RHEL-7986]
  - smb: client: fix potential UAF in cifs_stats_proc_write() (Paulo Alcantara) [RHEL-7986]
  - smb: client: fix potential UAF in cifs_dump_full_key() (Paulo Alcantara) [RHEL-7986]
  - smb: client: fix potential UAF in cifs_debug_files_proc_show() (Paulo Alcantara) [RHEL-7986]
  - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-7986]
  - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-7986]
  - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-7986]
  - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-7986]
  - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-7986]
  - KVM: x86/mmu: Retry fault before acquiring mmu_lock if mapping is changing (Igor Mammedov) [RHEL-17714]
  - net: esp: fix bad handling of pages from page_pool (Sabrina Dubroca) [RHEL-31751]
  - net: skbuff: don't include <net/page_pool/types.h> to <linux/skbuff.h> (Sabrina Dubroca) [RHEL-31751]
  - xfrm: fix a data-race in xfrm_lookup_with_ifid() (Sabrina Dubroca) [RHEL-31751]
  - xfrm: annotate data-race around use_time (Sabrina Dubroca) [RHEL-31751]
  - xfrm: fix a data-race in xfrm_gen_index() (Sabrina Dubroca) [RHEL-31751]
  - xfrm: interface: use DEV_STATS_INC() (Sabrina Dubroca) [RHEL-31751]
  - topology: Set capacity_freq_ref in all cases (Phil Auld) [RHEL-29020]
  - sched/fair: Fix frequency selection for non-invariant case (Phil Auld) [RHEL-29020]
  - arm64/amu: Use capacity_ref_freq() to set AMU ratio (Phil Auld) [RHEL-29020]
  - cpufreq/cppc: Set the frequency used for computing the capacity (Phil Auld) [RHEL-29020]
  - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}() (Phil Auld) [RHEL-29020]
  - energy_model: Use a fixed reference frequency (Phil Auld) [RHEL-29020]
  - cpufreq/schedutil: Use a fixed reference frequency (Phil Auld) [RHEL-29020]
  - cpufreq: Use the fixed and coherent frequency for scaling capacity (Phil Auld) [RHEL-29020]
  - cpufreq: Fix the race condition while updating the transition_task of policy (Phil Auld) [RHEL-29020]
  - sched/topology: Add a new arch_scale_freq_ref() method (Phil Auld) [RHEL-29020]
  - sched/cpufreq: Rework iowait boost (Phil Auld) [RHEL-29020]
  - sched/cpufreq: Rework schedutil governor performance estimation (Phil Auld) [RHEL-29020]
  - sched/topology: Consolidate and clean up access to a CPU's max compute capacity (Phil Auld) [RHEL-29020]
  - sched/timers: Explain why idle task schedules out on remote timer enqueue (Phil Auld) [RHEL-29020]
  - sched/cpuidle: Comment about timers requirements VS idle handler (Phil Auld) [RHEL-29020]
  - cpufreq: Rebuild sched-domains when removing cpufreq driver (Phil Auld) [RHEL-29020]
  - cpufreq: schedutil: Merge initialization code of sg_cpu in single loop (Phil Auld) [RHEL-29020]
  - cpufreq: schedutil: Update next_freq when cpufreq_limits change (Phil Auld) [RHEL-29020]
  - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-16780 RHEL-31716] {CVE-2024-26743}
  - i2c: tegra: Share same DMA channel for RX and TX (Mark Salter) [RHEL-28640]
  - redhat/configs: build in Tegra210 SPI driver (Mark Salter) [RHEL-28640]
  - net-procfs: use xarray iterator to implement /proc/net/dev (Ivan Vecera) [RHEL-30656]
  - net: make sure we never create ifindex = 0 (Ivan Vecera) [RHEL-30656]
  - tools: ynl: fix handling of multiple mcast groups (Ivan Vecera) [RHEL-30656]
  - tools: ynl: don't leak mcast_groups on init error (Ivan Vecera) [RHEL-30656]
  - tools: ynl: make sure we always pass yarg to mnl_cb_run (Ivan Vecera) [RHEL-30656]
  - selftests/bpf: Fix sockopt_sk selftest (Ivan Vecera) [RHEL-30656]
  - netlink: specs: devlink: fix reply command values (Ivan Vecera) [RHEL-30656]
  - netlink: annotate data-races around sk->sk_err (Ivan Vecera) [RHEL-30656]
  - doc/netlink: Fix missing classic_netlink doc reference (Ivan Vecera) [RHEL-30656]
  - devlink: move devlink_notify_register/unregister() to dev.c (Ivan Vecera) [RHEL-30656]
  - devlink: move small_ops definition into netlink.c (Ivan Vecera) [RHEL-30656]
  - devlink: move tracepoint definitions into core.c (Ivan Vecera) [RHEL-30656]
  - devlink: push linecard related code into separate file (Ivan Vecera) [RHEL-30656]
  - devlink: push rate related code into separate file (Ivan Vecera) [RHEL-30656]
  - devlink: push trap related code into separate file (Ivan Vecera) [RHEL-30656]
  - devlink: use tracepoint_enabled() helper (Ivan Vecera) [RHEL-30656]
  - devlink: push region related code into separate file (Ivan Vecera) [RHEL-30656]
  - devlink: push param related code into separate file (Ivan Vecera) [RHEL-30656]
  - devlink: push resource related code into separate file (Ivan Vecera) [RHEL-30656]
  - devlink: push dpipe related code into separate file (Ivan Vecera) [RHEL-30656]
  - devlink: move and rename devlink_dpipe_send_and_alloc_skb() helper (Ivan Vecera) [RHEL-30656]
  - devlink: push shared buffer related code into separate file (Ivan Vecera) [RHEL-30656]
  - devlink: push port related code into separate file (Ivan Vecera) [RHEL-30656]
  - devlink: push object register/unregister notifications into separate helpers (Ivan Vecera) [RHEL-30656]
  - doc/netlink: Add spec for rt route messages (Ivan Vecera) [RHEL-30656]
  - doc/netlink: Add spec for rt link messages (Ivan Vecera) [RHEL-30656]
  - doc/netlink: Add spec for rt addr messages (Ivan Vecera) [RHEL-30656]
  - tools/net/ynl: Add support for create flags (Ivan Vecera) [RHEL-30656]
  - tools/net/ynl: Implement nlattr array-nest decoding in ynl (Ivan Vecera) [RHEL-30656]
  - tools/net/ynl: Add support for netlink-raw families (Ivan Vecera) [RHEL-30656]
  - tools/net/ynl: Fix extack parsing with fixed header genlmsg (Ivan Vecera) [RHEL-30656]
  - tools/ynl: Add mcast-group schema parsing to ynl (Ivan Vecera) [RHEL-30656]
  - doc/netlink: Document the netlink-raw schema extensions (Ivan Vecera) [RHEL-30656]
  - doc/netlink: Update genetlink-legacy documentation (Ivan Vecera) [RHEL-30656]
  - doc/netlink: Add a schema for netlink-raw families (Ivan Vecera) [RHEL-30656]
  - doc/netlink: Add delete operation to ovs_vport spec (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: fix uAPI generation after tempfile changes (Ivan Vecera) [RHEL-30656]
  - netlink: specs: fix indent in fou (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: support empty attribute lists (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: fix collecting global policy attrs (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: set length of binary fields (Ivan Vecera) [RHEL-30656]
  - tools: ynl: allow passing binary data (Ivan Vecera) [RHEL-30656]
  - net: validate veth and vxcan peer ifindexes (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: use temporary file for rendering (Ivan Vecera) [RHEL-30656]
  - Documentation: Fix typos (Ivan Vecera) [RHEL-30656]
  - tools: ynl: add more info to KeyErrors on missing attrs (Ivan Vecera) [RHEL-30656]
  - netlink: specs: add ovs_vport new command (Ivan Vecera) [RHEL-30656]
  - net: warn about attempts to register negative ifindex (Ivan Vecera) [RHEL-30656]
  - ethtool: netlink: always pass genl_info to .prepare_data (Ivan Vecera) [RHEL-30656]
  - ethtool: netlink: simplify arguments to ethnl_default_parse() (Ivan Vecera) [RHEL-30656]
  - netdev-genl: use struct genl_info for reply construction (Ivan Vecera) [RHEL-30656]
  - genetlink: add genlmsg_iput() API (Ivan Vecera) [RHEL-30656]
  - genetlink: add a family pointer to struct genl_info (Ivan Vecera) [RHEL-30656]
  - genetlink: use attrs from struct genl_info (Ivan Vecera) [RHEL-30656]
  - genetlink: add struct genl_info to struct genl_dumpit_info (Ivan Vecera) [RHEL-30656]
  - genetlink: remove userhdr from struct genl_info (Ivan Vecera) [RHEL-30656]
  - genetlink: make genl_info->nlhdr const (Ivan Vecera) [RHEL-30656]
  - genetlink: push conditional locking into dumpit/done (Ivan Vecera) [RHEL-30656]
  - netlink: specs: devlink: extend health reporter dump attributes by port index (Ivan Vecera) [RHEL-30656]
  - devlink: extend health reporter dump selector by port index (Ivan Vecera) [RHEL-30656]
  - netlink: specs: devlink: extend per-instance dump commands to accept instance attributes (Ivan Vecera) [RHEL-30656]
  - devlink: allow user to narrow per-instance dumps by passing handle attrs (Ivan Vecera) [RHEL-30656]
  - devlink: remove converted commands from small ops (Ivan Vecera) [RHEL-30656]
  - devlink: remove duplicate temporary netlink callback prototypes (Ivan Vecera) [RHEL-30656]
  - netlink: specs: devlink: add commands that do per-instance dump (Ivan Vecera) [RHEL-30656]
  - devlink: pass flags as an arg of dump_one() callback (Ivan Vecera) [RHEL-30656]
  - devlink: introduce dumpit callbacks for split ops (Ivan Vecera) [RHEL-30656]
  - devlink: rename doit callbacks for per-instance dump commands (Ivan Vecera) [RHEL-30656]
  - devlink: introduce devlink_nl_pre_doit_port*() helper functions (Ivan Vecera) [RHEL-30656]
  - devlink: parse rate attrs in doit() callbacks (Ivan Vecera) [RHEL-30656]
  - devlink: parse linecard attr in doit() callbacks (Ivan Vecera) [RHEL-30656]
  - netlink: convert nlk->flags to atomic flags (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: add missing empty line between policies (Ivan Vecera) [RHEL-30656]
  - devlink: clear flag on port register error path (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: avoid rendering empty validate field (Ivan Vecera) [RHEL-30656]
  - devlink: Remove unused devlink_dpipe_table_resource_set() declaration (Ivan Vecera) [RHEL-30656]
  - devlink: use generated split ops and remove duplicated commands from small ops (Ivan Vecera) [RHEL-30656]
  - devlink: include the generated netlink header (Ivan Vecera) [RHEL-30656]
  - devlink: add split ops generated according to spec (Ivan Vecera) [RHEL-30656]
  - netlink: specs: devlink: add info-get dump op (Ivan Vecera) [RHEL-30656]
  - devlink: un-static devlink_nl_pre/post_doit() (Ivan Vecera) [RHEL-30656]
  - devlink: introduce couple of dumpit callbacks for split ops (Ivan Vecera) [RHEL-30656]
  - devlink: rename couple of doit netlink callbacks to match generated names (Ivan Vecera) [RHEL-30656]
  - devlink: rename devlink_nl_ops to devlink_nl_small_ops (Ivan Vecera) [RHEL-30656]
  - ynl-gen-c.py: render netlink policies static for split ops (Ivan Vecera) [RHEL-30656]
  - ynl-gen-c.py: allow directional model for kernel mode (Ivan Vecera) [RHEL-30656]
  - ynl-gen-c.py: filter rendering of validate field values for split ops (Ivan Vecera) [RHEL-30656]
  - netlink: specs: add dump-strict flag for dont-validate property (Ivan Vecera) [RHEL-30656]
  - devlink: Remove unused extern declaration devlink_port_region_destroy() (Ivan Vecera) [RHEL-30656]
  - net: convert some netlink netdev iterators to depend on the xarray (Ivan Vecera) [RHEL-30656]
  - net: store netdevs in an xarray (Ivan Vecera) [RHEL-30656]
  - ynl: print xdp-zc-max-segs in the sample (Ivan Vecera) [RHEL-30656]
  - ynl: regenerate all headers (Ivan Vecera) [RHEL-30656]
  - ynl: mark max/mask as private for kdoc (Ivan Vecera) [RHEL-30656]
  - ynl: expose xdp-zc-max-segs (Ivan Vecera) [RHEL-30656]
  - netlink: allow be16 and be32 types in all uint policy checks (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: fix parse multi-attr enum attribute (Ivan Vecera) [RHEL-30656]
  - netlink: Add new netlink_release function (Ivan Vecera) [RHEL-30656]
  - genetlink: add explicit ordering break check for split ops (Ivan Vecera) [RHEL-30656]
  - rtnetlink: Move nesting cancellation rollback to proper function (Ivan Vecera) [RHEL-30656]
  - devlink: remove reload failed checks in params get/set callbacks (Ivan Vecera) [RHEL-30656]
  - netlink: Make use of __assign_bit() API (Ivan Vecera) [RHEL-30656]
  - netlink: Add __sock_i_ino() for __netlink_diag_dump(). (Ivan Vecera) [RHEL-30656]
  - netlink: specs: add display hints to ovs_flow (Ivan Vecera) [RHEL-30656]
  - tools: ynl: add display-hint support to ynl (Ivan Vecera) [RHEL-30656]
  - netlink: specs: add display-hint to schema definitions (Ivan Vecera) [RHEL-30656]
  - tools: ynl: improve the direct-include header guard logic (Ivan Vecera) [RHEL-30656]
  - netlink: fix potential deadlock in netlink_set_err() (Ivan Vecera) [RHEL-30656]
  - netlink: specs: fixup openvswitch specs for code generation (Ivan Vecera) [RHEL-30656]
  - tools: ynl: work around stale system headers (Ivan Vecera) [RHEL-30656]
  - rtnetlink: move validate_linkmsg out of do_setlink (Ivan Vecera) [RHEL-30656]
  - rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: inherit policy in multi-attr (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: correct enum policies (Ivan Vecera) [RHEL-30656]
  - tools: ynl: add sample for ethtool (Ivan Vecera) [RHEL-30656]
  - tools: ynl: generate code for the ethtool family (Ivan Vecera) [RHEL-30656]
  - netlink: specs: ethtool: mark pads as pads (Ivan Vecera) [RHEL-30656]
  - netlink: specs: ethtool: untangle stats-get (Ivan Vecera) [RHEL-30656]
  - netlink: specs: ethtool: untangle UDP tunnels and cable test a bit (Ivan Vecera) [RHEL-30656]
  - netlink: specs: ethtool: add empty enum stringset (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: resolve enum vs struct name conflicts (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: don't generate enum types if unnamed (Ivan Vecera) [RHEL-30656]
  - netlink: specs: ethtool: add C render hints (Ivan Vecera) [RHEL-30656]
  - netlink: specs: support setting prefix-name per attribute (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: record extra args for regen (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: support excluding tricky ops (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: support / skip pads on the way to kernel (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: don't pass op_name to RenderInfo (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: support code gen for events (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: sanitize notification tracking (Ivan Vecera) [RHEL-30656]
  - tools: ynl: regen: stop generating common notification handlers (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: stop generating common notification handlers (Ivan Vecera) [RHEL-30656]
  - tools: ynl: regen: regenerate the if ladders (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: get attr type outside of if() (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: combine else with closing bracket (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: complete the C keyword list (Ivan Vecera) [RHEL-30656]
  - tools: ynl: regen: cleanup user space header includes (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: cleanup user space header includes (Ivan Vecera) [RHEL-30656]
  - tools: ynl: add sample for devlink (Ivan Vecera) [RHEL-30656]
  - tools: ynl: generate code for the devlink family (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: don't generate forward declarations for policies - regen (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: don't generate forward declarations for policies (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: walk nested types in depth (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: inherit struct use info (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: try to sort the types more intelligently (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: enable code gen for directional specs (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: refactor strmap helper generation (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: use enum names in op strmap more carefully (Ivan Vecera) [RHEL-30656]
  - netlink: specs: devlink: fill in some details important for C (Ivan Vecera) [RHEL-30656]
  - tools: ynl: generate code for the handshake family (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: improve unwind on parsing errors (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: fill in support for MultiAttr scalars (Ivan Vecera) [RHEL-30656]
  - netlink: specs: ethtool: fix random typos (Ivan Vecera) [RHEL-30656]
  - tools: ynl: add sample for netdev (Ivan Vecera) [RHEL-30656]
  - tools: ynl: support fou and netdev in C (Ivan Vecera) [RHEL-30656]
  - tools: ynl: user space helpers (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: clean up stray new lines at the end of reply-less requests (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: generate static descriptions of notifications (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: switch to family struct (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: generate alloc and free helpers for req (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: move the response reading logic into YNL (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: generate enum-to-string helpers (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: add error checking for nested structs (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: loosen type consistency check for events (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: don't override pure nested struct (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: fix unused / pad attribute handling (Ivan Vecera) [RHEL-30656]
  - tools: ynl-gen: add extra headers for user space (Ivan Vecera) [RHEL-30656]
  - net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report (Ivan Vecera) [RHEL-30656]
  - netlink: specs: add ynl spec for ovs_flow (Ivan Vecera) [RHEL-30656]
  - tools: ynl: Support enums in struct members in genetlink-legacy (Ivan Vecera) [RHEL-30656]
  - tools: ynl: Initialise fixed headers to 0 in genetlink-legacy (Ivan Vecera) [RHEL-30656]
  - doc: ynl: Add doc attr to struct members in genetlink-legacy spec (Ivan Vecera) [RHEL-30656]
  - netlink: specs: correct types of legacy arrays (Ivan Vecera) [RHEL-30656]
  - net: ynl: prefix uAPI header include with uapi/ (Ivan Vecera) [RHEL-30656]
  - tools: ynl: avoid dict errors on older Python versions (Ivan Vecera) [RHEL-30656]
  - tools: ynl: Handle byte-order in struct members (Ivan Vecera) [RHEL-30656]
  - tools: ynl: Use dict of predefined Structs to decode scalar types (Ivan Vecera) [RHEL-30656]
  - netlink: annotate accesses to nlk->cb_running (Ivan Vecera) [RHEL-30656]
  - netlink: Use copy_to_user() for optval in netlink_getsockopt(). (Ivan Vecera) [RHEL-30656]
  - tools: ynl: Rename ethtool to ethtool.py (Ivan Vecera) [RHEL-30656]
  - tools: ynl: Remove absolute paths to yaml files from ethtool testing tool (Ivan Vecera) [RHEL-30656]
  - tools: ynl: throw a more meaningful exception if family not supported (Ivan Vecera) [RHEL-30656]
  - tools: ynl: ethtool testing tool (Ivan Vecera) [RHEL-30656]
  - tools: ynl: replace print with NlError (Ivan Vecera) [RHEL-30656]
  - tools: ynl: populate most of the ethtool spec (Ivan Vecera) [RHEL-30656]
  - tools: ynl: support byte-order in cli (Ivan Vecera) [RHEL-30656]
  - docs: netlink: document the sub-type attribute property (Ivan Vecera) [RHEL-30656]
  - docs: netlink: document struct support for genetlink-legacy (Ivan Vecera) [RHEL-30656]
  - netlink: specs: add partial specification for openvswitch (Ivan Vecera) [RHEL-30656]
  - tools: ynl: Add fixed-header support to ynl (Ivan Vecera) [RHEL-30656]
  - tools: ynl: Add struct attr decoding to ynl (Ivan Vecera) [RHEL-30656]
  - tools: ynl: Add C array attribute decoding to ynl (Ivan Vecera) [RHEL-30656]
  - tools: ynl: Add struct parsing to nlspec (Ivan Vecera) [RHEL-30656]
  - tools: ynl: default to treating enums as flags for mask generation (Ivan Vecera) [RHEL-30656]
  - tools: ynl: Add missing types to encode/decode (Ivan Vecera) [RHEL-30656]
  - tools: ynl: add the Python requirements.txt file (Ivan Vecera) [RHEL-30656]
  - ynl: allow to encode u8 attr (Ivan Vecera) [RHEL-30656]
  - tools: ynl: skip the explicit op array size when not needed (Ivan Vecera) [RHEL-30656]
  - netlink: specs: allow uapi-header in genetlink (Ivan Vecera) [RHEL-30656]
  - netlink-specs: add partial specification for devlink (Ivan Vecera) [RHEL-30656]
  - netlink: remove unused 'compare' function (Ivan Vecera) [RHEL-30656]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-445.el9]
changelog:
  - bnx2x: remove unused variable 'cur_data_offset' (Michal Schmidt) [RHEL-23117 RHEL-25588]
  - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-23117 RHEL-25588]
  - bnx2x: Fix firmware version string character counts (Michal Schmidt) [RHEL-23117 RHEL-25588 RHEL-32855]
  - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-23117 RHEL-25588]
  - bnx2x: Remove unnecessary ternary operators (Michal Schmidt) [RHEL-23117 RHEL-25588]
  - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-23117 RHEL-25588]
  - bnx2x: use the right build_skb() helper (Michal Schmidt) [RHEL-23117 RHEL-25588]
  - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (Michal Schmidt) [RHEL-23117 RHEL-25588]
  - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Michal Schmidt) [RHEL-23117 RHEL-25588]
  - Revert "Revert "Merge: EDAC: add initial support for El Capitan"" (Aristeu Rozanski) [RHEL-29211]
  - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33221] {CVE-2024-26878}
  - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29116] {CVE-2023-52606}
  - futex: Prevent the reuse of stale pi_state (Waiman Long) [RHEL-28616]
  - futex: Fix hardcoded flags (Waiman Long) [RHEL-28616]
  - futex: make the vectored futex operations available (Waiman Long) [RHEL-28616]
  - futex: make futex_parse_waitv() available as a helper (Waiman Long) [RHEL-28616]
  - futex: add wake_data to struct futex_q (Waiman Long) [RHEL-28616]
  - futex: abstract out a __futex_wake_mark() helper (Waiman Long) [RHEL-28616]
  - futex: factor out the futex wake handling (Waiman Long) [RHEL-28616]
  - futex: move FUTEX2_VALID_MASK to futex.h (Waiman Long) [RHEL-28616]
  - futex/requeue: Remove unnecessary ‘NULL’ initialization from futex_proxy_trylock_atomic() (Waiman Long) [RHEL-28616]
  - futex: Add sys_futex_requeue() (Waiman Long) [RHEL-28616]
  - futex: Add flags2 argument to futex_requeue() (Waiman Long) [RHEL-28616]
  - futex: Propagate flags into get_futex_key() (Waiman Long) [RHEL-28616]
  - futex: Add sys_futex_wait() (Waiman Long) [RHEL-28616]
  - futex: FLAGS_STRICT (Waiman Long) [RHEL-28616]
  - futex: Add sys_futex_wake() (Waiman Long) [RHEL-28616]
  - futex: Validate futex value against futex size (Waiman Long) [RHEL-28616]
  - futex: Flag conversion (Waiman Long) [RHEL-28616]
  - futex: Extend the FUTEX2 flags (Waiman Long) [RHEL-28616]
  - futex: Clarify FUTEX2 flags (Waiman Long) [RHEL-28616]
  - futex/pi: Fix recursive rt_mutex waiter state (Waiman Long) [RHEL-28616]
  - locking/rtmutex: Add a lockdep assert to catch potential nested blocking (Waiman Long) [RHEL-28616]
  - locking/rtmutex: Use rt_mutex specific scheduler helpers (Waiman Long) [RHEL-28616]
  - sched: Provide rt_mutex specific scheduler helpers (Waiman Long) [RHEL-28616]
  - sched: Extract __schedule_loop() (Waiman Long) [RHEL-28616]
  - locking/rtmutex: Avoid unconditional slowpath for DEBUG_RT_MUTEXES (Waiman Long) [RHEL-28616]
  - sched: Constrain locks in sched_submit_work() (Waiman Long) [RHEL-28616]
  - futex: Use a folio instead of a page (Waiman Long) [RHEL-28616]
  - fchmodat2: add support for AT_EMPTY_PATH (Waiman Long) [RHEL-28616]
  - arch: Register fchmodat2, usually as syscall 452 (Waiman Long) [RHEL-28616]
  - fs: Add fchmodat2() (Waiman Long) [RHEL-28616]
  - Non-functional cleanup of a "__user * filename" (Waiman Long) [RHEL-28616]
  - syscalls: Remove file path comments from headers (Waiman Long) [RHEL-28616]
  - kernel/sys_ni: add compat entry for fadvise64_64 (Waiman Long) [RHEL-28616]
  - syscalls: compat: Fix the missing part for __SYSCALL_COMPAT (Waiman Long) [RHEL-28616]
  - futex: add missing rtmutex.h include (Waiman Long) [RHEL-28616]
  - Revert "sched/core: Provide sched_rtmutex() and expose sched work helpers") (Waiman Long) [RHEL-28616]
  - Revert "locking/rtmutex: Submit/resume work explicitly before/after blocking" (Waiman Long) [RHEL-28616]
  - Revert "locking/rtmutex: Avoid pointless blk_flush_plug() invocations" (Waiman Long) [RHEL-28616]
  - Revert "locking/rtmutex: Add a lockdep assert to catch potential nested blocking" (Waiman Long) [RHEL-28616]
  - Revert "sched/core: Add __always_inline to schedule_loop()" (Waiman Long) [RHEL-28616]
  - fsverity: remove hash page spin lock (Andrey Albershteyn) [RHEL-29914]
  - fsverity: skip PKCS#7 parser when keyring is empty (Andrey Albershteyn) [RHEL-29914]
  - fsverity: move sysctl registration out of signature.c (Andrey Albershteyn) [RHEL-29914]
  - fsverity: simplify handling of errors during initcall (Andrey Albershteyn) [RHEL-29914]
  - fsverity: explicitly check that there is no algorithm 0 (Andrey Albershteyn) [RHEL-29914]
  - fsverity: improve documentation for builtin signature support (Andrey Albershteyn) [RHEL-29914]
  - fsverity: update the documentation (Andrey Albershteyn) [RHEL-29914]
  - fsverity: simplify error handling in verify_data_block() (Andrey Albershteyn) [RHEL-29914]
  - fsverity: don't use bio_first_page_all() in fsverity_verify_bio() (Andrey Albershteyn) [RHEL-29914]
  - fsverity: constify fsverity_hash_alg (Andrey Albershteyn) [RHEL-29914]
  - fsverity: use shash API instead of ahash API (Andrey Albershteyn) [RHEL-29914]
  - fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds (Andrey Albershteyn) [RHEL-29914]
  - fsverity: explicitly check for buffer overflow in build_merkle_tree() (Andrey Albershteyn) [RHEL-29914]
  - fsverity: use WARN_ON_ONCE instead of WARN_ON (Andrey Albershteyn) [RHEL-29914]
  - fs-verity: simplify sysctls with register_sysctl() (Andrey Albershteyn) [RHEL-29914]
  - fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY (Andrey Albershteyn) [RHEL-29914]
  - fsverity: Remove WQ_UNBOUND from fsverity read workqueue (Andrey Albershteyn) [RHEL-29914]
  - fsverity: support verifying data from large folios (Andrey Albershteyn) [RHEL-29914]
  - fs/buffer.c: support fsverity in block_read_full_folio() (Andrey Albershteyn) [RHEL-29914]
  - fsverity: support enabling with tree block size < PAGE_SIZE (Andrey Albershteyn) [RHEL-29914]
  - mm/readahead: Convert page_cache_async_readahead to take a folio (Andrey Albershteyn) [RHEL-29914]
  - fsverity: support verification with tree block size < PAGE_SIZE (Andrey Albershteyn) [RHEL-29914]
  - fs-verity: mention btrfs support (Andrey Albershteyn) [RHEL-29914]
  - btrfs: send: add support for fs-verity (Andrey Albershteyn) [RHEL-29914]
  - fsverity: replace fsverity_hash_page() with fsverity_hash_block() (Andrey Albershteyn) [RHEL-29914]
  - fsverity: use EFBIG for file too large to enable verity (Andrey Albershteyn) [RHEL-29914]
  - fsverity: store log2(digest_size) precomputed (Andrey Albershteyn) [RHEL-29914]
  - fsverity: simplify Merkle tree readahead size calculation (Andrey Albershteyn) [RHEL-29914]
  - fsverity: use unsigned long for level_start (Andrey Albershteyn) [RHEL-29914]
  - fsverity: remove debug messages and CONFIG_FS_VERITY_DEBUG (Andrey Albershteyn) [RHEL-29914]
  - fsverity: pass pos and size to ->write_merkle_tree_block (Andrey Albershteyn) [RHEL-29914]
  - fsverity: optimize fsverity_cleanup_inode() on non-verity files (Andrey Albershteyn) [RHEL-29914]
  - fsverity: optimize fsverity_prepare_setattr() on non-verity files (Andrey Albershteyn) [RHEL-29914]
  - fsverity: optimize fsverity_file_open() on non-verity files (Andrey Albershteyn) [RHEL-29914]
  - fsverity: stop using PG_error to track error status (Andrey Albershteyn) [RHEL-29914]
  - fs-verity: use kmap_local_page() instead of kmap() (Andrey Albershteyn) [RHEL-29914]
  - fs-verity: use memcpy_from_page() (Andrey Albershteyn) [RHEL-29914]
  - fs-verity: Use struct_size() helper in enable_verity() (Andrey Albershteyn) [RHEL-29914]
  - fs-verity: remove unused parameter desc_size in fsverity_create_info() (Andrey Albershteyn) [RHEL-29914]
  - fs-verity: fix signed integer overflow with i_size near S64_MAX (Andrey Albershteyn) [RHEL-29914]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: only call drv_sta_rc_update for uploaded stations (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: fix the TXF mapping for BZ devices (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: uninitialized variable in iwl_acpi_get_ppag_table() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: Fix some error codes (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: clear link_id in time_event (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: use correct address 3 in A-MSDU (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: reload info pointer in ieee80211_tx_dequeue() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: fix fortify warning (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: brcmfmac: Adjust n_channels usage for __counted_by (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: do not announce EPCS support (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: exit eSR only after the FW does (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: fix a battery life regression (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: accept broadcast probe responses on 6 GHz (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: adding missing drv_mgd_complete_tx() call (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: fix waiting for beacons logic (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: fix unsolicited broadcast probe config (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: initialize SMPS mode correctly (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: fix driver debugfs for vif type change (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: set station RX-NSS on reconfig (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: fix RCU use in TDLS fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: improve CSA/ECSA connection refusal (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: detect stuck ECSA element in probe resp (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: remove extra kernel-doc (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: fill in MODULE_DESCRIPTION()s for mt76 drivers (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: fill in MODULE_DESCRIPTION()s for wilc1000 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: fill in MODULE_DESCRIPTION()s for Broadcom WLAN (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: Drop WBRF debugging statements (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: fix wiphy delayed work queueing (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211/mac80211: remove dependency on non-existing option (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: fix missing interfaces when dumping (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: remove redundant ML element check (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: Update the default DSCP-to-UP mapping (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: tests: add some scanning related tests (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: kunit: extend MFP tests (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: kunit: generalize public action test (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: add kunit tests for public action handling (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - kunit: add a convenience allocation wrapper for SKBs (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - kunit: add parameter generation macro using description from array (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: fix spelling typo in comment (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - PCI: Remove unused 'node' member from struct pci_driver (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: replace ENOTSUPP with EOPNOTSUPP (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: use the new command to clear the internal buffer (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: disallow puncturing in US/Canada (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: add US/Canada MCC to API (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: Add rf_mapping of new wifi7 devices (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: cleanup BT Shared Single Antenna code (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: d3: avoid intermediate/early mutex unlock (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: send TX path flush in rfkill (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: Don't mark DFS channels as NO-IR (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: Allow DFS concurrent operation (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: add a driver callback to check active_links (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: avoid double free if updating BSS fails (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: ensure cfg80211_bss_update frees IEs on error (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: free beacon_ies when overridden from hidden BSS (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: allow 64-bit radiotap timestamps (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: rework RX timestamp flags (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: handle UHB AP and STA power type (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211_hwsim: Add custom reg for DFS concurrent (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: Schedule regulatory channels check on bandwith change (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: Schedule regulatory check on BSS STA channel change (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: reg: Support P2P operation on DFS channels (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: Skip association timeout update after comeback rejection (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: address some kerneldoc warnings (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211_hwsim: support HE 40 MHz in 2.4 GHz band (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: address several kerneldoc warnings (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mwifiex: fix uninitialized firmware_stat (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8723_common: using calculate_bit_shift() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8192se: using calculate_bit_shift() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8192de: using calculate_bit_shift() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8192c: using calculate_bit_shift() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8821ae: phy: using calculate_bit_shift() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: add calculate_bit_shift() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: coex: To improve Wi-Fi performance while BT is idle (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: coex: Translate antenna configuration from ID to string (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: coex: Update RF parameter control setting logic (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: coex: Add Bluetooth RSSI level information (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: coex: Set Bluetooth scan low-priority when Wi-Fi link/scan (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: coex: Update coexistence policy for Wi-Fi LPS (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: coex: Still show hardware grant signal info even Wi-Fi is PS (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: coex: Update BTG control related logic (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: coex: Add Pre-AGC control to enhance Wi-Fi RX performance (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: coex: Record down Wi-Fi initial mode information (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: coex: Fix wrong Wi-Fi role info and FDDT parameter members (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw88: use cfg80211_ssid_eq() instead of rtw_ssid_equal() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mwifiex: use cfg80211_ssid_eq() instead of mwifiex_ssid_cmp() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: introduce cfg80211_ssid_eq() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: mac: implement to configure TX/RX engines for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: mac: add sys_init and filter option for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: Use DECLARE_FLEX_ARRAY() and fix -Warray-bounds warnings (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - bus: mhi: host: Drop chan lock before queuing buffers (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - bus: mhi: host: Add spinlock to protect WP access when queueing TREs (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath11k: workaround too long expansion sparse warnings (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - Revert "wifi: ath12k: use ATH12K_PCI_IRQ_DP_OFFSET for DP IRQ" (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rt2x00: remove useless code in rt2x00queue_create_tx_descriptor() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: only reset BB/RF for existing WiFi 6 chips while starting up (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: add DBCC H2C to notify firmware the status (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: mac: add suffix _ax to MAC functions (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: mac: add flags to check if CMAC and DMAC are enabled (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: 8922a: add power on/off functions (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: add XTAL SI for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: phy: print out RFK log with formatted string (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: parse and print out RFK log from C2H events (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: add C2H event handlers of RFK log and report (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: load RFK log format string from firmware file (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: fw: add version field to BB MCU firmware element (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: fw: load TX power track tables from fw_element (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mwifiex: configure BSSID consistently when starting AP (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mwifiex: add extra delay for firmware ready (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - bus: mhi: ep: Add checks for read/write callbacks while registering controllers (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - bus: mhi: ep: Add support for async DMA read operation (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - bus: mhi: ep: Add support for async DMA write operation (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: sta_info.c: fix sentence grammar (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: rx.c: fix sentence grammar (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: nl80211: fix grammar & spellos (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: fix spelling & punctutation (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: sort certificates in build (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - bus: mhi: ep: Introduce async read/write callbacks (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - bus: mhi: ep: Rename read_from_host() and write_to_host() APIs (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - bus: mhi: ep: Pass mhi_ep_buf_info struct to read/write APIs (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - bus: mhi: ep: Add support for interrupt moderation timer (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - bus: mhi: ep: Use slab allocator where applicable (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - bus: mhi: host: Add alignment check for event ring read pointer (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - bus: mhi: host: pci_generic: Add SDX75 based modem support (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - bus: mhi: host: Add a separate timeout parameter for waiting ready (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - bus: mhi: ep: Do not allocate event ring element on stack (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath9k: reset survey of current channel after a scan started (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: fix the issue that the multicast/broadcast indicator is not read correctly for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath11k: Fix ath11k_htc_record flexible record (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw88: Use random MAC when efuse MAC invalid (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: avoid stringop-overflow warning (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: drop spurious WARN_ON() in ieee80211_ibss_csa_beacon() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: don't set ESS capab bit in assoc request (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: consume both probe response and beacon IEs (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: generate an ML element for per-STA profiles (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: Replace ENOTSUPP with EOPNOTSUPP (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: Replace ENOTSUPP with EOPNOTSUPP (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: add a flag to disallow puncturing (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: Add support for setting TID to link mapping (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: update some locking documentation (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: add BSS usage reporting (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: do not send STA_DISABLE_TX_CMD for newer firmware (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: remove async command callback (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: fw: file: don't use [0] for variable arrays (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: pcie: get_crf_id() can be void (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: pcie: dump CSRs before removal (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: pcie: clean up device removal work (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: add a debugfs hook to clear the monitor data (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: refactor RX tracing (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: don't support triggered EHT CQI feedback (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: Correctly report TSF data in scan complete (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: mvm: Use the link ID provided in scan request (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: nl80211: Extend del pmksa support for SAE and OWE security (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: cleanup airtime arithmetic with ieee80211_sta_keep_active() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: Add support for WBRF features (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - Documentation/driver-api: Add document about WBRF mechanism (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: expose nl80211_chan_width_to_mhz for wide sharing (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7921: fix country count limitation for CLC (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7921: reduce the size of MCU firmware download Rx queue (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: set DMA mask to 36 bits for boards with more than 4GB of RAM (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7921s: fix workqueue problem causes STA association fail (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: Convert to platform remove callback returning void (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7925: remove iftype from mt7925_init_eht_caps signature (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: add PCI IDs for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: connac: add new definition of tx descriptor (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: adjust interface num and wtbl size for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: support mt7992 eeprom loading (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: rework register offsets for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: add DMA support for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: connac: add firmware support for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: introduce mt7996_band_valid() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: connac: fix EHT phy mode check (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: connac: add beacon protection support for mt7996 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: rework ampdu params setting (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: switch to mcu command for TX GI report (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: use chainmask for power delta calculation (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: add txpower setting support (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: change txpower init to per-phy (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: fix rate usage of inband discovery frames (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: align the format of fixed rate command (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: handle IEEE80211_RC_SMPS_CHANGED (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: connac: set fixed_bw bit in TX descriptor for fixed rate frames (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: adjust WFDMA settings to improve performance (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: fix the size of struct bss_rate_tlv (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: connac: add beacon duplicate TX mode support for mt7996 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: add thermal sensor device support (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: connac: add thermal protection support for mt7996 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: add TX statistics for EHT mode in debugfs (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: add support for variants with auxiliary RX path (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7915: fallback to non-wed mode if platform_get_resource fails in mt7915_mmio_wed_init() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: add wed rro delete session garbage collector (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: add wed reset support (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: move wed reset common code in mt76 module (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: add wed rx support (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: use u16 for val field in mt7996_mcu_set_rro signature (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: dma: introduce __mt76_dma_queue_reset utility routine (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7996: add wed tx support (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: increase MT_QFLAG_WED_TYPE size (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: introduce wed pointer in mt76_queue (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: introduce mt76_queue_is_wed_tx_free utility routine (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: move mt76_net_setup_tc in common code (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: move mt76_mmio_wed_offload_{enable,disable} in common code (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mmio: move mt76_mmio_wed_{init,release}_rx_buf in common code (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: Remove unnecessary (void*) conversions (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: permit to load precal from NVMEM cell for mt7915 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: permit to use alternative cell name to eeprom NVMEM load (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: make mt76_get_of_eeprom static again (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: limit support of precal loading for mt7915 to MTD only (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: fix broken precal loading from MTD for mt7915 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: mt7921: support 5.9/6GHz channel config in acpi (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mt76: add ability to explicitly forbid LED registration with DT (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: mac: refine SER setting during WiFi CPU power on (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: 8922a: dump MAC registers when SER occurs (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: 8922a: add SER IMR tables (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: fw: extend program counter dump for Wi-Fi 7 chip (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: 8922a: configure CRASH_TRIGGER FW feature (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath10k: add support to allow broadcast action frame RX (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: make RX assoc data const (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: nl80211: refactor nl80211_send_mlme_event() arguments (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: avoid repeated wiphy access from hw (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: fix and enable AP mode for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: set IRQ affinity to CPU0 in case of one MSI vector (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: do not restore ASPM in case of single MSI vector (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: add support one MSI vector (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: refactor multiple MSI vector implementation (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: use ATH12K_PCI_IRQ_DP_OFFSET for DP IRQ (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: add CE and ext IRQ flag to indicate irq_handler (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: get msi_data again after request_irq is called (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: avoid repeated hw access from ar (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: Optimize the mac80211 hw data access (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: add 320 MHz bandwidth enums (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: fix misbehavior of TX beacon in concurrent mode (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: refine remain on channel flow to improve P2P connection (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: Refine active scan behavior in 6 GHz (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: fix not entering PS mode after AP stops (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rt2x00: make watchdog param per device (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: Remove bridge vendor/device ids (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: Remove unused PCI related defines and struct (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8821ae: Access full PMCS reg and use pci_regs.h (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8821ae: Add pdev into _rtl8821ae_clear_pci_pme_status() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8821ae: Use pci_find_capability() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8821ae: Reverse PM Capability exists check (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8821ae: Remove unnecessary PME_Status bit set (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: Convert to use PCIe capability accessors (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw88: sdio: Honor the host max_req_size in the RX path (Jose Ignacio Tornos Martinez) [RHEL-28754 RHEL-29465] {CVE-2023-52611}
  - wifi: rtw89: mac: functions to configure hardware engine and quota for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: mac: use pointer to access functions of hardware engine and quota (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: mac: move code related to hardware engine to individual functions (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: mac: check queue empty according to chip gen (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: refine element naming used by queue empty check (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: add reserved size as factor of DLE used size (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: mac: add to get DLE reserved quota (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: 8922a: extend and add quota number (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: iwlwifi: fw: replace deprecated strncpy with strscpy_pad (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: debug: remove wrapper of rtw89_debug() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: debug: add debugfs entry to disable dynamic mechanism (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: phy: dynamically adjust EDCCA threshold (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: debug: add to check if debug mask is enabled (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl8821ae: phy: remove some useless code (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw88: debug: remove wrapper of rtw_dbg() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: brcmfmac: Convert to platform remove callback returning void (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rt2x00: Simplify bool conversion (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath11k: Convert to platform remove callback returning void (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath11k: fix race due to setting ATH11K_FLAG_EXT_IRQ_ENABLED too early (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath11k: remove ath11k_htc_record::pauload[] (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath10k: Use DECLARE_FLEX_ARRAY() for ath10k_htc_record (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath10k: remove ath10k_htc_record::pauload[] (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath10k: Update Qualcomm Innovation Center, Inc. copyrights (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath11k: Update Qualcomm Innovation Center, Inc. copyrights (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: Update Qualcomm Innovation Center, Inc. copyrights (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-28754 RHEL-29091] {CVE-2023-52594}
  - wifi: ath9k: Remove unnecessary (void*) conversions (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: refactor DP Rxdma ring structure (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: avoid explicit HW conversion argument in Rxdma replenish (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: avoid explicit RBM id argument in Rxdma replenish (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: avoid explicit mac id argument in Rxdma replenish (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: use select for CRYPTO_MICHAEL_MIC (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath11k: use select for CRYPTO_MICHAEL_MIC (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: nl80211: Documentation update for NL80211_CMD_PORT_AUTHORIZED event (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mac80211: Extend support for scanning while MLO connected (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: cfg80211: Extend support for scanning while MLO connected (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ieee80211: fix PV1 frame control field name (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - rfkill: return ENOTTY on invalid ioctl (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: Consolidate WMI peer flags (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath11k: Consolidate WMI peer flags (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: Remove obsolete struct wmi_peer_flags_map *peer_flags (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath11k: Remove obsolete struct wmi_peer_flags_map *peer_flags (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: Remove struct ath12k::ops (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath11k: Remove struct ath11k::ops (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath10k: Remove unused struct ath10k_htc_frame (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath10k: simplify __ath10k_htt_tx_txq_recalc() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: 8922a: read efuse content from physical map (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: 8922a: read efuse content via efuse map struct from logic map (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: 8852c: read RX gain offset from efuse for 6GHz channels (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: mac: add to access efuse for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: mac: use mac_gen pointer to access about efuse (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: 8922a: add 8922A basic chip info (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: drop unused const_amdpci_aspm (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: mwifiex: mwifiex_process_sleep_confirm_resp(): remove unused priv variable (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: regd: update regulatory map to R65-R44 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: regd: handle policy of 6 GHz according to BIOS (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: acpi: process 6 GHz band policy from DSM (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: simplify rtl_action_proc() and rtl_tx_agg_start() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: pci: update interrupt mitigation register for 8922AE (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: pci: correct interrupt mitigation register for 8852CE (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: 8922ae: add v2 interrupt handlers for 8922AE (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: pci: generalize interrupt status bits of interrupt handlers (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: pci: add pre_deinit to be called after probe complete (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: pci: stop/start DMA for level 1 recovery according to chip gen (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: pci: reset BDRAM according to chip gen (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rt2x00: correct wrong BBP register in RxDCOC calibration (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath11k: Remove unneeded semicolon (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath11k: Defer on rproc_get failure (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-28754 RHEL-29095] {CVE-2023-52595}
  - wifi: rt2x00: disable RTS threshold for rt2800 by default (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rt2x00: introduce DMA busy check watchdog for rt2800 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw88: fix RX filter in FIF_ALLMULTI flag (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw88: simplify __rtw_tx_work() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: coex: use struct assignment to replace memcpy() to append TDMA content (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: pci: implement PCI mac_post_init for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: pci: add LTR v2 for WiFi 7 chip (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: pci: implement PCI mac_pre_init for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: pci: use gen_def pointer to configure mac_{pre,post}_init and clear PCI ring index (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: pci: add PCI generation information to pci_info for each chip (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: wilc1000: simplify wilc_scan() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: wilc1000: cleanup struct wilc_conn_info (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath10k: replace deprecated strncpy with memcpy (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: ath12k: drop NULL pointer check in ath12k_update_per_peer_tx_stats() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: remove orphaned rndis_wlan driver (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: remove orphaned wl3501 driver (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: remove orphaned ray_cs driver (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: remove orphaned cisco/aironet driver (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: extend PHY status parser to support WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: consider RX info for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: configure PPDU max user by chip (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: set entry size of address CAM to H2C field by chip (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: wilc1000: always release SDIO host in wilc_sdio_cmd53() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: wilc1000: simplify remain on channel support (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: pci: generalize code of PCI control DMA IO for WiFi 7 (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: pci: add new RX ring design to determine full RX ring efficiently (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: pci: define PCI ring address for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: 8922ae: add 8922AE PCI entry and basic info (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtw89: fix timeout calculation in rtw89_roc_end() (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: rtl92ee_dm_dynamic_primary_cca_check(): fix typo in function name (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: cleanup struct rtl_phy (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: rtlwifi: cleanup struct rtl_hal (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: brcmsmac: replace deprecated strncpy with memcpy (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - wifi: brcm80211: replace deprecated strncpy with strscpy (Jose Ignacio Tornos Martinez) [RHEL-28754]
  - blk-mq: don't change nr_hw_queues and nr_maps for kdump kernel (Ming Lei) [RHEL-29564]
  - zram: do not waste zram_table_entry flags bits (Ming Lei) [RHEL-29564]
  - block: count BLK_OPEN_RESTRICT_WRITES openers (Ming Lei) [RHEL-29564]
  - block: handle BLK_OPEN_RESTRICT_WRITES correctly (Ming Lei) [RHEL-29564]
  - fs,block: yield devices early (Ming Lei) [RHEL-29564]
  - fs,block: get holder during claim (Ming Lei) [RHEL-29564]
  - iomap: fix a regression for partial write errors (Ming Lei) [RHEL-29564]
  - mtd: key superblock by device number (Ming Lei) [RHEL-29564]
  - fs: export sget_dev() (Ming Lei) [RHEL-29564]
  - super: ensure valid info (Ming Lei) [RHEL-29564]
  - super: move lockdep assert (Ming Lei) [RHEL-29564]
  - fs/Kconfig: Fix compile error for romfs (Ming Lei) [RHEL-29564]
  - iomap: handle error conditions more gracefully in iomap_to_bh (Ming Lei) [RHEL-29564]
  - direct_write_fallback(): on error revert the ->ki_pos update from buffered write (Ming Lei) [RHEL-29564]
  - Revert "get rid of DCACHE_GENOCIDE" (Ming Lei) [RHEL-29564]
  - block: remove bdev_handle completely (Ming Lei) [RHEL-29564]
  - block: don't rely on BLK_OPEN_RESTRICT_WRITES when yielding write access (Ming Lei) [RHEL-29564]
  - bdev: remove bdev pointer from struct bdev_handle (Ming Lei) [RHEL-29564]
  - bdev: make struct bdev_handle private to the block layer (Ming Lei) [RHEL-29564]
  - bdev: make bdev_{release, open_by_dev}() private to block layer (Ming Lei) [RHEL-29564]
  - bdev: remove bdev_open_by_path() (Ming Lei) [RHEL-29564]
  - nfs: port block device access to files (Ming Lei) [RHEL-29564]
  - jfs: port block device access to file (Ming Lei) [RHEL-29564]
  - ext4: port block device access to file (Ming Lei) [RHEL-29564]
  - target: port block device access to file (Ming Lei) [RHEL-29564]
  - s390: port block device access to file (Ming Lei) [RHEL-29564]
  - nvme: port block device access to file (Ming Lei) [RHEL-29564]
  - block2mtd: port device access to files (Ming Lei) [RHEL-29564]
  - zram: port block device access to file (Ming Lei) [RHEL-29564]
  - xen: port block device access to file (Ming Lei) [RHEL-29564]
  - pktcdvd: port block device access to file (Ming Lei) [RHEL-29564]
  - drbd: port block device access to file (Ming Lei) [RHEL-29564]
  - xfs: port block device access to files (Ming Lei) [RHEL-29564]
  - power: port block device access to file (Ming Lei) [RHEL-29564]
  - swap: port block device usage to file (Ming Lei) [RHEL-29564]
  - md: port block device access to file (Ming Lei) [RHEL-29564]
  - block/genhd: port disk_scan_partitions() to file (Ming Lei) [RHEL-29564]
  - block/ioctl: port blkdev_bszset() to file (Ming Lei) [RHEL-29564]
  - bdev: open block device as files (Ming Lei) [RHEL-29564]
  - file: add alloc_file_pseudo_noaccount() (Ming Lei) [RHEL-29564]
  - file: prepare for new helper (Ming Lei) [RHEL-29564]
  - init: flush async file closing (Ming Lei) [RHEL-29564]
  - fs: add CONFIG_BUFFER_HEAD (Ming Lei) [RHEL-29564]
  - fs: build the legacy direct I/O code conditionally (Ming Lei) [RHEL-29564]
  - fs: move sb_init_dio_done_wq out of direct-io.c (Ming Lei) [RHEL-29564]
  - block: use iomap for writes to block devices (Ming Lei) [RHEL-29564]
  - block: stop setting ->direct_IO (Ming Lei) [RHEL-29564]
  - block: open code __generic_file_write_iter for blkdev writes (Ming Lei) [RHEL-29564]
  - fs: rename and move block_page_mkwrite_return (Ming Lei) [RHEL-29564]
  - fuse: drop redundant arguments to fuse_perform_write (Ming Lei) [RHEL-29564]
  - fuse: update ki_pos in fuse_perform_write (Ming Lei) [RHEL-29564]
  - fs: factor out a direct_write_fallback helper (Ming Lei) [RHEL-29564]
  - iomap: use kiocb_write_and_wait and kiocb_invalidate_pages (Ming Lei) [RHEL-29564]
  - iomap: update ki_pos in iomap_file_buffered_write (Ming Lei) [RHEL-29564]
  - filemap: add a kiocb_invalidate_post_direct_write helper (Ming Lei) [RHEL-29564]
  - filemap: add a kiocb_invalidate_pages helper (Ming Lei) [RHEL-29564]
  - filemap: add a kiocb_write_and_wait helper (Ming Lei) [RHEL-29564]
  - filemap: update ki_pos in generic_perform_write (Ming Lei) [RHEL-29564]
  - backing_dev: remove current->backing_dev_info (Ming Lei) [RHEL-29564]
  - redhat/configs: add CONFIG_BLK_DEV_WRITE_MOUNTED (Ming Lei) [RHEL-29564]
  - block: Fix a memory leak in bdev_open_by_dev() (Ming Lei) [RHEL-29564]
  - ext4: Block writes to journal device (Ming Lei) [RHEL-29564]
  - xfs: Block writes to log device (Ming Lei) [RHEL-29564]
  - fs: Block writes to mounted block devices (Ming Lei) [RHEL-29564]
  - btrfs: Do not restrict writes to btrfs devices (Ming Lei) [RHEL-29564]
  - block: Add config option to not allow writing to mounted devices (Ming Lei) [RHEL-29564]
  - block: Remove blkdev_get_by_*() functions (Ming Lei) [RHEL-29564]
  - super: use higher-level helper for {freeze,thaw} (Ming Lei) [RHEL-29564]
  - fs: Avoid grabbing sb->s_umount under bdev->bd_holder_lock (Ming Lei) [RHEL-29564]
  - fs: remove emergency_thaw_bdev (Ming Lei) [RHEL-29564]
  - super: wait until we passed kill super (Ming Lei) [RHEL-29564]
  - super: make locking naming consistent (Ming Lei) [RHEL-29564]
  - fs: simplify invalidate_inodes (Ming Lei) [RHEL-29564]
  - init: Deal with the init process being a user mode process (Ming Lei) [RHEL-29564]
  - dcache: remove unnecessary NULL check in dget_dlock() (Ming Lei) [RHEL-29564]
  - kill DCACHE_MAY_FREE (Ming Lei) [RHEL-29564]
  - __d_unalias() doesn't use inode argument (Ming Lei) [RHEL-29564]
  - d_alloc_parallel(): in-lookup hash insertion doesn't need an RCU variant (Ming Lei) [RHEL-29564]
  - get rid of DCACHE_GENOCIDE (Ming Lei) [RHEL-29564]
  - simple_fill_super(): don't bother with d_genocide() on failure (Ming Lei) [RHEL-29564]
  - nsfs: use d_make_root() (Ming Lei) [RHEL-29564]
  - d_alloc_pseudo(): move setting ->d_op there from the (sole) caller (Ming Lei) [RHEL-29564]
  - kill d_instantate_anon(), fold __d_instantiate_anon() into remaining caller (Ming Lei) [RHEL-29564]
  - retain_dentry(): introduce a trimmed-down lockless variant (Ming Lei) [RHEL-29564]
  - __dentry_kill(): new locking scheme (Ming Lei) [RHEL-29564]
  - d_prune_aliases(): use a shrink list (Ming Lei) [RHEL-29564]
  - switch select_collect{,2}() to use of to_shrink_list() (Ming Lei) [RHEL-29564]
  - to_shrink_list(): call only if refcount is 0 (Ming Lei) [RHEL-29564]
  - fold dentry_kill() into dput() (Ming Lei) [RHEL-29564]
  - don't try to cut corners in shrink_lock_dentry() (Ming Lei) [RHEL-29564]
  - fold the call of retain_dentry() into fast_dput() (Ming Lei) [RHEL-29564]
  - Call retain_dentry() with refcount 0 (Ming Lei) [RHEL-29564]
  - dentry_kill(): don't bother with retain_dentry() on slow path (Ming Lei) [RHEL-29564]
  - __dentry_kill(): get consistent rules for victim's refcount (Ming Lei) [RHEL-29564]
  - make retain_dentry() neutral with respect to refcounting (Ming Lei) [RHEL-29564]
  - __dput_to_list(): do decrement of refcount in the callers (Ming Lei) [RHEL-29564]
  - fast_dput(): new rules for refcount (Ming Lei) [RHEL-29564]
  - fast_dput(): handle underflows gracefully (Ming Lei) [RHEL-29564]
  - fast_dput(): having ->d_delete() is not reason to delay refcount decrement (Ming Lei) [RHEL-29564]
  - shrink_dentry_list(): no need to check that dentry refcount is marked dead (Ming Lei) [RHEL-29564]
  - centralize killing dentry from shrink list (Ming Lei) [RHEL-29564]
  - dentry: switch the lists of children to hlist (Ming Lei) [RHEL-29564]
  - coda_flag_children(): cope with dentries turning negative (Ming Lei) [RHEL-29564]
  - switch nfsd_client_rmdir() to use of simple_recursive_removal() (Ming Lei) [RHEL-29564]
  - kill d_backing_dentry() (Ming Lei) [RHEL-29564]
  - dentry.h: kill a mysterious comment (Ming Lei) [RHEL-29564]
  - dentry.h: trim externs (Ming Lei) [RHEL-29564]
  - kill d_{is,set}_fallthru() (Ming Lei) [RHEL-29564]
  - DCACHE_COOKIE: RIP (Ming Lei) [RHEL-29564]
  - DCACHE_... ->d_flags bits: switch to BIT() (Ming Lei) [RHEL-29564]
  - get rid of __dget() (Ming Lei) [RHEL-29564]
  - struct dentry: get rid of randomize_layout idiocy (Ming Lei) [RHEL-29564]
  - ovl: stop using d_alloc_anon()/d_instantiate_anon() (Ming Lei) [RHEL-29564]
  - net: macsec: indicate next pn update when offloading (Izabela Bakollari) [RHEL-30143]
  - IB/mlx5: Adjust mlx5 rate mapping to support 800Gb (Kamal Heib) [RHEL-30146]
  - IB/mlx5: Rename 400G_8X speed to comply to naming convention (Kamal Heib) [RHEL-30146]
  - IB/mlx5: Add support for 800G_8X lane speed (Kamal Heib) [RHEL-30146]
  - RDMA/ipoib: Add support for XDR speed in ethtool (Kamal Heib) [RHEL-30146]
  - IB/mlx5: Expose XDR speed through MAD (Kamal Heib) [RHEL-30146]
  - IB/core: Add support for XDR link speed (Kamal Heib) [RHEL-30146]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-446.el9]
changelog:
  - powerpc/kasan: Fix addr error caused by page alignment (Mamatha Inamdar) [RHEL-33707] {CVE-2024-26712}
  - block: Fix page refcounts for unaligned buffers in __bio_release_pages() (Ming Lei) [RHEL-33723]
  - tools/power turbostat: v2024.04.10 (David Arcari) [RHEL-34610]
  - tools/power turbostat: Add selftests (David Arcari) [RHEL-34610]
  - tools/power/turbostat: Add support for Xe sysfs knobs (David Arcari) [RHEL-34610]
  - tools/power/turbostat: Add support for new i915 sysfs knobs (David Arcari) [RHEL-34610]
  - tools/power/turbostat: Introduce BIC_SAM_mc6/BIC_SAMMHz/BIC_SAMACTMHz (David Arcari) [RHEL-34610]
  - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29239 RHEL-34610]
  - tools/power/turbostat: Unify graphics sysfs snapshots (David Arcari) [RHEL-34610]
  - tools/power/turbostat: Cache graphics sysfs path (David Arcari) [RHEL-34610]
  - tools/power/turbostat: Enable MSR_CORE_C1_RES support for ICX (David Arcari) [RHEL-34610]
  - tools/power turbostat: read RAPL counters via perf (David Arcari) [RHEL-34610]
  - tools/power turbostat: Add proper re-initialization for perf file descriptors (David Arcari) [RHEL-34610]
  - tools/power turbostat: Clear added counters when in no-msr mode (David Arcari) [RHEL-34610]
  - tools/power turbostat: add early exits for permission checks (David Arcari) [RHEL-34610]
  - tools/power turbostat: detect and disable unavailable BICs at runtime (David Arcari) [RHEL-34610]
  - tools/power turbostat: Add reading aperf and mperf via perf API (David Arcari) [RHEL-34610]
  - tools/power turbostat: Add --no-perf option (David Arcari) [RHEL-34610]
  - tools/power turbostat: Add --no-msr option (David Arcari) [RHEL-34610]
  - tools/power turbostat: enhance -D (debug counter dump) output (David Arcari) [RHEL-34610]
  - tools/power turbostat: Fix warning upon failed /dev/cpu_dma_latency read (David Arcari) [RHEL-34610]
  - tools/power turbostat: Read base_hz and bclk from CPUID.16H if available (David Arcari) [RHEL-34610]
  - tools/power turbostat: Print ucode revision only if valid (David Arcari) [RHEL-34610]
  - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29239 RHEL-34610]
  - tools/power turbostat: Do not print negative LPI residency (David Arcari) [RHEL-34610]
  - tools/power turbostat: Fix Bzy_MHz documentation typo (David Arcari) [RHEL-34610]
  - tools/power turbostat: Increase the limit for fd opened (David Arcari) [RHEL-34610]
  - tools/power turbostat: Fix added raw MSR output (David Arcari) [RHEL-34610]
  - net: rswitch: Allow jumbo frames (Radu Rendec) [RHEL-34587]
  - net: rswitch: Add jumbo frames handling for TX (Radu Rendec) [RHEL-34587]
  - net: rswitch: Add jumbo frames handling for RX (Radu Rendec) [RHEL-34587]
  - net: rswitch: Set GWMDNC register (Radu Rendec) [RHEL-34587]
  - net: rswitch: Add a setting ext descriptor function (Radu Rendec) [RHEL-34587]
  - net: rswitch: Add unmap_addrs instead of dma address in each desc (Radu Rendec) [RHEL-34587]
  - net: rswitch: Use build_skb() for RX (Radu Rendec) [RHEL-34587]
  - net: rswitch: Use unsigned int for desc related array index (Radu Rendec) [RHEL-34587]
  - net: rswitch: Drop unused argument/return value (Radu Rendec) [RHEL-34587]
  - net: rswitch: Fix missing dev_kfree_skb_any() in error path (Radu Rendec) [RHEL-34587]
  - net: rswitch: Fix return value in rswitch_start_xmit() (Radu Rendec) [RHEL-34587]
  - net: rswitch: Fix type of ret in rswitch_start_xmit() (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: rcar_gen4_ptp: Depend on PTP_1588_CLOCK (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: rcar_gen4_ptp: Break out to module (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: rcar_gen4_ptp: Get clock increment from clock rate (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: rcar_gen4_ptp: Prepare for shared register layout (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: rcar_gen4_ptp: Fail on unknown register layout (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: rcar_gen4_ptp: Remove incorrect comment (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: drop SoC names in Kconfig (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: group entries in Makefile (Radu Rendec) [RHEL-34587]
  - rswitch: Add PM ops (Radu Rendec) [RHEL-34587]
  - rswitch: Use unsigned int for port related array index (Radu Rendec) [RHEL-34587]
  - rswitch: Fix imbalance phy_power_off() calling (Radu Rendec) [RHEL-34587]
  - rswitch: Fix renesas_eth_sw_remove() implementation (Radu Rendec) [RHEL-34587]
  - rswitch: Fix PHY station management clock setting (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Add spin lock protection for irq {un}mask (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Fix unmasking irq condition (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Add .[gs]et_link_ksettings support (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Add runtime speed change support (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Use hardware pause features (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Use napi_gro_receive() in RX (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Fix timestamp feature after all descriptors are used (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Fix return value in error path of xmit (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Fix GWTSDIE register handling (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Fix the output value of quote from rswitch_rx() (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Improve TX timestamp accuracy (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Remove gptp flag from rswitch_gwca_queue (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Move linkfix variables to rswitch_gwca (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Rename rings in struct rswitch_gwca_queue (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Add "max-speed" handling (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Add phy_power_{on,off}() calling (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Add host_interfaces setting (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Convert to phy_device (Radu Rendec) [RHEL-34587]
  - net: renesas: rswitch: Simplify struct phy * handling (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: rswitch: Fix ethernet-ports handling (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: rswitch: C45 only transactions (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: rswitch: Fix getting mac address from device tree (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: rswitch: Fix error path in renesas_eth_sw_probe() (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: rswitch: Fix MAC address info (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: Fix return type in rswitch_etha_wait_link_verification() (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: rswitch: Fix endless loop in error paths (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: Fix return type of rswitch_start_xmit() (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: rswitch: Fix build error about ptp (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: rswitch: Add R-Car Gen4 gPTP support (Radu Rendec) [RHEL-34587]
  - net: ethernet: renesas: Add support for "Ethernet Switch" (Radu Rendec) [RHEL-34587]
  - dt-bindings: net: renesas: Document Renesas Ethernet Switch (Radu Rendec) [RHEL-34587]
  - phy: renesas: r8a779f0-ether-serdes: Add .exit() ops (Radu Rendec) [RHEL-34587]
  - phy: renesas: r8a779f0-ether-serdes: Reset in .init() (Radu Rendec) [RHEL-34587]
  - phy: renesas: r8a779f0-ether-serdes: Convert to devm_platform_ioremap_resource() (Radu Rendec) [RHEL-34587]
  - phy: renesas: r8a779f0-ether-serdes: Convert to platform remove callback returning void (Radu Rendec) [RHEL-34587]
  - phy: renesas: r8a779f0-eth-serdes: Remove retry code in .init() (Radu Rendec) [RHEL-34587]
  - phy: renesas: r8a779f0-eth-serdes: Add .power_on() into phy_ops (Radu Rendec) [RHEL-34587]
  - phy: renesas: r8a779f0-eth-serdes: Fix register setting (Radu Rendec) [RHEL-34587]
  - phy: renesas: Add Renesas Ethernet SERDES driver for R-Car S4-8 (Radu Rendec) [RHEL-34587]
  - dt-bindings: phy: renesas: Document Renesas Ethernet SERDES (Radu Rendec) [RHEL-34587]
  - arm64: tlb: Fix TLBI RANGE operand (Shaoqin Huang) [RHEL-26259]
  - arm64/mm: Modify range-based tlbi to decrement scale (Shaoqin Huang) [RHEL-26259]
  - net: remove gfp_mask from napi_alloc_skb() (Izabela Bakollari) [RHEL-32108]
  - netfilter: nft_flow_offload: release dst in case direct xmit path is used (Florian Westphal) [RHEL-33469]
  - ipvs: avoid stat macros calls from preemptible context (Florian Westphal) [RHEL-33469]
  - netfilter: flowtable: incorrect pppoe tuple (Florian Westphal) [RHEL-33469]
  - netfilter: flowtable: validate pppoe header (Florian Westphal) [RHEL-33469]
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Florian Westphal) [RHEL-33469]
  - netfilter: nft_flow_offload: reset dst in route object after setting up flow (Florian Westphal) [RHEL-33469]
  - netfilter: flowtable: simplify route logic (Florian Westphal) [RHEL-33469]
  - netfilter: nfnetlink_queue: un-break NF_REPEAT (Florian Westphal) [RHEL-33469]
  - netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger (Florian Westphal) [RHEL-33469]
  - netfilter: conntrack: correct window scaling with retransmitted SYN (Florian Westphal) [RHEL-33469]
  - block: fix q->blkg_list corruption during disk rebind (Ming Lei) [RHEL-33577]
  - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33226] {CVE-2024-26872}
  - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30078] {CVE-2024-26643}
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30082] {CVE-2024-26642}
  - tcp: properly terminate timers for kernel sockets (Paolo Abeni) [RHEL-32164]
  - tcp: add sanity checks to rx zerocopy (Paolo Abeni) [RHEL-29496 RHEL-32164] {CVE-2024-26640}
  - tcp: Add memory barrier to tcp_push() (Paolo Abeni) [RHEL-32164]
  - tcp: fix cookie_init_timestamp() overflows (Paolo Abeni) [RHEL-32164]
  - tcp_metrics: do not create an entry from tcp_init_metrics() (Paolo Abeni) [RHEL-32164]
  - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() (Paolo Abeni) [RHEL-32164]
  - tcp_metrics: add missing barriers on delete (Paolo Abeni) [RHEL-32164]
  - tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb (Paolo Abeni) [RHEL-32164]
  - tcp: fix possible freeze in tx path under memory pressure (Paolo Abeni) [RHEL-32164]
  - thermal: intel: hfi: Add syscore callbacks for system-wide PM (David Arcari) [RHEL-30586] {CVE-2024-26646}
  - thermal: intel: hfi: Disable an HFI instance when all its CPUs go offline (David Arcari) [RHEL-30586] {CVE-2024-26646}
  - thermal: intel: hfi: Refactor enabling code into helper functions (David Arcari) [RHEL-30586] {CVE-2024-26646}
  - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26233] {CVE-2023-52439}
  - Partial backport of mm, treewide: introduce NR_PAGE_ORDERS (Dave Airlie) [RHEL-24101]
  - lib/ref_tracker: add printing to memory buffer (Dave Airlie) [RHEL-24101]
  - lib/ref_tracker: improve printing stats (Dave Airlie) [RHEL-24101]
  - lib/ref_tracker: add unlocked leak print helper (Dave Airlie) [RHEL-24101]
  - Partial backport of rxrpc: Fix locking issue (Dave Airlie) [RHEL-24101]
  - kunit: Add a macro to wrap a deferred action function (Dave Airlie) [RHEL-24101]
  - kunit: Fix some comments which were mistakenly kerneldoc (Dave Airlie) [RHEL-24101]
  - kunit: Fix a NULL vs IS_ERR() bug (Dave Airlie) [RHEL-24101]
  - kunit: device: Fix a NULL vs IS_ERR() check in init() (Dave Airlie) [RHEL-24101]
  - kunit: device: Unregister the kunit_bus on shutdown (Dave Airlie) [RHEL-24101]
  - kunit: Setup DMA masks on the kunit device (Dave Airlie) [RHEL-24101]
  - kunit: Add APIs for managing devices (Dave Airlie) [RHEL-24101]
  - debugfs: Export debugfs_create_str symbol (Dave Airlie) [RHEL-24101]
  - dma-buf/sync_file: Add SET_DEADLINE ioctl (Dave Airlie) [RHEL-24101]
  - redhat: add CONFIG_AMD_WBRF file, disabled for now. (Dave Airlie) [RHEL-24101]
  - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature (Dave Airlie) [RHEL-24101]
  - drm/i915: Move abs_diff() to math.h (Dave Airlie) [RHEL-24101]
  - string.h: add array-wrappers for (v)memdup_user() (Dave Airlie) [RHEL-24101]
  - hwmon: (coretemp) Enlarge per package core count limit (David Arcari) [RHEL-22705]
  - hwmon: (coretemp) Fix bogus core_id to attr name mapping (David Arcari) [RHEL-22705]
  - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-22705 RHEL-31307] {CVE-2024-26664}
  - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26722]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-447.el9]
changelog:
  - powercap: intel_rapl: Convert to platform remove callback returning void (David Arcari) [RHEL-35363]
  - x86/cpu/topology: Rename topology_max_die_per_package() (David Arcari) [RHEL-35363]
  - powercap: intel_rapl_tpmi: Fix System Domain probing (David Arcari) [RHEL-35363]
  - powercap: intel_rapl_tpmi: Fix a register bug (David Arcari) [RHEL-35363]
  - powercap: intel_rapl: Fix locking in TPMI RAPL (David Arcari) [RHEL-35363]
  - powercap: intel_rapl: Fix a NULL pointer dereference (David Arcari) [RHEL-35104 RHEL-35363] {CVE-2024-26975}
  - powercap: intel_rapl: Downgrade BIOS locked limits pr_warn() to pr_debug() (David Arcari) [RHEL-35363]
  - platform/x86/intel/ifs: Remove unnecessary initialization of 'ret' (David Arcari) [RHEL-35194]
  - platform/x86/intel/ifs: Add an entry rendezvous for SAF (David Arcari) [RHEL-35194]
  - platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST (David Arcari) [RHEL-35194]
  - platform/x86/intel/ifs: Add current batch number to trace output (David Arcari) [RHEL-35194]
  - platform/x86/intel/ifs: Trace on all HT threads when executing a test (David Arcari) [RHEL-35194]
  - kexec: fix the unexpected kexec_dprintk() macro (Baoquan He) [RHEL-477]
  - kexec_file, parisc: print out debugging message if required (Baoquan He) [RHEL-477]
  - kexec_file, power: print out debugging message if required (Baoquan He) [RHEL-477]
  - kexec_file, arm64: print out debugging message if required (Baoquan He) [RHEL-477]
  - kexec_file, x86: print out debugging message if required (Baoquan He) [RHEL-477]
  - kexec_file: print out debugging message if required (Baoquan He) [RHEL-477]
  - kexec_file: add kexec_file flag to control debug printing (Baoquan He) [RHEL-477]
  - mmc: renesas_sdhi: use plain numbers for end_flags (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: Fix rounding errors (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: special 4tap settings only apply to HS400 (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: take DMA end interrupts into account (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: add quirk for broken register layout (Radu Rendec) [RHEL-34056]
  - mmc: tmio: add callback for dma irq (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: improve naming of DMA struct (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: remove accessor function for internal_dmac (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: newer SoCs don't need manual tap correction (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: add R-Car Gen4 fallback compatibility string (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: Add missing checks for the presence of quirks (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: style fix for proper function bodies (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: make 'dmac_only_one_rx' a quirk (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: make 'fixed_addr_mode' a quirk (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: remove a stale comment (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: make setup selection more understandable (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: R-Car D3 also has no HS400 (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: remove outdated headers (Radu Rendec) [RHEL-34056]
  - mmc: host: Drop commas after SoC match table sentinels (Radu Rendec) [RHEL-34056]
  - spi: sh-msiof: avoid integer overflow in constants (Radu Rendec) [RHEL-34056]
  - spi: renesas,sh-msiof: R-Car V3U is R-Car Gen4 (Radu Rendec) [RHEL-34056]
  - spi: sh-msiof: add generic Gen4 binding (Radu Rendec) [RHEL-34056]
  - spi: renesas,sh-msiof: Add generic Gen4 and r8a779f0 support (Radu Rendec) [RHEL-34056]
  - spi: sh-msiof: drop unneeded MODULE_ALIAS (Radu Rendec) [RHEL-34056]
  - spi: rspi: drop unneeded MODULE_ALIAS (Radu Rendec) [RHEL-34056]
  - i2c: rcar: fix error code in probe() (Radu Rendec) [RHEL-34056]
  - i2c: rcar: improve accuracy for R-Car Gen3+ (Radu Rendec) [RHEL-34056]
  - i2c: rcar: reset controller is mandatory for Gen3+ (Radu Rendec) [RHEL-34056]
  - i2c: riic: avoid potential division by zero (Radu Rendec) [RHEL-34056]
  - i2c: rcar: remove open coded DIV_ROUND_CLOSEST (Radu Rendec) [RHEL-34056]
  - i2c: rcar: calculate divider instead of brute-forcing it (Radu Rendec) [RHEL-34056]
  - i2c: rcar: properly format a debug output (Radu Rendec) [RHEL-34056]
  - i2c: rcar: avoid non-standard use of goto (Radu Rendec) [RHEL-34056]
  - i2c: rcar: use flags instead of atomic_xfer (Radu Rendec) [RHEL-34056]
  - i2c: rcar: REP_AFTER_RD is not a persistent flag (Radu Rendec) [RHEL-34056]
  - i2c: rcar: use BIT macro consistently (Radu Rendec) [RHEL-34056]
  - i2c: rcar: refactor handling of first message (Radu Rendec) [RHEL-34056]
  - i2c: rcar: avoid race condition with SMIs (Radu Rendec) [RHEL-34056]
  - i2c: rcar: fix PM ref counts in probe error paths (Radu Rendec) [RHEL-34056]
  - i2c: rcar: add support for I2C_M_RECV_LEN (Radu Rendec) [RHEL-34056]
  - i2c: rcar: Add R-Car Gen4 support (Radu Rendec) [RHEL-34056]
  - dt-bindings: i2c: renesas,rcar-i2c: Add r8a779f0 support (Radu Rendec) [RHEL-34056]
  - i2c: rcar: update to new DMAENGINE API when terminating (Radu Rendec) [RHEL-34056]
  - i2c: rcar: enable interrupts before starting transfer (Radu Rendec) [RHEL-34056]
  - treewide: rename pinctrl_gpio_free_new() (Radu Rendec) [RHEL-34056]
  - treewide: rename pinctrl_gpio_request_new() (Radu Rendec) [RHEL-34056]
  - gpio: rcar: use new pinctrl GPIO helpers (Radu Rendec) [RHEL-34056]
  - gpio: rcar: Make the irqchip immutable (Radu Rendec) [RHEL-34056]
  - gpio: rcar: Add R-Car Gen4 support (Radu Rendec) [RHEL-34056]
  - dt-bindings: gpio: renesas,rcar-gpio: Add r8a779f0 support (Radu Rendec) [RHEL-34056]
  - gpio: rcar: Move PM device over to irq domain (Radu Rendec) [RHEL-34056]
  - irqchip/renesas-irqc: Move PM device over to irq domain (Radu Rendec) [RHEL-34056]
  - irqchip/renesas-intc-irqpin: Move PM device over to irq domain (Radu Rendec) [RHEL-34056]
  - gpio: rcar: Propagate errors from devm_request_irq() (Radu Rendec) [RHEL-34056]
  - gpio: rcar: Use platform_get_irq() to get the interrupt (Radu Rendec) [RHEL-34056]
  - gpio: ts5500: Use platform_get_irq() to get the interrupt (Radu Rendec) [RHEL-34056]
  - gpio: rcar: Always use local variable dev in gpio_rcar_probe() (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: use new pinctrl GPIO helpers (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: gpio: Use dynamic GPIO base if no function GPIOs (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: Add missing header(s) (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: checker: Check drive pin conflicts (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: checker: Check bias pin conflicts (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: checker: Validate I/O voltage configs consistency (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: checker: Validate drive strength configs consistency (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: checker: Validate bias configs consistency (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: checker: Add pin group sharing checks (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: checker: Simplify same_name() (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: Pass sh_pfc_soc_info to rcar_pin_to_bias_reg() (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: Factor out .pin_to_portcr() address handling (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: Remove unused pfc parameter from .pin_to_pocctrl() (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: checker: Prefix common checker output (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: checker: Fix bias checks on SoCs with pull-down only pins (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: checker: Move overlapping field check (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: checker: Fix off-by-one bug in drive register check (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: Fix save/restore on SoCs with pull-down only pins (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: No need to initialise global statics (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: Add generic support for resizable buses (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: Add generic support for pin group subsets (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: Rename SH_PFC_PIN_GROUP{,_ALIAS} args (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: Reformat macros defining struct initializers (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: Rename sh_pfc_soc_operations instances (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a77995: Add bias pinconf support (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: rcar: Avoid changing PUDn when disabling bias (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a779f0: Fix tsn1_avtp_pps pin group (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a779f0: Remove unused POC2 (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a779f0: Fix GPIO function on I2C-capable pins (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a779a0: Fix GPIO function on I2C-capable pins (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a779f0: Add Ethernet pins, groups, and functions (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a779f0: Add QSPI pins, groups, and functions (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a779f0: Add PCIe pins, groups, and function (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a779f0: Add MSIOF pins, groups, and functions (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a779f0: Add MMC pins, groups, and function (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a779f0: Add INTC-EX pins, groups, and function (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a779f0: Add HSCIF pins, groups, and functions (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a779f0: Add I2C pins, groups, and functions (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: r8a779f0: Add SCIF pins, groups, and functions (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: Initial R8A779F0 PFC support (Radu Rendec) [RHEL-34056]
  - pinctrl: renesas: Add PORT_GP_CFG_19 macros (Radu Rendec) [RHEL-34056]
  - drivers/thermal/rcar_gen3_thermal: add reading fuses for Gen4 (Radu Rendec) [RHEL-34056]
  - drivers/thermal/rcar_gen3_thermal: refactor reading fuses into seprarate function (Radu Rendec) [RHEL-34056]
  - drivers/thermal/rcar_gen3_thermal: introduce 'info' structure (Radu Rendec) [RHEL-34056]
  - thermal/drivers/rcar_gen3_thermal: Remove R-Car H3 ES1.* handling (Radu Rendec) [RHEL-34056]
  - thermal/drivers/rcar_gen3_thermal: Fix device initialization (Radu Rendec) [RHEL-34056]
  - thermal/drivers/rcar_gen3_thermal: Create device local ops struct (Radu Rendec) [RHEL-34056]
  - thermal/drivers/rcar_gen3_thermal: Do not call set_trips() when resuming (Radu Rendec) [RHEL-34056]
  - thermal/drivers/rcar_gen3: Add support for R-Car V4H (Radu Rendec) [RHEL-34056]
  - dt-bindings: thermal: rcar-gen3-thermal: Add r8a779g0 support (Radu Rendec) [RHEL-34056]
  - dt-bindings: thermal: rcar-gen3-thermal: Add r8a779f0 support (Radu Rendec) [RHEL-34056]
  - dt-bindings: thermal: rcar-gen3-thermal: use positive logic (Radu Rendec) [RHEL-34056]
  - dt-bindings: Drop redundant 'maxItems/minItems' in if/then schemas (Radu Rendec) [RHEL-34056]
  - thermal/drivers/rcar_gen3: Use the generic function to get the number of trips (Radu Rendec) [RHEL-34056]
  - thermal/drivers/rcar: Switch to new of API (Radu Rendec) [RHEL-34056]
  - drivers/thermal/rcar_gen3_thermal: Improve logging during probe (Radu Rendec) [RHEL-34056]
  - thermal/drivers/rcar_gen3_thermal: Add r8a779f0 support (Radu Rendec) [RHEL-34056]
  - thermal: rcar_gen3_thermal: Read calibration from hardware (Radu Rendec) [RHEL-34056]
  - thermal: rcar_gen3_thermal: Store thcode and ptat in priv data (Radu Rendec) [RHEL-34056]
  - thermal/drivers/rcar_gen3_thermal: Store TSC id as unsigned int (Radu Rendec) [RHEL-34056]
  - thermal/drivers/rcar_gen3_thermal: Add support for hardware trip points (Radu Rendec) [RHEL-34056]
  - watchdog: renesas_wdt: Add R-Car Gen4 support (Radu Rendec) [RHEL-34056]
  - dt-bindings: watchdog: renesas-wdt: Document r8a779f0 support (Radu Rendec) [RHEL-34056]
  - clocksource/drivers/sh_cmt: Access registers according to spec (Radu Rendec) [RHEL-34056]
  - clocksource/drivers/sh_cmt: Add R-Car Gen4 support (Radu Rendec) [RHEL-34056]
  - dt-bindings: timer: renesas,cmt: Fix R-Car Gen4 fall-out (Radu Rendec) [RHEL-34056]
  - dt-bindings: timer: renesas,cmt: R-Car V3U is R-Car Gen4 (Radu Rendec) [RHEL-34056]
  - dt-bindings: timer: renesas,cmt: Add r8a779f0 and generic Gen4 CMT support (Radu Rendec) [RHEL-34056]
  - clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel (Radu Rendec) [RHEL-34056]
  - dt-bindings: clock: Add r8a779f0 CPG Core Clock Definitions (Radu Rendec) [RHEL-34056]
  - dt-bindings: power: Add r8a779f0 SYSC power domain definitions (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Correct PFC/GPIO parent clock (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Fix Ethernet Switch clocks (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Fix SCIF parent clocks (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Fix HSCIF parent clocks (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add SASYNCPER internal clock (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Fix SD0H clock name (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add Ethernet Switch clocks (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add MSIOF clocks (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add TMU and parent SASYNC clocks (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add CMT clocks (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add SDH0 clock (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add HSCIF clocks (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add PCIe clocks (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add Z0 and Z1 clock support (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add SDHI0 clock (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add thermal clock (Radu Rendec) [RHEL-34056]
  - clk: renesas: rcar-gen4: Add CLK_TYPE_GEN4_PLL4 (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add UFS clock (Radu Rendec) [RHEL-34056]
  - clk: renesas: Move RPC core clocks (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add PFC clock (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add I2C clocks (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add WDT clock (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Fix RSW2 clock divider (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779f0: Add SYS-DMAC clocks (Radu Rendec) [RHEL-34056]
  - clk: renesas: cpg-mssr: Add support for R-Car S4-8 (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a77995: Add RPC clocks (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a77990: Add RPC clocks (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779a0: Add CANFD module clock (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779a0: Fix SD0H clock name (Radu Rendec) [RHEL-34056]
  - clk: renesas: rcar-gen4: Introduce R-Car Gen4 CPG driver (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: Parse DT for SDnH (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: Use dev_err_probe when getting clock fails (Radu Rendec) [RHEL-34056]
  - clk: renesas: rcar-gen3: Remove outdated SD_SKIP_FIRST (Radu Rendec) [RHEL-34056]
  - clk: renesas: rcar-gen3: Extend SDnH divider table (Radu Rendec) [RHEL-34056]
  - clk: renesas: rcar-gen3: Switch to new SD clock handling (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: Flag non-standard SDnH handling for V3M (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779a0: Add SDnH clock to V3U (Radu Rendec) [RHEL-34056]
  - clk: renesas: rcar-gen3: Add SDnH clock (Radu Rendec) [RHEL-34056]
  - clk: renesas: rcar-gen3: Add dummy SDnH clock (Radu Rendec) [RHEL-34056]
  - mmc: renesas_sdhi: Refactor renesas_sdhi_probe() (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779a0: Add RPC support (Radu Rendec) [RHEL-34056]
  - clk: renesas: cpg-lib: Move RPC clock registration to the library (Radu Rendec) [RHEL-34056]
  - clk: renesas: r8a779a0: Add Z0 and Z1 clock support (Radu Rendec) [RHEL-34056]
  - pmdomain: Rename the genpd subsystem to pmdomain (Radu Rendec) [RHEL-34056]
  - soc: renesas: Move power-domain drivers to the genpd dir (Radu Rendec) [RHEL-34056]
  - soc: renesas: rcar-rst: Add support for R-Car S4-8 (Radu Rendec) [RHEL-34056]
  - soc: renesas: Identify R-Car S4-8 (Radu Rendec) [RHEL-34056]
  - soc: renesas: r8a779f0-sysc: Add r8a779f0 support (Radu Rendec) [RHEL-34056]
  - soc: renesas: rcar-gen4-sysc: Introduce R-Car Gen4 SYSC driver (Radu Rendec) [RHEL-34056]
  - soc: renesas: Prefer memcpy() over strcpy() (Radu Rendec) [RHEL-34056]
  - PM / devfreq: Synchronize devfreq_monitor_[start/stop] (Alessandro Carminati) [RHEL-31337] {CVE-2023-52635}
  - redhat/configs: enable CONFIG_LEDS_TRIGGER_NETDEV also for RHEL (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: Fix kernel panic on interface rename trig notify (Michal Schmidt) [RHEL-32110]
  - leds: trigger: panic: Simplify led_trigger_set_panic (Michal Schmidt) [RHEL-32110]
  - leds: triggers: default-on: Add module alias for module auto-loading (Michal Schmidt) [RHEL-32110]
  - leds: trigger: audio: Set module alias for module auto-loading (Michal Schmidt) [RHEL-32110]
  - Documentation: leds: Update led-trigger-tty ABI description (Michal Schmidt) [RHEL-32110]
  - docs: ABI: sysfs-class-led-trigger-netdev: Document now hidable link_* (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: Display only supported link speed attribute (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: Add module alias ledtrig:netdev (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: Skip setting baseline state in activate if hw-controlled (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: Add core support for hw not supporting fallback to LED sw control (Michal Schmidt) [RHEL-32110]
  - leds: trigger: panic: Don't register panic notifier if creating the trigger failed (Michal Schmidt) [RHEL-32110]
  - leds: trigger: Remove unused function led_trigger_rename_static() (Michal Schmidt) [RHEL-32110]
  - leds: ledtrig-tty: Add additional line state evaluation (Michal Schmidt) [RHEL-32110]
  - leds: ledtrig-tty: Make rx tx activitate configurable (Michal Schmidt) [RHEL-32110]
  - leds: ledtrig-tty: Replace mutex with completion (Michal Schmidt) [RHEL-32110]
  - leds: ledtrig-tty: Free allocated ttyname buffer on deactivate (Michal Schmidt) [RHEL-32110]
  - leds: trigger: gpio: Convert to DEVICE_ATTR_RW() (Michal Schmidt) [RHEL-32110]
  - leds: trigger: gpio: Use sysfs_emit() to instead of s*printf() (Michal Schmidt) [RHEL-32110]
  - leds: trigger: gpio: Convert to use kstrtox() (Michal Schmidt) [RHEL-32110]
  - leds: trigger: gpio: Replace custom code for gpiod_get_optional() (Michal Schmidt) [RHEL-32110]
  - docs: ABI: sysfs-class-led-trigger-netdev: Add new modes and entry (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: Extend speeds up to 10G (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: fix RTNL handling to prevent potential deadlock (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: Move size check in set_device_name (Michal Schmidt) [RHEL-32110]
  - leds: triggers: gpio: Rewrite to use trigger-sources (Michal Schmidt) [RHEL-32110]
  - leds: Mark GPIO LED trigger broken (Michal Schmidt) [RHEL-32110]
  - leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: rename 'hw_control' sysfs entry to 'offloaded' (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: Use module_led_trigger macro to simplify the code (Michal Schmidt) [RHEL-32110]
  - leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (Michal Schmidt) [RHEL-32110]
  - leds: trig-netdev: Disable offload on deactivation of trigger (Michal Schmidt) [RHEL-32110]
  - led: trig: netdev: Fix requesting offload device (Michal Schmidt) [RHEL-32110]
  - docs: ABI: sysfs-class-led-trigger-netdev: add new modes and entry (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: expose hw_control status via sysfs (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: add additional specific link duplex mode (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: add additional specific link speed mode (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: uninitialized variable in netdev_trig_activate() (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: expose netdev trigger modes in linux include (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: init mode if hw control already active (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: validate configured netdev (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: add support for LED hw control (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: reject interval store for hw_control (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: add basic check for hw control support (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: introduce check for possible hw control (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: refactor code setting device name (Michal Schmidt) [RHEL-32110]
  - leds: add API to get attached device for LED hw control (Michal Schmidt) [RHEL-32110]
  - leds: add APIs for LEDs hw control (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: Remove NULL check before dev_{put, hold} (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: Use mutex instead of spinlocks (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: Convert device attr to macro (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: Rename add namespace to netdev trigger enum modes (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: Drop NETDEV_LED_MODE_LINKUP from mode (Michal Schmidt) [RHEL-32110]
  - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (Michal Schmidt) [RHEL-32110]
  - leds: use sysfs_emit() to instead of scnprintf() (Michal Schmidt) [RHEL-32110]
  - leds: trigger: Disable CPU trigger on PREEMPT_RT (Michal Schmidt) [RHEL-32110]
  - leds: trigger: remove reference to obsolete CONFIG_IDE_GD_ATA (Michal Schmidt) [RHEL-32110]
  - leds: trigger: audio: Add an activate callback to ensure the initial brightness is set (Michal Schmidt) [RHEL-32110]
  - bus: fsl-mc: Use common ranges functions (Aaron Brookner) [RHEL-32995]
  - of/address: Add of_property_read_reg() helper (Aaron Brookner) [RHEL-32995]
  - of/address: Add of_range_count() helper (Aaron Brookner) [RHEL-32995]
  - of/address: Add support for 3 address cell bus (Aaron Brookner) [RHEL-32995]
  - of/address: Add of_range_to_resource() helper (Aaron Brookner) [RHEL-32995]
  - of: unittest: Add bus address range parsing tests (Aaron Brookner) [RHEL-32995]
  - of/platform: use of_address_count() helper (Aaron Brookner) [RHEL-32995]
  - of/address: introduce of_address_count() helper (Aaron Brookner) [RHEL-32995]
  - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30522]
  - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30522]
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30522]
  - arm64: dts: qcom: sa8775p: enable safety IRQ (Jennifer Berringer) [RHEL-31771]
  - mptcp: fix potential wake-up event loss (Davide Caratti) [RHEL-32669]
  - mptcp: prevent BPF accessing lowat from a subflow socket. (Davide Caratti) [RHEL-32669]
  - mptcp: don't account accept() of non-MPC client as fallback to TCP (Davide Caratti) [RHEL-32669]
  - mptcp: don't overwrite sock_ops in mptcp_is_tcpsk() (Davide Caratti) [RHEL-32669]
  - mptcp: fix possible deadlock in subflow diag (Davide Caratti) [RHEL-32669] {CVE-2024-26781}
  - mptcp: fix snd_wnd initialization for passive socket (Davide Caratti) [RHEL-32669]
  - mptcp: push at DSS boundaries (Davide Caratti) [RHEL-32669]
  - mptcp: avoid printing warning once on client side (Davide Caratti) [RHEL-32669]
  - mptcp: map v4 address to v6 when destroying subflow (Davide Caratti) [RHEL-32669]
  - mptcp: fix duplicate subflow creation (Davide Caratti) [RHEL-32669]
  - mptcp: fix data races on remote_id (Davide Caratti) [RHEL-32669]
  - mptcp: fix data races on local_id (Davide Caratti) [RHEL-32669]
  - mptcp: fix lockless access in subflow ULP diag (Davide Caratti) [RHEL-32669]
  - mptcp: add needs_id for netlink appending addr (Davide Caratti) [RHEL-32669]
  - mptcp: add needs_id for userspace appending addr (Davide Caratti) [RHEL-32669]
  - mptcp: really cope with fastopen race (Davide Caratti) [RHEL-31604 RHEL-32669] {CVE-2024-26708}
  - mptcp: check addrs list in userspace_pm_get_local_id (Davide Caratti) [RHEL-32669]
  - mptcp: corner case locking for rx path fields initialization (Davide Caratti) [RHEL-32669]
  - mptcp: fix more tx path fields initialization (Davide Caratti) [RHEL-32669]
  - mptcp: fix rcv space initialization (Davide Caratti) [RHEL-32669]
  - mptcp: drop the push_pending field (Davide Caratti) [RHEL-32669]
  - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-32669] {CVE-2024-26826}
  - mptcp: relax check on MPC passive fallback (Davide Caratti) [RHEL-32669]
  - mptcp: refine opt_mp_capable determination (Davide Caratti) [RHEL-32669]
  - mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req() (Davide Caratti) [RHEL-32669]
  - mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (Davide Caratti) [RHEL-32669]
  - mptcp: strict validation before using mp_opt->hmac (Davide Caratti) [RHEL-32669]
  - mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN (Davide Caratti) [RHEL-32669]
  - mptcp: fix setsockopt(IP_TOS) subflow locking (Davide Caratti) [RHEL-32669]
  - net: openvswitch: fix unwanted error log on timeout policy probing (Antoine Tenart) [RHEL-32143]
  - net: openvswitch: Annotate struct mask_array with __counted_by (Antoine Tenart) [RHEL-32143]
  - net: openvswitch: Annotate struct dp_meter with __counted_by (Antoine Tenart) [RHEL-32143]
  - net: openvswitch: Annotate struct dp_meter_instance with __counted_by (Antoine Tenart) [RHEL-32143]
  - x86/nmi: Fix the inverse "in NMI handler" check (Prarit Bhargava) [RHEL-30106]
  - powerpc/pseries/papr-sysparm: use u8 arrays for payloads (Mamatha Inamdar) [RHEL-10565]
  - powerpc/selftests: Add test for papr-sysparm (Mamatha Inamdar) [RHEL-10565]
  - powerpc/selftests: Add test for papr-vpd (Mamatha Inamdar) [RHEL-10565]
  - powerpc/pseries/papr-sysparm: Expose character device to user space (Mamatha Inamdar) [RHEL-10565]
  - powerpc/pseries/papr-sysparm: Validate buffer object lengths (Mamatha Inamdar) [RHEL-10565]
  - powerpc/pseries: Add papr-vpd character driver for VPD retrieval (Mamatha Inamdar) [RHEL-10565]
  - powerpc/pseries: PAPR system parameter API (Mamatha Inamdar) [RHEL-10565]
  - powerpc/pseries: add RTAS work area allocator (Mamatha Inamdar) [RHEL-10565]
  - powerpc/rtas: clean up includes (Mamatha Inamdar) [RHEL-10565]
  - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27780 RHEL-27781] {CVE-2022-48627}


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-2
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "Staat der Nederlanden Root CA - G2"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-6
changelog:
  - remove unnecessarily divisive terms, take 1.
  -   in ca-certificates there are 3 cases:
  -   1) master refering to the fedora master branch in the fetch.sh script.
  -      This can only be changed once fedora changes the master branch name.
  -   2) a reference to the 'master bundle' in this file: this has been changed
  -      to 'primary bundle'.
  -   3) a couple of blacklist directories owned by this package, but used to
  -      p11-kit. New 'blocklist' directories have been created, but p11-kit
  -      needs to be updated before the old blacklist directories can be removed
  -      and the man pages corrected.


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.50-90
changelog:
  -   Update to CKBI 2.50 from NSS 3.67
  -      Removing:
  -       # Certificate "QuoVadis Root CA"
  -       # Certificate "Sonera Class 2 Root CA"
  -       # Certificate "Trustis FPS Root CA"
  -      Adding:
  -       # Certificate "GLOBALTRUST 2020"
  -       # Certificate "ANF Secure Server Root CA"
  -       # Certificate "Certum EC-384 CA"
  -       # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-90.0
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-4
changelog:
  - Add Pull request #18
  - Replaces kerberos with gssapi
  - Replaces requests_kerberos with requests_gssapi


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-5
changelog:
  - Add Pull request #19
  - Remove Pull request #17 as it is not accepted
  - Review comment #13, #14 addressed


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: Miroslav Lichvar <mlichvar@redhat.com> 4.0-0.8.pre3
changelog:
  - update to 4.0-pre3
  - switch to sourcedir directive for loading servers from DHCP
  - add NetworkManager dispatcher script to save servers from DHCP when
    dhclient is not installed (Robert Fairley)
  - drop old migration code from scriptlet
  - move default paths in /var/run to /run


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Add BuildRequires: make
  - drop dnssrv service and timer


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2051441)
  - fully switch from nettle to gnutls (#1953463 #1954483)
  - use NTP servers from DHCPv6 NTP server option (#2047415)
  - drop obsolete workaround in scriptlet


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-1
changelog:
  - update to 4.5 (RHEL-6522 RHEL-6520 RHEL-9969 RHEL-9971 RHEL-9973 RHEL-9975
    RHEL-12411)
  - add chronyd-restricted service (RHEL-9972)


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Packit <hello@packit.dev> - 312-1
changelog:
  - Accounts: support lastlog2 and make the page faster
  - Storage: Various Anaconda mode fixes
  - Fix package build if cockpit-bridge package is installed


author: Packit <hello@packit.dev> - 314-1
changelog:
  - Diagnostic reports: Fix command injection vulnerability with crafted report names
  - Storage: Improvements to read-only encrypted filesystems


author: Kamil Dudka <kdudka@redhat.com> - 8.32-22
changelog:
  - weaken the dependency on glibc-doc to reduce minimal installations
  - drop the last use of ncurses no longer needed (#1830318)
  - utimens: fix confusing arg type in internal func


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
changelog:
  - openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
  - update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
  - fips-mode-setup: catch more inconsistencies, clarify --check


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220404-1.git845c0c1
changelog:
  - DEFAULT: drop DNSSEC SHA-1 exception
  - openssh: add support for sntrup761x25519-sha512@openssh.com


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230731-1.git94f0e2c
changelog:
  - krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  - FIPS: enforce EMS in FIPS mode
  - NO-ENFORCE-EMS: add subpolicy to undo the EMS enforcement in FIPS mode
  - nss: implement EMS enforcement in FIPS mode (disabled in ELN)
  - openssl: implement EMS enforcement in FIPS mode
  - gnutls: implement EMS enforcement in FIPS mode (disabled in ELN)
  - docs: replace `FIPS 140-2` with just `FIPS 140`


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230920-1.git8dcf74d
changelog:
  - OSPP subpolicy: tighten beyond reason for OSPP 4.3
  - fips-mode-setup: more thorough --disable, still unsupported


author: Alexander Sosedkin <asosedkin@redhat.com> - 20231016-1.git77ceb0b
changelog:
  - openssl: fix SHA1 and NO-ENFORCE-EMS interaction
  - bind: fix a typo that led to duplication of ECDSAPxxxSHAxxx


author: Clemens Lang <cllang@redhat.com> - 20231108-1.git994ae09
changelog:
  - turn ssh_etm into an etm@SSH tri-state (RHEL-15925)
  - fips-mode-setup: increase chroot-friendliness (RHEL-11350)
  - fips-mode-setup: Fix usage with --no-bootcfg (RHEL-11350)


author: Clemens Lang <cllang@redhat.com> - 20231109-1.git0ceff7f
changelog:
  - Restore support for scoped ssh_etm directives (RHEL-15925)
  - Print matches in syntax deprecation warnings (RHEL-15925)


author: Clemens Lang <cllang@redhat.com> - 20231113-1.gite9247c2
changelog:
  - fips-mode-setup: Fix test for empty /boot (RHEL-11350)
  - fips-mode-setup: Avoid 'boot=UUID=' if /boot == / (RHEL-11350)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240202-1.git283706d
changelog:
  - fips-finish-install: make sure ostree is detected in chroot
  - fips-mode-setup: make sure ostree is detected in chroot
  - fips-finish-install: Create/remove /etc/system-fips on ostree systems
  - java: disable ChaCha20-Poly1305 where applicable


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240304-1.gitb1c706d
changelog:
  - packaging: remove perl build-dependency, it's not needed anymore
  - packaging: use newly introduced SKIP_LINTING=1
  - packaging: drop stale workarounds


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Daniel Zatovic <dzatovic@redhat.com> - 2.7.2-1
changelog:
  - Update to cryptsetup 2.7.2
  - Use OpenSLL Argon implementation instead of the built-in one
  - Resolves: RHEL-32377


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - 2217177 - Delays printing to lpd when reserved ports are exhausted
  - 2217284 - The command "cancel -x <job>" does not remove job files
  - 2217954 - Enlarge backlog queue for listen() in cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-23
changelog:
  - RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
  - RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jakub Martisko <jamartis@redhat.com> - 28-6
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-2
changelog:
  - Exit with error when --devicesfile used does not exist.
  - Restore --reportformat option in pvdisplay.
  - Improve multipath backlist option handling.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-3
changelog:
  - Fix effect of setting multipath_component_detection to 0.
  - Fix lvmdbusd using lvm shell with editline.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-4
changelog:
  - Fix missing warning on thin pool over provisioning.
  - Fix infinite recursion in lvresize_fs_helper when resizing LUKS device.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-5
changelog:
  - Fix vgimportclone fail if PV has no metadata.
  - Fix lvmdbusd missing stderr for commands not returning JSON.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-11
changelog:
  - Add 0059-multipathd-Add-missing-ctype-include.patch
  - Add 0060-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119896


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-13
changelog:
  - Add 0062-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  - Add 0063-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  - Add 0064-multipathd-Handle-losing-all-path-in-update_map.patch
  - Resolves: bz #2125357


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-14
changelog:
  - Add 0065-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133999
  - Add 0066-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133989
  - Resolves: bz #2133989, #2133999


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-15
changelog:
  - Add 0067-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2141860
  - Add 0068-libmultipath-cleanup-remove_feature.patch
  - Add 0069-libmultipath-cleanup-add_feature.patch
  - Add 0070-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0071-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0072-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0073-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0074-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0075-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2033080
  - Resolves: bz #2033080, #2141860


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-17
changelog:
  - Add 0077-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0078-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2145225


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-18
changelog:
  - Add 0079-libmultipath-use-select_reload_action-in-select_acti.patch
  - Add 0080-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0081-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0082-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-19
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162536)
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-20
changelog:
  - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch
  - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch
  - Change how the installation dir for kpartx_id is specified
  - Resolves: bz #1926147


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-21
changelog:
  - Add 0085-multipathd-make-pr-registration-consistent.patch
  - Add 0086-libmultipath-make-prflag-an-enum.patch
  - Add 0087-multipathd-handle-no-active-paths-in-update_map_pr.patch
  - Add 0088-libmpathpersist-fix-resource-leak-in-update_map_pr.patch
  - Resolves: bz #2164869


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-22
changelog:
  - Add 0089-RH-Add-mpathcleanup.patch
    * Fixes RHEL-782
  - Add 0090-RH-make-listing-return-an-error-if-the-config-file-i.patch
  - Install mpathcleanup
    * Fixes RHEL-781
  - Resolves: #781, #782


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-23
changelog:
  - Add 0091-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch
    * Fixes RHEL-6678 (Add support in multipathd for NVMe to listen for FPIN-Li
      events and mark effected paths as marginal)
  - Add 0092-multipath-tools-add-HPE-Alletra-9000-NVMe-to-hardwar.patch
    * Fixes RHEL-1830 (Changes to Arcus NVMeoFC multipath.conf settings for RHEL
      9.x to be included in kernel by default)
  - Resolves: RHEL-6678
  - Resolves: RHEL-1830


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-24
changelog:
  - Add 0093-RH-multipath-add-mpathcleanup-man-page.patch
    * Fixes RHEL-1266 ("There is no man page for mpathcleanup")
  - Resolves: RHEL-1266


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-25
changelog:
  - Add 0094-libmultipath-Add-max_retries-config-option.patch
    * Fixes RHEL-1729 ("Allow multipathd to set the max_retries of the
      scsi_device for paths")
  - Add 0095-libmutipath-Retain-device-size-if-sysfs_get_size-fai.patch
  - Add 0096-multipathd-check-and-update-all-paths-when-in-cli_re.patch
  - Add 0097-multipathd-move-post-reloading-commands-into-resize_.patch
  - Add 0098-multipathd-move-resize_map-to-multipathd-main.c.patch
  - Add 0099-multipathd-Add-auto_resize-config-option.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986
  - Resolves: RHEL-1729


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-26
changelog:
  - Add 0100-libmultipath-avoid-temporarily-enabling-queueing-on-.patch
  - Add 0101-multipathd-Make-sure-to-disable-queueing-if-recovery.patch
    * Fixes RHEL-17234 ("RHEL9 dm-multipath no_path_retry [retry number] is
      undone if paths are later lost for an open map.")
  - Add 0102-multipathd-remove-nopath-flushing-code-from-flush_ma.patch
  - Add 0103-multipathd-make-flush_map-delete-maps-like-the-multi.patch
  - Add 0104-multipathd-disable-queueing-when-removing-unknown-ma.patch
    * Fixes RHEL-4998 ("When remove external lun from host, rescan lun status
      will cause the OS hang and no response")
  - Resolves: RHEL-4998
  - Resolves: RHEL-17234


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-27
changelog:
  - Add 0105-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
  - Add 0106-multipathd-fix-auto-resize-configuration.patch
  - Add 0107-libmultipath-fix-displaying-auto_resize-config-setti.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-2
changelog:
  - Allow non-zero values in unused index block entries.
  - Fix boundary check on the bitset for cached blocks.
  - Fix incorrect index_entry.nr_free on expansion affecting free space estimate.
  - Fix thin_repair checking keys on a node with a zero key.
  - Enhance error message in cache_check suggesting fix when applicable.


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.2-18.b1
changelog:
  - Fix for CVE-2022-2928
  - Fix for CVE-2022-2929
  - Use systemd-sysusers for dhcp user and group (#2095396)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.14.0-1
changelog:
  - Update to 4.14.0
  - Add doc related to --destdir and --downloadonly options (RhBug:2100811)
  - Fix broken dependencies error reporting (RhBug:2088422)
  - Add support for group upgrade rollback (RhBug:2016070)
  - Expose plugin unload method to API (RhBug:2047251)
  - Fix upgrade from file to noarch pkg (RhBug:2006018)
  - Allow passing plugin parameters with dashes in names (RhBug:1980712)
  - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421)
  - Add only relevant pkgs to upgrade transaction (RhBug:2097757)
  - doc: Describe how gpg keys are stored for `repo_ggpcheck` (RhBug:2020678)
  - bash-completion: use sqlite cache when available


author: Nicola Sella <nsella@redhat.com> - 4.14.0-3
changelog:
  - Move system-upgrade plugin to core (RhBug:2131288)
  - offline-upgrade: add support for security filters (RhBug:1939975,2139326)
  - Fix plugins unit tests + unload plugins upon their deletion


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-6
changelog:
  - Add reboot option to DNF Automatic (RhBug:2124793)
  - Omit src RPMs from check-update (RhBug:2151910,2203069)
  - automatic: Fix online detection with proxy (RhBug:2022440,2189851)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-8
changelog:
  - Return an error when transaction fails (RhBug:2170093,2212262)
  - Document symbols in `dnf history list` output (RhBug:2172067,2218113)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-9
changelog:
  - Fix japanese translations (RHEL-11345)
  - Fix substitution in kay-value-pair list in add_new_repo (RHEL-6396)
  - base: Add obsoleters of only latest versions (RHEL-6304)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-11
changelog:
  - Fix handling an installation reason of install-only packages on autoremove
    (RHEL-15902)
  - Fix dnf-automatic service to apply security updates the same way as dnf tool
    (RHEL-21874)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-3
changelog:
  - Don't recommend python3-unbound (RhBug:1947925)
  - Recommend rpm-plugin-systemd-inhibit only if systemd (RhBug:1947924)
  - Don't recommend /usr/bin/sqlite3 for bash-completion (RhBug:1947924)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.12.0-1
changelog:
  - Allow destdir option with modulesync command
  - Add documentation for query api flags (RhBug:2035577)
  - Fix swap command to work with local rpm files correctly (RhBug:2036434)
  - Fix regression in verifying signatures using rpmkeys
  - Fix decompression of groups.xml (RhBug:2030255)
  - Fix history undo on a Reason Change (RhBug:2010259,2053014)
  - Remove /usr/bin from sys.path to avoid accidentally importing garbage
  - Fix python3.11 build: remove deprecated, update traceback regex
  - fix dnf mark error when history sqlite missing
  - [doc] clarify effect of --enablerepo and --disablerepo options (RhBug:2031414)
  - [doc] default values for module_obsoletes and module_stream_switch (RhBug: 2051846)
  - dnf.conf: hint users where to find more info about defaults and other options
  - Fix unittests that relied on checksum being at the end of solvfiles
  - completion: remove unnecessary echo
  - Fix remove when no repos are enabled (RhBug:2064341)
  - Add loongarch support for dnf
  - Add spaces between words to fix typos (RhBug:2077296)
  - [doc] Improve "proxy" configuration option documentation (RhBug:2072332)
  - Fix download errors handling in non-english locales (RhBug:2024527)


author: Nicola Sella <nsella@redhat.com> - 4.3.0-2
changelog:
  - Move system-upgrade plugin to core (RhBug:2054235)
  - offline-upgrade: add support for security filters (RhBug:1939975)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-6
changelog:
  - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157)
  - system-upgrade: Add --poweroff option to reboot subcommand (RhBug:2157844)
  - Doc update for reposync (RhBug:2132383,2182004)
  - reposync: Implement --safe-write-path option (RhBug:1898089,2203766)
  - Enable the leaves and show-leaves DNF plugins (RhBug:2134638)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-7
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2207946)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-12
changelog:
  - Fix incorrect spanish translation file (RHEL-6394)
  - Fix for strange issue with binary garbage in smaps files (RHEL-6420, RhBug:2231923)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.3.0-1
changelog:
  - Update to 4.3.0
  - [config-manager] Update documentation (RhBug:2075366)
  - [builddep] Warning when using macros with source rpms (RhBug:2077820)
  - [repomanage] Use modules only from repo they are handling (RhBug:2072441)
  - Skip all non rpm transaction items for transaction_action plugins (rhbug:2023652)
  - feat(repomanage): Add new option --oldonly


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Pavel Valena <pvalena@redhat.com> - 057-10.git20220721
changelog:
  - fix(dracut.sh): do not fail on irregular files
  - fix(98dracut-systemd): partly revert "emergency mode: use


author: Pavel Valena <pvalena@redhat.com> - 057-13.git20220816
changelog:
  - fix(kernel-modules): always include nvmem driver on
  - fix(drm): add video drivers needed on hyper-v and similar
  - fix(skipcpio): ignore broken pipe


author: Pavel Valena <pvalena@redhat.com> - 057-20.git20221213
changelog:
  - refactor(url-lib): write curl output directly to file
  - fix(dracut-initramfs-restore.sh): initramfs detection not
  - fix(90kernel-modules): install blk modules using symbol
  - fix(squash): build ld cache for squash loader
  - test(16-DMSQUASH): make it pass on arch
  - feat(dmsquash-live): add new dmsquash-live-autooverlay module


author: Pavel Valena <pvalena@redhat.com> - 057-38.git20230725
changelog:
  - fix(dracut.sh): use dynamically uefi's sections offset
  - fix(dracut.sh): handle imagebase for uefi
  - fix(dracut.sh): use gawk for strtonum
  - fix(rngd): install system service file
  - fix(nvmf): nvme list-subsys prints the address using commas
  - fix(nvmf): don't try to validate network connections in
  - fix(nvmf): no need to load the nvme module
  - fix(nvmf): don't create did-setup file
  - fix(nvmf): don't use "finished" queue for autoconnect
  - fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes
  - fix(nvmf): avoid calling "exit" in a cmdline hook
  - fix(nvmf): run cmdline hook before parse-ip-opts.sh
  - feat(nvmf): set rd.neednet=1 if tcp records encountered
  - fix(nvmf): install 8021q module unconditionally
  - fix(nvmf): support /etc/nvme/config.json
  - feat(nvmf): add code for parsing the NBFT


author: Pavel Valena <pvalena@redhat.com> - 057-43.git20230816
changelog:
  - feat(spec): include modules for IMA
  - fix(dracut): there can be \ at the end on line in awk script
  - fix(rngd): spacing
  - fix(integrity): do not enable EVM if there is no key
  - fix(fips): include openssl's fips.so and openssl.cnf


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.187-5
changelog:
  - rhbz2088774: ship /etc/profile.d/debuginfod* files even without
                 default DEBUGINFOD_URLS.


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 4.7.0-1
changelog:
  - Update to 4.7.0 (#1930632)
  - Align spec syntax with upstream spec file
  - Add 'tcl' to the BuildRequires and remove 'man' from this list
  - Fix names of 'procps-ng' and 'man-db' packages on Fedora
  - Only install manpages through make install, other docs are handled by %doc
  - Remove alternatives mechanism for manpages


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-0.1.alpha
changelog:
  - Update to 5.0.0-alpha (#1989523)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Remove createmodule.sh and createmodule.py utilities ('module sh-to-mod'
    should be used instead)
  - Remove configure options that have been made default starting version 5.0
  - Remove compat subpackage
  - Run non-regression tests in quick mode


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 (#2004402)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Configuration guide example.txt is replaced by more up to date INSTALL.txt
    document


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Pavel Raiskup <praiskup@redhat.com> - 3.14-4
changelog:
  - /proc and /sys made %ghost to allow filesystem package updates in rootless
    container environments (rhbz#1548403)


author: Kamil Dudka <kdudka@redhat.com> - 1:4.7.0-6
changelog:
  - disable -flto on ppc64le to make test-float pass (#1789115)
  - do not compile with -D__SUPPORT_SNAN__ (#1294016)


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Dave Dykstra <dwd@fedoraproject.org> - 2.9.9-7
changelog:
  - Update the Requires: fuse-common >= version to 3.4.2-4 because
    fuse-common > 3.4.2-3 is insufficient to force the new version


author: Richard Hughes <richard@hughsie.com> 1.5.2-1
changelog:
  - New upstream release
  - Add a flag to indicate if packages are supported
  - Add a plugin for the Pinebook Pro laptop
  - Allow components to set the icon from the metadata
  - Fall back to FAT32 internal partitions for detecting ESP
  - Fix detection of ColorHug version on older firmware versions
  - Fix reading BCM57XX vendor and device ids from firmware
  - Fix replugging the MSP430 device
  - Fix sync method when called from threads without a context
  - Ignore an invalid vendor-id when adding releases for display
  - Improve synaptics-mst reliability when writing data
  - Install modules-load configs in the correct directory
  - Notify the service manager when idle-quitting
  - Only download the remote metadata as required
  - Remove HSI update and attestation suffixes
  - Restore recognizing GPG and PKCS7 signature types in libfwupd
  - Set the SMBIOS chassis type to portable if a DT battery exists
  - Switch from libsoup to libcurl for downloading data


author: Richard Hughes <richard@hughsie.com> 1.5.3-1
changelog:
  - New upstream release
  - Add a UEFI quirk for Star Labs Lite Mk III
  - Add the device firmare ID for serio class hardware
  - Allow setting the GMainContext when used for sync methods
  - Allow the client to send legacy PKCS7 and GPG signatures
  - Export the driver name from FuUdevDevice
  - Fix a possible critical warning due to missing retval
  - Fix the endianness for the CRC check in bcm57xx
  - Make sure the correct interface number is used for QMI
  - Mark more user-visible strings as translatable
  - Restrict loading component types of firmware
  - Validate ModemManager firmware update method combinations


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - New upstream release
  - Add Maple Ridge Thunderbolt firmware parsing support
  - Allow creating FMAP and Synaptics firmware using builder.xml
  - Allow using fwupdtool as non-root for firmware commands
  - Do not trust the Block.HintSystem boolean for ESP filtering
  - Fix a memory leak when parsing Synaptics firmware
  - Fix a possible crash when reading the Goodix MOC USB request
  - Fix possible crashes when parsing invalid firmware


author: Richard Hughes <richard@hughsie.com> 1.5.5-1
changelog:
  - New upstream release
  - Add a plugin to update PixArt RF devices
  - Add new hardware to use the elantp and rts54hid plugins
  - Detect the AMD TSME encryption state for HSI-4
  - Detect the AMI PK test key is not installed for HSI-1
  - Fix flashing a fingerprint reader that is in use
  - Fix several critical warnings when parsing invalid firmware
  - Fix updating DFU devices that use DNLOAD_BUSY
  - Ignore the legacy UEFI OVMF dummy GUID
  - Make libfwupd more thread safe to fix a crash in gnome-software
  - Never show unprintable chars from invalid firmware in the logs


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-14
changelog:
  - cipher: add restriction on CCM tag length under FIPS mode (#2137807)
  - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Tom Stellard <tstellar@redhat.com> - 8.40-50
changelog:
  - Use make_build macro instead of plain make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Julien Rische <jrische@redhat.com> - 0.8.4-5
changelog:
  - Add an option for minimum lifetime
  - Resolves: rhbz#2184333
  - Remove unused patch files
  - Fix date typographical error in changelog


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Bruno Meneguele <bmeneg@redhat.com> - 1.3.2-9
changelog:
  - Use upstream accepted patch for the memory leak
  - Make SHA-256 the default hash algorithm (rhbz#1934949)


author: Bruno Meneguele <bmeneg@redhat.com> - 1.4-1
changelog:
  - Modify some pieces to get closer to Fedora's specfile
  - Remove patch handling memory leak: solved in the rebase
  - Remove patch handling SHA-256 default hash: solved in the rebase
  - Rebase to upstream release v1.4 (rhbz#2026028)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.7-4
changelog:
  - Move texlive-tex files to more approriate location again, this
    time in sync with dropping texlive-texinfo from texlive
    Resolves: #1719379


author: Christian Kellner <ckellner@redhat.com> - 49-1
changelog:
  - New upstream release 49
  - Switch to meson build system.
  - Ship the pkg-config file.
  - Remove ldconfig scriptlets.


author: Jan Macku <jamacku@redhat.com> - 10.05-1
changelog:
  - service: Prevent variables from globbing
  - init.d/functions: Make usage msgs more clear
  - network-scripts: Use net_log() instead of logger
  - Allow updating rfkill switch status while in readonly root mode
  - Add info into specfile about readonly-root deprecation
  - Allow updating mlocate.db while in readonly root mode
  - rc.d/functions: replace grep's --quiet with -q
  - Add warning to warn user when ETHTOOL_OPTS is set and ethtool binary is missing - Olav Vitters
  - Fix spacing in Makefile
  - Add optional 'dev' keyword


author: Jan Macku <jamacku@redhat.com> - 10.07-1
changelog:
  - doc: Fix "Duplicated string found in the file."
  - doc: Documents RES_OPTIONS option
  - doc: Documents ifcfg option LINKSTATUS
  - ci: use up to date keywords and fix some warnings
  - network: fix set_link_up()
  - network: add option to keep the link down
  - Rework of shell ci
  - Translations update from Weblate


author: Jan Macku <jamacku@redhat.com> - 10.10-1
changelog:
  - Translated using Weblate (Friulian) (#381)
  - Translations update from Weblate (#378)
  - added veth support
  - ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon
  - ifdown removes veth pair if both peers are down
  - rename_device: also support dracut-style kernel cmdline configuration
  - spec: Mark network-scripts as deprecated
  - spec: Initscripts now requires chkconfig (#374)
  - Translations update from Weblate (#371)
  - spec: Move service script into subpackage
  - ci: Onboard initscripts to Packit
  - ci: Migrate from Travis to GH Actions


author: Jan Macku <jamacku@redhat.com> - 10.11.1-1
changelog:
  - spec: Update relation between initscripts and initscripts-service
  - spec: Replace not working awk command with sed
  - use downstream version style


author: Jan Macku <jamacku@redhat.com> - 10.11.2-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race
  - ci: Update path to csdiff repository (#391)


author: Jan Macku <jamacku@redhat.com> - 10.11.3-1
changelog:
  - Drop unnecessary obsoletes
  - spec: Move rename_device to subpackage `initscripts-rename-device`
  - ci: Update `.packit.yml` to run on `c9s`
  - ci: Use Differential ShellCheck action


author: Andrea Claudi <aclaudi@redhat.com> - 5.13.0-5.el9
changelog:
  - Add build and runtime dependency on libbpf (Andrea Claudi) [1994520]
  - Use TC_LIB_DIR environment variable (Andrea Claudi) [1994545]
  - Re-add iproute-doc package on the specfile (Andrea Claudi) [1994581]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.el9
changelog:
  - tc: add missing separator (Andrea Claudi) [RHEL-337]
  - u32: fix TC_U32_TERMINAL printing (Andrea Claudi) [RHEL-586]


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> - 1.8.7-29
changelog:
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Sutter <psutter@redhat.com> [1.8.10-1.el9]
changelog:
  - spec: Support for _excludedocs macro in alternatives installation (Phil Sutter) [RHEL-5810]
  - Rebase onto version 1.8.10 (Phil Sutter) [RHEL-14147]


author: Phil Sutter <psutter@redhat.com> - 1.8.7-19
changelog:
  - Build iptables-services on C9S only
  - Use systemd_ordering in nft-services, too
  - Drop compat package, nft-services serves well for that purpose
  - Make legacy unconditionally provide iptables, it's not built on RHEL


author: Phil Sutter <psutter@redhat.com> - 1.8.7-25
changelog:
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options
  - nft: Use xtables_malloc() in mnl_err_list_node_add()


author: Phil Cameron <pcameron@redhat.com> - 1.2.1-1
changelog:
  - Makefile: protect mandatory compile flags
  - packet capture: don't reuse socket for multiple receive functions
  - TPACKET_V[23]: continue even if mlock() fails
  - ipmon: fix division by zero
  - fix: detstats(), ifstats(): handle packets with incorrect header checksum
  - fix: positionptr(): properly allocate newly created interfaces
  - fix: detstats(): properly account non-IP packets
  - fix: properly init curses (fixes view on some utf-8 terminals)
  - fix: cidr_split_address(): fix buffer overflow
  - ipmon: printentry(): fix printing of huge values
  - build: use correct libraries (wide version of -lpanel)
  - fix unsafe handling of printf() args (RedHat Bugzilla: 1842690)
  - fix the CPU hog if the interface gets removed (RedHat Bugzilla: 1572750)
  - introduce packet capturing abstraction: add recvmmsg(), TPACKET_V2 and TPACKET_V3 mmap()ed capturing modules: this allow us to capture in multigigabit speeds
  - add partial support for IPoIB interfaces (full support cannot be done because the kernel interface doesn't give us source address) (RedHat Bugzilla: 1140211)
  - merge rvnamed-ng into iptraf-ng
  - allow scrolling with Home, End, PageUp and PageDown keys
  - show dropped packet count
  - pktsize: print in and out counters
  - ifstats: show total packet rate and packet drop across all interfaces
  - ipmon: show OSPF protocol version
  - hostmon, ipmon: update screen only when needed (vastly reduces CPU usage and also reduces packet drops)
  - update source code to compile cleanly on modern gcc
  - numerous code refactoring/cleaning up all over the source tree


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Herton R. Krzesinski <herton@redhat.com> - 20221214-129
changelog:
  - Update to upstream 20221012 release (rhbz 2153045, 2047484).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: updated navi10 firmware for amd-5.4
  - amdgpu: updated yellow carp firmware for amd-5.4
  - amdgpu: updated raven2 firmware for amd-5.4
  - amdgpu: updated raven firmware for amd-5.4
  - amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  - amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  - amdgpu: updated vega20 firmware for amd-5.4
  - amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  - amdgpu: add VCN 4.0.0 firmware for amd-5.4
  - amdgpu: add SMU 13.0.0 firmware for amd-5.4
  - amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  - amdgpu: add PSP 13.0.0 firmware for amd-5.4
  - amdgpu: add GC 11.0.0 firmware for amd-5.4
  - amdgpu: add DCN 3.2.0 firmware for amd-5.4
  - amdgpu: updated vega10 firmware for amd-5.4
  - amdgpu: updated beige goby firmware for amd-5.4
  - amdgpu: updated dimgrey cavefish firmware for amd-5.4
  - amdgpu: updated vangogh firmware for amd-5.4
  - amdgpu: updated picasso firmware for amd-5.4
  - amdgpu: updated navy flounder firmware for amd-5.4
  - amdgpu: updated green sardine firmware for amd-5.4
  - amdgpu: updated sienna cichlid firmware for amd-5.4
  - amdgpu: updated arcture firmware for amd-5.4
  - amdgpu: updated navi14 firmware for amd-5.4
  - amdgpu: updated renoir firmware for amd-5.4
  - amdgpu: updated navi12 firmware for amd-5.4
  - amdgpu: updated aldebaran firmware for amd-5.4
  - sr150 : Add NXP SR150 UWB firmware
  - brcm: add/update firmware files for brcmfmac driver
  - rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098
  - amdgpu: update sdma_5.2.7 firmware
  - QCA: Add Bluetooth firmware for WCN785x This adds required Bluetooth firmware
    files for QCA WCN785x. The image version is 2.0.0-00515.
  - linux-firmware: update firmware for MT7916
  - linux-firmware: update firmware for MT7915
  - i915: Add DMC v2.08 for DG2
  - amdgpu: update green sardine DMCUB firmware
  - i915: Add DMC v2.10 for MTL
  - linux-firmware: update firmware for MT7986
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - amdgpu: update DMCUB firmware for DCN 3.1.6
  - rtl_bt: Update RTL8822C BT UART firmware to 0xFFB8_ABD6
  - rtl_bt: Update RTL8822C BT USB firmware to 0xFFB8_ABD3
  - WHENCE: mrvl: prestera: Add WHENCE entries for newly updated 4.1 FW images
  - mrvl: prestera: Update Marvell Prestera Switchdev FW to v4.1
  - iwlwifi: add new FWs from core74_pv-60 release
  - qcom: drop split a530_zap firmware file
  - qcom/vpu-1.0: drop split firmware in favour of the mbn file
  - qcom/venus-4.2: drop split firmware in favour of the mbn file
  - qcom/venus-4.2: replace split firmware with the mbn file
  - qcom/venus-1.8: replace split firmware with the mbn file
  - linux-firmware: Add firmware for Cirrus CS35L41 on new ASUS Laptop
  - iwlwifi: add new PNVM binaries from core74-44 release
  - iwlwifi: add new FWs from core69-81 release
  - qcom: update venus firmware files for VPU-2.0
  - qcom: remove split SC7280 venus firmware images
  - qcom: update venus firmware file for v5.4
  - qcom: replace split SC7180 venus firmware images with symlink
  - rtw89: 8852b: update fw to v0.27.32.1
  - rtlwifi: update firmware for rtl8192eu to v35.7
  - rtlwifi: Add firmware v4.0 for RTL8188FU
  - i915: Add HuC 7.10.3 for DG2
  - cnm: update chips&media wave521c firmware.
  - brcm: add symlink for Pi Zero 2 W NVRAM file
  - linux-firmware: Add firmware for Cirrus CS35L41 on ASUS Laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP Laptops
  - rtw89: 8852b: add initial fw v0.27.32.0
  - iwlwifi: add new FWs from core72-129 release
  - iwlwifi: update 9000-family firmwares to core72-129


author: Herton R. Krzesinski <herton@redhat.com> - 20230210-130
changelog:
  - Update to upstream 20230210 release (rhbz 2047488).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: Update AMD cpu microcode
  - brcm: revert firmware files for Cypress devices
  - brcm: restore previous firmware file for BCM4329 device
  - rtw88: 8822c: Update normal firmware to v9.9.14
  - i915: Add DMC v2.11 for MTL
  - linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  - linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps
  - i915: Add DMC v2.18 for ADLP
  - amdgpu: Add VCN 4.0.2 firmware
  - amdgpu: Add PSP 13.0.4 firmware
  - amdgpu: Add SDMA 6.0.1 fimware
  - amdgpu: Add GC 11.0.1 firmware
  - amdgpu: Add DCN 3.1.4 firmware
  - iwlwifi: remove old intermediate 5.15+ firmwares
  - iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  - iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  - iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  - iwlwifi: remove old unsupported older than 4.14 LTS
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - amdgpu: update vangogh firmware
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9260
  - brcm: add configuration files for CyberTan WC121
  - qcom: add firmware files for Adreno A200
  - rtw89: 8852c: update fw to v0.27.56.10
  - QCA: Add Bluetooth firmware for QCA2066
  - amdgpu: add VCN4.0.4 firmware from amd-5.4
  - amdgpu: add SMU13.0.7 firmware from amd-5.4
  - amdgpu: add SDMA6.0.2 firmware from amd-5.4
  - amdgpu: add PSP13.0.7 firmware from amd-5.4
  - amdgpu: add GC11.0.2 firmware from amd-5.4
  - amdgpu: add DCN3.2.1 firmware from amd-5.4
  - amdgpu: update VCN4.0.0 firmware from amd-5.4
  - amdgpu: update SMU13.0.0 firmware from amd-5.4
  - amdgpu: update SDMA6.0.0 firmware from amd-5.4
  - amdgpu: update PSP13.0.0 firmware from amd-5.4
  - amdgpu: update GC11.0.0 firmware from amd-5.4
  - iwlwifi: add new FWs from core76-35 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  - iwlwifi: add new FWs from core75-47 release
  - iwlwifi: update 9000-family firmwares to core75-47
  - amdgpu: update renoir DMCUB firmware
  - amdgpu: Update renoir PSP firmware
  - amdgpu: update copyright date for LICENSE.amdgpu
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - cxgb4: Update firmware to revision 1.27.1.0
  - qca: Update firmware files for BT chip WCN6750
  - rtw89: 8852c: update fw to v0.27.56.9
  - rtw89: 8852c: update fw to v0.27.56.8


author: Herton R. Krzesinski <herton@redhat.com> - 20230210-131
changelog:
  - Update amdgpu/gc_11_0_1_rlc.bin file from the following linux-firmware commit:
    commit c0a0bc2 - amdgpu: Update GC 11.0.1 firmware (rhbz 2047462).


author: Herton R. Krzesinski <herton@redhat.com> - 20230210-132
changelog:
  - Update ath10k/ath11k firmware (rhbz 2169013):
    ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
    ath11k: WCN6855 hw2.0: update board-2.bin
    ath11k: WCN6750 hw1.0: update board-2.bin
    ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
    ath11k: IPQ5018 hw1.0: add board-2.bin
    ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
    ath10k: WCN3990 hw1.0: update board-2.bin
  - Ship new firmware files using patch/git apply instead of as rpm sources.


author: Herton R. Krzesinski <herton@redhat.com> - 20230310-133
changelog:
  - Removed notices and check about the liquidio/lio_23xx_vsw.bin file: starting
    with 20230310 release of linux-firmware, it was removed upstream as well.
  - Update to upstream 20230310 release (rhbz 2029566).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qat: update licence text
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  - rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  - WHENCE: remove duplicate File entries
  - WHENCE: remove trailing white space
  - linux-firmware: add fw for qat_4xxx
  - Fix symlinks for Intel firmware
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update firmware for MT7921 WiFi device
  - iwlwifi: update core69 and core72 firmwares for Ty device
  - rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  - brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  - brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  - brcm: Add nvram for the Advantech MICA-071 tablet
  - rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  - rtl_bt: Add firmware and config files for RTL8821CS
  - rtw89: 8852b: update fw to v0.29.29.0
  - rtw89: 8852b: update fw to v0.29.26.0
  - liquidio: remove lio_23xx_vsw.bin
  - intel: avs: Add AudioDSP base firmware for CNL-based platforms
  - intel: avs: Add AudioDSP base firmware for APL-based platforms
  - intel: avs: Add AudioDSP base firmware for SKL-based platforms
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ5018 hw1.0: add board-2.bin
  - ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - cnm: update chips&media wave521c firmware.
  - amdgpu: Update GC 11.0.1 firmware
  - intel: catpt: Add AudioDSP base firmware for BDW platforms


author: Jan Stancek <jstancek@redhat.com> - 20230404-134
changelog:
  - Update to upstream 20230404 release (rhbz 2183603).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: Amphion: Update vpu firmware
  - iwlwifi: add new FWs from core78-32 release
  - iwlwifi: update 9000-family firmwares to core78-32
  - amdgpu: Update SDMA 6.0.1 firmware
  - amdgpu: Add PSP 13.0.11 firmware
  - amdgpu: Update PSP 13.0.4 firmware
  - amdgpu: Update GC 11.0.1 firmware
  - amdgpu: Update DCN 3.1.4 firmware
  - amdgpu: Add GC 11.0.4 firmware
  - rtw88: 8822c: Update normal firmware to v9.9.15
  - linux-firmware: Update firmware file for Intel Bluetooth AX101
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: add firmware files for NXP BT chipsets
  - rtw89: 8852b: update format-1 fw to v0.29.29.0
  - rtw89: 8852b: add format-1 fw v0.29.26.0
  - rtw89: 8852b: rollback firmware to v0.27.32.1
  - i915: Update MTL DMC to v2.12
  - i915: Update ADLP DMC to v2.19
  - mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
  - iwlwifi: update core69 and core72 firmwares for So device


author: Jan Stancek <jstancek@redhat.com> - 20230525-135
changelog:
  - Update to upstream 20230525 release (rhbz 2178579).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: update yellow carp firmware for amd.5.5 release
  - amdgpu: update navi14 firmware for amd.5.5 release
  - amdgpu: update navi12 firmware for amd.5.5 release
  - amdgpu: update vega20 firmware for amd.5.5 release
  - amdgpu: update vega12 firmware for amd.5.5 release
  - amdgpu: update navi10 firmware for amd.5.5 release
  - amdgpu: update vega10 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  - amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  - amdgpu: update 13.0.8 firmware for amd.5.5 release
  - amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  - amdgpu: update vangogh firmware for amd.5.5 release
  - amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  - amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  - amdgpu: update renoir firmware for amd.5.5 release
  - amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  - amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  - amdgpu: update green sardine firmware for amd.5.5 release
  - amdgpu: update beige goby firmware for amd.5.5 release
  - amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  - amdgpu: update arcturus firmware for amd.5.5 release
  - amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  - amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  - amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  - amdgpu: update navy flounder firmware for amd.5.5 release
  - amdgpu: update sienna cichlid firmware for amd.5.5 release
  - amdgpu: update aldebaran firmware for amd.5.5 release
  - amdgpu: DMCUB updates for various AMDGPU asics
  - ice: update ice DDP comms package to 1.3.40.0
  - rtlwifi: Add firmware v6.0 for RTL8192FU
  - rtlwifi: Update firmware for RTL8188EU to v28.0
  - cirrus: Add firmware and tuning files for HP G10 series laptops
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - WHENCE: comment out duplicate MediaTek firmware
  - i915: Add GuC v70.6.6 for MTL
  - amdgpu: update DCN 3.1.6 DMCUB firmware
  - rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  - rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  - rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
  - Group all Conexant V4L devices together
  - rtl_nic: update firmware of USB devices
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: update firmware for MT7981
  - qca: Update firmware files for BT chip WCN6750
  - mt76xx: Move the old Mediatek WiFi firmware to mediatek
  - rtl_bt: Add firmware and config files for RTL8851B
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: add firmware for MT7981
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update qat firmware
  - linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops
  - linux-firmware: update firmware for MT7916
  - rtw89: 8852b: update format-1 fw to v0.29.29.1
  - rtw89: 8852c: update fw to v0.27.56.13
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ8074 hw2.0: update board-2.bin
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update board-2.bin
  - ath10k: QCA99X0 hw2.0: update board-2.bin
  - ath10k: QCA9984 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA6174 hw3.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin


author: Jan Stancek <jstancek@redhat.com> - 20230625-137
changelog:
  - Fix PSR-SU issues with kernel 6.2 or later (rhbz 2218668)
  - Update to upstream 20230625 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Makefile, copy-firmware: support xz/zstd compressed firmware
  - copy-firmware: silence the last shellcheck warnings
  - copy-firmware: drop obsolete backticks, quote
  - copy-firmware: tweak sed invocation
  - copy-firmware: quote deskdir and dirname
  - check_whence: error if symlinks are in-tree
  - check_whence: error if File: is actually a link
  - check_whence: strip quotation marks
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  - ice: update ice DDP wireless_edge package to 1.3.10.0
  - amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
  - amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  - fix broken cirrus firmware symlinks
  - qcom: Update the microcode files for Adreno a630 GPUs.
  - qcom: sdm845: rename the modem firmware
  - qcom: sdm845: update remoteproc firmware
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  - rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  - amdgpu: DMCUB updates for various AMDGPU asics
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - i915: Add HuC v8.5.0 for MTL
  - mediatek: Update mt8195 SCP firmware to support hevc
  - qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  - cirrus: Add firmware for new Asus ROG Laptops
  - brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  - amdgpu: Update GC 11.0.1 and 11.0.4
  - rtw89: 8851b: add firmware v0.29.41.0
  - ice: update ice DDP comms package to 1.3.40.0
  - cxgb4: Update firmware to revision 1.27.3.0


author: Jan Stancek <jstancek@redhat.com> - 20230726-138
changelog:
  - Navi32 dGPU firmware (rhbz 2047486)
  - CVE-2023-20593 linux-firmware: hw: amd: Cross-Process Information Leak (rhbz 2227156)
  - Update to upstream 20230726 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - copy-firmware: Fix linking directories when using compression
  - copy-firmware: Fix test: unexpected operator
  - qcom: sc8280xp: LENOVO: remove directory sym link
  - qcom: sc8280xp: LENOVO: Remove execute bits
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: add initial SMU 13.0.10 firmware
  - amdgpu: add initial SDMA 6.0.3 firmware
  - amdgpu: add initial PSP 13.0.10 firmware
  - amdgpu: add initial GC 11.0.3 firmware
  - linux-firmware: Update AMD fam17h cpu microcode
  - linux-firmware: Update AMD cpu microcode
  - amdgpu: update green sardine VCN firmware
  - amdgpu: update renoir VCN firmware
  - amdgpu: update raven VCN firmware
  - amdgpu: update raven2 VCN firmware
  - amdgpu: update Picasso VCN firmware
  - amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  - Updated NXP SR150 UWB firmware
  - wfx: update to firmware 3.16.1
  - mediatek: Update mt8195 SCP firmware to support 10bit mode
  - i915: update DG2 GuC to v70.8.0
  - i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  - cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models
  - Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - Fix qcom ASoC tglp WHENCE entry
  - check_whence: Check link targets are valid
  - iwlwifi: add new FWs from core80-39 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  - qcom: Add Audio firmware for SC8280XP X13s


author: Jan Stancek <jstancek@redhat.com> - 20230814-139
changelog:
  - CVE-2023-20569 linux-firmware: hw amd: Return Address Predictor velunerability leading to information disclosure (rhbz 2230418)
  - [AMDCLIENT 9.3 Bug] Linux FW update to fix multi monitor behind TBT3 dock & random flickers (rhbz 2227845)
  - amdgpu: partially revert firmware for GC 11.0.0 and GC 11.0.2
  - linux-firmware: Update AMD cpu microcode
  - Merge branch 'for-upstream' of http://git.chelsio.net/pub/git/linux-firmware
  - rtl_bt: Add firmware v2 file for RTL8852C
  - Revert "rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225"
  - amdgpu: DMCUB updates for various AMDGPU asics
  - cxgb4: Update firmware to revision 1.27.4.0
  - Merge branch 'rb3-update' of https://github.com/lumag/linux-firmware
  - Merge https://github.com/pkshih/linux-firmware
  - Mellanox: Add new mlxsw_spectrum firmware xx.2012.1012
  - linux-firmware: Add URL for latest FW binaries for NXP BT chipsets
  - rtw89: 8851b: update firmware to v0.29.41.1
  - qcom: sdm845: add RB3 sensors DSP firmware
  - amdgpu: Update DMCUB for DCN314 & Yellow Carp
  - Merge branch 'dmc-adlp_2.20-mtl_2.13' of git://anongit.freedesktop.org/drm/drm-firmware
  - Merge branch 'for-upstream' of https://github.com/CirrusLogic/linux-firmware
  - ice: add LAG-supporting DDP package
  - i915: Update MTL DMC to v2.13
  - i915: Update ADLP DMC to v2.20
  - cirrus: Add CS35L41 firmware for Dell Oasis Models


author: Scott Weaver <scweaver@redhat.com> - 20230926-140
changelog:
  - [Intel 9.4 FEAT] [SPR][EMR] QAT firmware update available (rhbz 2238636)
  - [AMDCLIENT 9.4 Feature] Sub-Feature: AMD PMF Linux FW (rhbz 2227340)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amd_pmf: Add initial PMF TA for Smart PC Solution Builder
  - linux-firmware: Update FW files for MRVL PCIE 8997 chipsets
  - rtl_bt: Update RTL8851B BT USB firmware to 0x048A_D230
  - iwlwifi: add new FWs from core81-65 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core81-65 release
  - linux-firmware: amd-ucode: Add note on fam19h warnings
  - i915: update MTL HuC to version 8.5.4
  - amdgpu: update DMCUB to 0.0.183.0 for various AMDGPU ASICs
  - linux-firmware: add link to sc8280xp audioreach firmware
  - qcom: sm8250: add RB5 sensors DSP firmware
  - qcom: Update vpu-1.0 firmware
  - qcom: sm8250: update DSP firmware
  - qcom: add firmware for the onboard WiFi on qcm2290 / qrb4210
  - qcom: add venus firmware files for v6.0
  - qcom: add firmware for QRB4210 platforms
  - qcom: add firmware for QCM2290 platforms
  - qcom: add GPU firmware for QCM2290 / QRB2210
  - ath10k/WCN3990: move wlanmdsp to qcom/sdm845
  - WHENCE: Don't compress qcom json files
  - WHENCE: amd-ucode: Use new RawFile keyword
  - Create symlinks for all firmware that is duplicate using rdfind
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00605
  - Fix carl9170fw shell scripts for shellcheck errors
  - i915: Update MTL DMC to v2.16
  - copy-firmware: Introduce 'RawFile' keyword
  - copy-firmware: Support additional compressor options
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: update firmware for qat_4xxx devices
  - linux-firmware: Update AMD SEV firmware
  - amdgpu: update DMCUB to 0.0.181.0 for various AMDGPU ASICs
  - rtw89: 8852b: update fw to v0.29.29.3
  - rtw89: 8851b: update fw to v0.29.41.2
  - i915: add GSC 102.0.0.1655 for MTL
  - amdgpu: DMCUB updates for various AMDGPU asics
  - amdgpu: DMCUB updates for various AMDGPU asics
  - cirrus: Add CS35L41 firmware for HP G11 models


author: Scott Weaver <scweaver@redhat.com> - 20231030-141
changelog:
  - CVE-2022-46329 linux-firmware: hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (RHEL-14264)
  - amd-ucode early loading broken [RHEL-15387]
  - Update to upstream 20231030 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX210
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX101
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX201
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX211
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - rtl_nic: update firmware of RTL8156B
  - linux-firmware: Update AMD cpu microcode
  - amdgpu: update SMU 13.0.0 firmware
  - linux-firmware: add Amlogic bluetooth firmware
  - i915: Add GuC v70.13.1 for DG2, TGL, ADL-P and MTL
  - iwlwifi: add a missing FW from core80-39 release
  - WHENCE: add symlink for BananaPi M64
  - linux-firmware: Add firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9260
  - i915: Update MTL DMC to v2.17
  - amdgpu: update raven firmware from 5.7 branch
  - amdgpu: update SDMA 5.2.7 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.8 firmware from 5.7 branch
  - amdgpu: update GC 10.3.7 firmware from 5.7 branch
  - amdgpu: update DCN 3.1.6 firmware from 5.7 branch
  - amdgpu: update SDMA 5.2.6 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.5 firmware from 5.7 branch
  - amdgpu: update GC 10.3.6 firmware from 5.7 branch
  - amdgpu: update VCN 4.0.0 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.0 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.0 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.0 firmware from 5.7 branch
  - amdgpu: update GC 11.0.0 firmware from 5.7 branch
  - amdgpu: update vega20 firmware from 5.7 branch
  - amdgpu: update beige goby firmware from 5.7 branch
  - amdgpu: update vega12 firmware from 5.7 branch
  - amdgpu: update vega10 firmware from 5.7 branch
  - amdgpu: update dimgrey cavefish firmware from 5.7 branch
  - amdgpu: update picasso firmware from 5.7 branch
  - amdgpu: update navy flounder firmware from 5.7 branch
  - amdgpu: update vangogh firmware from 5.7 branch
  - amdgpu: update green sardine firmware from 5.7 branch
  - amdgpu: update sienna cichlid firmware from 5.7 branch
  - amdgpu: update PSP 13.0.11 firmware from 5.7 branch
  - amdgpu: update GC 11.0.4 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.1 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.4 firmware from 5.7 branch
  - amdgpu: update GC 11.0.1 firmware from 5.7 branch
  - amdgpu: update navi14 firmware from 5.7 branch
  - amdgpu: update renoir firmware from 5.7 branch
  - amdgpu: update navi12 firmware from 5.7 branch
  - amdgpu: update VCN 4.0.4 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.7 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.2 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.7 firmware from 5.7 branch
  - amdgpu: update GC 11.0.2 firmware from 5.7 branch
  - amdgpu: update yellow carp firmware from 5.7 branch
  - amdgpu: update navi10 firmware from 5.7 branch
  - amdgpu: update raven2 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.10 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.10 firmware from 5.7 branch
  - amdgpu: update GC 11.0.3 firmware from 5.7 branch
  - amdgpu: update aldebaran firmware from 5.7 branch
  - iwlwifi: add FWs for new GL and MA device types with multiple RF modules


author: Scott Weaver <scweaver@redhat.com> - 20240109-142
changelog:
  - [DELL 9.3 BUG]System resume failed from suspend and auto reboot with WCN6856 (1/10 fail rate) (RHEL-4431)
  - [DELL 9.3 FEAT] - linux-firmware: Include to support QCA WIFI-7 WCN7850 Module: wifi firmware support (RHEL-10212)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: update firmware for w1u_uart
  - amdgpu: DMCUB updates for DCN314
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
  - amlogic/bluetooth: add firmware bin of W1 serial soc(w1u_uart)
  - linux-firmware: add firmware for mediatek bluetooth chip (MT7925)
  - linux-firmware: add firmware for MT7925
  - ASoC: tas2563: Add dsp firmware for laptops or other mobile devices
  - rtl_bt: Add firmware and config files for RTL8852BT/RTL8852BE-VT
  - ASoC: tas2781: Add dsp firmware for different laptops
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.36
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update board-2.bin
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00309-
  - ath12k: add new driver and firmware for WCN7850
  - iwlwifi: update gl FW for core80-165 release
  - intel: vsc: Add firmware for Visual Sensing Controller
  - cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2023 Models
  - cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2022 Models
  - QCA: Add bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00629
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 QRD
  - qcom: Add Audio firmware for SM8550 QRD
  - wfx: update to firmware 3.17
  - wfx: fix broken firmware
  - linux-firmware: Update AMD cpu microcode
  - cxgb4: Update firmware to revision 1.27.5.0
  - linux-firmware: add firmware for en8811h 2.5G ethernet phy
  - s5p-mfc: Add MFC v12 Firmware
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDFC8_145F
  - ice: update ice DDP wireless_edge package to 1.3.13.0
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - amdgpu: update DMCUB firmware to 0.0.194.0 for DCN321 and DCN32
  - qcom: update qrb4210 firmware
  - qcom: update qcm2290 firmware
  - qcom: update qcm2290/qrb4210 WiFi firmware file
  - qcom: update Venus firmware file for v6.0
  - powervr: add firmware for Imagination Technologies AXE-1-16M GPU
  - ice: update ice DDP comms package to 1.3.45.0
  - ice: update ice DDP package to 1.3.35.0
  - mediatek: Remove an unused packed library
  - mediatek: Sync shared memory structure changes
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: update DMCUB firmware to 0.0.193.0 for DCN31 and DCN314
  - i915: Update MTL DMC to v2.19
  - iwlwifi: fix for the new FWs from core83-55 release
  - iwlwifi: add new FWs from core83-55 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core83-55 release
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP G11 Laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 on 2024 ASUS Zenbook Laptops
  - linux-firmware: add firmware for mt7988 internal 2.5G ethernet phy
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - nvidia: add GSP-RM version 535.113.01 firmware images
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qca: add bluetooth firmware for WCN3988
  - linux-firmware: ixp4xx: Add the IXP4xx firmware
  - rtw89: 8852b: update fw to v0.29.29.5
  - rtw89: 8852b: update fw to v0.29.29.4
  - rtw89: 8851b: update fw to v0.29.41.3


author: Scott Weaver <scweaver@redhat.com> - 20240219-143
changelog:
  - [AMDCLIENT 9.4 Bug] Update PHX 1/2 firmware to fix some PSR related issues (RHEL-25408)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: First GuC release for LNL and Xe
  - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL
  - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7)
  - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet
  - ice: update ice DDP package to 1.3.36.0
  - Intel IPU3 ImgU: Move firmware file under intel/ipu
  - Intel IPU6: Move firmware binaries under ipu/
  - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models
  - panthor: Add initial firmware for Gen10 Arm Mali GPUs
  - amdgpu: DMCUB Updates for DCN321: 7.0.38.0
  - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0
  - qcom: update venus firmware file for v5.4
  - Montage: add firmware for Mont-TSSE
  - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32
  - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware
  - linux-firmware: Fix filenames for some CS35L41 firmwares for HP
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2
  - rtl_nic: add firmware for RTL8126A
  - linux-firmware: intel: Add IPU6 firmware binaries
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37
  - qcom: Add Audio firmware for SM8550 HDK
  - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs"
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 MTP
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SDMA 5.2.7 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update SDMA 5.2.6 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: add GC 11.0.1 rlc_1 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update picasso firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update navi14 firmware
  - amdgpu: add VCN 4.0.3 firmware
  - amdgpu: add SDMA 4.4.2 firmware
  - amdgpu: add SMU 13.0.6 firmware
  - amdgpu: add PSP 13.0.6 firmware
  - amdgpu: Add GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - RTL8192E: Remove old realtek WiFi firmware
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for DCN314
  - qcom: Update the firmware for Adreno a630 family of GPUs
  - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops
  - linux-firmware: update firmware for qat_4xxx devices
  - cirrus: Add firmware file for cs42l43
  - amdgpu: DMCUB updates for DCN312
  - amdgpu: DMCUB updates for DCN314
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Tao Liu <ltao@redhat.com> - 2.0.25-14
changelog:
  - Install nfsv4-related drivers when users specify nfs dumping via dracut_args
  - Revert "ppc64: tackle SRCU hang issue"
  - sysconfig: add zfcp.allow_lun_scan to KDUMP_COMMANDLINE_REMOVE on s390


author: Tao Liu <ltao@redhat.com> - 2.0.26-2
changelog:
  - Rebase makedumpfile to upstream latest(8e8b8814be1)
  - Show how much time kdump has waited for the network to be ready
  - Tell nmcli to not escape colon when getting the path of connection profile


author: Tao Liu <ltao@redhat.com> - 2.0.26-3
changelog:
  - Rebase makedumpfile to v1.7.3
  - kdumpctl: lower the log level in reset_crashkernel_for_installed_kernel


author: Tao Liu <ltao@redhat.com> - 2.0.26-4
changelog:
  - kdumpctl: Add basic UKI support
  - kdumpctl: Move temp file in get_kernel_size to global temp dir
  - kdumpctl: Move get_kernel_size to kdumpctl
  - kdump-lib: fix prepare_cmdline
  - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS


author: Tao Liu <ltao@redhat.com> - 2.0.26-5
changelog:
  - Add lvm thin provision to kdump supported-kdump-targets.txt
  - mkdumprd: Use the correct syntax to redirect the stderr to null


author: Tao Liu <ltao@redhat.com> - 2.0.26-6
changelog:
  - kdumpctl: Fix the matching of plus symbol by grep's EREs
  - kdump-lib: Evaluate the memory consumption by smmu and mlx5 separately
  - kdump-lib: add support for 64K aarch64
  - kdump-lib: Introduce parse_kver_from_path() to get kernel version from its path name
  - kdump-lib: Introduce a help function _crashkernel_add()
  - Simplify the management of the kernel parameter crashkernel
  - kdump-lib: fix the matching pattern for debug-kernel
  - kdump-lib: always specify version in is_squash_available


author: Tao Liu <ltao@redhat.com> - 2.0.26-7
changelog:
  - kdumpctl: Fix temporary directory location
  - kdump-lib: Match 64k debug kernel in prepare_kdump_bootinfo()


author: Tao Liu <ltao@redhat.com> - 2.0.26-9
changelog:
  - Introduce a function to get reserved memory size
  - powerpc: update fadump sysfs node path
  - kdumpctl: merge check_current_{kdump,fadump}_status
  - kdumpctl: remove unnecessary uses of $?


author: Tao Liu <ltao@redhat.com> - 2.0.27-3
changelog:
  - Rebase makedumpfile to v1.7.4
  - powerpc: update kdumpctl to load kernel signing key for fadump
  - powerpc: update kdumpctl to remove deletion of kernel signing key once loaded


author: Tao Liu <ltao@redhat.com> - 2.0.27-4
changelog:
  - kdump-lib.sh: add extra 64M to default crashkernel if sme/sev is active
  - Allow _crashkernel_add to address larger memory ranges
  - kdump-lib: Harden _crashkernel_add


author: Tao Liu <ltao@redhat.com> - 2.0.27-7
changelog:
  - Explain the auto_reset_crashkernel option in more details
  - Use the same /etc/resolve.conf in kdump initrd if it's managed manually


author: Julien Rische <jrische@redhat.com> - 1.19.1-14
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.19.1-20
changelog:
  - Fix OpenSSL 3 MD5 encyption in FIPS mode
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2068458


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
  - Resolves: rhbz#2151513
  - Remove invalid password expiry warning
  - Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2063838
  - New upstream version (1.20.1)
  - Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  - Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.67.0-1
changelog:
  - Fix handling transaction id in resolveTransactionItemReason (RhBug:2010259,2053014)
  - Remove deprecated assertions (RhBug:2027383)
  - Skip rich deps for autodetection of unmet dependencies (RhBug:2033130, 2048394)
  - Increase required rpm version since we use `rpmdbCookie()`
  - Add 'loongarch' support
  - Use dnf solv userdata to check versions and checksum (RhBug:2027445)
  - context: Substitute all repository config options (RhBug:2076853)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.67.0-2
changelog:
  - Add obsoletes to filtering for advisory candidates
  - advisory upgrade: filter out advPkgs with different arch


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - Make keeping connection more reliable (jhnidek@redhat.com)
  - Small improvements of keep alive (jhnidek@redhat.com)
  - Keep TCP/TLS connection alive and close connection properly
    (jhnidek@redhat.com)
  - ENT-4700: Switch away from 'imp' (mhorky@redhat.com)
  - ENT-4088: Fix flake8 error E731 (mhorky@redhat.com)
  - ENT-4048: Fix flake8 error E501 (mhorky@redhat.com)
  - ENT-240: Add --no-progress-messages CLI option (mhorky@redhat.com)
  - ENT-240: Use spinner to indicate that API communication is pending
    (mhorky@redhat.com)
  - ENT-240: Make verbose messages translatable (mhorky@redhat.com)
  - ENT-240: Make subscription-manager more verbose (mhorky@redhat.com)
  - 2075455: enable sslverifystatus on repos if advertized by CP
    (ptoscano@redhat.com)
  - RepoUpdateActionCommand: lazy load the consumer auth (ptoscano@redhat.com)
  - 2043331: Do not delete installed SCA cert during registration
    (jhnidek@redhat.com)
  - Remove Group tag from .spec file for RHEL/Fedora (jhnidek@redhat.com)
  - 2073354: Print correct status, when access mode has changed
    (jhnidek@redhat.com)
  - flake8: ignore the build directory (ptoscano@redhat.com)
  - Remove ownership of /etc/rhsm (csnyder@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Revert "build: pin flake8 to < 4" (ptoscano@redhat.com)
  - build: simplify flake8 run (ptoscano@redhat.com)
  - flake8: improve the config a bit (ptoscano@redhat.com)
  - jenkins: run stylish.sh with -e (ptoscano@redhat.com)
  - flake8: simplify/update config (ptoscano@redhat.com)
  - tests: remove unused exception variable (ptoscano@redhat.com)
  - Drop cockpit sources & related bits (ptoscano@redhat.com)
  - cockpit: test with split subscription-manager-cockpit (ptoscano@redhat.com)
  - Remove print statements from test suite (mhorky@redhat.com)
  - Run CI's pytest with verbose flag (mhorky@redhat.com)
  - Optimize rhsmlib DBus test strings (mhorky@redhat.com)
  - Change names of some directories in test/ (mhorky@redhat.com)
  - Reorder rhsmlib tests (mhorky@redhat.com)
  - refresh: clear also the release status (ptoscano@redhat.com)
  - 2074110: clear the release cache on release change (ptoscano@redhat.com)
  - Add gcp_license_codes to system facts. (jhnidek@redhat.com)
  - Pass version to make in debian/rules using 'pkg-info.mk' (reisner@atix.de)
  - Refactored rpm-version to pkg-version (reisner@atix.de)
  - Ignore black commit hashes (mhorky@redhat.com)
  - Add check to YumPluginManager.enable_pkg_plugins() if system is using yum/dnf
    to prevent warnings on debian based systems (reisner@atix.de)
  - Extend HardwareCollector.get_distribution() to return ID and ID_LIKE
    (reisner@atix.de)
  - Format code with black==22.3.0 (mhorky@redhat.com)
  - Add Black to CI (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Fix few grammar mistakes in rhsm.conf and man page (jhnidek@redhat.com)
  - 2058662: Fix inaccurate module status in combined profile
    (jhnidek@redhat.com)
  - Add file .git-blame-ignore-revs (mhorky@redhat.com)
  - Update configuration files for flake8 (mhorky@redhat.com)
  - Use double quotes for strings (mhorky@redhat.com)
  - Format the code with black (mhorky@redhat.com)
  - Custom facts should not influence unit tests of cloud-what
    (jhnidek@redhat.com)
  - Drop redhat-uep.pem (ptoscano@redhat.com)
  - Move redhat-entitlement-authority.pem to container plugin
    (ptoscano@redhat.com)
  - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com)
  - spec: relax subscription-manager-rhsm-certificates requires
    (ptoscano@redhat.com)
  - test: Rely on insights-client.service to succeed in testSubAndInAndFail
    (mvollmer@redhat.com)
  - integration-tests: Run testSubAndInAndFail with "setenforce 0"
    (mvollmer@redhat.com)
  - integration-test: Use custom TLS certs for mock-insights
    (mvollmer@redhat.com)
  - Keep the user namespace from the host (csnyder@redhat.com)
  - tracking return values of tests (jmolet@redhat.com)
  - Adding containers for development and test (csnyder@redhat.com)
  - Drop old git-checkcommits bits (ptoscano@redhat.com)
  - tests: drop no more needed bits (ptoscano@redhat.com)
  - tests: switch away from SyspurposeTestBase (ptoscano@redhat.com)
  - Drop the rel-eng directory for old tito versions (ptoscano@redhat.com)
  - tests: switch away from SyspurposeTestBase.assertRaisesNothing()
    (ptoscano@redhat.com)
  - tests: use write_to_file_utf8() from syspurpose.utils (ptoscano@redhat.com)
  - tests: directly use tempfile.TemporaryDirectory() (ptoscano@redhat.com)
  - tests: use Capture from the main sub-man fitxure module (ptoscano@redhat.com)
  - tests: switch from assert_equal_dict() to assertEqual() (ptoscano@redhat.com)
  - tests: switch from assert_string_equals() to assertEqual()
    (ptoscano@redhat.com)
  - cockpit: bump API version to 264 (ptoscano@redhat.com)
  - cockpit: simplify skipUnlessDistroFamily() to properly skip tests
    (ptoscano@redhat.com)
  - cockpit: drop rhel-atomic bits (ptoscano@redhat.com)
  - cockpit: bump candlepin minimum waiting time to 10 seconds
    (ptoscano@redhat.com)
  - integration-test: Updates for newer insights-client (mvollmer@redhat.com)
  - 2018221: Cockpit use "Organization ID" in label (jhnidek@redhat.com)
  - 2059631: rhsm.conf: fix typo in comment (ptoscano@redhat.com)
  - 2057053: Improve API of detection of cloud-what (jhnidek@redhat.com)
  - 1935446: Revert "Revert "1935446: Use updated cert with SHA-256 algorithm""
    (ptoscano@redhat.com)
  - cockpit: set $RPM_BUILD_ROOT w/ installing (ptoscano@redhat.com)
  - 2057053: Facts: do no use heuristics detection of cloud (jhnidek@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Improve azure determination method (suttner@atix.de)
  - 2056896: Handle all exceptions of gathering data properly
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.29-1
changelog:
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - ENT-5215: Handle all exceptions caused by network problems
    (mhorky@redhat.com)
  - ENT-5215: Handle errors raised in DNF plugin (mhorky@redhat.com)
  - Make TestProfileManager subclass of SubManFixture (mhorky@redhat.com)
  - ENT-5054: Drop singleton implementation in rhsmlib/utils.py
    (mhorky@redhat.com)
  - Rename test file for rhsm/utils.py (mhorky@redhat.com)
  - ENT-5054: Create singleton decorators in rhsm/utils.py (mhorky@redhat.com)
  - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com)
  - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com)
  - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com)
  - facts: add dmidecode parser and facts collector (ptoscano@redhat.com)
  - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com)
  - 2096446: Make 'rhsm-debug' autocomplete --no-progress-messages
    (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 2092014: Do not use injections in rhsm (mhorky@redhat.com)
  - ci: run rpmlint as part of stylish (ptoscano@redhat.com)
  - build: switch rpmlint check to rpmlint 2.x (ptoscano@redhat.com)
  - ci: drop stylish job from Jenkins (ptoscano@redhat.com)
  - ci: add black & flake8 check using GitHub Actions (ptoscano@redhat.com)
  - build: install files without exec permissions (ptoscano@redhat.com)
  - 2092014: Disable progress messages when sub-man RPM is not installed
    (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.30-1
changelog:
  - Fix issue, when connection is not shared (jhnidek@redhat.com)
  - Unit tests: Add stub class for SyspurposeComplianceStatusCache
    (jhnidek@redhat.com)
  - ENT-4664: Ensure tests clean up after themselves (mhorky@redhat.com)
  - Refactoring of cloud-what unit tests (jhnidek@redhat.com)
  - 2111035: Do not allow reusing TCP connection for rhsm.service
    (jhnidek@redhat.com)
  - spec: remove redundant License from python3-cloud-what (ptoscano@redhat.com)
  - Ensure tests don't fail when run under root (mhorky@redhat.com)
  - Fix issue with unit tests (jhnidek@redhat.com)
  - 2111757: Make parsing of HTTP headers more reliable (jhnidek@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Update translation files (noreply@weblate.org)
  - ENT-5286: Unify environment variable evaluation (mhorky@redhat.com)
  - Use dmidecode on aarch64 (jhnidek@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Increase security level for zypper repos managed by sub-man (suttner@atix.de)
  - ENT-5271: Fix spelling of Candlepin API endpoint description
    (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.31-1
changelog:
  - warning: refname 'subscription-manager-1.29.30-1' is ambiguous.
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - tests: fix typos in test method names (ptoscano@redhat.com)
  - 2125227: Fixed incorrect registration warning with yum/dnf
    (jajerome@redhat.com)
  - 2094942: Fixed expected message for manual attach case (jajerome@redhat.com)
  - ENT-5102: Type-hint rhsmlib/facts (mhorky@redhat.com)
  - 2094942: Improve warning message (auto-attach in SCA mode)
    (jhnidek@redhat.com)
  - Update INSTALL.md (mhorky@redhat.com)
  - Remove unused classes of DBus tests (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Unregister objects (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Register objects (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Products object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of AllFacts object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Entitlement object (mhorky@redhat.com)
  - Fix typo in method name of EntitlementService (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Consumer object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Attach object (mhorky@redhat.com)
  - Fix possible parsing issues of dmidecode output (mhorky@redhat.com)
  - ENT-5317: New way to test DBus methods, starting with Config
    (mhorky@redhat.com)
  - cockpit: disable the reference branch for sub-man-cockpit
    (ptoscano@redhat.com)
  - TESTING.md: Remove mention of pytest-xdist (mhorky@redhat.com)
  - INSTALL.md: Update list of packages to be installed (mhorky@redhat.com)
  - Stop calling pytest with --failed-first (mhorky@redhat.com)
  - GCP: Better computing of cached token TTL (jhnidek@redhat.com)
  - 2101510: Fix D-Bus Register() and update entitlement certs
    (jhnidek@redhat.com)
  - 2120744: Close keycloak connection properly (jhnidek@redhat.com)
  - 2094942: [RFE] Improve the message, when  SCA is enabled (jhnidek@redhat.com)
  - Replaced list[] with List[] and dict[] with Dict[]. (jhnidek@redhat.com)
  - Update TESTING.md (mhorky@redhat.com)
  - Update README.md (mhorky@redhat.com)
  - Add INSTALL.md (mhorky@redhat.com)
  - Added type hints to package rhsmlib.service (jhnidek@redhat.com)
  - Added some missing imports. (jhnidek@redhat.com)
  - Reformated using black. (jhnidek@redhat.com)
  - Added one FIXME to redeem.py (jhnidek@redhat.com)
  - Added type hints and FIXMEs to rhsm package. (jhnidek@redhat.com)
  - [wip] ENT-5100: Type hint rhsm (mhorky@redhat.com)
  - Added type hints to syspurpose package (jhnidek@redhat.com)
  - Drop libnotify-devel usage (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.32-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - utils: import pkg_resources only when needed (ptoscano@redhat.com)
  - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com)
  - Alter import of rhsm.config functions (mhorky@redhat.com)
  - Handle tests in containers better (mhorky@redhat.com)
  - Call parent methods in DBusServerStubProvider (mhorky@redhat.com)
  - Base D-Bus tests on SubManFixture (mhorky@redhat.com)
  - ENT-5532: Call rhsm-package-profile-uploader with --force-upload
    (jhnidek@redhat.com)
  - 2108549: do not detect containers in OCP as such (ptoscano@redhat.com)
  - tests: extend InContainerTests for path checks (ptoscano@redhat.com)
  - Resolved issues in PR feedback (jajerome@redhat.com)
  - Updated request handling in connection.py (jajerome@redhat.com)
  - Resolve issues from PR review (jajerome@redhat.com)
  - Removed fixme since activateMachine() is still used (jajerome@redhat.com)
  - Black/flake8 fixes (jajerome@redhat.com)
  - FIXME: renamed default argument to not shadow inbuilt type
    (jajerome@redhat.com)
  - FIXME: removed Restlib and using only BaseRestLib (jajerome@redhat.com)
  - FIXME: updated unregisterConsumer() to return True if status code is 204
    (jajerome@redhat.com)
  - FIXME: changed unbindBySerial/unbindByPoolId to return bool
    (jajerome@redhat.com)
  - FIXME: changed default value of facts in updateConsumerFacts()
    (jajerome@redhat.com)
  - FIXME: sanitized email/lang variables in activateMachine()
    (jajerome@redhat.com)
  - FIXME: made email argument required in activatemachine()
    (jajerome@redhat.com)
  - FIXME: changed default value of serials argument to None
    (jajerome@redhat.com)
  - FIXME: removed unused username/password arguments (jajerome@redhat.com)
  - FIXME: raise exceptions where sanitizing guest Id returns None
    (jajerome@redhat.com)
  - FIXME: renamed response argument to result in validateResponse()
    (jajerome@redhat.com)
  - FIXME: rename info argument to params in _request() (jajerome@redhat.com)
  - FIXME: added error message when redeeming subscription fails
    (jajerome@redhat.com)
  - FIXME: removed unused UEPConnection class methods (jajerome@redhat.com)
  - Fixed profile tests setting Package release numbers as int instead of str
    (jajerome@redhat.com)
  - FIXME: changed epoch data type to str in Package class (jajerome@redhat.com)
  - FIXME: added null-checks for stdout/stderr wrapper (jajerome@redhat.com)
  - FIXME: re-iterated a fix is not needed for urlparse (jajerome@redhat.com)
  - FIXME: added exception messages to parse_url() (jajerome@redhat.com)
  - FIXME: changed  lists to tuples in StatusSpinnerStyle class
    (jajerome@redhat.com)
  - FIXME: fixed type hints for _normalize_string() (jajerome@redhat.com)
  - FIXME: use super() instead of class name (jajerome@redhat.com)
  - FIXME: fixed strings not being translated in is_log_level_valid()
    (jajerome@redhat.com)
  - FIXME: resolved improper use of tempfile in save() (jajerome@redhat.com)
  - FIXME: fixed config_file argument not being used in save()
    (jajerome@redhat.com)
  - FIXME: updated default value for files_name argument in read()
    (jajerome@redhat.com)
  - FIXME: fixed minor typo in bogus() (jajerome@redhat.com)
  - FIXME: changed read() to return self instead of None (jajerome@redhat.com)
  - FIXME: set default argument 'facts' to None in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: renamed argument 'type' to 'consumer_type' in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: ping() resolved in rhsm/connection.py (jajerome@redhat.com)
  - Remove test dependency 'mock' (mhorky@redhat.com)
  - Fix failures of D-Bus' Register tests (mhorky@redhat.com)
  - Mark D-Bus tests (mhorky@redhat.com)
  - 2131789: Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com)
  - Catch generic OSError during HTTPSConnection.connect() (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com)
  - Catch also CertificateLoadingError for identity cert loading
    (ptoscano@redhat.com)
  - ENT-4286: Additional fix for exception handling (jajerome@redhat.com)
  - Remove D-Bus env vars from container and CI files (mhorky@redhat.com)
  - 2121350: Implement "force" register option in rhsm dbus python binding
    (jajerome@redhat.com)
  - Show locals in pytest output (mhorky@redhat.com)
  - Improve formatting of CertificateLoadingError (ptoscano@redhat.com)
  - Raise a new CertificateLoadingError on X.509 loading failures
    (ptoscano@redhat.com)
  - Improve formatting of UnknownContentException (ptoscano@redhat.com)
  - connection: improve the internal UnknownContentException
    (ptoscano@redhat.com)
  - utils: add terminal_printable_content (ptoscano@redhat.com)
  - connection: rename NetworkException to UnknownContentException
    (ptoscano@redhat.com)
  - Improve formatting of ProxyException (ptoscano@redhat.com)
  - connection: improve the internal ProxyException (ptoscano@redhat.com)
  - Improve formatting of socket.gaierror (ptoscano@redhat.com)
  - Improve formatting of ConnectionError (ptoscano@redhat.com)
  - Improve formatting of BadCertificateException (ptoscano@redhat.com)
  - connection: extend BadCertificateException w/ SSL exception
    (ptoscano@redhat.com)
  - connection: drop dead code (ptoscano@redhat.com)
  - ENT-4286: Simplify exception reporting with system_exit()
    (jajerome@redhat.com)
  - 2136694: Clear progress messages properly (mhorky@redhat.com)
  - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com)
  - 2097679: Additional fix for non-interactive parameters (jajerome@redhat.com)
  - 2097679: Fixed script hang in non-interactive execution (jajerome@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.33-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (ljanda@redhat.com)
  - Translated using Weblate (French) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (jsefler@redhat.com)
  - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
  - Test libdnf plugin using GitHub Actions (mhorky@redhat.com)
  - libdnf: fix return value of findProductId() (ptoscano@redhat.com)
  - ENT-5541: Publish PR coverage (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Spanish) (ptoscano@redhat.com)
  - Simplify test setup for D-Bus fact collection (mhorky@redhat.com)
  - ENT-3759: Test on GitHub Actions (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.34-1
changelog:
  - Update TESTING.md (mhorky@redhat.com)
  - Improved debug print of http traffic, when proxy is used (jhnidek@redhat.com)
  - ENT-5544: Remove Jenkins jobs, Containers (mhorky@redhat.com)
  - ENT-5549: Remove unused code from entcertlib (mhorky@redhat.com)
  - ENT-5549: Fix issues found when type-hinting (mhorky@redhat.com)
  - ENT-5549: Fix return code handling of CLI (mhorky@redhat.com)
  - ENT-5549: Fix found type hint issues (mhorky@redhat.com)
  - ENT-5549: Fix object instantiation in EntitlementDirectory
    (mhorky@redhat.com)
  - ENT-5549: Refactor ProductDirectory (mhorky@redhat.com)
  - ENT-5549: Change internal implementation for some Cache methods
    (mhorky@redhat.com)
  - ENT-5549: Clean up _sync_with_server arguments of cache objects
    (mhorky@redhat.com)
  - ENT-5549: Remove 'autoheal' argument from Action clients (mhorky@redhat.com)
  - Refactored code a little bit (jhnidek@redhat.com)
  - 2093291: Make locking more reliable (jhnidek@redhat.com)
  - test: add simple test for 2178610 (ptoscano@redhat.com)
  - Small improvement of debugging of http traffic (jhnidek@redhat.com)
  - 2093883: Fix issue with race condition in rhsm.service (jhnidek@redhat.com)
  - 2178610: do not collect unentitled products in SCA mode (ptoscano@redhat.com)
  - 2174297: register: do a simple strip() on environment(s) input
    (ptoscano@redhat.com)
  - Stop subclassing 'object' (ptoscano@redhat.com)
  - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com)
  - tests: Install dnf-plugins-core every time (mhorky@redhat.com)
  - 2169251: connection: restore UEPConnection.getJob() (ptoscano@redhat.com)
  - ENT-5106: Type-hint subscription_manager/ files (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Dan Horák <dan[at]danny.cz> - 3.8.0-1
changelog:
  - updated to 3.8.0 (#1869532)
  - eliminate SW fallback functions (#1924119)
  - updated for OpenSSL 3.0 (#1952946)
  - disable FIPS support (broken)
  - Resolves: #1869532 #1924119 #1952946


author: Dan Horák <dhorak@redhat.com> - 4.2.3-1
changelog:
  - updated to 4.2.3 (RHEL-11415)
  - fix selfcheck in FIPS mode (RHEL-9918)
  - Resolves: RHEL-11415 RHEL-9918


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1608496 - sssd failing to register dynamic DNS addresses against an AD server due to unnecessary DNS search
  - Resolves: rhbz#2110091 - SSSD doesn't handle changes in 'resolv.conf' properly (when started right before network service)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139684 - [sssd] RHEL 9.2 Tier 0 Localization
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142794 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144893 - changing password with ldap_password_policy = shadow does not take effect immediately
  - Resolves: rhbz#2148737 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2160001 - Reference to 'sssd-ldap-attributes' man page is missing in 'sssd-ldap', etc man pages
  - Resolves: rhbz#2143159 - automount killed by SIGSEGV


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys
  - Resolves: rhbz#1913839 - filter_groups doesn't filter GID from 'id' output: AD + 'ldap_id_mapping = True' corner case
  - Resolves: rhbz#2100789 - [Improvement] sssctl config-check command does not show an error when we don't have id_provider in the domain section
  - Resolves: rhbz#2152177 - [RFE] Add support for ldapi:// URLs
  - Resolves: rhbz#2164852 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2166627 - Improvement: sss_client: add 'getsidbyusername()' and 'getsidbygroupname()' and corresponding python bindings
  - Resolves: rhbz#2166943 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2167728 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#2196816 - [RHEL9] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2162552 - sssd client caches old data after removing netgroup member on IDM
  - Resolves: rhbz#2189542 - [sssd] RHEL 9.3 Tier 0 Localization
  - Resolves: rhbz#2133854 - [RHEL9] In some cases when `sdap_add_incomplete_groups()` is called with `ignore_group_members = true`, groups should be treated as complete
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: rhbz#2234829 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working)
  - Resolves: rhbz#2236119 - dbus and crond getting terminated with SIGBUS in sss_client code


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-102
changelog:
  - resolves: rhbz#2169980 - Fix winbind memory leak
  - resolves: rhbz#2156056 - Fix Samba shares not accessible issue


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-11
changelog:
  - nfs.man: adding new mount option max_connect (bz 2106848)
  - systemd: Fix format-overflow warning (bz 2106896)


author: Steve Dickson <steved@redhat.com> 2.5.4-12
changelog:
  - idmapd: Fix error status when nfs-idmapd exits (bz 2001764)
  - mount.nfs Fix error reporting for already mounted shares (bz 2054300)
  - rpcctl - fix failure when setting xprt offline and online (bz 2081934)
  - rpc-pipefs-generator: allocate enough space (bz 2109420)


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Jiri Pirko <jiri@resnulli.us> - 1.31-1
changelog:
  1.31 release
  utils/bond2team: remove TYPE in ifcfg file
  utils/bond2team: keep delivering config to file if stdout not supplied
  teamd/lacp: silence ignore none LACP frames
  teamd: fix ctx->hwaddr value assignment
  Send LACP PDU right after the Actor state has been changed
  Skip setting the same hwaddr to a lag port if not needed
  Make all netlink socket RCVBUF sizes configurable
  Don't return an error when timerfd socket return 0
  Fix ifinfo_link_with_port race condition with newlink
  teamd: fix possible race in master ifname callback


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Renaming python package according to the standard
  - Resolves: rhbz#1951968

  =======
  >>>>>>> 96fbb4a91a8471e931d872e7b696d176fc351605


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Enable audit library in the build 
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Dan Horák <dan[at]danny.cz> - 2.2.0-10
changelog:
  - build with libzfcphbaapi as standalone library to avoid dependency on obsolete libhbaapi (#1922413)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


