# changelog

author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-555.el9]
changelog:
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Xin Long) [RHEL-73625]
  - sctp: fix possible UAF in sctp_v6_available() (Xin Long) [RHEL-73625] {CVE-2024-53139}
  - tipc: fix NULL deref in cleanup_bearer() (Xin Long) [RHEL-72258]
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Xin Long) [RHEL-72258] {CVE-2024-56642}
  - KVM: s390: add gen17 facilities to CPU model (Mete Durlu) [RHEL-50767]
  - KVM: s390: add msa11 to cpu model (Mete Durlu) [RHEL-50767]
  - KVM: s390: add concurrent-function facility to cpu model (Mete Durlu) [RHEL-50767]
  - s390/uv: Provide host-key hashes in sysfs (Mete Durlu) [RHEL-50752]
  - s390/uv: Refactor uv-sysfs creation (Mete Durlu) [RHEL-50752]
  - s390/uvdevice: Support longer secret lists (Mete Durlu) [RHEL-50754]
  - s390/uv: Retrieve UV secrets sysfs support (Mete Durlu) [RHEL-50754]
  - s390/uvdevice: Increase indent in IOCTL definitions (Mete Durlu) [RHEL-50754]
  - s390/uvdevice: Add Retrieve Secret IOCTL (Mete Durlu) [RHEL-50754]
  - s390/uv: Retrieve UV secrets support (Mete Durlu) [RHEL-50754]
  - s390/uv: Use a constant for more-data rc (Mete Durlu) [RHEL-50754]
  - s390: Remove protvirt and kvm config guards for uv code (Mete Durlu) [RHEL-50754]
  - geneve: do not assume mac header is set in geneve_xmit_skb() (Guillaume Nault) [RHEL-73420]
  - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-72264] {CVE-2024-56644}
  - ipv6: Fix soft lockups in fib6_select_path under high next hop churn (Hangbin Liu) [RHEL-73281]
  - selftests: net: really check for bg process completion (Hangbin Liu) [RHEL-73281]
  - ipv6: release nexthop on device removal (Hangbin Liu) [RHEL-73281]
  - selftests: vrf_route_leaking: add local test (Hangbin Liu) [RHEL-73281]
  - ipv6: take care of scope when choosing the src addr (Hangbin Liu) [RHEL-73281]
  - ipv6: fix source address selection with route leak (Hangbin Liu) [RHEL-73281]
  - team: prevent adding a device which is already a team device lower (Hangbin Liu) [RHEL-73276]
  - team: Fix feature exposure when no ports are present (Hangbin Liu) [RHEL-73276]
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Hangbin Liu) [RHEL-73276]
  - team: Fix initial vlan_feature set in __team_compute_features (Hangbin Liu) [RHEL-73276]
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Hangbin Liu) [RHEL-73276]
  - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features (Hangbin Liu) [RHEL-73276]
  - net, team, bonding: Add netdev_base_features helper (Hangbin Liu) [RHEL-73276]
  - bonding: add ESP offload features when slaves support (Hangbin Liu) [RHEL-73276]
  - net: team: rename team to team_core for linking (Hangbin Liu) [RHEL-73276]
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime (CKI Backport Bot) [RHEL-73275]
  - ptp: Fix error message on failed pin verification (CKI Backport Bot) [RHEL-73275]
  - vp_vdpa: fix id_table array not null terminated error (Jon Maloy) [RHEL-69651] {CVE-2024-53110}
  - vdpa/mlx5: Fix invalid mr resource destroy (Jon Maloy) [RHEL-63223] {CVE-2024-47687}
  - net: sched: fix ordering of qlen adjustment (CKI Backport Bot) [RHEL-72377 RHEL-73151] {CVE-2024-53164}
  - net_sched: sch_fq: don't follow the fast path if Tx is behind now (CKI Backport Bot) [RHEL-73151]
  - net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for hnodes. (CKI Backport Bot) [RHEL-73151]
  - net: tun: Fix use-after-free in tun_detach() (Jon Maloy) [RHEL-63736] {CVE-2022-49014}
  - i40e: add ability to reset VF for Tx and Rx MDD events (Michal Schmidt) [RHEL-54223]
  - xfs: ensure submit buffers on LSN boundaries in error handlers (Bill O'Donnell) [RHEL-68860]
  - xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code (Bill O'Donnell) [RHEL-68860]
  - xfs: Fix the owner setting issue for rmap query in xfs fsmap (Bill O'Donnell) [RHEL-68860]
  - xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set (Bill O'Donnell) [RHEL-68860]
  - xfs: attr forks require attr, not attr2 (Bill O'Donnell) [RHEL-68860]
  - xfs: convert comma to semicolon (Bill O'Donnell) [RHEL-68860]
  - xfs: honor init_xattrs in xfs_init_new_inode for !ATTR fs (Bill O'Donnell) [RHEL-68860]
  - xfs: allow unlinked symlinks and dirs with zero size (Bill O'Donnell) [RHEL-68860]
  - xfs: restrict when we try to align cow fork delalloc to cowextsz hints (Bill O'Donnell) [RHEL-68860]
  - xfs: fix unlink vs cluster buffer instantiation race (Bill O'Donnell) [RHEL-68860]
  - xfs: match lock mode in xfs_buffered_write_iomap_begin() (Bill O'Donnell) [RHEL-68860]
  - xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery (Bill O'Donnell) [RHEL-68860]
  - xfs: shrink failure needs to hold AGI buffer (Bill O'Donnell) [RHEL-68860]
  - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-50916]
  - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-50916]
  - idpf: set completion tag for "empty" bufs associated with a packet (Michal Schmidt) [RHEL-50916]
  - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-50916]
  - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-50916]
  - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-50916]
  - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-50916]
  - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-50916]
  - idpf: refactor Tx completion routines (Michal Schmidt) [RHEL-50916]
  - idpf: convert to libeth Tx buffer completion (Michal Schmidt) [RHEL-50916]
  - idpf: remove redundant 'req_vec_chunks' NULL check (Michal Schmidt) [RHEL-50916]
  - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-50916 RHEL-58452] {CVE-2024-44932}
  - idpf: use libeth Rx buffer management for payload buffer (Michal Schmidt) [RHEL-50916]
  - idpf: convert header split mode to libeth + napi_build_skb() (Michal Schmidt) [RHEL-50916]
  - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-50916]
  - idpf: reuse libeth's definitions of parsed ptype structures (Michal Schmidt) [RHEL-50916]
  - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-50916]
  - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-50916 RHEL-57131] {CVE-2024-44964}
  - redhat/configs: set CONFIG_IDPF_SINGLEQ to disabled (Michal Schmidt) [RHEL-50916]
  - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-50916]
  - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-50916]
  - idpf: Don't hard code napi_struct size (Michal Schmidt) [RHEL-50916]
  - idpf: strictly assert cachelines of queue and queue vector structures (Michal Schmidt) [RHEL-50916]
  - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-50916]
  - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-50916]
  - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-50916]
  - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-50916]
  - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-50916]
  - idpf: sprinkle __counted_by{,_le}() in the virtchnl2 header (Michal Schmidt) [RHEL-50916]
  - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-50916]
  - selftests/powerpc: Fix build with USERCFLAGS set (Mamatha Inamdar) [RHEL-74480]
  - selftests/powerpc: make sub-folders buildable on their own (Mamatha Inamdar) [RHEL-74480]
  - selftests/powerpc: Add flags.mk to support pmu buildable (Mamatha Inamdar) [RHEL-74480]
  - selftests/powerpc: Re-order *FLAGS to follow lib.mk (Mamatha Inamdar) [RHEL-74480]
  - zram: don't free statically defined names (Ming Lei) [RHEL-63884] {CVE-2024-50064}
  - zram: free secondary algorithms names (Ming Lei) [RHEL-63884] {CVE-2024-50064}
  - net: Fix icmp host relookup triggering ip_rt_bug (Hangbin Liu) [RHEL-72380] {CVE-2024-56647}
  - powerpc/mm/fault: Fix kfence page fault reporting (Mamatha Inamdar) [RHEL-74445]
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Benjamin Coddington) [RHEL-72352] {CVE-2024-53173}
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Benjamin Coddington) [RHEL-72398] {CVE-2024-56688}
  - smb: Initialize cfid->tcon before performing network ops (Paulo Alcantara) [RHEL-72459] {CVE-2024-56729}
  - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71525] {CVE-2024-50275}
  - bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (Sabrina Dubroca) [RHEL-68543] {CVE-2024-53091}
  - Bluetooth: hci_conn: Use disable_delayed_work_sync (CKI Backport Bot) [RHEL-72334] {CVE-2024-56591}
  - perf machine: Initialize machine->env to address a segfault (Michael Petlan) [RHEL-65416]
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (CKI Backport Bot) [RHEL-72297] {CVE-2024-56590}
  - crypto: aes-gcm-p10 - Use the correct bit to test for P10 (Mamatha Inamdar) [RHEL-58802]
  - crypto: powerpc/p10-aes-gcm - Add dependency on CRYPTO_SIMDand re-enable CRYPTO_AES_GCM_P10 (Mamatha Inamdar) [RHEL-58802]
  - crypto: powerpc/p10-aes-gcm - Register modules as SIMD (Mamatha Inamdar) [RHEL-58802]
  - crypto: powerpc/p10-aes-gcm - Re-write AES/GCM stitched implementation (Mamatha Inamdar) [RHEL-58802]
  - crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10 (Mamatha Inamdar) [RHEL-58802]
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (CKI Backport Bot) [RHEL-72291] {CVE-2024-56604}
  - Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating (CKI Backport Bot) [RHEL-72255] {CVE-2024-56654}
  - zram: fix NULL pointer in comp_algorithm_show() (Ming Lei) [RHEL-72367] {CVE-2024-53222}
  - brd: defer automatic disk creation until module initialization succeeds (Ming Lei) [RHEL-72386] {CVE-2024-56693}
  - block, bfq: fix bfqq uaf in bfq_limit_depth() (Ming Lei) [RHEL-72358] {CVE-2024-53166}
  - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74381]
  - redhat: Add python3-docutils for selftests build dependency (Julio Faracco) [RHEL-74391]
  - mm/vmscan: wake up flushers conditionally to avoid cgroup OOM (Waiman Long) [RHEL-72577]
  - mm/mglru: Revert 'Revert "don't sync disk for each aging cycle"' (Waiman Long) [RHEL-72577]
  - SUNRPC: make sure cache entry active before cache_show (Olga Kornievskaia) [RHEL-72340] {CVE-2024-53174}
  - powerpc/pseries/iommu: Don't unset window if it was never set (Mamatha Inamdar) [RHEL-74049]
  - NFSD: Prevent a potential integer overflow (Olga Kornievskaia) [RHEL-72114] {CVE-2024-53146}
  - nfsd: make sure exp active before svc_export_show (Olga Kornievskaia) [RHEL-72249] {CVE-2024-56558}
  - tools/rtla: Use pkg-config in lib_setup of Makefile.config (Luis Claudio R. Goncalves) [RHEL-69738]
  - tracing: Remove extra space at the end of hwlat_detector/mode (Luis Claudio R. Goncalves) [RHEL-69738]
  - trace/hwlat: Do not wipe the contents of per-cpu thread data (Luis Claudio R. Goncalves) [RHEL-69738]
  - trace/hwlat: Do not start per-cpu thread if it is already running (Luis Claudio R. Goncalves) [RHEL-69738]
  - trace/hwlat: make use of the helper function kthread_run_on_cpu() (Luis Claudio R. Goncalves) [RHEL-69738]
  - tracing/hwlat: Make some internal symbols static (Luis Claudio R. Goncalves) [RHEL-69738]
  - tools/rtla: Improve exception handling in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69738]
  - tools/rtla: Enhance argument parsing in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69738]
  - tools/rtla: Improve code readability in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69738]
  - rtla/timerlat: Do not set params->user_workload with -U (Luis Claudio R. Goncalves) [RHEL-69738]
  - tools/rtla: fix collision with glibc sched_attr/sched_set_attr (Luis Claudio R. Goncalves) [RHEL-69738]
  - tools/rtla: drop __NR_sched_getattr (Luis Claudio R. Goncalves) [RHEL-69738]
  - rtla: Fix consistency in getopt_long for timerlat_hist (Luis Claudio R. Goncalves) [RHEL-69738]
  - rtla: use the definition for stdout fd when calling isatty() (Luis Claudio R. Goncalves) [RHEL-69738]
  - rtla: Fix the help text in osnoise and timerlat top tools (Luis Claudio R. Goncalves) [RHEL-69738]
  - tools/rtla: Fix installation from out-of-tree build (Luis Claudio R. Goncalves) [RHEL-69738]
  - rtla/osnoise: Prevent NULL dereference in error handling (Luis Claudio R. Goncalves) [RHEL-69738] {CVE-2024-45002}
  - rtla/timerlat: Make user-space threads the default (Luis Claudio R. Goncalves) [RHEL-69738]
  - bpf, sockmap: Fix race between element replace and close() (Felix Maurer) [RHEL-68071 RHEL-72246] {CVE-2024-56664}
  - xsk: Free skb when TX metadata options are invalid (Felix Maurer) [RHEL-40153 RHEL-68071]
  - xsk: always clear DMA mapping information when unmapping the pool (Felix Maurer) [RHEL-68071]
  - bpf: fix OOB devmap writes when deleting elements (Felix Maurer) [RHEL-68071]
  - xsk: fix OOB map writes when deleting elements (Felix Maurer) [RHEL-68071 RHEL-72252] {CVE-2024-56614}
  - tcp_bpf: fix return value of tcp_bpf_sendmsg() (Felix Maurer) [RHEL-59445 RHEL-68071] {CVE-2024-46783}
  - bpf: Remove tst_run from lwt_seg6local_prog_ops. (Felix Maurer) [RHEL-59341 RHEL-68071] {CVE-2024-46754}
  - ice: implement low latency PHY timer updates (Petr Oros) [RHEL-25338]
  - ice: check low latency PHY timer update firmware capability (Petr Oros) [RHEL-25338]
  - ice: add lock to protect low latency interface (Petr Oros) [RHEL-25338]
  - ice: rename TS_LL_READ* macros to REG_LL_PROXY_H_* (Petr Oros) [RHEL-25338]
  - ice: use read_poll_timeout_atomic in ice_read_phy_tstamp_ll_e810 (Petr Oros) [RHEL-25338]
  - tpm_tis_spi: Add compatible string atmel,attpm20p (Štěpán Horáček) [RHEL-52747]
  - libstub,tpm: do not ignore failure case when reading final event log (Štěpán Horáček) [RHEL-52747]
  - tpm: fix unsigned/signed mismatch errors related to __calc_tpm2_event_size (Štěpán Horáček) [RHEL-52747]
  - tpm: do not ignore memblock_reserve return value (Štěpán Horáček) [RHEL-52747]
  - tpm: fix signed/unsigned bug when checking event logs (Štěpán Horáček) [RHEL-52747]
  - tpm: Lock TPM chip in tpm_pm_suspend() first (Štěpán Horáček) [RHEL-68209] {CVE-2024-53085}
  - tpm: Clean up TPM space after command failure (Štěpán Horáček) [RHEL-63357] {CVE-2024-49851}
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (Štěpán Horáček) [RHEL-52747]
  - char: tpm: Fix possible memory leak in tpm_bios_measurements_open() (Štěpán Horáček) [RHEL-52747]
  - tpm_tis_spi: add missing attpm20p SPI device ID entry (Štěpán Horáček) [RHEL-52747]
  - KEYS: trusted: Do not use WARN when encode fails (Štěpán Horáček) [RHEL-52747]
  - KEYS: trusted: tpm2: Use struct tpm_buf for sized buffers (Štěpán Horáček) [RHEL-52747]
  - tpm: Add tpm_buf_read_{u8,u16,u32} (Štěpán Horáček) [RHEL-52747]
  - tpm: TPM2B formatted buffers (Štěpán Horáček) [RHEL-52747]
  - tpm: Store the length of the tpm_buf data separately. (Štěpán Horáček) [RHEL-52747]
  - tpm: Update struct tpm_buf documentation comments (Štěpán Horáček) [RHEL-52747]
  - tpm: Move buffer handling from static inlines to real functions (Štěpán Horáček) [RHEL-52747]
  - tpm: Remove tpm_send() (Štěpán Horáček) [RHEL-52747]
  - tpm: Remove unused tpm_buf_tag() (Štěpán Horáček) [RHEL-52747]
  - tpm/eventlog: remove redundant assignment to variabel ret (Štěpán Horáček) [RHEL-52747]
  - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-73657] {CVE-2024-54680}
  - nvmet: Don't overflow subsysnqn (CKI Backport Bot) [RHEL-74081] {CVE-2024-53681}
  - PCI: Wait for Link before restoring Downstream Buses (Myron Stowe) [RHEL-71363]
  - PCI: Use an error code with PCIe failed link retraining (Myron Stowe) [RHEL-71363]
  - PCI: Correct error reporting with PCIe failed link retraining (Myron Stowe) [RHEL-71363]
  - PCI: Revert to the original speed after PCIe failed link retraining (Myron Stowe) [RHEL-71363]
  - PCI: Clear the LBMS bit after a link retrain (Myron Stowe) [RHEL-71363]
  - PCI: Wait for device readiness with Configuration RRS (Myron Stowe) [RHEL-71363]
  - s390/pci: Add pci_msg debug view to PCI report (Mete Durlu) [RHEL-50792]
  - s390/debug: Add a reverse mode for debug_dump() (Mete Durlu) [RHEL-50792]
  - s390/debug: Add debug_dump() to write debug view to a string buffer (Mete Durlu) [RHEL-50792]
  - s390/debug: Split private data alloc/free out of file operations (Mete Durlu) [RHEL-50792]
  - s390/debug: Simplify and document debug_next_entry() logic (Mete Durlu) [RHEL-50792]
  - s390/pci: Report PCI error recovery results via SCLP (Mete Durlu) [RHEL-50792]
  - s390/debug: Pass in and enforce output buffer size for format handlers (Mete Durlu) [RHEL-50792]
  - s390/sclp: Allow user-space to provide PCI reports for optical modules (Mete Durlu) [RHEL-71265]
  - Enable peer to peer DMA for ROCm (Mika Penttilä) [RHEL-9998]
  - pinmux: Use sequential access to access desc->pinmux data (David Arcari) [RHEL-73715] {CVE-2024-47141}
  - block: Prevent potential deadlocks in zone write plug error recovery (Ming Lei) [RHEL-71498]
  - dm: Fix dm-zoned-reclaim zone write pointer alignment (Ming Lei) [RHEL-71498]
  - block: Ignore REQ_NOWAIT for zone reset and zone finish operations (Ming Lei) [RHEL-71498]
  - block: Use a zone write plug BIO work for REQ_NOWAIT BIOs (Ming Lei) [RHEL-71498]
  - block: Prevent potential deadlock in blk_revalidate_disk_zones() (Ming Lei) [RHEL-71498]
  - block: Switch to using refcount_t for zone write plugs (Ming Lei) [RHEL-71498]
  - block: Add a public bdev_zone_is_seq() helper (Ming Lei) [RHEL-71498]
  - block: RCU protect disk->conv_zones_bitmap (Ming Lei) [RHEL-71498]
  - MAINTAINERS: Make Kristen Accardi the IAA crypto driver maintainer (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Remove potential infinite loop in check_completion() (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Fix potential use after free bug (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Use kmemdup() instead of kzalloc() and memcpy() (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Use cpumask_weight() when rebalancing (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Fix some errors in IAA documentation (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Change iaa statistics to atomic64_t (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Add global_stats file and remove individual stat files (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Remove comp/decomp delay statistics (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - fix decomp_bytes_in stats (Vladis Dronov) [RHEL-49539]
  - cppc_cpufreq: Remove HiSilicon CPPC workaround (Mark Langsdorf) [RHEL-65441]
  - cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged (Mark Langsdorf) [RHEL-65441]
  - nbd: fix partial sending (Ming Lei) [RHEL-64338]
  - kernel.spec: perf: fix C++ demangle support (Michael Petlan) [RHEL-69463]
  - mptcp: fix TCP options overflow. (CKI Backport Bot) [RHEL-73516]
  - Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x (CKI Backport Bot) [RHEL-70424]
  - netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level (CKI Backport Bot) [RHEL-73350] {CVE-2024-56783}
  - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (Benjamin Coddington) [RHEL-67304]
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (CKI Backport Bot) [RHEL-73708]
  - netfilter: nft_set_hash: skip duplicated elements pending gc run (CKI Backport Bot) [RHEL-73708]
  - netfilter: nft_inner: incorrect percpu area handling under softirq (CKI Backport Bot) [RHEL-73708]
  - netfilter: x_tables: fix LED ID check in led_tg_check() (CKI Backport Bot) [RHEL-73708]
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (CKI Backport Bot) [RHEL-73708]
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list (CKI Backport Bot) [RHEL-73708]
  - netfilter: nf_tables: must hold rcu read lock while iterating expression type list (CKI Backport Bot) [RHEL-73708]
  - netfilter: fib: check correct rtable in vrf setups (CKI Backport Bot) [RHEL-73708]
  - netfilter: allow ipv6 fragments to arrive on different devices (CKI Backport Bot) [RHEL-73708]
  - netfilter: ctnetlink: support CTA_FILTER for flush (CKI Backport Bot) [RHEL-73708]
  - netfilter: nfnetlink: convert kfree_skb to consume_skb (CKI Backport Bot) [RHEL-73708]
  - netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery (CKI Backport Bot) [RHEL-73708]
  - netfilter: nf_tables: skip transaction if update object is not implemented (CKI Backport Bot) [RHEL-73708]
  - netfilter: ip6_tables: zero-initialize fragment offset (CKI Backport Bot) [RHEL-73708]
  - fadump: reserve param area if below boot_mem_top (Mamatha Inamdar) [RHEL-73120]
  - powerpc/fadump: allocate memory for additional parameters early (Mamatha Inamdar) [RHEL-73120]
  - Bluetooth: btusb: mediatek: change the conditions for ISO interface (Bastien Nocera) [RHEL-72839]
  - Bluetooth: btusb: mediatek: add intf release flow when usb disconnect (Bastien Nocera) [RHEL-72839] {CVE-2024-56757}
  - Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (Bastien Nocera) [RHEL-72839]
  - Bluetooth: btusb: mediatek: move Bluetooth power off command position (Bastien Nocera) [RHEL-72839]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-556.el9]
changelog:
  - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74382]
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow (Radostin Stoyanov) [RHEL-63240] {CVE-2024-47739}
  - s390/entry: Mark IRQ entries to fix stack depot warnings (Mete Durlu) [RHEL-74468]
  - bnxt_en: Fix DIM shutdown (Michal Schmidt) [RHEL-72033]
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails (Michal Schmidt) [RHEL-72033]
  - bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (Michal Schmidt) [RHEL-72033]
  - bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (Michal Schmidt) [RHEL-72033]
  - bnxt_en: ethtool: Supply ntuple rss context action (Michal Schmidt) [RHEL-72033]
  - tools/perf/powerpc/util: Add support to handle compatible mode PVR for perf json events (Mamatha Inamdar) [RHEL-75636]
  - tools/perf/pmu-events/powerpc: Add support for compat events in json (Mamatha Inamdar) [RHEL-75636]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-557.el9]
changelog:
  - ipvlan: Support bonding events (Hangbin Liu) [RHEL-73836]
  - ipvlan: handle NETDEV_DOWN event (Hangbin Liu) [RHEL-73836]
  - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-73836]
  - ext4: update orig_path in ext4_find_extent() (Pavel Reichl) [RHEL-64615] {CVE-2024-49881}
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (CKI Backport Bot) [RHEL-74097] {CVE-2024-57884}
  - ipvs: speed up reads from ip_vs_conn proc file (Florian Westphal) [RHEL-74064]
  - x86/tdx: Enable CPU topology enumeration (Vitaly Kuznetsov) [RHEL-29351]
  - x86/tdx: Dynamically disable SEPT violations from causing #VEs (Vitaly Kuznetsov) [RHEL-29351]
  - x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup() (Vitaly Kuznetsov) [RHEL-29351]
  - x86/tdx: Introduce wrappers to read and write TD metadata (Vitaly Kuznetsov) [RHEL-29351]
  - bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compilation error in get_uprobe_offset() (Jerome Marchand) [RHEL-63880]
  - bpf: disallow 40-bytes extra stack for bpf_fastcall patterns (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for trie_get_next_key() (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Test with a very short loop (Jerome Marchand) [RHEL-63880]
  - bpf: Force checkpoint when jmp history is too long (Jerome Marchand) [RHEL-63880]
  - bpf: Check validity of link->type in bpf_link_show_fdinfo() (Jerome Marchand) [RHEL-63880]
  - bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (Jerome Marchand) [RHEL-63880]
  - bpf,perf: Fix perf_event_detach_bpf_prog error handling (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for passing in uninit mtu_len (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for writes to .rodata (Jerome Marchand) [RHEL-63880]
  - bpf: Remove MEM_UNINIT from skb/xdp MTU helpers (Jerome Marchand) [RHEL-63880]
  - bpf: Fix overloading of MEM_UNINIT's meaning (Jerome Marchand) [RHEL-63880]
  - bpf: Add MEM_WRITE attribute (Jerome Marchand) [RHEL-63880]
  - bpf: Preserve param->string when parsing mount options (Jerome Marchand) [RHEL-63880]
  - bpf: Properly test iter/task tid filtering (Jerome Marchand) [RHEL-63880]
  - bpf: Fix iter/task tid filtering (Jerome Marchand) [RHEL-63880]
  - lib/buildid: Handle memfd_secret() files in build_id_parse() (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for sign extension in coerce_subreg_to_size_sx() (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for truncation after sign extension in coerce_reg_to_size_sx() (Jerome Marchand) [RHEL-63880]
  - bpf: Fix truncation bug in coerce_reg_to_size_sx() (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Assert link info uprobe_multi count & path_size if unset (Jerome Marchand) [RHEL-63880]
  - bpf: Fix unpopulated path_size when uprobe_multi fields unset (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix cross-compiling urandom_read (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for kfunc module order (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Provide a generic [un]load_module helper (Jerome Marchand) [RHEL-63880]
  - bpf: fix kfunc btf caching for modules (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix error compiling cgroup_ancestor.c with musl libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: fix perf_event link info name_len assertion (Jerome Marchand) [RHEL-63880]
  - bpf: fix unpopulated name_len field in perf_event link info (Jerome Marchand) [RHEL-63880]
  - bpf: use kvzmalloc to allocate BPF verifier environment (Jerome Marchand) [RHEL-63880]
  - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix backtrace printing for selftests crashes (Jerome Marchand) [RHEL-63880]
  - bpf: Fix memory leak in bpf_core_apply (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix uprobe_multi compilation error (Jerome Marchand) [RHEL-63880]
  - bpf: Sync uapi bpf.h header to tools directory (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Verify that sync_linked_regs preserves subreg_def (Jerome Marchand) [RHEL-63880]
  - bpf: sync_linked_regs() must preserve subreg_def (Jerome Marchand) [RHEL-63880]
  - btf: remove redundant CONFIG_BPF test in scripts/link-vmlinux.sh (Jerome Marchand) [RHEL-63880]
  - bpf: Call the missed kfree() when there is no special field in btf (Jerome Marchand) [RHEL-63880]
  - bpf: Call the missed btf_record_free() when map creation fails (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add a test case to write mtu result into .rodata (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add a test case to write strtol result into .rodata (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Rename ARG_PTR_TO_LONG test description (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test (Jerome Marchand) [RHEL-63880]
  - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (Jerome Marchand) [RHEL-63880]
  - bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types (Jerome Marchand) [RHEL-63880]
  - bpf: Fix helper writes to read-only maps (Jerome Marchand) [RHEL-63880]
  - bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers (Jerome Marchand) [RHEL-63880]
  - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add tests for sdiv/smod overflow cases (Jerome Marchand) [RHEL-63880]
  - libbpf: Add bpf_object__token_fd accessor (Jerome Marchand) [RHEL-63880]
  - docs/bpf: Add missing BPF program types to docs (Jerome Marchand) [RHEL-63880]
  - docs/bpf: Add constant values for linkages (Jerome Marchand) [RHEL-63880]
  - bpf: Use fake pt_regs when doing bpf syscall tracepoint tracing (Jerome Marchand) [RHEL-63880]
  - bpf/selftests: Check errno when percpu map value size exceeds (Jerome Marchand) [RHEL-63880]
  - bpf: Check percpu map value size first (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix arena_atomics failure due to llvm change (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: add build ID tests (Jerome Marchand) [RHEL-63880]
  - bpf: wire up sleepable bpf_get_stack() and bpf_get_task_stack() helpers (Jerome Marchand) [RHEL-63880]
  - bpf: decouple stack_map_get_build_id_offset() from perf_callchain_entry (Jerome Marchand) [RHEL-63880]
  - lib/buildid: don't limit .note.gnu.build-id to the first page in ELF (Jerome Marchand) [RHEL-63880]
  - lib/buildid: implement sleepable build_id_parse() API (Jerome Marchand) [RHEL-63880]
  - lib/buildid: rename build_id_parse() into build_id_parse_nofault() (Jerome Marchand) [RHEL-63880]
  - lib/buildid: remove single-page limit for PHDR search (Jerome Marchand) [RHEL-63880]
  - lib/buildid: take into account e_phoff when fetching program headers (Jerome Marchand) [RHEL-63880]
  - lib/buildid: add single folio-based file reader abstraction (Jerome Marchand) [RHEL-63880]
  - lib/buildid: harden build ID parsing logic (Jerome Marchand) [RHEL-63880]
  - build-id: require program headers to be right after ELF header (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for __nullable suffix in tp_btf (Jerome Marchand) [RHEL-63880]
  - bpf: Support __nullable argument suffix for tp_btf (Jerome Marchand) [RHEL-63880]
  - bpftool: Fix undefined behavior in qsort(NULL, 0, ...) (Jerome Marchand) [RHEL-63880]
  - libbpf: Fix uretprobe.multi.s programs auto attachment (Jerome Marchand) [RHEL-63880]
  - libbpf: Fix some typos in comments (Jerome Marchand) [RHEL-63880]
  - bpf: Fix error message on kfunc arg type mismatch (Jerome Marchand) [RHEL-63880]
  - bpftool: Fix typos (Jerome Marchand) [RHEL-63880]
  - bpftool: Fix undefined behavior caused by shifting into the sign bit (Jerome Marchand) [RHEL-63880]
  - libbpf: Fixed getting wrong return address on arm64 architecture (Jerome Marchand) [RHEL-63880]
  - libbpf: Workaround (another) -Wmaybe-uninitialized false positive (Jerome Marchand) [RHEL-63880]
  - bpftool: Improve btf c dump sorting stability (Jerome Marchand) [RHEL-63880]
  - bpf/selftests: coverage for tp and perf event progs using kfuncs (Jerome Marchand) [RHEL-63880]
  - bpf: allow kfuncs within tracepoint and perf event programs (Jerome Marchand) [RHEL-63880]
  - bpf: change int cmd argument in __sys_bpf into typed enum bpf_cmd (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add description for running vmtest on RV64 (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add riscv64 configurations to local vmtest (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add DENYLIST.riscv64 (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add config.riscv64 (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Enable cross platform testing for vmtest (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Support local rootfs image for vmtest (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Limit URLS parsing logic to actual scope in vmtest (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Prefer static linking for LLVM libraries (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Rename fallback in bpf_dctcp to avoid naming conflict (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Adapt OUTPUT appending logic to lower versions of Make (Jerome Marchand) [RHEL-63880]
  - libbpf: fix some typos in libbpf (Jerome Marchand) [RHEL-63880]
  - bpftool: fix some typos in bpftool (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: fix some typos in selftests (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add uprobe multi pid filter test for clone-ed processes (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add uprobe multi pid filter test for fork-ed processes (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add child argument to spawn_child function (Jerome Marchand) [RHEL-63880]
  - bpf: Fix uprobe multi pid filter check (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Enable test_bpf_syscall_macro: Syscall_arg1 on s390 and arm64 (Jerome Marchand) [RHEL-63880]
  - libbpf: Access first syscall argument with CO-RE direct read on arm64 (Jerome Marchand) [RHEL-63880]
  - libbpf: Access first syscall argument with CO-RE direct read on s390 (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add a selftest for x86 jit convergence issues (Jerome Marchand) [RHEL-63880]
  - bpf, x64: Fix a jit convergence issue (Jerome Marchand) [RHEL-63880]
  - selftests: bpf: Replace sizeof(arr)/sizeof(arr[0]) with ARRAY_SIZE (Jerome Marchand) [RHEL-63880]
  - bpf: Fix indentation issue in epilogue_idx (Jerome Marchand) [RHEL-63880]
  - bpf: Remove the insn_buf array stack usage from the inline_bpf_loop() (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix procmap_query()'s params mismatch and compilation warning (Jerome Marchand) [RHEL-63880]
  - bpf, arm64: Jit BPF_CALL to direct call when possible (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Do not update vmlinux.h unnecessarily (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Specify libbpf headers required for %.bpf.o progs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Check if distilled base inherits source endianness (Jerome Marchand) [RHEL-63880]
  - bpf: Use sockfd_put() helper (Jerome Marchand) [RHEL-63880]
  - bpf: Remove custom build rule (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add tests for iter next method returning valid pointer (Jerome Marchand) [RHEL-63880]
  - bpf: Make the pointer returned by iter next method valid (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Test epilogue patching when the main prog has multiple BPF_EXIT (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: A pro/epilogue test when the main prog jumps back to the 1st insn (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add tailcall epilogue test (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Test gen_prologue and gen_epilogue (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: attach struct_ops maps before test prog runs (Jerome Marchand) [RHEL-63880]
  - bpf: Export bpf_base_func_proto (Jerome Marchand) [RHEL-63880]
  - bpf: Add gen_epilogue to bpf_verifier_ops (Jerome Marchand) [RHEL-63880]
  - bpf: Adjust BPF_JMP that jumps to the 1st insn of the prologue (Jerome Marchand) [RHEL-63880]
  - bpf: Move insn_buf[16] to bpf_verifier_env (Jerome Marchand) [RHEL-63880]
  - bpf: Use kvmemdup to simplify the code (Jerome Marchand) [RHEL-63880]
  - docs/bpf: Fix a typo in verifier.rst (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Make sure stashed kptr in local kptr is freed recursively (Jerome Marchand) [RHEL-63880]
  - libbpf: Fix bpf_object__open_skeleton()'s mishandling of options (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for zero offset or non-zero offset pointers as KF_ACQUIRE kfuncs argument (Jerome Marchand) [RHEL-63880]
  - bpf: Relax KF_ACQUIRE kfuncs strict type matching constraint (Jerome Marchand) [RHEL-63880]
  - bpf, arm64: Avoid blindly saving/restoring all callee-saved registers (Jerome Marchand) [RHEL-63880]
  - bpf, arm64: Get rid of fpb (Jerome Marchand) [RHEL-63880]
  - samples/bpf: tracex4: Fix failed to create kretprobe 'kmem_cache_alloc_node+0x0' (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add tests for bpf_copy_from_user_str kfunc. (Jerome Marchand) [RHEL-63880]
  - bpf: Add bpf_copy_from_user_str kfunc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Test bpf_kptr_xchg stashing into local kptr (Jerome Marchand) [RHEL-63880]
  - bpf: Support bpf_kptr_xchg into local kptr (Jerome Marchand) [RHEL-63880]
  - bpf: Rename ARG_PTR_TO_KPTR -> ARG_KPTR_XCHG_DEST (Jerome Marchand) [RHEL-63880]
  - bpf: Search for kptrs in prog BTF structs (Jerome Marchand) [RHEL-63880]
  - bpf: Let callers of btf_parse_kptr() track life cycle of prog btf (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: add multi-uprobe benchmarks (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: make use of PROCMAP_QUERY ioctl if available (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: #define LOCAL_LABEL_LEN for jit_disasm_helpers.c (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: match both retq/rethunk in verifier_tailcall_jit (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: test_loader.c:get_current_arch() should not return 0 (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add testcase for updating attached freplace prog to prog_array map (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: check if bpf_fastcall is recognized for kfuncs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: by default use arch mask allowing all archs (Jerome Marchand) [RHEL-63880]
  - bpf: allow bpf_fastcall for bpf_cast_to_kern_ctx and bpf_rdonly_cast (Jerome Marchand) [RHEL-63880]
  - bpf: support bpf_fastcall patterns for kfuncs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: rename nocsr -> bpf_fastcall in selftests (Jerome Marchand) [RHEL-63880]
  - bpf: rename nocsr -> bpf_fastcall in verifier (Jerome Marchand) [RHEL-63880]
  - bpf: Fix percpu address space issues (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: test for malformed BPF_CORE_TYPE_ID_LOCAL relocation (Jerome Marchand) [RHEL-63880]
  - bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: validate __xlated same way as __jited (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: validate jit behaviour for tail calls (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: __jited test tag to check disassembly after jit (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: utility function to get program disassembly after jit (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: replace __regex macro with "{{...}}" patterns (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: fix to avoid __msg tag de-duplication by clang (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: correctly move 'log' upon successful match (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: less spam in the log for message matching (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: test passing iterator to a kfunc (Jerome Marchand) [RHEL-63880]
  - bpf: allow passing struct bpf_iter_<type> as kfunc arguments (Jerome Marchand) [RHEL-63880]
  - bpf: extract iterator argument type and name validation logic (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Disable strict aliasing for verifier_nocsr.c (Jerome Marchand) [RHEL-63880]
  - bpf: Allow bpf_current_task_under_cgroup() with BPF_CGROUP_* (Jerome Marchand) [RHEL-63880]
  - bpf: Enable generic kfuncs for BPF_CGROUP_* programs (Jerome Marchand) [RHEL-63880]
  - samples/bpf: Fix compilation errors with cf-protection option (Jerome Marchand) [RHEL-63880]
  - libbpf: Workaround -Wmaybe-uninitialized false positive (Jerome Marchand) [RHEL-63880]
  - bpf: Remove __btf_name_valid() and change to btf_name_valid_identifier() (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: convert test_skb_cgroup_id_user to test_progs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Remove test_skb_cgroup_id.sh from TEST_PROGS (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: add proper section name to bpf prog and rename it (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: convert get_current_cgroup_id_user to test_progs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Avoid subtraction after htons() in ipip tests (Jerome Marchand) [RHEL-63880]
  - bpf: factor out fetching bpf_map from FD and adding it to used_maps list (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: add positive tests for new VFS based BPF kfuncs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: add negative tests for new VFS based BPF kfuncs (Jerome Marchand) [RHEL-63880]
  - bpf: introduce new VFS based BPF kfuncs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix a btf_dump selftest failure (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: add wrong type test to cgroup dev (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: convert test_dev_cgroup to test_progs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: do not disable /dev/null device access in cgroup dev test (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix error compiling tc_redirect.c with musl libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix using stdout, stderr as struct field names (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compile if backtrace support missing in libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix redefinition errors compiling lwt_reroute.c (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix C++ compile error from missing _Bool type (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix error compiling test_lru_map.c (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix arg parsing in veristat, test_progs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Use portable POSIX basename() (Jerome Marchand) [RHEL-63880]
  - tools/bpf: Fix the wrong format specifier (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Load struct_ops map in global_maps_resize test (Jerome Marchand) [RHEL-63880]
  - libbpf: Don't take direct pointers into BTF data from st_ops (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix errors compiling decap_sanity.c with musl libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compiling core_reloc.c with musl-libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compiling tcp_rtt.c with musl-libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compiling flow_dissector.c with musl-libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compiling kfree_skb.c with musl-libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix include of <sys/fcntl.h> (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix missing BUILD_BUG_ON() declaration (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix missing UINT_MAX definitions in benchmarks (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Drop unneeded error.h includes (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Use pid_t consistently in test_progs.c (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Make %.test.d prerequisite order only (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: test no_caller_saved_registers spill/fill removal (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: __arch_* macro to limit test cases to specific archs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: allow checking xlated programs in verifier_* tests (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: extract test_loader->expect_msgs as a data structure (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: no need to track next_match_pos in struct test_loader (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: print correct offset for pseudo calls in disasm_insn() (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add reg_bounds tests for ldsx and subreg compare (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add tests for ldsx of pkt data/data_end/data_meta accesses (Jerome Marchand) [RHEL-63880]
  - bpf: Fail verification for sign-extension of packet data/data_end/data_meta (Jerome Marchand) [RHEL-63880]
  - tools/runqslower: Fix LDFLAGS and add LDLIBS support (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: extract utility function for BPF disassembly (Jerome Marchand) [RHEL-63880]
  - bpf, x86, riscv, arm: no_caller_saved_registers for bpf_get_smp_processor_id() (Jerome Marchand) [RHEL-63880]
  - bpf: no_caller_saved_registers attribute for helper calls (Jerome Marchand) [RHEL-63880]
  - riscv, bpf: inline bpf_get_smp_processor_id() (Jerome Marchand) [RHEL-63880]
  - bpf: add a get_helper_proto() utility function (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix wrong binary in Makefile log output (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add a test for mmap-able map in map (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix error linking uprobe_multi on mips (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add missing system defines for mips (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Don't include .d files on make clean (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add uprobe multi consumers test (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add uprobe fail tests for uprobe multi (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add verifier tests for bpf lsm (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for lsm tail call (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Avoid load failure for token_lsm.c (Jerome Marchand) [RHEL-63880]
  - bpf: Prevent tail call between progs attached to different hooks (Jerome Marchand) [RHEL-63880]
  - bpf, lsm: Add disabled BPF LSM hook list (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Ensure the unsupported struct_ops prog cannot be loaded (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix the missing tramp_1 to tramp_40 ops in cfi_stubs (Jerome Marchand) [RHEL-63880]
  - bpf: Check unsupported ops from the bpf_struct_ops's cfi_stubs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add testcases for tailcall hierarchy fixing (Jerome Marchand) [RHEL-63880]
  - bpf, arm64: Fix tailcall hierarchy (Jerome Marchand) [RHEL-63880]
  - bpf, x64: Fix tailcall hierarchy (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Update comments find_equal_scalars->sync_linked_regs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Tests for per-insn sync_linked_regs() precision tracking (Jerome Marchand) [RHEL-63880]
  - bpf: Remove mark_precise_scalar_ids() (Jerome Marchand) [RHEL-63880]
  - bpf: Track equal scalars history on per-instruction level (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Use auto-dependencies for test objects (Jerome Marchand) [RHEL-63880]
  - bpf: Simplify character output in seq_print_delegate_opts() (Jerome Marchand) [RHEL-63880]
  - bpf: Replace 8 seq_puts() calls by seq_putc() calls (Jerome Marchand) [RHEL-63880]
  - buildid: use kmap_local_page() (Jerome Marchand) [RHEL-63880]
  - xfs: Mark all experimental code as tech preview (Bill O'Donnell) [RHEL-64940]
  - x86/virt/tdx: Require the module to assert it has the NO_RBP_MOD mitigation (Paolo Bonzini) [RHEL-71541]
  - x86/virt/tdx: Switch to use auto-generated global metadata reading code (Paolo Bonzini) [RHEL-71541]
  - x86/virt/tdx: Use dedicated struct members for PAMT entry sizes (Paolo Bonzini) [RHEL-71541]
  - x86/virt/tdx: Use auto-generated code to read global metadata (Paolo Bonzini) [RHEL-71541]
  - x86/virt/tdx: Start to track all global metadata in one structure (Paolo Bonzini) [RHEL-71541]
  - x86/virt/tdx: Rename 'struct tdx_tdmr_sysinfo' to reflect the spec better (Paolo Bonzini) [RHEL-71541]
  - x86/virt/tdx: Remove duplicate include (Paolo Bonzini) [RHEL-71541]
  - KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Short-circuit all of kvm_apic_set_base() if MSR value is unchanged (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Unpack msr_data structure prior to calling kvm_apic_set_base() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Rename APIC base setters to better capture their relationship (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Remove some unused declarations (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Move kvm_set_apic_base() implementation to lapic.c (from x86.c) (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Inline kvm_get_apic_mode() in lapic.h (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Get vcpu->arch.apic_base directly and drop kvm_get_apic_base() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Drop superfluous kvm_lapic_set_base() call when setting APIC state (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Short-circuit all kvm_lapic_set_base() if MSR value isn't changing (Paolo Bonzini) [RHEL-71541]
  - KVM: Allow calling kvm_release_page_{clean,dirty}() on a NULL page pointer (Paolo Bonzini) [RHEL-71541]
  - KVM: Drop KVM_ERR_PTR_BAD_PAGE and instead return NULL to indicate an error (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Unconditionally set irr_pending when updating APICv state (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Rename get_msr_feature() APIs to get_feature_msr() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Refactor kvm_x86_ops.get_msr_feature() to avoid kvm_msr_entry (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Register "emergency disable" callbacks when virt is enabled (Paolo Bonzini) [RHEL-71541]
  - x86/reboot: Unconditionally define cpu_emergency_virt_cb typedef (Paolo Bonzini) [RHEL-71541]
  - KVM: Add arch hooks for enabling/disabling virtualization (Paolo Bonzini) [RHEL-71541]
  - KVM: Add a module param to allow enabling virtualization when KVM is loaded (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Rename virtualization {en,dis}abling APIs to match common KVM (Paolo Bonzini) [RHEL-71541]
  - KVM: Rename arch hooks related to per-CPU virtualization enabling (Paolo Bonzini) [RHEL-71541]
  - KVM: Rename symbols related to enabling virtualization hardware (Paolo Bonzini) [RHEL-71541]
  - KVM: Register cpuhp and syscore callbacks when enabling hardware (Paolo Bonzini) [RHEL-71541]
  - Documentation: KVM: fix warning in "make htmldocs" (Paolo Bonzini) [RHEL-71541]
  - KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock (Paolo Bonzini) [RHEL-71541] {CVE-2024-47744}
  - KVM: x86/mmu: fix KVM_X86_QUIRK_SLOT_ZAP_ALL for shadow MMU (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/mmu: Introduce a quirk to control memslot zap behavior (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Use '0' for guest RIP if PMI encounters protected guest state (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Bypass register cache when querying CPL from kvm_sched_out() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Ensure vcpu->mode is loaded from memory in kvm_vcpu_exit_request() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init (Paolo Bonzini) [RHEL-71541]
  - kvm: svm: Fix gctx page leak on invalid inputs (Paolo Bonzini) [RHEL-71541]
  - KVM: SVM: Fix an error code in sev_gmem_post_populate() (Paolo Bonzini) [RHEL-71541]
  - KVM: SVM: Fix uninitialized variable bug (Paolo Bonzini) [RHEL-71541]
  - KVM: selftests: Disable strict aliasing (Paolo Bonzini) [RHEL-71541]
  - KVM: selftests: Fix build on on non-x86 architectures (Paolo Bonzini) [RHEL-71541]
  - KVM: selftests: x86: Avoid using SSE/AVX instructions (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Add a struct to consolidate host values, e.g. EFER, XCR0, etc... (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/mmu: Fixup comments missed by the REMOVED_SPTE=>FROZEN_SPTE rename (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/tdp_mmu: Rename REMOVED_SPTE to FROZEN_SPTE (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/mmu: fix determination of max NPT mapping level for private pages (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/pmu: Add kvm_pmu_call() to simplify static calls of kvm_pmu_ops (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Introduce kvm_x86_call() to simplify static calls of kvm_x86_ops (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Replace static_call_cond() with static_call() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/mmu: Clean up make_huge_page_split_spte() definition and intro (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/tdp_mmu: Take a GFN in kvm_tdp_mmu_fast_pf_get_last_sptep() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/tdp_mmu: Sprinkle __must_check (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/mmu: Rephrase comment about synthetic PFERR flags in #PF handler (Paolo Bonzini) [RHEL-71541]
  - Revert "KVM: async_pf: avoid recursive flushing of work items" (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Move nEPT exit_qualification field from kvm_vcpu_arch to x86_exception (Paolo Bonzini) [RHEL-71541]
  - KVM: nVMX: Clear EXIT_QUALIFICATION when injecting an EPT Misconfig (Paolo Bonzini) [RHEL-71541]
  - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC (Phil Auld) [RHEL-70904]
  - sched/deadline: Fix warning in migrate_enable for boosted tasks (Phil Auld) [RHEL-70904]
  - sched/core: Prevent wakeup of ksoftirqd during idle load balance (Phil Auld) [RHEL-70904]
  - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (Phil Auld) [RHEL-70904]
  - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (Phil Auld) [RHEL-70904]
  - softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel (Phil Auld) [RHEL-70904]
  - sched: fix warning in sched_setaffinity (Phil Auld) [RHEL-70904]
  - efi/cper: Print correctable AER information (CKI Backport Bot) [RHEL-56272]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-558.el9]
changelog:
  - PCI: Batch BAR sizing operations (Myron Stowe) [RHEL-76025]
  - powerpc/pseries/eeh: Fix get PE state translation (Mamatha Inamdar) [RHEL-74250]
  - Bluetooth: iso: Fix circular lock in iso_listen_bis (CKI Backport Bot) [RHEL-73661] {CVE-2024-54460}
  - CI: Enable pipelines for rt-64k variant (Juri Lelli) [RHEL-70289]
  - redhat: Add kernel-rt-64k variant (Juri Lelli) [RHEL-70289]
  - Bluetooth: hci_core: Fix sleeping function called from invalid context (CKI Backport Bot) [RHEL-74112] {CVE-2024-57894}
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Bastien Nocera) [RHEL-72279]
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (CKI Backport Bot) [RHEL-72279] {CVE-2024-56605}
  - redhat/configs: set new PKEY_UV option on s390 (Mete Durlu) [RHEL-50782]
  - s390/crypto: Add hardware acceleration for full AES-XTS mode (Mete Durlu) [RHEL-50783]
  - s390/crypto: Postpone the key split to key conversion (Mete Durlu) [RHEL-50783]
  - s390/crypto: Introduce function for tokenize clearkeys (Mete Durlu) [RHEL-50783]
  - s390/crypto: Generalize parameters for key conversion (Mete Durlu) [RHEL-50783]
  - s390/crypto: Use module-local structures for protected keys (Mete Durlu) [RHEL-50783]
  - s390/crypto: Convert to reverse x-mas tree, rename ret to rc (Mete Durlu) [RHEL-50783]
  - s390/pkey: Tolerate larger key blobs (Mete Durlu) [RHEL-50783]
  - s390/pkey: Add new pkey handler module pkey-uv (Mete Durlu) [RHEL-50782]
  - s390/pkey: Build module name array selectively based on kernel config options (Mete Durlu) [RHEL-50782]
  - s390/pkey: Fix checkpatch findings in pkey header file (Mete Durlu) [RHEL-50782]
  - s390/pkey: Rework pkey verify for protected keys (Mete Durlu) [RHEL-50782]
  - s390/pkey: Simplify protected key length calculation code (Mete Durlu) [RHEL-50782]
  - s390/zcrypt: Cleanup include zcrypt_api.h (Mete Durlu) [RHEL-50782]
  - s390/uv: export prot_virt_guest symbol in uv (Mete Durlu) [RHEL-50782]
  - cxl/core: Return error when cxl_endpoint_gather_bandwidth() handles a non-PCI device (John W. Linville) [RHEL-67033]
  - cxl/pci: Check Mem_info_valid bit for each applicable DVSEC (John W. Linville) [RHEL-67033]
  - cxl/pci: Remove duplicated implementation of waiting for memory_info_valid (John W. Linville) [RHEL-67033]
  - cxl: Calculate region bandwidth of targets with shared upstream link (John W. Linville) [RHEL-67033]
  - cxl: Preserve the CDAT access_coordinate for an endpoint (John W. Linville) [RHEL-67033]
  - EINJ, CXL: Fix CXL device SBDF calculation (John W. Linville) [RHEL-67033]
  - cxl/port: Prevent out-of-order decoder allocation (John W. Linville) [RHEL-67033]
  - cxl/acpi: Ensure ports ready at cxl_acpi_probe() return (John W. Linville) [RHEL-67033]
  - cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() (John W. Linville) [RHEL-67033]
  - cxl/port: Fix CXL port initialization order when the subsystem is built-in (John W. Linville) [RHEL-67033]
  - cxl/events: Fix Trace DRAM Event Record (John W. Linville) [RHEL-67033]
  - cxl/pci: Fix to record only non-zero ranges (John W. Linville) [RHEL-67033]
  - cxl/test: Skip cxl_setup_parent_dport() for emulated dports (John W. Linville) [RHEL-67033]
  - cxl/pci: Get AER capability address from RCRB only for RCH dport (John W. Linville) [RHEL-67033]
  - cxl/region: Verify target positions using the ordered target list (John W. Linville) [RHEL-67033]
  - cxl: Restore XOR'd position bits during address translation (John W. Linville) [RHEL-67033]
  - cxl/core: Fix incorrect vendor debug UUID define (John W. Linville) [RHEL-67033]
  - hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (Tony Camuso) [RHEL-65221]
  - hid: intel-ish-hid: Add support for vendor customized firmware loading (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: Use CPU generation string in driver_data (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: Remove unused declarations (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: fix endian-conversion (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: add MODULE_DESCRIPTION() (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: fix ishtp_wait_resume() kernel-doc (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: Fix build error for COMPILE_TEST (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: handler multiple MNG_RESET_NOTIFY messages (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: Implement loading firmware from host feature (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: Add driver_data for specifying the firmware filename (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: ipc: Add Lunar Lake-M PCI device ID (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: Use PCI_VDEVICE() and rename device ID macros (Tony Camuso) [RHEL-65221]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-559.el9]
changelog:
  - iommufd: Fix struct iommu_hwpt_pgfault init and padding (Eder Zulian) [RHEL-75942]
  - iommufd/fault: Use a separate spinlock to protect fault->deliver list (Eder Zulian) [RHEL-75942]
  - iommufd/fault: Destroy response and mutex in iommufd_fault_destroy() (Eder Zulian) [RHEL-75942]
  - iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (Eder Zulian) [RHEL-75942]
  - iommu: iommufd: fix WARNING in iommufd_device_unbind (Eder Zulian) [RHEL-75942]
  - gpu: host1x: Set up device DMA parameters (Marcin Juszkiewicz) [RHEL-71795]
  - gitlab-ci: enable rt/aarch64 for RHEL>=9.6 (Michael Hofmann)
  - redhat: create 'debug' addon for UKI (Li Tian) [RHEL-75756]
  - octeon_ep_vf: update tx/rx stats locally for persistence (Kamal Heib) [RHEL-64635 RHEL-67691]
  - octeon_ep_vf: remove firmware stats fetch in ndo_get_stats64 (Kamal Heib) [RHEL-64635 RHEL-67691]
  - octeon_ep: update tx/rx stats locally for persistence (Kamal Heib) [RHEL-64635 RHEL-67691]
  - octeon_ep: remove firmware stats fetch in ndo_get_stats64 (Kamal Heib) [RHEL-64635 RHEL-67691]
  - octeon_ep: add ndo ops for VFs in PF driver (Kamal Heib) [RHEL-64635 RHEL-67691]
  - octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx() (Kamal Heib) [RHEL-64635 RHEL-67691]
  - octeon_ep: Implement helper for iterating packets in Rx queue (Kamal Heib) [RHEL-64635 RHEL-67691]
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (CKI Backport Bot) [RHEL-74440] {CVE-2024-57929}
  - RDMA/bnxt_re: Fix error recovery sequence (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Fix the locking while accessing the QP table (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Disable use of reserved wqes (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Fix max_qp_wrs reported (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Add check for path mtu in modify_qp (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Fix the check for 9060 condition (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Avoid initializing the software queue for user queues (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Fix max SGEs for the Work Request (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Remove always true dattr validity check (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Correct the sequence of device suspend (Mohammad Heib) [RHEL-74367]
  - redhat/configs: enable iBFT parsing on aarch64 (Chris Leech) [RHEL-56135]
  - Bluetooth: btintel_pcie: remove redundant assignment to variable ret (Bastien Nocera) [RHEL-71257]
  - Bluetooth: btintel: Do no pass vendor events to stack (Bastien Nocera) [RHEL-71257]
  - Bluetooth: btintel_pcie: Remove deadcode (Bastien Nocera) [RHEL-71257]
  - Bluetooth: btintel_pcie: Add recovery mechanism (Bastien Nocera) [RHEL-71257]
  - Bluetooth: btintel_pcie: Add handshake between driver and firmware (Bastien Nocera) [RHEL-71257]
  - net: Fix netns for ip_tunnel_init_flow() (Guillaume Nault) [RHEL-73391]
  - ipv4: give an IPv4 dev to blackhole_netdev (Guillaume Nault) [RHEL-73391]
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Charles Mirabile) [RHEL-72328] {CVE-2024-56562}
  - iommu/vt-d: Fix qi_batch NULL pointer with nested parent domain (Jerry Snitselaar) [RHEL-73035] {CVE-2024-56668}
  - iommu/vt-d: Remove cache tags before disabling ATS (Jerry Snitselaar) [RHEL-73035] {CVE-2024-56669}
  - iommufd: Fix out_fput in iommufd_fault_alloc() (Jerry Snitselaar) [RHEL-73035] {CVE-2024-56624}
  - iommu/vt-d: Fix checks and print in pgtable_walk() (Jerry Snitselaar) [RHEL-73035]
  - iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes() (Jerry Snitselaar) [RHEL-73035]
  - iommu/amd/pgtbl_v2: Take protection domain lock before invalidating TLB (Jerry Snitselaar) [RHEL-73035]
  - iommu/arm-smmu: Defer probe of clients after smmu device bound (Jerry Snitselaar) [RHEL-73035] {CVE-2024-56568}
  - dma-mapping: remove an outdated comment from dma-map-ops.h (Jerry Snitselaar) [RHEL-73035]
  - iommu/tegra241-cmdqv: Fix unused variable warning (Jerry Snitselaar) [RHEL-73035]
  - iommu/tegra241-cmdqv: Staticize cmdqv_debugfs_dir (Jerry Snitselaar) [RHEL-73035]
  - iommu/s390: Implement blocking domain (Jerry Snitselaar) [RHEL-73035] {CVE-2024-53232}
  - dmaengine: tegra: Return correct DMA status when paused (Jerry Snitselaar) [RHEL-73037]
  - linux/dmaengine.h: fix a few kernel-doc warnings (Jerry Snitselaar) [RHEL-73037]
  - dmaengine: dw: Select only supported masters for ACPI devices (Jerry Snitselaar) [RHEL-73037]
  - dmaengine: ti: k3-udma: Set EOP for all TRs in cyclic BCDMA transfer (Jerry Snitselaar) [RHEL-73037]
  - dmaengine: sh: rz-dmac: handle configs where one address is zero (Jerry Snitselaar) [RHEL-73037]
  - dmaengine: acpi: Avoid comparison GSI with Linux vIRQ (Jerry Snitselaar) [RHEL-73037]
  - usbip: move usbip modules to internal rpm (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - config: usb: enable usbip (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: tools: Fix detach_port() invalid port error path (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: Add USB_SPEED_SUPER_PLUS as valid arg (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usb: vhci-hcd: Do not drop references before new references are gained (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: Don't submit special requests twice (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - USB: usbip: vudc: Convert to platform remove callback returning void (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usb/usbip: fix wrong data added to platform device (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: Use platform_device_register_full() (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - USB: usbip: fix stub_dev hub disconnect (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - USB: usbip: Remove an unnecessary goto (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - USB: usbip: Remove an unnecessary NULL value (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: usbip_host: Replace strlcpy with strscpy (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: vhci_hcd: Convert to platform remove callback returning void (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usb/usbip: Fix v_recv_cmd_submit() to use PIPE_BULK define (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - USB: usbip: missing lock in stub down (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: convert sysfs snprintf to sysfs_emit (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: vudc: Convert snprintf() to sysfs_emit() (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: add USBIP_URB_* URB transfer flags (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - ipmi: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Tony Camuso) [RHEL-67219]
  - ipmi: ssif_bmc: prevent integer overflow on 32bit systems (Tony Camuso) [RHEL-67219]
  - ipmi: kcs_bmc_npcm7xx: Convert to platform remove callback returning void (Tony Camuso) [RHEL-67219]
  - ipmi: kcs_bmc_aspeed: Convert to platform remove callback returning void (Tony Camuso) [RHEL-67219]
  - ipmi: ipmi_ssif: Convert to platform remove callback returning void (Tony Camuso) [RHEL-67219]
  - ipmi: ipmi_si_platform: Convert to platform remove callback returning void (Tony Camuso) [RHEL-67219]
  - ipmi: ipmi_powernv: Convert to platform remove callback returning void (Tony Camuso) [RHEL-67219]
  - ipmi: bt-bmc: Convert to platform remove callback returning void (Tony Camuso) [RHEL-67219]
  - char: ipmi: handle HAS_IOPORT dependencies (Tony Camuso) [RHEL-67219]
  - perf/arm-cmn: Ensure port and device id bits are set properly (Mark Salter) [RHEL-5704]
  - perf: arm-ni: Fix an NULL vs IS_ERR() bug (Mark Salter) [RHEL-5704]
  - perf: arm_pmuv3: Use BR_RETIRED for HW branch event if enabled (Mark Salter) [RHEL-5704]
  - Enable event monitoring for ARM NI-700 interconnect (Mark Salter) [RHEL-5704]
  - perf: Add driver for Arm NI-700 interconnect PMU (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Improve format attr printing (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Clean up unnecessary NUMA_NO_NODE check (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Support CMN S3 (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Refactor DTC PMU register access (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Make cycle counts less surprising (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Improve build-time assertion (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Ensure dtm_idx is big enough (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Fix CCLA register offset (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Refactor node ID handling. Again. (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max] (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Record hardware counts correctly (Mark Salter) [RHEL-5704]
  - perf/dwc_pcie: Add support for QCOM vendor devices (Mark Salter) [RHEL-5704]
  - perf/dwc_pcie: Always register for PCIe bus notifier (Mark Salter) [RHEL-5704]
  - perf/dwc_pcie: Fix registration issue in multi PCIe controller instances (Mark Salter) [RHEL-5704]
  - drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (Mark Salter) [RHEL-5704]
  - drivers/perf: apple_m1: add known PMU events (Mark Salter) [RHEL-5704]
  - perf: arm_pmuv3: Add support for Armv9.4 PMU instruction counter (Mark Salter) [RHEL-5704]
  - KVM: arm64: Refine PMU defines for number of counters (Mark Salter) [RHEL-5704]
  - arm64: perf/kvm: Use a common PMU cycle counter define (Mark Salter) [RHEL-5704]
  - KVM: arm64: pmu: Use generated define for PMSELR_EL0.SEL access (Mark Salter) [RHEL-5704]
  - KVM: arm64: pmu: Use arm_pmuv3.h register accessors (Mark Salter) [RHEL-5704]
  - perf: arm_pmuv3: Prepare for more than 32 counters (Mark Salter) [RHEL-5704]
  - perf: arm_pmu: Remove event index to counter remapping (Mark Salter) [RHEL-5704]
  - perf: arm_pmu: Use of_property_present() (Mark Salter) [RHEL-5704]
  - perf: add missing MODULE_DESCRIPTION() macros (Mark Salter) [RHEL-5704]
  - perf: arm_pmuv3: Include asm/arm_pmuv3.h from linux/perf/arm_pmuv3.h (Mark Salter) [RHEL-5704]
  - perf/arm: Move 32-bit PMU drivers to drivers/perf/ (Mark Salter) [RHEL-5704]
  - perf: arm_pmuv3: Drop unnecessary IS_ENABLED(CONFIG_ARM64) check (Mark Salter) [RHEL-5704]
  - perf: imx_perf: add support for i.MX95 platform (Mark Salter) [RHEL-5704]
  - perf: imx_perf: refactor driver for imx93 (Mark Salter) [RHEL-5704]
  - perf: imx_perf: let the driver manage the counter usage rather the user (Mark Salter) [RHEL-5704]
  - perf: imx_perf: add macro definitions for parsing config attr (Mark Salter) [RHEL-5704]
  - perf: pmuv3: Add new Cortex and Neoverse PMUs (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Enable support for tertiary match group (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Decouple wp_config registers from filter group number (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group (Mark Salter) [RHEL-5704]
  - perf/arm-spe: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - perf/arm-smmuv3: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - perf/arm-dsu: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - perf/arm-dmc620: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - perf/arm-ccn: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - perf/arm-cci: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - perf/alibaba_uncore: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - perf/arm_pmu: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - perf/imx_ddr: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - perf/qcom: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - Documentation: qcom-pmu: Use /sys/bus/event_source/devices paths (Mark Salter) [RHEL-5704]
  - perf/thunderx2: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - Documentation: thunderx2-pmu: Use /sys/bus/event_source/devices paths (Mark Salter) [RHEL-5704]
  - perf/xgene: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - Documentation: xgene-pmu: Use /sys/bus/event_source/devices paths (Mark Salter) [RHEL-5704]
  - perf/arm_cspmu: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - perf/amlogic: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - perf/hisi-hns3: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - Documentation: hns-pmu: Use /sys/bus/event_source/devices paths (Mark Salter) [RHEL-5704]
  - perf/hisi-uncore: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - Documentation: hisi-pmu: Drop reference to /sys/devices path (Mark Salter) [RHEL-5704]
  - perf/hisi-pcie: Assign parent for event_source device (Mark Salter) [RHEL-5704]
  - arm64: arm_pmuv3: Correctly extract and check the PMUVer (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Set PMU device parent (Mark Salter) [RHEL-5704]
  - perf/thunderx2: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/qcom_l2: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/hisi_uncore: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/hisi_pcie: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/dwc_pcie: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/arm_dsu: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/arm_cspmu: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/alibaba_uncore_drw: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - cpumask: add cpumask_any_and_but() (Mark Salter) [RHEL-5704]
  - drivers/perf: thunderx2_pmu: Replace open coded acpi_match_acpi_device() (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Merge find_related_event() and get_event_idx() (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Relax the check on related events (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Check the target filter properly (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Add more events for counting TLP bandwidth (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Fix incorrect counting under metric mode (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Introduce hisi_pcie_pmu_get_event_ctrl_val() (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Rename hisi_pcie_pmu_{config,clear}_filter() (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: Enable HiSilicon Erratum 162700402 quirk for HIP09 (Mark Salter) [RHEL-5704]
  - perf/arm_cspmu: Add devicetree support (Mark Salter) [RHEL-5704]
  - perf/arm_cspmu: Simplify counter reset (Mark Salter) [RHEL-5704]
  - perf/arm_cspmu: Simplify attribute groups (Mark Salter) [RHEL-5704]
  - perf/arm_cspmu: Simplify initialisation (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Improve debugfs pretty-printing for large configs (Mark Salter) [RHEL-5704]
  - perf: xgene: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: thunderx2: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: qcom_l2: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: marvell_cn10k_tad: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: marvell_cn10k_ddr: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: hisilicon: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: fsl_imx9_ddr: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: fsl_imx8_ddr: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm_spe: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm_smmuv3: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm_dsu: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm_dmc620: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm_cspmu: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm-cmn: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm-ccn: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm-cci: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: amlogic: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: alibaba_uncore_drw: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold (Mark Salter) [RHEL-5704]
  - perf: imx_perf: fix counter start and config sequence (Mark Salter) [RHEL-5704]
  - drivers/perf: remove MODULE_LICENSE in non-modules (Mark Salter) [RHEL-5704]
  - arm64, riscv, perf: Remove RCU_NONIDLE() usage (Mark Salter) [RHEL-5704]
  - perf/arm-dmc620: Fix lockdep assert in ->event_init() (Mark Salter) [RHEL-5704]
  - redhat/configs: add DWC_PCIE_PMU disabled for RHEL (Mark Salter) [RHEL-5704]
  - arm: perf: Fix ARCH=arm build with GCC (Mark Salter) [RHEL-5704]
  - drivers/perf: add DesignWare PCIe PMU driver (Mark Salter) [RHEL-5704]
  - arm64: perf: Add support for event counting threshold (Mark Salter) [RHEL-5704]
  - arm: pmu: Share user ABI format mechanism with SPE (Mark Salter) [RHEL-5704]
  - arm64: perf: Include threshold control fields in PMEVTYPER mask (Mark Salter) [RHEL-5704]
  - arm: perf: Convert remaining fields to use GENMASK (Mark Salter) [RHEL-5704]
  - arm: perf: Use GENMASK for PMMIR fields (Mark Salter) [RHEL-5704]
  - drivers/perf: arm_dsu_pmu: Remove kerneldoc-style comment syntax (Mark Salter) [RHEL-5704]
  - drivers/perf: Remove usage of the deprecated ida_simple_xx() API (Mark Salter) [RHEL-5704]
  - perf: fsl_imx8_ddr: Add driver support for i.MX8DXL DDR Perf (Mark Salter) [RHEL-5704]
  - perf: fsl_imx8_ddr: Add AXI ID PORT CHANNEL filter support (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: Fix some event id for HiSilicon UC pmu (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Workaround AmpereOneX errata AC04_MESH_1 (incorrect child count) (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Fix HN-F class_occup_id events (Mark Salter) [RHEL-5704]
  - redhat/configs: enable coresight PMUs (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Fail DTC counter allocation correctly (Mark Salter) [RHEL-5704]
  - Documentation/arm64: Fix typos in elf_hwcaps (Mark Salter) [RHEL-5704]
  - docs/arm64: elf_hwcaps: Unify HWCAP lists as description lists (Mark Salter) [RHEL-5704]
  - perf: arm_cspmu: use acpi_dev_hid_uid_match() for matching _HID and _UID (Mark Salter) [RHEL-5704]
  - perf: qcom: use acpi_device_uid() for fetching _UID (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Initialize event->cpu only on success (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Check the type first in pmu::event_init() (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Enable per-DTC counter allocation (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Rework DTC counters (again) (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Fix DTC domain detection (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process (Mark Salter) [RHEL-5704]
  - drivers/perf: xgene: Use device_get_match_data() (Mark Salter) [RHEL-5704]
  - perf/amlogic: add missing MODULE_DEVICE_TABLE (Mark Salter) [RHEL-5704]
  - docs/perf: Add ampere_cspmu to toctree to fix a build warning (Mark Salter) [RHEL-5704]
  - perf: arm_cspmu: ampere_cspmu: Add support for Ampere SoC PMU (Mark Salter) [RHEL-5704]
  - perf: arm_cspmu: Support implementation specific validation (Mark Salter) [RHEL-5704]
  - perf: arm_cspmu: Support implementation specific filters (Mark Salter) [RHEL-5704]
  - perf: arm_cspmu: Split 64-bit write to 32-bit writes (Mark Salter) [RHEL-5704]
  - perf: arm_cspmu: Separate Arm and vendor module (Mark Salter) [RHEL-5704]
  - arm_pmu: acpi: Add a representative platform device for TRBE (Mark Salter) [RHEL-5704]
  - redhat/configs: add CONFIG_FSL_IMX9_DDR_PMU (Mark Salter) [RHEL-5704]
  - arm_pmu: acpi: Refactor arm_spe_acpi_register_device() (Mark Salter) [RHEL-5704]
  - perf/imx_ddr: don't enable counter0 if none of 4 counters are used (Mark Salter) [RHEL-5704]
  - perf/imx_ddr: speed up overflow frequency of cycle (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: Schedule perf session according to locality (Mark Salter) [RHEL-5704]
  - perf/arm-dmc620: Fix dmc620_pmu_irqs_lock/cpu_hotplug_lock circular lock dependency (Mark Salter) [RHEL-5704]
  - perf/smmuv3: Add MODULE_ALIAS for module auto loading (Mark Salter) [RHEL-5704]
  - perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (Mark Salter) [RHEL-5704]
  - perf: pmuv3: Remove comments from armv8pmu_[enable|disable]_event() (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Add CMN-700 r3 support (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Refactor HN-F event selector macros (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Remove spurious event aliases (Mark Salter) [RHEL-5704]
  - perf: pmuv3: Add Cortex A520, A715, A720, X3 and X4 PMUs (Mark Salter) [RHEL-5704]
  - perf/smmuv3: Remove build dependency on ACPI (Mark Salter) [RHEL-5704]
  - perf: xgene_pmu: Convert to devm_platform_ioremap_resource() (Mark Salter) [RHEL-5704]
  - driver/perf: Add identifier sysfs file for Yitian 710 DDR (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: Add support for HiSilicon UC PMU driver (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: Add support for HiSilicon H60PA and PAv3 PMU driver (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Add sysfs identifier (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Revamp model detection (Mark Salter) [RHEL-5704]
  - perf/arm_dmc620: Add cpumask (Mark Salter) [RHEL-5704]
  - dt-bindings: perf: fsl-imx-ddr: Add i.MX93 compatible (Mark Salter) [RHEL-5704]
  - drivers/perf: imx_ddr: Add support for NXP i.MX9 SoC DDRC PMU driver (Mark Salter) [RHEL-5704]
  - drivers/perf: apple_m1: Force 63bit counters for M2 CPUs (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Fix DTC reset (Mark Salter) [RHEL-5704]
  - perf: qcom_l2_pmu: Make l2_cache_pmu_probe_cluster() more robust (Mark Salter) [RHEL-5704]
  - perf/arm-cci: Slightly optimize cci_pmu_sync_counters() (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: add NULL check for name (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: Remove redundant initialized of pmu->name (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Fix port detection for CMN-700 (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Validate cycles events fully (Mark Salter) [RHEL-5704]
  - drivers/perf: apple_m1: Add Apple M2 support (Mark Salter) [RHEL-5704]
  - drivers/perf: Use devm_platform_get_and_ioremap_resource() (Mark Salter) [RHEL-5704]
  - perf: qcom: Use devm_platform_get_and_ioremap_resource() (Mark Salter) [RHEL-5704]
  - perf: arm: Use devm_platform_get_and_ioremap_resource() (Mark Salter) [RHEL-5704]
  - erofs: add required kernel config (Ian Kent) [RHEL-31991]
  - erofs: fix refcount on the metabuf used for inode lookup (Ian Kent) [RHEL-31991]
  - erofs: avoid useless loops in z_erofs_pcluster_readmore() when reading beyond EOF (Ian Kent) [RHEL-31991]
  - erofs: clean up z_erofs_pcluster_readmore() (Ian Kent) [RHEL-31991]
  - erofs: avoid obsolete {collector,collection} terms (Ian Kent) [RHEL-31991]
  - erofs: fix memory leak on short-lived bounced pages (Ian Kent) [RHEL-31991]
  - erofs: kill hooked chains to avoid loops on deduplicated compressed images (Ian Kent) [RHEL-31991]
  - erofs: fix lockdep false positives on initializing erofs_pseudo_mnt (Ian Kent) [RHEL-31991]
  - erofs: drop unnecessary WARN_ON() in erofs_kill_sb() (Ian Kent) [RHEL-31991]
  - erofs: fix uninitialized page cache reported by KMSAN (Ian Kent) [RHEL-31991]
  - erofs: refine z_erofs_transform_plain() for sub-page block support (Ian Kent) [RHEL-31991]
  - erofs: simplify z_erofs_transform_plain() (Ian Kent) [RHEL-31991]
  - erofs: initialize packed inode after root inode is assigned (Ian Kent) [RHEL-31991]
  - erofs: fix memory leak of LZMA global compressed deduplication (Ian Kent) [RHEL-31991] {CVE-2023-52526}
  - erofs: fix wrong primary bvec selection on deduplicated extents (Ian Kent) [RHEL-31991]
  - erofs: get rid of `buf->kmap_type` (Ian Kent) [RHEL-31991]
  - erofs: sunset erofs_dbg() (Ian Kent) [RHEL-31991]
  - erofs: set block size to the on-disk block size (Ian Kent) [RHEL-31991]
  - erofs: avoid hardcoded blocksize for subpage block support (Ian Kent) [RHEL-31991]
  - erofs: port device access to file (Ian Kent) [RHEL-31991]
  - erofs: fix NULL dereference of dif->bdev_handle in fscache mode (Ian Kent) [RHEL-31991]
  - erofs: Convert to use bdev_open_by_path() (Ian Kent) [RHEL-31991]
  - erofs: use wrapper i_blocksize() in erofs_file_read_iter() (Ian Kent) [RHEL-31991]
  - erofs: get rid of a useless DBG_BUGON (Ian Kent) [RHEL-31991]
  - erofs: Revert "erofs: fix kvcalloc() misuse with __GFP_NOFAIL" (Ian Kent) [RHEL-31991]
  - erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms (Ian Kent) [RHEL-31991]
  - erofs: mark z_erofs_lzma_init/erofs_pcpubuf_init w/ __init (Ian Kent) [RHEL-31991]
  - erofs: fix an error code in z_erofs_init_zip_subsystem() (Ian Kent) [RHEL-31991]
  - erofs: unify anonymous inodes for blob (Ian Kent) [RHEL-31991]
  - erofs: relinquish volume with mutex held (Ian Kent) [RHEL-31991]
  - erofs: maintain cookies of share domain in self-contained list (Ian Kent) [RHEL-31991]
  - erofs: remove unused device mapping in meta routine (Ian Kent) [RHEL-31991]
  - MAINTAINERS: erofs: Add Documentation/ABI/testing/sysfs-fs-erofs (Ian Kent) [RHEL-31991]
  - Documentation/ABI: sysfs-fs-erofs: update supported features (Ian Kent) [RHEL-31991]
  - erofs: remove unused EROFS_GET_BLOCKS_RAW flag (Ian Kent) [RHEL-31991]
  - erofs: update print symbols for various flags in trace (Ian Kent) [RHEL-31991]
  - erofs: make kobj_type structures constant (Ian Kent) [RHEL-31991]
  - erofs: add per-cpu threads for decompression as an option (Ian Kent) [RHEL-31991]
  - erofs: tidy up internal.h (Ian Kent) [RHEL-31991]
  - erofs: get rid of z_erofs_do_map_blocks() forward declaration (Ian Kent) [RHEL-31991]
  - erofs: move zdata.h into zdata.c (Ian Kent) [RHEL-31991]
  - erofs: remove tagged pointer helpers (Ian Kent) [RHEL-31991]
  - erofs: avoid tagged pointers to mark sync decompression (Ian Kent) [RHEL-31991]
  - fs: fix leaked psi pressure state (Ian Kent) [RHEL-31991]
  - erofs: get rid of erofs_inode_datablocks() (Ian Kent) [RHEL-31991]
  - erofs: handle NONHEAD !delta[1] lclusters gracefully (Ian Kent) [RHEL-31991]
  - erofs: fix compact 4B support for 16k block size (Ian Kent) [RHEL-31991]
  - erofs: simplify iloc() (Ian Kent) [RHEL-31991]
  - erofs: get rid of debug_one_dentry() (Ian Kent) [RHEL-31991]
  - erofs: remove linux/buffer_head.h dependency (Ian Kent) [RHEL-31991]
  - erofs: clean up erofs_iget() (Ian Kent) [RHEL-31991]
  - erofs: clean up parsing of fscache related options (Ian Kent) [RHEL-31991]
  - erofs: add documentation for 'domain_id' mount option (Ian Kent) [RHEL-31991]
  - erofs: fix kvcalloc() misuse with __GFP_NOFAIL (Ian Kent) [RHEL-31991]
  - erofs/zmap.c: Fix incorrect offset calculation (Ian Kent) [RHEL-31991]
  - erofs: validate the extent length for uncompressed pclusters (Ian Kent) [RHEL-31991]
  - erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails (Ian Kent) [RHEL-31991]
  - erofs: Fix pcluster memleak when its block address is zero (Ian Kent) [RHEL-31991]
  - erofs: use kmap_local_page() only for erofs_bread() (Ian Kent) [RHEL-31991]
  - erofs: enable large folios for fscache mode (Ian Kent) [RHEL-31991]
  - erofs: support large folios for fscache mode (Ian Kent) [RHEL-31991]
  - erofs: switch to prepare_ondemand_read() in fscache mode (Ian Kent) [RHEL-31991]
  - fscache,cachefiles: add prepare_ondemand_read() callback (Ian Kent) [RHEL-31991]
  - erofs: clean up cached I/O strategies (Ian Kent) [RHEL-31991]
  - erofs: update documentation (Ian Kent) [RHEL-31991]
  - erofs: check the uniqueness of fsid in shared domain in advance (Ian Kent) [RHEL-31991]
  - erofs: enable large folios for iomap mode (Ian Kent) [RHEL-31991]
  - erofs: fix missing xas_retry() in fscache mode (Ian Kent) [RHEL-31991]
  - erofs: fix use-after-free of fsid and domain_id string (Ian Kent) [RHEL-31991]
  - erofs: get correct count for unmapped range in fscache mode (Ian Kent) [RHEL-31991]
  - erofs: put metabuf in error path in fscache mode (Ian Kent) [RHEL-31991]
  - erofs: fix general protection fault when reading fragment (Ian Kent) [RHEL-31991]
  - erofs: protect s_inodes with s_inode_list_lock for fscache (Ian Kent) [RHEL-31991]
  - erofs: fix up inplace decompression success rate (Ian Kent) [RHEL-31991]
  - erofs: shouldn't churn the mapping page for duplicated copies (Ian Kent) [RHEL-31991]
  - erofs: fix illegal unmapped accesses in z_erofs_fill_inode_lazy() (Ian Kent) [RHEL-31991]
  - erofs: clean up erofs_iget() (Ian Kent) [RHEL-31991]
  - erofs: clean up unnecessary code and comments (Ian Kent) [RHEL-31991]
  - erofs: fold in z_erofs_reload_indexes() (Ian Kent) [RHEL-31991]
  - erofs: introduce partial-referenced pclusters (Ian Kent) [RHEL-31991]
  - erofs: support on-disk compressed fragments data (Ian Kent) [RHEL-31991]
  - erofs: support interlaced uncompressed data for compressed files (Ian Kent) [RHEL-31991]
  - erofs: clean up .read_folio() and .readahead() in fscache mode (Ian Kent) [RHEL-31991]
  - erofs: add manual PSI accounting for the compressed address space (Ian Kent) [RHEL-31991]
  - erofs: introduce 'domain_id' mount option (Ian Kent) [RHEL-31991]
  - erofs: Support sharing cookies in the same domain (Ian Kent) [RHEL-31991]
  - erofs: introduce a pseudo mnt to manage shared cookies (Ian Kent) [RHEL-31991]
  - erofs: introduce fscache-based domain (Ian Kent) [RHEL-31991]
  - erofs: code clean up for fscache (Ian Kent) [RHEL-31991]
  - erofs: use kill_anon_super() to kill super in fscache mode (Ian Kent) [RHEL-31991]
  - erofs: fix pcluster use-after-free on UP platforms (Ian Kent) [RHEL-31991] {CVE-2022-48674}
  - erofs: avoid the potentially wrong m_plen for big pcluster (Ian Kent) [RHEL-31991]
  - erofs: fix error return code in erofs_fscache_{meta_,}read_folio (Ian Kent) [RHEL-31991]
  - erofs: update ctx->pos for every emitted dirent (Ian Kent) [RHEL-31991]
  - erofs: get rid of the leftover PAGE_SIZE in dir.c (Ian Kent) [RHEL-31991]
  - erofs: get rid of erofs_prepare_dio() helper (Ian Kent) [RHEL-31991]
  - erofs: introduce multi-reference pclusters (fully-referenced) (Ian Kent) [RHEL-31991]
  - erofs: record the longest decompressed size in this round (Ian Kent) [RHEL-31991]
  - erofs: introduce z_erofs_do_decompressed_bvec() (Ian Kent) [RHEL-31991]
  - erofs: try to leave (de)compressed_pages on stack if possible (Ian Kent) [RHEL-31991]
  - erofs: introduce struct z_erofs_decompress_backend (Ian Kent) [RHEL-31991]
  - erofs: get rid of `z_pagemap_global' (Ian Kent) [RHEL-31991]
  - erofs: clean up `enum z_erofs_collectmode' (Ian Kent) [RHEL-31991]
  - erofs: get rid of `enum z_erofs_page_type' (Ian Kent) [RHEL-31991]
  - erofs: rework online page handling (Ian Kent) [RHEL-31991]
  - erofs: switch compressed_pages[] to bufvec (Ian Kent) [RHEL-31991]
  - erofs: introduce `z_erofs_parse_in_bvecs' (Ian Kent) [RHEL-31991]
  - erofs: drop the old pagevec approach (Ian Kent) [RHEL-31991]
  - erofs: introduce bufvec to store decompressed buffers (Ian Kent) [RHEL-31991]
  - erofs: introduce `z_erofs_parse_out_bvecs()' (Ian Kent) [RHEL-31991]
  - erofs: clean up z_erofs_collector_begin() (Ian Kent) [RHEL-31991]
  - erofs: get rid of unneeded `inode', `map' and `sb' (Ian Kent) [RHEL-31991]
  - erofs: avoid consecutive detection for Highmem memory (Ian Kent) [RHEL-31991]
  - erofs: wake up all waiters after z_erofs_lzma_head ready (Ian Kent) [RHEL-31991]
  - MAINTAINERS: erofs: add myself as reviewer (Ian Kent) [RHEL-31991]
  - MAINTAINERS: erofs: add myself as reviewer (Ian Kent) [RHEL-31991]
  - erofs: missing hunks (Ian Kent) [RHEL-31991]
  - erofs: fix 'backmost' member of z_erofs_decompress_frontend (Ian Kent) [RHEL-31991]
  - erofs: simplify z_erofs_pcluster_readmore() (Ian Kent) [RHEL-31991]
  - erofs: get rid of label `restart_now' (Ian Kent) [RHEL-31991]
  - erofs: get rid of `struct z_erofs_collection' (Ian Kent) [RHEL-31991]
  - erofs: update documentation (Ian Kent) [RHEL-31991]
  - erofs: fix crash when enable tracepoint cachefiles_prep_read (Ian Kent) [RHEL-31991]
  - erofs: leave compressed inodes unsupported in fscache mode for now (Ian Kent) [RHEL-31991]
  - erofs: scan devices from device table (Ian Kent) [RHEL-31991]
  - erofs: change to use asynchronous io for fscache readpage/readahead (Ian Kent) [RHEL-31991]
  - erofs: add 'fsid' mount option (Ian Kent) [RHEL-31991]
  - erofs: implement fscache-based data readahead (Ian Kent) [RHEL-31991]
  - erofs: implement fscache-based data read for inline layout (Ian Kent) [RHEL-31991]
  - erofs: implement fscache-based data read for non-inline layout (Ian Kent) [RHEL-31991]
  - erofs: implement fscache-based metadata read (Ian Kent) [RHEL-31991]
  - erofs: register fscache context for extra data blobs (Ian Kent) [RHEL-31991]
  - erofs: register fscache context for primary data blob (Ian Kent) [RHEL-31991]
  - erofs: add erofs_fscache_read_folios() helper (Ian Kent) [RHEL-31991]
  - erofs: add anonymous inode caching metadata for data blobs (Ian Kent) [RHEL-31991]
  - erofs: add fscache context helper functions (Ian Kent) [RHEL-31991]
  - erofs: register fscache volume (Ian Kent) [RHEL-31991]
  - erofs: add fscache mode check helper (Ian Kent) [RHEL-31991]
  - erofs: make erofs_map_blocks() generally available (Ian Kent) [RHEL-31991]
  - cachefiles: document on-demand read mode (Ian Kent) [RHEL-31991]
  - erofs: make filesystem exportable (Ian Kent) [RHEL-31991]
  - erofs: fix buffer copy overflow of ztailpacking feature (Ian Kent) [RHEL-31991]
  - erofs: refine on-disk definition comments (Ian Kent) [RHEL-31991]
  - erofs: remove obsoleted comments (Ian Kent) [RHEL-31991]
  - erofs: do not prompt for risk any more when using big pcluster (Ian Kent) [RHEL-31991]
  - erofs: Convert to release_folio (Ian Kent) [RHEL-31991]
  - erofs: Convert erofs zdata to read_folio (Ian Kent) [RHEL-31991]
  - erofs: fix use-after-free of on-stack io[] (Ian Kent) [RHEL-31991]
  - erofs: Convert from invalidatepage to invalidate_folio (Ian Kent) [RHEL-31991]
  - erofs: rename ctime to mtime (Ian Kent) [RHEL-31991]
  - erofs: use meta buffers for inode lookup (Ian Kent) [RHEL-31991]
  - erofs: use meta buffers for reading directories (Ian Kent) [RHEL-31991]
  - fs: erofs: add sanity check for kobject in erofs_unregister_sysfs (Ian Kent) [RHEL-31991]
  - erofs: refine managed inode stuffs (Ian Kent) [RHEL-31991]
  - erofs: clean up z_erofs_extent_lookback (Ian Kent) [RHEL-31991]
  - erofs: silence warnings related to impossible m_plen (Ian Kent) [RHEL-31991]
  - erofs: clean up preload_compressed_pages() (Ian Kent) [RHEL-31991]
  - erofs: get rid of `struct z_erofs_collector' (Ian Kent) [RHEL-31991]
  - erofs: use meta buffers for erofs_read_superblock() (Ian Kent) [RHEL-31991]
  - erofs: fix ztailpacking on > 4GiB filesystems (Ian Kent) [RHEL-31991]
  - erofs: fix small compressed files inlining (Ian Kent) [RHEL-31991]
  - erofs: avoid unnecessary z_erofs_decompressqueue_work() declaration (Ian Kent) [RHEL-31991]
  - erofs: fix fsdax partition offset handling (Ian Kent) [RHEL-31991]
  - erofs: use meta buffers for zmap operations (Ian Kent) [RHEL-31991]
  - erofs: use meta buffers for xattr operations (Ian Kent) [RHEL-31991]
  - erofs: use meta buffers for super operations (Ian Kent) [RHEL-31991]
  - erofs: use meta buffers for inode operations (Ian Kent) [RHEL-31991]
  - erofs: introduce meta buffer operations (Ian Kent) [RHEL-31991]
  - erofs: add on-disk compressed tail-packing inline support (Ian Kent) [RHEL-31991]
  - erofs: support inline data decompression (Ian Kent) [RHEL-31991]
  - erofs: support unaligned data decompression (Ian Kent) [RHEL-31991]
  - erofs: introduce z_erofs_fixup_insize (Ian Kent) [RHEL-31991]
  - erofs: tidy up z_erofs_lz4_decompress (Ian Kent) [RHEL-31991]
  - erofs: clean up erofs_map_blocks tracepoints (Ian Kent) [RHEL-31991]
  - erofs: Replace zero-length array with flexible-array member (Ian Kent) [RHEL-31991]
  - erofs: add sysfs node to control sync decompression strategy (Ian Kent) [RHEL-31991]
  - erofs: add sysfs interface (Ian Kent) [RHEL-31991]
  - erofs: rename lz4_0pading to zero_padding (Ian Kent) [RHEL-31991]
  - erofs: don't trigger WARN() when decompression fails (Ian Kent) [RHEL-31991]
  - erofs: get rid of ->lru usage (Ian Kent) [RHEL-31991]
  - erofs: lzma compression support (Ian Kent) [RHEL-31991]
  - lib/xz, lib/decompress_unxz.c: Fix spelling in comments (Ian Kent) [RHEL-31991]
  - lib/xz: Add MicroLZMA decoder (Ian Kent) [RHEL-31991]
  - lib/xz: Move s->lzma.len = 0 initialization to lzma_reset() (Ian Kent) [RHEL-31991]
  - lib/xz: Validate the value before assigning it to an enum variable (Ian Kent) [RHEL-31991]
  - lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression (Ian Kent) [RHEL-31991]
  - erofs: rename some generic methods in decompressor (Ian Kent) [RHEL-31991]
  - erofs: introduce readmore decompression strategy (Ian Kent) [RHEL-31991]
  - erofs: introduce the secondary compression head (Ian Kent) [RHEL-31991]
  - erofs: get compression algorithms directly on mapping (Ian Kent) [RHEL-31991]
  - erofs: add multiple device support (Ian Kent) [RHEL-31991]
  - erofs: decouple basic mount options from fs_context (Ian Kent) [RHEL-31991]
  - erofs: remove the fast path of per-CPU buffer decompression (Ian Kent) [RHEL-31991]
  - erofs: fix unsafe pagevec reuse of hooked pclusters (Ian Kent) [RHEL-31991]
  - erofs: remove useless cache strategy of DELAYEDALLOC (Ian Kent) [RHEL-31991]
  - erofs: fix deadlock when shrink erofs slab (Ian Kent) [RHEL-31991]
  - erofs: apply proper VMA alignment for memory mapped files on THP (Ian Kent) [RHEL-31991]
  - erofs: dax support for non-tailpacking regular file (Ian Kent) [RHEL-31991]
  - erofs: directly use wrapper erofs_page_is_managed() when shrinking (Ian Kent) [RHEL-31991]
  - erofs: remove the mapping parameter from erofs_try_to_free_cached_page() (Ian Kent) [RHEL-31991]
  - erofs: add fiemap support with iomap (Ian Kent) [RHEL-31991]
  - erofs: add support for the full decompressed length (Ian Kent) [RHEL-31991]
  - erofs: clear compacted_2b if compacted_4b_initial > totalidx (Ian Kent) [RHEL-31991]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-560.el9]
changelog:
  - rhel-only: Fix up kfunc definitions in filter.c (Toke Høiland-Jørgensen) [RHEL-65787]
  - selftests/bpf: Test bpf_sock_destroy (Toke Høiland-Jørgensen) [RHEL-65787]
  - selftests/bpf: Add helper to get port using getsockname (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: Add bpf_sock_destroy kfunc (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: Avoid iter->offset making backward progress in bpf_iter_udp (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: iter_udp: Retry with a larger batch size without going back to the previous bucket (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: udp: Implement batching for sockets iterator (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: seq_file: Remove bpf_seq_afinfo from udp_iter_state (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: udp: Encapsulate logic to get udp table (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: seq_file: Helper function to match socket attributes (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: tcp: Avoid taking fast sock lock in iterator (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Access &udp_table via net. (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Set NULL to udp_seq_afinfo.udp_table. (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Set NULL to sk->sk_prot->h.udp_table. (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Clean up some functions. (Toke Høiland-Jørgensen) [RHEL-65787]
  - exfat: fix the infinite loop in exfat_readdir() (CKI Backport Bot) [RHEL-75663] {CVE-2024-57940}
  - exec: Fix ToCToU between perm check and set-uid/gid usage (CKI Backport Bot) [RHEL-55562] {CVE-2024-43882}
  - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (CKI Backport Bot) [RHEL-72355] {CVE-2024-53213}
  - net: xgbe: Convert tasklet API to new bottom half workqueue mechanism (Michal Schmidt) [RHEL-62004]
  - net: xgbe: remove extraneous #ifdef checks (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Avoid potential string truncation in name (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: propagate the correct speed and duplex status (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: handle the corner-case during tx completion (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: handle corner-case during sfp hotplug (Michal Schmidt) [RHEL-62004]
  - net: ethernet: Use device_get_match_data() (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - net: ethernet: amd: Convert to platform remove callback returning void (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: extend 10Mbps support to MAC version 21H (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix the false linkup in xgbe_phy_status (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix mismatched prototype (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: add support for rx-adaptation (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: add 2.5GbE support to 10G BaseT mode (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Replace MII_ADDR_C45 with XGBE_ADDR_C45 (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Separate C22 and C45 transactions (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Delay AN timeout during KR training (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Add support for 10 Mbps speed (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: add missed tasklet_kill (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Check only the minimum speed for active/passive cables (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Fix logic around active and passive cables (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: add the bit rate quirk for Molex cables (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix the SFP compliance codes check for DAC cables (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: enable PLL_CTL for fixed PHY modes only (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: use enums for mailbox cmd and sub_cmds (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Yellow carp devices do not need rrc (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix clang -Wformat warnings (Michal Schmidt) [RHEL-62004]
  - amd/xgbe: fix repeated words in comments (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: fix clang -Wformat warning (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: disable interrupts during pci removal (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: ensure to reset the tx_timer_active flag (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Disable the CDR workaround path for Yellow Carp Devices (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Alter the port speed bit range (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Add Support for Yellow Carp Ethernet device (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Toggle PLL settings during rate change (Michal Schmidt) [RHEL-62004]
  - net: convert users of bitmap_foo() to linkmode_foo() (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - ethernet: constify references to netdev->dev_addr in drivers (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - ethernet: Remove redundant 'flush_workqueue()' calls (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - ethernet: use eth_hw_addr_set() for dev->addr_len cases (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - signal: restore the override_rlimit logic (Radostin Stoyanov) [RHEL-68020] {CVE-2024-50271}
  - ucounts: Split rlimit and ucount values and max values (Radostin Stoyanov) [RHEL-68020] {CVE-2024-50271}
  - virtio_net: Add hash_key_length check (Jon Maloy) [RHEL-68253] {CVE-2024-53082}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-561.el9]
changelog:
  - net: sched: refine software bypass handling in tc_run (Xin Long) [RHEL-60271 RHEL-61181]
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi() (Jocelyn Falempe) [RHEL-53571]
  - drm: adv7511: Drop dsi single lane support (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Wait for migration job before unmapping pages (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Use non-interruptible wait when moving BO to system (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Correct the migration DMA map direction (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: use sjt mec fw on gfx943 for sriov (Jocelyn Falempe) [RHEL-53571]
  - drm/i915/dg1: Fix power gate sequence. (Jocelyn Falempe) [RHEL-53571]
  - drm/i915/cx0_phy: Fix C10 pll programming sequence (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Fix fault on fd close after unbind (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pf: Use correct function to check LMEM provisioning (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Revert some changes that break a mesa debug tool (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix backport of commit 73dae652dcac (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Move the coredump registration to the worker thread (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Take PM ref in delayed snapshot capture worker (Jocelyn Falempe) [RHEL-53571]
  - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (Jocelyn Falempe) [RHEL-53571]
  - udmabuf: also check for F_SEAL_FUTURE_WRITE (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/mmhub4.1: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/gfx12: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/nbio7.0: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/smu14.0.2: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/nbio7.7: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/nbio7.11: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: don't access invalid sched (Jocelyn Falempe) [RHEL-53571]
  - i915/guc: Accumulate active runtime on gt reset (Jocelyn Falempe) [RHEL-53571]
  - i915/guc: Ensure busyness counter increases motonically (Jocelyn Falempe) [RHEL-53571]
  - i915/guc: Reset engine utilization buffer before registration (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: synaptics-r63353: Fix regulator unbalance (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: st7701: Add prepare_prev_first flag to drm_panel (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: novatek-nt35950: fix return value check in nt35950_probe() (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference (Jocelyn Falempe) [RHEL-53571]
  - dma-buf: Fix __dma_buf_debugfs_list_del argument for !CONFIG_DEBUG_FS (Jocelyn Falempe) [RHEL-53571]
  - udmabuf: fix memory leak on last export_udmabuf() error path (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix amdgpu_coredump (Jocelyn Falempe) [RHEL-53571]
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Jocelyn Falempe) [RHEL-53571]
  - drm/amd: Update strapping for NBIO 2.5.0 (Jocelyn Falempe) [RHEL-53571]
  - drm/display: use ERR_PTR on DP tunnel manager creation fail (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/reg_sr: Remove register pool (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: fix the ERR_PTR() returned on failure to allocate tiny pt (Jocelyn Falempe) [RHEL-53571]
  - amdgpu/uvd: get ring reference from rq scheduler (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: hard-code MALL cacheline size for gfx11, gfx12 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: hard-code cacheline size for gfx11 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Dereference null return value (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix when the cleaner shader is emitted (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: Set SMU v13.0.7 default workload type (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix UVD contiguous CS mapping problem (Jocelyn Falempe) [RHEL-53571]
  - drm/i915: Fix NULL pointer dereference in capture_engine (Jocelyn Falempe) [RHEL-53571]
  - drm/i915/color: Stop using non-posted DSB writes for legacy LUT (Jocelyn Falempe) [RHEL-53571]
  - drm/i915: Fix memory leak by correcting cache object name in error handler (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: pause autosuspend when creating pdd (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Call invalidation_fence_fini for PT inval fences in error state (Jocelyn Falempe) [RHEL-53571]
  - drm/panic: remove spurious empty line to clean warning (Jocelyn Falempe) [RHEL-53571]
  - Revert "drm/amd/display: parse umc_info or vram_info based on ASIC" (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: rework resume handling for display (v2) (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Add option to retrieve detile buffer size (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/devcoredump: Update handling of xe_force_wake_get return (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/forcewake: Add a helper xe_force_wake_ref_has_domain() (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/guc: Copy GuC log prior to dumping (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/devcoredump: Add ASCII85 dump helper function (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/devcoredump: Improve section headings and add tile info (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/devcoredump: Use drm_puts and already cached local variables (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: set the right AMDGPU sg segment limitation (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Prune Invalid Modes For HDMI Output (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: parse umc_info or vram_info based on ASIC (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Remove hw w/a toggle if on DP2/HPO (Jocelyn Falempe) [RHEL-53571]
  - drm/panic: Add ABGR2101010 support (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix underflow when playing 8K video in full screen mode (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Dereference the ATCS ACPI buffer (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/gfx9: Add cleaner shader for GFX9.4.2 (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Adding array index check to prevent memory corruption (Jocelyn Falempe) [RHEL-53571]
  - drm/sched: memset() 'job' in drm_sched_job_init() (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Full exit out of IPS2 when all allow signals have been cleared (Jocelyn Falempe) [RHEL-53571]
  - drm/display: Fix building with GCC 15 (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/xe3: Add initial set of workarounds (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/ptl: L3bank mask is not available on the media GT (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: disable SG displays on cyan skillfish (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix garbage or black screen when resetting otg (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: skip disable CRTC in seemless bootup case (Jocelyn Falempe) [RHEL-53571]
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: it6505: Enable module autoloading (Jocelyn Falempe) [RHEL-53571]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK (Jocelyn Falempe) [RHEL-53571]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition (Jocelyn Falempe) [RHEL-53571]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pciid: Add new PCI id for ARL (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pciids: Add PVC's PCI device ID macros (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pciids: separate ARL and MTL PCI IDs (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pciids: separate RPL-U and RPL-P PCI IDs (Jocelyn Falempe) [RHEL-53571]
  - dma-fence: Use kernel's sort for merging fences (Jocelyn Falempe) [RHEL-53571]
  - dma-fence: Fix reference leak on fence merge failure path (Jocelyn Falempe) [RHEL-53571]
  - dma-buf: fix dma_fence_array_signaled v4 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp5.2: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp7.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp5.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp4.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp6.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Add a left edge pixel if in YCbCr422 or YCbCr420 and odm (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Limit VTotal range to max hw cap minus fp (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Correct prefetch calculation (Jocelyn Falempe) [RHEL-53571]
  - drm/dp_mst: Fix resetting msg rx state after topology removal (Jocelyn Falempe) [RHEL-53571]
  - drm/dp_mst: Verify request type in the corresponding down message reply (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: fix and simplify workload handling (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: add MEC version that supports no PCIe atomics for GFX12 (Jocelyn Falempe) [RHEL-53571]
  - drm/dp_mst: Fix MST sideband message body length check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: hard-code cacheline for gc943,gc944 (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Ignore scalar validation failure if pipe is phantom (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: calculate final viewport before TAP optimization (Jocelyn Falempe) [RHEL-53571]
  - Revert "drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs" (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Remove PIPE_DTO_SRC_SEL programming from set_dtbclk_dto (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: update pipe selection policy to check head pipe (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix handling of plane refcount (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: Remove arcturus min power limit (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: disable pcie speed switching on Intel platform for smu v14.0.2/3 (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7 (Jocelyn Falempe) [RHEL-53571]
  - drm/amd: Fix initialization mistake for NBIO 7.11 devices (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: skip setting the power source on smu v14.0.2/3 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix usage slab after free (Jocelyn Falempe) [RHEL-53571]
  - drm/amd: Add some missing straps from NBIO 7.11.0 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/pm: add gen5 display to the user on smu v14.0.2/3 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Use the correct wptr size (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/guc_submit: fix race around suspend_pending (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/migrate: use XE_BO_FLAG_PAGETABLE (Jocelyn Falempe) [RHEL-53571]
  - Revert "drm/radeon: Delay Connector detecting when HPD singals is unstable" (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/migrate: fix pat index usage (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: it6505: Fix inverted reset polarity (Jocelyn Falempe) [RHEL-53571]
  - drm/fbdev-dma: Select FB_DEFERRED_IO (Jocelyn Falempe) [RHEL-53571]
  - drm: panel: jd9365da-h3: Remove unused num_init_cmds structure member (Jocelyn Falempe) [RHEL-53571]
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Jocelyn Falempe) [RHEL-53571]
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Jocelyn Falempe) [RHEL-53571]
  - drm/panic: Fix uninitialized spinlock acquisition with CONFIG_DRM_PANIC=n (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/ufence: Wake up waiters after setting ufence->signalled (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe (Jocelyn Falempe) [RHEL-53571]
  - drm/radeon: Fix spurious unplug event on radeon HDMI (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Fix wrong usage of INIT_WORK() (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Fix map/unmap queue logic (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix ACA bank count boundary check error (Jocelyn Falempe) [RHEL-53571]
  - drm/panthor: Fix OPP refcnt leaks in devfreq initialisation (Jocelyn Falempe) [RHEL-53571]
  - drm/panthor: record current and maximum device clock frequencies (Jocelyn Falempe) [RHEL-53571]
  - drm/panthor: introduce job cycle and timestamp accounting (Jocelyn Falempe) [RHEL-53571]
  - drm: use ATOMIC64_INIT() for atomic64_t (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfd_get_cu_occupancy()' (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info() (Jocelyn Falempe) [RHEL-53571]
  - drm/vkms: Drop unnecessary call to drm_crtc_cleanup() (Jocelyn Falempe) [RHEL-53571]
  - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Reduce HPD Detection Interval for IPS (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Increase idle worker HPD detection time (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/hdcp: Fix gsc structure check in fw check status (Jocelyn Falempe) [RHEL-53571]
  - drm: panel: nv3052c: correct spi_device_id for RG35XX panel (Jocelyn Falempe) [RHEL-53571]
  - drm/panic: Select ZLIB_DEFLATE for DRM_PANIC_SCREEN_QR_CODE (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: tc358767: Fix link properties discovery (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: fix a memleak issue when driver is removed (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: it6505: Drop EDID cache on bridge power off (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: anx7625: Drop EDID cache on bridge power off (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfx_v9_0 Module (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Fix JPEG v4.0.3 register write (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: nt35510: Make new commands optional (Jocelyn Falempe) [RHEL-53571]
  - udmabuf: fix vmap_udmabuf error page set (Jocelyn Falempe) [RHEL-53571]
  - udmabuf: change folios array from kmalloc to kvmalloc (Jocelyn Falempe) [RHEL-53571]
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix incorrect DSC recompute trigger (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Skip Invalid Streams from DSC Policy (Jocelyn Falempe) [RHEL-53571]
  - redhat/configs: Enable CONFIG_TZMEM_MODE_GENERIC on aarch64 (Jennifer Berringer) [RHEL-73299]
  - redhat/configs: Add CONFIG_QCOM_QSEECOM for aarch64 (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: smc: Narrow 'mempool' variable scope (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: smc: Handle missing SCM device (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Cleanup global '__scm' on probe failures (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool() (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available() (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM bridge enabling (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: fix a NULL-pointer dereference (Jennifer Berringer) [RHEL-73299] {CVE-2024-53069}
  - firmware: qcom: scm: suppress download mode error (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire() (Jennifer Berringer) [RHEL-73299] {CVE-2024-46868}
  - firmware: qcom: tzmem: don't ask about allocator mode when not enabled (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Add multiple download mode support (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Refactor code to support multiple dload mode (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Disable SDI and write no dump to dump mode (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qseecom: remove unused functions (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: fix virtual-to-physical address conversion (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: blacklist more platforms for SHM Bridge (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: simplify returning pointer without cleanup (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: export devm_qcom_tzmem_pool_new() (Jennifer Berringer) [RHEL-73299]
  - arm64: dts: qcom: sa8775p: add a dedicated memory carveout for TZ (Jennifer Berringer) [RHEL-73299]
  - arm64: defconfig: enable SHM Bridge support for the TZ memory allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: clarify the comment in qcom_scm_pas_init_image() (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: add support for SHM bridge memory carveout (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: enable SHM Bridge support (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: add support for SHM bridge operations (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qseecom: convert to using the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: make qcom_scm_qseecom_app_get_id() use the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: make qcom_scm_lmh_dcvsh() use the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: make qcom_scm_ice_set_key() use the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: make qcom_scm_assign_mem() use the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: smc: switch to using the SCM allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: enable the TZ mem allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: add a dedicated TrustZone buffer allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Modify only the download bits in TCSR register (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Fix __scm and waitq completion variable initialization (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Rework dload mode availability check (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Remove redundant scm argument from qcom_scm_waitq_wakeup() (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Remove log reporting memory allocation failure (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: uefisecapp: Fix memory related IO errors and crashes (Jennifer Berringer) [RHEL-73299] {CVE-2024-35994}
  - firmware: qcom: qseecom: fix memory leaks in error paths (Jennifer Berringer) [RHEL-73299] {CVE-2023-52684}
  - firmware: qcom: scm: Add gpu_init_regs call (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qcm: fix unused qcom_scm_qseecom_allowlist (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: remove unneeded 'extern' specifiers (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: add a missing forward declaration for struct device (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: move Qualcomm code into its own directory (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qseecom: add missing include guards (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qseecom: Add missing AUXILIARY_BUS dependency (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom-scm: order includes alphabetically (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom-scm: drop unneeded 'extern' specifiers (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom_scm: Add missing extern specifier (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom_scm: Convert all symbols to EXPORT_SYMBOL_GPL (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom_scm: disable SDI if required (Jennifer Berringer) [RHEL-73299]
  - firmware: Add support for Qualcomm UEFI Secure Application (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom_scm: Add support for Qualcomm Secure Execution Environment SCM interface (Jennifer Berringer) [RHEL-73299]
  - lib/ucs2_string: Add UCS-2 strscpy function (Jennifer Berringer) [RHEL-73299]
  - cpuidle: remove dead code from cpuidle_enter_state() (Mark Langsdorf) [RHEL-64032]
  - cpuidle: dt_idle_genpd: Simplify with scoped for each OF child loop (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Simplify with scoped for each OF child loop (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Enable the hierarchical topology for s2idle on PREEMPT_RT (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Enable the hierarchical topology for s2ram on PREEMPT_RT (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Drop redundant assignment of CPUIDLE_FLAG_RCU_IDLE (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci-domain: Enable system-wide suspend on PREEMPT_RT (Mark Langsdorf) [RHEL-64032]
  - cpuidle: haltpoll: add missing MODULE_DESCRIPTION() macro (Mark Langsdorf) [RHEL-64032]
  - cpuidle: menu: Cleanup after loadavg removal (Mark Langsdorf) [RHEL-64032]
  - cpuidle: ladder: fix ladder_do_selection() kernel-doc (Mark Langsdorf) [RHEL-64032]
  - cpuidle: Avoid explicit cpumask allocation on stack (Mark Langsdorf) [RHEL-64032]
  - cpumask: Introduce cpumask_first_and_and() (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Update init level to core_initcall() (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Drop superfluous wrappers psci_dt_attach|detach_cpu() (Mark Langsdorf) [RHEL-64032]
  - cpuidle: Avoid potential overflow in integer multiplication (Mark Langsdorf) [RHEL-64032]
  - cpuidle: haltpoll: do not shrink guest poll_limit_ns below grow_start (Mark Langsdorf) [RHEL-64032]
  - cpuidle: haltpoll: Do not enable interrupts when entering idle (Mark Langsdorf) [RHEL-64032]
  - cpuidle: pseries: Mark pseries_idle_proble() as __init (Mark Langsdorf) [RHEL-64032]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-562.el9]
changelog:
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Olga Kornievskaia) [RHEL-76402] {CVE-2024-56779}
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads (Tomas Glozar) [RHEL-72939]
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads (Tomas Glozar) [RHEL-72939]
  - rtla/osnoise: Distinguish missing workload option (Tomas Glozar) [RHEL-72939]
  - rtla: Report missed event count (Tomas Glozar) [RHEL-75777]
  - rtla: Add function to report missed events (Tomas Glozar) [RHEL-75777]
  - rtla: Count all processed events (Tomas Glozar) [RHEL-75777]
  - rtla: Count missed trace events (Tomas Glozar) [RHEL-75777]
  - tools/rtla: Add osnoise_trace_is_off() (Tomas Glozar) [RHEL-75777]
  - rtla/timerlat_top: Abort event processing on second signal (Tomas Glozar) [RHEL-75777]
  - rtla/timerlat_hist: Abort event processing on second signal (Tomas Glozar) [RHEL-75777]
  - rtla/timerlat_top: Stop timerlat tracer on signal (Tomas Glozar) [RHEL-75777]
  - rtla/timerlat_hist: Stop timerlat tracer on signal (Tomas Glozar) [RHEL-75777]
  - rtla: Add trace_instance_stop (Tomas Glozar) [RHEL-75777]
  - selinux: ignore unknown extended permissions (Ondrej Mosnacek) [RHEL-75631] {CVE-2024-57931}
  - rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (Rafael Aquini) [RHEL-72196] {CVE-2024-53160}
  - initramfs: avoid filename buffer overrun (Rafael Aquini) [RHEL-70275] {CVE-2024-53142}
  - libperf: evlist: Fix --cpu argument on hybrid platform (Michael Petlan) [RHEL-71069]
  - scsi: lpfc: Fix spelling errors 'asynchronously' (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Copyright updates for 14.4.0.6 patches (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Update lpfc version to 14.4.0.6 (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Dick Kennedy) [RHEL-70003]
  - Revert "scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo" (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Modify CGN warning signal calculation based on EDC response (Dick Kennedy) [RHEL-70003]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-563.el9]
changelog:
  - redhat: set aarch64 variants of kernel-rt as Tech Preview (Luis Claudio R. Goncalves) [RHEL-77160]
  - drm/ast: Fix ast_dp connection status (Jocelyn Falempe) [RHEL-76831]
  - Revert "perf util: Make util its own library" (Michael Petlan) [RHEL-65742]
  - octeontx2-af: fix a use-after-free in rvu_npa_register_reporters (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Remove dead code and semi-colon from rsrc_name() (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: fix error handling of devlink port in rvu_rep_create() (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: fix netdev memory leak in rvu_rep_create() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix build regression without CONFIG_DCB (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Fix compilation error when CONFIG_XFRM_OFFLOAD disabled (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix installation of PF multicast rule (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Enable outbound ipsec crypto offload (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Allow ipsec crypto offload for skb with SA (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Process outbound ipsec crypto offload (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Add SA add/del support for outb ipsec crypto offload (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Init hardware for outbound ipsec crypto offload (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Disable backpressure between CPT and NIX (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Move skb fragment map/unmap to common code (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: map skb data as device writeable (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix SDP MAC link credits configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Quiesce traffic before NIX block reset (Sai Krishna) [RHEL-23617]
  - octeontx2-af: RPM: fix stale FCFEC counters (Sai Krishna) [RHEL-23617]
  - octeontx2-af: RPM: fix stale RSFEC counters (Sai Krishna) [RHEL-23617]
  - octeontx2-af: RPM: Fix low network performance (Sai Krishna) [RHEL-23617]
  - octeontx2-af: RPM: Fix mismatch in lmac type (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix spelling mistake "reprentator" -> "representor" (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Adds TC offload support (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Implement offload stats ndo for representors (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add devlink port support (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add representors for sdp MAC (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Configure VF mtu via representor (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add support to sync link state between representor and VFs (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Get VF stats via representor (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add packet path between representor and VF (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add basic net_device_ops (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Create representor netdev (Sai Krishna) [RHEL-23617]
  - redhat/configs: enable CONFIG_RVU_ESWITCH on RHEL (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: RVU representor driver (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Vary completion queue event size (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Refactor few NPC mcam APIs (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Move shared APIs to header file (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Reuse PF max mtu value (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add new APIs for queue memory alloc/free. (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Define common API for HW resources configuration (Sai Krishna) [RHEL-23617]
  - net: marvell: use ethtool string helpers (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix potential integer overflows on integer shifts (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Change block parameter to const pointer in get_lf_str_list (Sai Krishna) [RHEL-23617]
  - octeontx2-af: debugfs: Add Channel info to RPM map (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Modify SMQ flush sequence to drop packets (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Make iplen __be16 in otx2_sqe_add_ext() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Pass string literal as format argument of alloc_workqueue() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: configure default CPT credits for CN10KA B0 (Sai Krishna) [RHEL-23617]
  - octeontx2-af: avoid RXC register access for CN10KB (Sai Krishna) [RHEL-23617]
  - octeontx2-af: use dynamic interrupt vectors for CN10K (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix CPT AF register offset calculation (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix issue with IPv4 match for RSS (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix issue with IPv6 ext match for RSS (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix detection of IP layer (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix a issue with cpt_lf_alloc mailbox (Sai Krishna) [RHEL-23617]
  - octeontx2-af: replace cpt slot with lf id on reg write (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Sync NIX and NPA contexts from NDC to LLC/DRAM (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix coverity and klockwork issues in octeon PF driver (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix linking objects into multiple modules (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add error handling to VLAN unoffload handling (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add debugfs support to dump NIX TM topology (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Always allocate PF entries from low prioriy zone (Sai Krishna) [RHEL-23617]
  - Octeontx2-pf: Free send queue buffers incase of leaf to inner (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Reuse Transmit queue/Send queue index of HTB class (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Treat truncation of IRQ name as an error (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: flower: check for unsupported control flags (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add support for offload tc with skbedit mark action (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: fix FLOW_DIS_IS_FRAGMENT implementation (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix NIX SQ mode and BP config (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix transmit scheduler resource leak (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Reset MAC stats during probe (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add array index check (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: remove unused variables req_hdr and rsp_hdr (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: check negative error code in otx2_open() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Increase maximum BPID channels (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix issue with loading coalesced KPU profiles (Sai Krishna) [RHEL-23617]
  - Octeontx2-af: fix pause frame configuration in GMP mode (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Send UP messages to VF only when VF is up. (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Use default max_active works instead of one (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Wait till detach_resources msg is complete (Sai Krishna) [RHEL-23617]
  - octeontx2: Detect the mbox up or down message via register (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Use matching wake_up API variant in CGX command interface (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add TC flower offload support for TCP flags (Sai Krishna) [RHEL-23617]
  - Octeontx2-af: Fix an issue in firmware shared data reserved space (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Consider the action set by PF (Sai Krishna) [RHEL-23617]
  - Octeontx2-af: Fetch MAC channel info from firmware (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Remove the PF_FUNC validation for NPC transmit rules (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix a memleak otx2_sq_init (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Cleanup loopback device checks (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Create BPIDs free pool (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Remove xdp queues on program detach (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add filter profiles in hardware to extract packet headers (Sai Krishna) [RHEL-23617]
  - net: fill in MODULE_DESCRIPTION()s for rvu_mbox (Sai Krishna) [RHEL-23617]
  - octeontx2-af: CN10KB: Fix FIFO length calculation for RPM2 (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Re-enable MAC TX in otx2_stop processing (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Always configure NIX TX link credits based on max frame size (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix max NPC MCAM entry check while validating ref_entry (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix marking couple of structure as __packed (Sai Krishna) [RHEL-23617]
  - octeontx2-af: insert space after include (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix graceful exit during PFC configuration failure (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix multicast/mirror group lock/unlock issue (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix pause frame configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Update RSS algorithm index (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix promisc mcam entry action (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Update Tx link register range (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add missing mcs flr handler call (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix mcs stats register address (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix mcs sa cam entries size (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Adjust Tx credits when MCS external bypass is disabled (Sai Krishna) [RHEL-23617]
  - octeontx2-af: cn10k: Increase outstanding LMTST transactions (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix a use-after-free in rvu_nix_register_reporters (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: TC flower offload support for mirror (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add new mbox to support multicast/mirror offload (Sai Krishna) [RHEL-23617]
  - octeontx2-af: debugfs: update CQ context fields (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Check return value of nix_get_nixlf before using nixlf (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Restore TC ingress police rules when interface is up (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64 (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix possible buffer overflow (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: TC flower offload support for ICMP type and code (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix ntuple rule creation to direct packet to VF with higher Rx queue than its PF (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix memory leak during interface down (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Free pending and dropped SQEs (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix holes in error code (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix error codes (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Enable hardware timestamping for VFs (Sai Krishna) [RHEL-23617]
  - octeontx2-af: replace deprecated strncpy with strscpy (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: update PN only when update_pn is true (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Tc flower offload support for MPLS (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Do xdp_do_flush() after redirects. (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Enable PTP PPS output support (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler (Sai Krishna) [RHEL-23617]
  - octeontx2-af: print error message incase of invalid pf mapping (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add validation of lmac (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Don't treat lack of CGX interfaces as error (Sai Krishna) [RHEL-23617]
  - octeontx2-af: CN10KB: Add USGMII LMAC mode (Sai Krishna) [RHEL-23617]
  - cteonxt2-pf: Fix backpressure config for multiple PFC priorities to work simultaneously (Sai Krishna) [RHEL-23617]
  - octeontx2-af: CN10KB: fix PFC configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix PFC TX scheduler free (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Use PTP HW timestamp counter atomic update feature (Sai Krishna) [RHEL-23617]
  - octeontx2-af: SDP: fix receive link config (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Allow both ntuple and TC features on the interface (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Harden rule validation. (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Remove redundant functions rvu_npc_exact_mac2u64() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Use u64_to_ether_addr() to convert ethernet address (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Remove redundant functions mac2u64() and cfg2mac() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: TC flower offload support for inner VLAN (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Code restructure to handle TC outer VLAN offload (Sai Krishna) [RHEL-23617]
  - octeontx2: Remove unnecessary ternary operators (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: TC flower offload support for SPI field (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Initialize 'cntr_val' to fix uninitialized symbol error (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix hash extraction enable configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Install TC filter rules in hardware based on priority (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: htb offload support for Round Robin scheduling (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: implement transmit schedular allocation algorithm (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Generate hash key using ecb(aes) (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Dont allocate BPIDs for LBK interfaces (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add additional check for MCAM rules (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Move validation of ptp pointer before its usage (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Promisc enable/disable through mbox (Sai Krishna) [RHEL-23617]
  - octeontx-af: fix hardware timestamp configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Reset MAC features in FLR (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add validation before accessing cgx and lmac (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix mapping for NIX block from CGX connection (Sai Krishna) [RHEL-23617]
  - octeontx2-af: cn10kb: fix interrupt csr addresses (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: TC flower offload support for rxqueue mapping (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush (Sai Krishna) [RHEL-23617]
  - octeontx2-af: add option to toggle DROP_RE enable in rx cfg (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Enable LBK links only when switch mode is on. (Sai Krishna) [RHEL-23617]
  - octeontx2-af: cn10k: Set NIX DWRR MTU for CN10KB silicon (Sai Krishna) [RHEL-23617]
  - octeontx2-af: extend RSS supported offload types (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix lbk link credits on cn10k (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fixed resource availability check (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix promiscuous mode (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Support VLAN in clear text (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Remove unneeded semicolon (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: ethtool expose qos stats (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add support for HTB offload (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Prepare for QOS offload (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Refactor schedular queue alloc/free calls (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: qos send queues management (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Rename tot_tx_queues to non_qos_queues (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Offload extended packet number(XPN) feature (Sai Krishna) [RHEL-23617]
  - macsec: Use helper macsec_netdev_priv for offload drivers (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Do not reset PN while updating secy (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Fix shared counters logic (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Clear stats before freeing resource (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Match macsec ethertype along with DMAC (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Fix NULL pointer dereferences (Sai Krishna) [RHEL-23617]
  - octeontx2-af: add mbox to return CPT_AF_FLT_INT info (Sai Krishna) [RHEL-23617]
  - octeontx2-af: update cpt lf alloc mailbox (Sai Krishna) [RHEL-23617]
  - octeontx2-af: restore rxc conf after teardown sequence (Sai Krishna) [RHEL-23617]
  - octeontx2-af: optimize cpt pf identification (Sai Krishna) [RHEL-23617]
  - octeontx2-af: modify FLR sequence for CPT (Sai Krishna) [RHEL-23617]
  - octeontx2-af: recover CPT engine when it gets fault (Sai Krishna) [RHEL-23617]
  - octeontx2-af: update CPT inbound inline IPsec config mailbox (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Remove duplicate MACSEC setting (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: fix build error when CONFIG_OCTEONTX2_PF=y (Sai Krishna) [RHEL-23617]
  - net: octeontx2-pf: mcs: consider MACSEC setting (Sai Krishna) [RHEL-23617]
  - ethernet: marvell: octeontx2 Fix resource not freed after malloc (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: fix possible memory leak in otx2_probe() (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: fix missing unlock in some error paths (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: remove unneeded semicolon (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Introduce MACSEC hardware offloading (Sai Krishna) [RHEL-23617]
  - ice: stop storing XDP verdict within ice_rx_buf (Petr Oros) [RHEL-65102]
  - ice: gather page_count()'s of each frag right before XDP prog call (Petr Oros) [RHEL-65102]
  - ice: put Rx buffers after being done with current frame (Petr Oros) [RHEL-65102]
  - wifi: iwlwifi: bump FW API to 94 for BZ/SC devices (CKI Backport Bot) [RHEL-74377]
  - net: add reserved fields to psample_metadata (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to ethtool_keee (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to page_pool_stats and page_pool_params (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to devlink_ops (Sabrina Dubroca) [RHEL-60372]
  - Revert "net: exclude TC from kABI" (Sabrina Dubroca) [RHEL-60372]
  - Revert "net: exclude BPF/XDP from kABI" (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to kernel_hwtstamp_config (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to ip_tunnel_parm_kern (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to netdev_stat_ops and netdev_queue_mgmt_ops (Sabrina Dubroca) [RHEL-60372]
  - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73912]
  - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73270]
  - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73270]
  - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73270]
  - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73270]
  - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73270]
  - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73270]
  - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73270] {CVE-2024-40937}
  - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73270]
  - EDAC/igen6: Add Intel Meteor Lake-P SoCs support (Joel Savitz) [RHEL-53588]
  - EDAC/igen6: Add Intel Meteor Lake-PS SoCs support (Joel Savitz) [RHEL-53588]
  - EDAC/igen6: Add Intel Raptor Lake-P SoCs support (Joel Savitz) [RHEL-53588]
  - EDAC/igen6: Add Intel Alder Lake-N SoCs support (Joel Savitz) [RHEL-53588]
  - EDAC/igen6: Make get_mchbar() helper function (Joel Savitz) [RHEL-53588]
  - Revert "net: wwan: mark Qualcomm driver as tech preview" (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - Revert "net: wwan: mark t7xx driver as tech preview" (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - Revert "net: wwan: mark iosm driver as tech preview" (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc() (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: fix global oob in wwan_rtnl_policy (Jose Ignacio Tornos Martinez) [RHEL-66001 RHEL-67116] {CVE-2024-50128}
  - net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable() (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: t7xx: PCIe reset rescan (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: t7xx: add support for Dell DW5933e (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: mhi: make default data link id configurable (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: t7xx: Un-embed dummy device (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - HID: bpf: drop unneeded casts discarding const (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: fix kfunc inclusions with newer bpftool (Benjamin Tissoires) [RHEL-53898]
  - Input: fix regression when re-registering input handlers (Benjamin Tissoires) [RHEL-53898]
  - HID: Ignore battery for all ELAN I2C-HID devices (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: fix cfi stubs for hid_bpf_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Hardcode (non-inverted) AES pens as BTN_TOOL_PEN (Benjamin Tissoires) [RHEL-53898]
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add support for B2402FVA track point (Benjamin Tissoires) [RHEL-53898]
  - HID: core: zero-initialize the report buffer (Benjamin Tissoires) [RHEL-53898]
  - selftest: hid: add the missing tests directory (Benjamin Tissoires) [RHEL-53898]
  - HID: plantronics: Workaround for an unexcepted opposite volume key (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (Benjamin Tissoires) [RHEL-53898 RHEL-66678] {CVE-2024-50189}
  - selftest: hid: add missing run-hid-tools-tests.sh (Benjamin Tissoires) [RHEL-53898]
  - HID: i2c-hid: ensure various commands do not interfere with each other (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Do not warn about dropped packets for first packet (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Support sequence numbers smaller than 16-bit (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Defer calculation of resolution until resolution_code is known (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: more appropriate tool type categorization (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Modify pen IDs (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add support for GT7868Q (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: free driver_data after destroying hid device (Benjamin Tissoires) [RHEL-53898] {CVE-2024-46746}
  - hid-asus: add ROG Ally X prod ID to quirk list (Benjamin Tissoires) [RHEL-53898]
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Benjamin Tissoires) [RHEL-53898 RHEL-59317] {CVE-2024-46747}
  - selftests/hid: add test for attaching multiple time the same struct_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: prevent the same struct_ops to be attached more than once (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: disable struct_ops auto-attach (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: fix bpf_wq new API (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Move sensor discovery before HID device initialization (Benjamin Tissoires) [RHEL-53898]
  - hid: bpf: add BPF_JIT dependency (Benjamin Tissoires) [RHEL-53898]
  - Merge tag 'for-linus-2024071601' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-steam: Fix typo in goto label (Benjamin Tissoires) [RHEL-53898]
  - HID: mcp2221: Remove unnecessary semicolon (Benjamin Tissoires) [RHEL-53898]
  - HID: Fix spelling mistakes "Kensigton" -> "Kensington" (Benjamin Tissoires) [RHEL-53898]
  - HID: add more missing MODULE_DESCRIPTION() macros (Benjamin Tissoires) [RHEL-53898]
  - HID: samples: fix the 2 struct_ops definitions (Benjamin Tissoires) [RHEL-53898]
  - HID: apple: Add support for magic keyboard backlight on T2 Macs (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: doc fixes for hid_hw_request() hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: doc fixes for hid_hw_request() hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: fix gcc warning and unify __u64 into u64 (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: ensure CKI can compile our new tests on old kernels (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add an infinite loop test for hid_bpf_try_input_report (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add another test for injecting an event from an event hook (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: allow hid_device_event hooks to inject input reports on self (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add wq test for hid_bpf_input_report() (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: make hid_bpf_input_report() sleep until the device is ready (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add tests for hid_hw_output_report HID-BPF hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: add HID-BPF hooks for hid_hw_output_report (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add tests for hid_hw_raw_request HID-BPF hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: prevent infinite recursions with hid_hw_raw_requests hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: add HID-BPF hooks for hid_hw_raw_requests (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: protect HID-BPF prog_list access by a SRCU (Benjamin Tissoires) [RHEL-53898]
  - HID: add source argument to HID low level functions (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: fix dispatch_hid_bpf_device_event uninitialized ret value (Benjamin Tissoires) [RHEL-53898]
  - HID: uclogic: Add module description (Benjamin Tissoires) [RHEL-53898]
  - HID: uclogic: Avoid linking common code into multiple modules (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: make part of struct hid_device writable (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: rework hid_bpf_ops_btf_struct_access (Benjamin Tissoires) [RHEL-53898]
  - bpf: allow bpf helpers to be used into HID-BPF struct_ops (Benjamin Tissoires) [RHEL-53898]
  - Documentation: HID: add a small blurb on udev-hid-bpf (Benjamin Tissoires) [RHEL-53898]
  - Documentation: HID: amend HID-BPF for struct_ops (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add subprog call test (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: remove tracing HID-BPF capability (Benjamin Tissoires) [RHEL-53898]
  - HID: samples: convert the 2 HID-BPF samples into struct_ops (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: convert the hid_bpf selftests with struct_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: implement HID-BPF through bpf_struct_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: add hid_get/put_device() helpers (Benjamin Tissoires) [RHEL-53898]
  - HID: rename struct hid_bpf_ops into hid_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: Ignore battery for ELAN touchscreens 2F2C and 4116 (Benjamin Tissoires) [RHEL-53898]
  - HID: i2c-hid: elan: fix reset suspend current leakage (Benjamin Tissoires) [RHEL-53898]
  - hid: asus: asus_report_fixup: fix potential read out of bounds (Benjamin Tissoires) [RHEL-53898]
  - HID: add missing MODULE_DESCRIPTION() macros (Benjamin Tissoires) [RHEL-53898]
  - HID: logitech-dj: add missing MODULE_DESCRIPTION() macro (Benjamin Tissoires) [RHEL-53898]
  - HID: lg-g15: add missing MODULE_DESCRIPTION() macro (Benjamin Tissoires) [RHEL-53898]
  - HID: letsketch: add missing MODULE_DESCRIPTION() macro (Benjamin Tissoires) [RHEL-53898]
  - HID: usbhid: Share USB device firmware node with child HID device (Benjamin Tissoires) [RHEL-53898]
  - HID: logitech-hidpp: add missing MODULE_DESCRIPTION() macro (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: Fix an error handling path in nintendo_hid_probe() (Benjamin Tissoires) [RHEL-53898]
  - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() (Benjamin Tissoires) [RHEL-53898] {CVE-2024-40934}
  - HID: uclogic: Use Rx and Ry for touch strips (Benjamin Tissoires) [RHEL-53898]
  - HID: uclogic: Support HUION devices with up to 20 buttons (Benjamin Tissoires) [RHEL-53898]
  - HID: Use kvzalloc instead of kzalloc in hid_register_field() (Benjamin Tissoires) [RHEL-53898]
  - HID: core: remove unnecessary WARN_ON() in implement() (Benjamin Tissoires) [RHEL-53898] {CVE-2024-39509}
  - selftests/hid: skip tests with HID-BPF if udev-hid-bpf is not installed (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add tests for the Raptor Mach 2 joystick (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: move the gamepads definitions in the test file (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: import base_gamepad.py from hid-tools (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add Huion Kamvas Pro 19 tests (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: tablets: also check for XP-Pen offset correction (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: tablets: add a couple of XP-PEN tablets (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: tablets: reduce the number of pen state (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add support for HID-BPF pre-loading before starting a test (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: import base_device.py from hid-tools (Benjamin Tissoires) [RHEL-53898]
  - HID: do not assume HAT Switch logical max < 8 (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Use amd_get_c2p_val() to read C2P register (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Modify and log error only if case of functionality failures (Benjamin Tissoires) [RHEL-53898]
  - HID: kye: Change Device Usage from Puck to Mouse (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Fix calibration workaround for clone devices (Benjamin Tissoires) [RHEL-53898]
  - HID: i2c-hid: Retry address probe after delay (Benjamin Tissoires) [RHEL-53898]
  - HID: asus: add ROG Z13 lightbar (Benjamin Tissoires) [RHEL-53898]
  - HID: asus: add ROG Ally N-Key ID and keycodes (Benjamin Tissoires) [RHEL-53898]
  - HID: asus: make asus_kbd_init() generic, remove rog_nkey_led_init() (Benjamin Tissoires) [RHEL-53898]
  - HID: asus: fix more n-key report descriptors if n-key quirked (Benjamin Tissoires) [RHEL-53898]
  - HID: logitech: add a few Logitech HID++ device IDs (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-debug: add EV_FF and FF_STATUS mappings (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-debug: more informative output for EV_KEY (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-debug: fix Moir -> Moire typo (Benjamin Tissoires) [RHEL-53898]
  - HID: Add quirk for Logitech Casa touchpad (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-steam: Add Deck IMU support (Benjamin Tissoires) [RHEL-53898]
  - HID: sony: remove redundant assignment (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: Remove unused function (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: fix hid_bpf_input_report() when hid-core is not ready (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: allow to use bpf_timer_set_sleepable_cb() in tracing callbacks. (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add tests for hid_bpf_input_report (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: allow to inject HID event from BPF (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: Add test for hid_bpf_hw_output_report (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add KASAN to the VM tests (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: export hid_hw_output_report as a BPF kfunc (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf/dispatch: regroup kfuncs definitions (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: Simplify device type ID (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Parse minimal report 0x01 (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Don't fail on calibration data request (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Don't fail on FW/HW version request (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Fix LED blinking (Benjamin Tissoires) [RHEL-53898]
  - HID: uclogic: Expose firmware name (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-debug: add missing evdev and HID codes (Benjamin Tissoires) [RHEL-53898]
  - HID: corsair,lenovo: Convert sprintf() family to sysfs_emit() family (Benjamin Tissoires) [RHEL-53898]
  - HID: roccat: Convert sprintf() family to sysfs_emit() family (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-sensor-custom: Convert sprintf() family to sysfs_emit() family (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-picolcd*: Convert sprintf() family to sysfs_emit() family (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: Don't fail on setting baud rate (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: use ida for LED player id (Benjamin Tissoires) [RHEL-53898]
  - HID: surface-hid: kbd: Convert to platform remove callback returning void (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-sensor-custom: Convert to platform remove callback returning void (Benjamin Tissoires) [RHEL-53898]
  - HID: google: hammer: Convert to platform remove callback returning void (Benjamin Tissoires) [RHEL-53898]
  - hid: hid-picolcd: Remove struct backlight_ops.check_fb (Benjamin Tissoires) [RHEL-53898]
  - hid: hid-picolcd: Fix initialization order (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Set the AMD SFH driver to depend on x86 (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Extend MP2 register access to SFH (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Improve boot time when SFH is available (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Increase sensor command timeout (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: Remove some unused functions (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-prodikeys: remove struct pk_device (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-prodikeys: remove unused struct pcmidi_snd members (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-multitouch: remove unused mt_application::dev_time (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-lg3ff: remove unused struct lg3ff_device (Benjamin Tissoires) [RHEL-53898]
  - HID: protect hid_device::bpf by CONFIG_HID_BPF (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: remove unused hid_data::pressure (Benjamin Tissoires) [RHEL-53898]
  - HID: apple: remove unused members from struct apple_sc_backlight (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Clean up use of struct->wacom_wac (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Add Samsung wireless bookcover and universal keyboard support (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Add Samsung wireless action mouse support (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Add Samsung wireless gamepad support (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Add Samsung wireless keyboard support (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Rewrite rdesc checking code using memcmp() (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Broaden device compatibility in samsung driver (Benjamin Tissoires) [RHEL-53898]
  - input: Add support for "Do Not Disturb" (Benjamin Tissoires) [RHEL-53898]
  - input: Add event code for accessibility key (Benjamin Tissoires) [RHEL-53898]
  - Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination (Benjamin Tissoires) [RHEL-53898]
  - Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3 (Benjamin Tissoires) [RHEL-53898]
  - Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table (Benjamin Tissoires) [RHEL-53898]
  - Input: uinput - reject requests with unreasonable number of slots (Benjamin Tissoires) [RHEL-53898 RHEL-59311] {CVE-2024-46745}
  - Input: MT - limit max slots (Benjamin Tissoires) [RHEL-53898] {CVE-2024-45008}
  - Input: synaptics - enable SMBus for HP Elitebook 840 G2 (Benjamin Tissoires) [RHEL-53898]
  - Input: do not check number of events in input_pass_values() (Benjamin Tissoires) [RHEL-53898]
  - Input: preallocate memory to hold event values (Benjamin Tissoires) [RHEL-53898]
  - Input: rearrange input_alloc_device() to prepare for preallocating of vals (Benjamin Tissoires) [RHEL-53898]
  - Input: simplify event handling logic (Benjamin Tissoires) [RHEL-53898]
  - Input: make events() method return number of events processed (Benjamin Tissoires) [RHEL-53898]
  - Input: make sure input handlers define only one processing method (Benjamin Tissoires) [RHEL-53898]
  - Input: evdev - remove ->event() method (Benjamin Tissoires) [RHEL-53898]
  - Input: elan_i2c - do not leave interrupt disabled on suspend failure (Benjamin Tissoires) [RHEL-53898]
  - coresight: Make trace ID map spinlock local to the map (Mark Salter) [RHEL-21456]
  - coresight: Emit sink ID in the HW_ID packets (Mark Salter) [RHEL-21456]
  - coresight: Remove pending trace ID release mechanism (Mark Salter) [RHEL-21456]
  - coresight: Use per-sink trace ID maps for Perf sessions (Mark Salter) [RHEL-21456]
  - coresight: Make CPU id map a property of a trace ID map (Mark Salter) [RHEL-21456]
  - coresight: Expose map arguments in trace ID API (Mark Salter) [RHEL-21456]
  - coresight: Move struct coresight_trace_id_map to common header (Mark Salter) [RHEL-21456]
  - coresight: Clarify comments around the PID of the sink owner (Mark Salter) [RHEL-21456]
  - coresight: Remove unused ETM Perf stubs (Mark Salter) [RHEL-21456]
  - coresight: tmc: sg: Do not leak sg_table (Mark Salter) [RHEL-21456]
  - Coresight: Set correct cs_mode for dummy source to fix disable issue (Mark Salter) [RHEL-21456]
  - Coresight: Set correct cs_mode for TPDM to fix disable issue (Mark Salter) [RHEL-21456]
  - device property: Don't use "proxy" headers (Mark Salter) [RHEL-21456]
  - device property: Replace custom implementation of COUNT_ARGS() (Mark Salter) [RHEL-21456]
  - device property: Move enum dev_dma_attr to fwnode.h (Mark Salter) [RHEL-21456]
  - hwtracing: use for_each_endpoint_of_node() (Mark Salter) [RHEL-21456]
  - coresight: constify the struct device_type usage (Mark Salter) [RHEL-21456]
  - coresight: tmc: Remove duplicated include in coresight-tmc-core.c (Mark Salter) [RHEL-21456]
  - coresight: Fix ref leak when of_coresight_parse_endpoint() fails (Mark Salter) [RHEL-21456]
  - coresight: tmc: Enable SG capability on ACPI based SoC-400 TMC ETR devices (Mark Salter) [RHEL-21456]
  - coresight: Docs/ABI/testing/sysfs-bus-coresight-devices: Fix spelling errors (Mark Salter) [RHEL-21456]
  - coresight: tpiu: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: tmc: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: stm: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: debug: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: Remove duplicate linux/amba/bus.h header (Mark Salter) [RHEL-21456]
  - coresight: stm: Remove duplicate linux/acpi.h header (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix access to resource selector registers (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Safe access for TRCQCLTR (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Do not save/restore Data trace control registers (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Do not hardcode IOMEM access for register restore (Mark Salter) [RHEL-21456]
  - coresight: debug: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: stm: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: tmc: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: tpiu: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: catu: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: funnel: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: replicator: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: Add helpers registering/removing both AMBA and platform drivers (Mark Salter) [RHEL-21456]
  - coresight: tmc: Extract device properties from AMBA pid based table lookup (Mark Salter) [RHEL-21456]
  - coresight: stm: Extract device name from AMBA pid based table lookup (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix unbalanced pm_runtime_enable() (Mark Salter) [RHEL-21456]
  - ARM: 9379/1: coresight: tpda: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9378/1: coresight: etm4x: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9376/1: coresight: tpdm: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9375/1: coresight: stm: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9374/1: coresight: etb10: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9373/1: coresight: funnel: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9371/1: coresight: cti: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9366/1: coresight: tpiu: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9365/1: coresight: tmc: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9364/1: coresight: replicator: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9363/1: coresight: etm3x: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9362/1: coresight: catu: drop owner assignment (Mark Salter) [RHEL-21456]
  - coresight-tpda: Change qcom,dsb-element-size to qcom,dsb-elem-bits (Mark Salter) [RHEL-21456]
  - coresight: tpdm: Fix build break due to uninitialised field (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Set skip_power_up in etm4_init_arch_data function (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add msr register support for CMB (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add timestamp control register support for the CMB (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add pattern registers support for CMB (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add support to configure CMB (Mark Salter) [RHEL-21456]
  - coresight-tpda: Add support to configure CMB element (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add CMB dataset support (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Optimize the useage of tpdm_has_dsb_dataset (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Optimize the store function of tpdm simple dataset (Mark Salter) [RHEL-21456]
  - coresight: Add helper for setting csdev->mode (Mark Salter) [RHEL-21456]
  - coresight: Add a helper for getting csdev->mode (Mark Salter) [RHEL-21456]
  - coresight: Add helper for atomically taking the device (Mark Salter) [RHEL-21456]
  - coresight: Add explicit member initializers to coresight_dev_type (Mark Salter) [RHEL-21456]
  - coresight: Remove unused stubs (Mark Salter) [RHEL-21456]
  - coresight: Remove atomic type from refcnt (Mark Salter) [RHEL-21456]
  - coresight: Move all sysfs code to sysfs file (Mark Salter) [RHEL-21456]
  - coresight: Remove the 'enable' field. (Mark Salter) [RHEL-21456]
  - coresight: Move mode to struct coresight_device (Mark Salter) [RHEL-21456]
  - coresight: Remove ops callback checks (Mark Salter) [RHEL-21456]
  - coresight: Make language around "activated" sinks consistent (Mark Salter) [RHEL-21456]
  - coresight: make coresight_bustype const (Mark Salter) [RHEL-21456]
  - coresight: Fix undeclared variable warnings from sparse checker (Mark Salter) [RHEL-21456]
  - coresight: etm3x: Fix build warning (Mark Salter) [RHEL-21456]
  - coresight: Fix uninitialized struct warnings (Mark Salter) [RHEL-21456]
  - coresight: Fix issue where a source device's helpers aren't disabled (Mark Salter) [RHEL-21456]
  - redhat/configs: add new coresight configs (Mark Salter) [RHEL-21456]
  - redhat/configs: add CONFIG_ULTRASOC_SMB as disabled (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Use guards to cleanup (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: trbe: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: replicator: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: funnel: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: dummy: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix width of CCITMIN field (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Correct the property name of MSR number (Mark Salter) [RHEL-21456]
  - Documentation: ABI: coresight-tpdm: Fix Bit[3] description indentation (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes for dsb msr support (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes for timestamp request (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes to configure pattern match output (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes for dsb edge control (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add node to set dsb programming mode (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes to set trigger timestamp and type (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add reset node to TPDM node (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Initialize DSB subunit configuration (Mark Salter) [RHEL-21456]
  - coresight-tpda: Add DSB dataset support (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Introduce TPDM subtype to TPDM driver (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Remove the unnecessary lock (Mark Salter) [RHEL-21456]
  - coresight: tmc: Make etr buffer mode user configurable from sysfs (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Add cc_threshold tunable (Mark Salter) [RHEL-21456]
  - coresight: etm: Make cycle count threshold user configurable (Mark Salter) [RHEL-21456]
  - coresight: etm: Override TRCIDR3.CCITMIN on errata affected cpus (Mark Salter) [RHEL-21456]
  - coresight: trbe: Enable ACPI based TRBE devices (Mark Salter) [RHEL-21456]
  - coresight: trbe: Add a representative coresight_platform_data for TRBE (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Fix uninitialized before use buf_hw_base (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Config SMB buffer before register sink (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Fix sleep while close preempt in enable_smb (Mark Salter) [RHEL-21456]
  - Documentation: coresight: fix `make refcheckdocs` warning (Mark Salter) [RHEL-21456]
  - coresight: Fix crash when Perf and sysfs modes are used concurrently (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Remove bogous __exit annotation for some functions (Mark Salter) [RHEL-21456]
  - coresight: tmc-etr: Disable warnings for allocation failures (Mark Salter) [RHEL-21456]
  - coresight: Fix run time warnings while reusing ETR buffer (Mark Salter) [RHEL-21456]
  - coresight: trbe: Fix TRBE potential sleep in atomic context (Mark Salter) [RHEL-21456]
  - coresight: Fix memory leak in acpi_buffer->pointer (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Ensure valid drvdata and clock before clk_put() (Mark Salter) [RHEL-21456]
  - coresight: trbe: Allocate platform data per device (Mark Salter) [RHEL-21456]
  - coresight: dummy: simplify the code with module_platform_driver (Mark Salter) [RHEL-21456]
  - coresight: tmc: Explicit type conversions to prevent integer overflow (Mark Salter) [RHEL-21456]
  - coresight: trbe: Directly use ID_AA64DFR0_EL1_TraceBuffer_IMP (Mark Salter) [RHEL-21456]
  - coresight: Fix all W=1 build warnings (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Add ACPI support in platform driver (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Change etm4_platform_driver driver for MMIO devices (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Drop pid argument from etm4_probe() (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Drop iomem 'base' argument from etm4_probe() (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Allocate and device assign 'struct etmv4_drvdata' earlier (Mark Salter) [RHEL-21456]
  - hwtracing: coresight: Explicitly include correct DT includes (Mark Salter) [RHEL-21456]
  - coresight: dummy: Update type of mode parameter in dummy_{sink,source}_enable() (Mark Salter) [RHEL-21456]
  - Documentation: trace: Add documentation for Coresight Dummy Trace (Mark Salter) [RHEL-21456]
  - Coresight: Add coresight dummy driver (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Match all ETM4 instances based on DEVARCH and DEVTYPE (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Make etm4_remove_dev() return void (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix missing trctraceidr file in sysfs (Mark Salter) [RHEL-21456]
  - coresight: Fix CTI module refcount leak by making it a helper device (Mark Salter) [RHEL-21456]
  - coresight: Enable and disable helper devices adjacent to the path (Mark Salter) [RHEL-21456]
  - coresight: Refactor out buffer allocation function for ETR (Mark Salter) [RHEL-21456]
  - coresight: Make refcount a property of the connection (Mark Salter) [RHEL-21456]
  - coresight: Store in-connections as well as out-connections (Mark Salter) [RHEL-21456]
  - coresight: Simplify connection fixup mechanism (Mark Salter) [RHEL-21456]
  - coresight: Store pointers to connections rather than an array of them (Mark Salter) [RHEL-21456]
  - coresight: Dynamically add connections (Mark Salter) [RHEL-21456]
  - coresight: Rename connection members to make the direction explicit (Mark Salter) [RHEL-21456]
  - coresight: Rename nr_outports to nr_outconns (Mark Salter) [RHEL-21456]
  - coresight: Change name of pdata->conns (Mark Salter) [RHEL-21456]
  - coresight: Use enum type for cs_mode wherever possible (Mark Salter) [RHEL-21456]
  - coresight: Fix loss of connection info when a module is unloaded (Mark Salter) [RHEL-21456]
  - coresight: perf: Release Coresight path when alloc trace id failed (Mark Salter) [RHEL-21456]
  - coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() (Mark Salter) [RHEL-21456]
  - coresight: etm_pmu: Set the module field (Mark Salter) [RHEL-21456]
  - MAINTAINERS: Remove Mathieu Poirier as coresight maintainer (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Do not access TRCIDR1 for identification (Mark Salter) [RHEL-21456]
  - coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug (Mark Salter) [RHEL-21456]
  - coresight: tmc: Don't enable TMC when it's not ready. (Mark Salter) [RHEL-21456]
  - coresight: tpda: fix return value check in tpda_probe() (Mark Salter) [RHEL-21456]
  - Coresight: tpda/tpdm: remove incorrect __exit annotation (Mark Salter) [RHEL-21456]
  - coresight: perf: Output trace id only once (Mark Salter) [RHEL-21456]
  - coresight: Fix uninitialised variable use in coresight_disable (Mark Salter) [RHEL-21456]
  - Documentation: coresight: tpdm: Add dummy comment after sysfs list (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Extend title heading syntax in TPDM and TPDA documentation (Mark Salter) [RHEL-21456]
  - Documentation: trace: Add documentation for TPDM and TPDA (Mark Salter) [RHEL-21456]
  - Coresight: Add TPDA link driver (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add integration test support (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add DSB dataset support (Mark Salter) [RHEL-21456]
  - Coresight: Add coresight TPDM source driver (Mark Salter) [RHEL-21456]
  - coresight: core: Use IDR for non-cpu bound sources' paths. (Mark Salter) [RHEL-21456]
  - coresight: trace-id: Add debug & test macros to Trace ID allocation (Mark Salter) [RHEL-21456]
  - coresight: events: PERF_RECORD_AUX_OUTPUT_HW_ID used for Trace ID (Mark Salter) [RHEL-21456]
  - coresight: trace id: Remove legacy get trace ID function. (Mark Salter) [RHEL-21456]
  - coresight: etmX.X: stm: Remove trace_id() callback (Mark Salter) [RHEL-21456]
  - coresight: etm3x: Update ETM3 driver to use Trace ID API (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Update ETM4 driver to use Trace ID API (Mark Salter) [RHEL-21456]
  - coresight: stm: Update STM driver to use Trace ID API (Mark Salter) [RHEL-21456]
  - coresight: perf: traceid: Add perf ID allocation and notifiers (Mark Salter) [RHEL-21456]
  - coresight: Remove obsolete Trace ID unniqueness checks (Mark Salter) [RHEL-21456]
  - coresight: trace-id: Add API to dynamically assign Trace ID values (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: fix return value check in smb_init_data_buffer() (Mark Salter) [RHEL-21456]
  - Documentation: Add document for UltraSoc SMB driver (Mark Salter) [RHEL-21456]
  - drivers/coresight: Add UltraSoc System Memory Buffer driver (Mark Salter) [RHEL-21456]
  - coresight: cti: Remove atomic type from enable_req_count (Mark Salter) [RHEL-21456]
  - coresight: cti: Add PM runtime call in enable_store (Mark Salter) [RHEL-21456]
  - coresight: cti: Prevent negative values of enable count (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR (Mark Salter) [RHEL-21456]
  - coresight: etm4x: fix repeated words in comments (Mark Salter) [RHEL-21456]
  - coresight: cti: Fix null pointer error on CTI init before ETM (Mark Salter) [RHEL-21456]
  - coresight: trbe: remove cpuhp instance node before remove cpuhp state (Mark Salter) [RHEL-21456]
  - coresight: etm4x: add CPU hotplug support for probing (Mark Salter) [RHEL-21456]
  - coresight: cti: Fix hang in cti_disable_hw() (Mark Salter) [RHEL-21456]
  - coresight: Fix possible deadlock with lock dependency (Mark Salter) [RHEL-21456]
  - coresight: cti-sysfs: Mark coresight_cti_reg_store() as __maybe_unused (Mark Salter) [RHEL-21456]
  - coresight: Make new csdev_access offsets unsigned (Mark Salter) [RHEL-21456]
  - coresight: cti-sysfs: Re-use same functions for similar sysfs register accessors (Mark Salter) [RHEL-21456]
  - coresight: Re-use same function for similar sysfs register accessors (Mark Salter) [RHEL-21456]
  - coresight: Simplify sysfs accessors by using csdev_access abstraction (Mark Salter) [RHEL-21456]
  - coresight: Remove unused function parameter (Mark Salter) [RHEL-21456]
  - coresight: etm4x: docs: Add documentation for 'ts_source' sysfs interface (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Expose default timestamp source in sysfs (Mark Salter) [RHEL-21456]
  - coresight: docs: Fix a broken reference (Mark Salter) [RHEL-21456]
  - coresight: trbe: fix Kconfig "its" grammar (Mark Salter) [RHEL-21456]
  - coresight: etm4x: avoid build failure with unrolled loops (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Expand branch broadcast documentation (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Link config options to existing documentation (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Turn numbered subsections into real subsections (Mark Salter) [RHEL-21456]
  - coresight: Add config flag to enable branch broadcast (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Escape coresight bindings file wildcard (Mark Salter) [RHEL-21456]
  - dt-bindings: arm: Convert CoreSight CPU debug to DT schema (Mark Salter) [RHEL-21456]
  - dt-bindings: arm: Convert CoreSight bindings to DT schema (Mark Salter) [RHEL-21456]
  - dt-bindings: arm: Rename Coresight filenames to match compatible (Mark Salter) [RHEL-21456]
  - coresight: Clear the connection field properly (Mark Salter) [RHEL-21456]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-564.el9]
changelog:
  - tg3: Disable tg3 PCIe AER on system reboot (Lenny Szubowicz) [RHEL-63747]
  - of: Add for_each_reserved_child_of_node() (Radu Rendec) [RHEL-77190]
  - of: Add of_get_next_status_child() and makes more generic of_get_next (Radu Rendec) [RHEL-77190]
  - of: Add __of_device_is_status() and makes more generic status check (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Fix 'soc' node handling in cpg_mssr_reserved_init() (Radu Rendec) [RHEL-77190]
  - clk: Use of_property_present() (Radu Rendec) [RHEL-77190]
  - clk: renesas: mstp: Remove obsolete clkdev registration (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Ignore all clocks assigned to non-Linux system (Radu Rendec) [RHEL-77190]
  - clk: renesas: mstp: Convert to readl_poll_timeout_atomic() (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Convert to readl_poll_timeout_atomic() (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Remove superfluous check in resume code (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Remove unused default PLL2/3/4/6 configs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Remove unused fixed PLL clock types (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Remove unused variable PLL2 clock type (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779f0: Model PLL1/2/3/6 as fractional PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Use defines for PLL control registers (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for fractional 9.24 PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for fixed variable PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for variable fractional PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for fractional multiplication (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Use defines for common CPG registers (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Add the DSI clocks (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Add the DU clock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779f0: cpg_pll_configs should be __initconst (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: cpg_pll_configs should be __initconst (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Fix CANFD parent clock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Add PWM clock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Tidy up DMAC name on SYS-DMAC (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Use FIELD_GET() (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Clarify custom PLL clock support (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Removed unused SSMODE_* definitions (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Restore PLL enum sort order (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen2: Use DEFINE_SPINLOCK() for static spinlock (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-lib: Use DEFINE_SPINLOCK() for global spinlock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a77970: Use common cpg_lock (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for FRQCRC1 (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779g0: Add custom clock for PLL2 (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Fix initconst confusion for cpg_pll_config (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: propagate return value of_genpd_add_provider_simple() (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Check return value of pm_genpd_init() (Radu Rendec) [RHEL-77190]
  - nfp: use irq_update_affinity_hint() (Mohammad Heib) [RHEL-40873]
  - PCI: imx6: Fix suspend/resume support on i.MX6QDL (Myron Stowe) [RHEL-73709] {CVE-2024-57809}
  - PCI: dwc: Rename 'dw_pcie::link_gen' to 'dw_pcie::max_link_speed' (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Add i.MX8Q PCIe Root Complex (RC) support (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Call common PHY API to set mode, speed, and submode (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Consolidate redundant if-checks (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Improve comment for workaround ERR010728 (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Simplify switch-case logic by involve core_reset callback (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Introduce SoC specific callbacks for controlling REFCLK (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Rename imx6_* with imx_* (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Fix missing call to phy_power_off() in error handling (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Fix i.MX8MP PCIe EP's occasional failure to trigger MSI (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Fix establish link failure in EP mode for i.MX8MM and i.MX8MP (Myron Stowe) [RHEL-73709]
  - PCI/MSI: Handle lack of irqdomain gracefully (Myron Stowe) [RHEL-72850] {CVE-2024-56760}
  - PCI: Fix use-after-free of slot->bus on hot remove (Myron Stowe) [RHEL-72370] {CVE-2024-53194}
  - PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert() (Myron Stowe) [RHEL-72122] {CVE-2024-53152}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-565.el9]
changelog:
  - net: renesas: rswitch: add mdio C22 support (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: use generic MPSM operation for mdio C45 (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: align mdio C45 operations with datasheet (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: use FIELD_PREP for remaining MPIC register fields (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: do not write to MPSM register at init time (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: remove speed from gwca structure (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: do not deinit disabled ports (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: rework ts tags management (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix initial MPIC register setting (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: enable only used MFWD features (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: handle stop vs interrupt race (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: avoid use-after-put for a device tree node (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix leaked pointer on error path (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix race window between tx start and complete (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix possible early skb release (Radu Rendec) [RHEL-78074]
  - net: mdiobus: fix an OF node reference leak (Jared Kangas) [RHEL-78049]
  - net: mdiobus: Debug print fwnode handle instead of raw pointer (Jared Kangas) [RHEL-78049]
  - net: mdiobus: Convert to use fwnode_device_is_compatible() (Jared Kangas) [RHEL-78049]
  - Revert "kbuild: use $(src) instead of $(srctree)/$(src) for source directory" (Jocelyn Falempe) [RHEL-76500]
  - PM: hibernate: Use kernel_can_power_off() (Maxim Levitsky) [RHEL-63107]
  - Bluetooth: btmtk: avoid UAF in btmtk_process_coredump (CKI Backport Bot) [RHEL-75872] {CVE-2024-56653}
  - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (CKI Backport Bot) [RHEL-75848] {CVE-2024-53208}
  - Bluetooth: fix use-after-free in device_for_each_child() (CKI Backport Bot) [RHEL-75844] {CVE-2024-53237}
  - KVM: arm64: Fix set_id_regs selftest for ASIDBITS becoming unwritable (Eric Auger) [RHEL-75792]
  - KVM: arm64: selftests: Add tests for MMIO external abort injection (Eric Auger) [RHEL-75792]
  - KVM: arm64: selftests: Convert to kernel's ESR terminology (Eric Auger) [RHEL-75792]
  - tools: arm64: Grab a copy of esr.h from kernel (Eric Auger) [RHEL-75792]
  - KVM: arm64: vgic-its: Add error handling in vgic_its_cache_translation (Eric Auger) [RHEL-75792]
  - KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden (Eric Auger) [RHEL-75792]
  - KVM: arm64: vgic: Don't check for vgic_ready() when setting NR_IRQS (Eric Auger) [RHEL-75792]
  - KVM: selftests: aarch64: Add writable test for ID_AA64PFR1_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Allow userspace to change ID_AA64PFR1_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Use kvm_has_feat() to check if FEAT_SSBS is advertised to the guest (Eric Auger) [RHEL-75792]
  - KVM: arm64: Disable fields that KVM doesn't know how to handle in ID_AA64PFR1_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Make the exposed feature bits in AA64DFR0_EL1 writable from userspace (Eric Auger) [RHEL-75792]
  - KVM: arm64: Honor trap routing for TCR2_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Initialize the hypervisor's VM state at EL2 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Refactor kvm_vcpu_enable_ptrauth() for hyp use (Eric Auger) [RHEL-75792]
  - Bluetooth: iso: Always release hdev at the end of iso_listen_bis (CKI Backport Bot) [RHEL-73635] {CVE-2024-57879}
  - xfrm: Export symbol xfrm_dev_state_delete. (Felix Maurer) [RHEL-68939]
  - xfrm: Fix unregister netdevice hang on hardware offload. (Felix Maurer) [RHEL-68939]
  - kasan: make report_lock a raw spinlock (Jared Kangas) [RHEL-70564]
  - config: wifi: enable ath12k driver (Jose Ignacio Tornos Martinez) [RHEL-37773]
  - wifi: ath12k: fix crash when unbinding (Jose Ignacio Tornos Martinez) [RHEL-37773]
  - wifi: ath12k: fix warning when unbinding (Jose Ignacio Tornos Martinez) [RHEL-37773]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-566.el9]
changelog:
  - redhat/configs: add CONFIG_CIFS_COMPRESSION (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-76046]
  - cifs: support reconnect with alternate password for SMB1 (Paulo Alcantara) [RHEL-76046]
  - smb: client: sync the root session and superblock context passwords before automounting (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove unused is_server_using_iface() (Paulo Alcantara) [RHEL-76046]
  - smb: enable reuse of deferred file handles for write operations (Paulo Alcantara) [RHEL-76046]
  - smb: use macros instead of constants for leasekey size and default cifsattrs value (Paulo Alcantara) [RHEL-76046]
  - smb: client: destroy cfid_put_wq on module exit (Paulo Alcantara) [RHEL-76046]
  - cifs: Use str_yes_no() helper in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-76046]
  - smb3: fix compiler warning in reparse code (Paulo Alcantara) [RHEL-76046]
  - smb3.1.1: fix posix mounts to older servers (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: Implement new SMB3 POSIX type (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX (Paulo Alcantara) [RHEL-76046]
  - cifs: unlock on error in smb3_reconfigure() (Paulo Alcantara) [RHEL-76046]
  - cifs: during remount, make sure passwords are in sync (Paulo Alcantara) [RHEL-76046]
  - cifs: support mounting with alternate password to allow password rotation (Paulo Alcantara) [RHEL-76046]
  - smb: During unmount, ensure all cached dir instances drop their dentry (Paulo Alcantara) [RHEL-76046] {CVE-2024-53176}
  - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of WSL reparse point buffers (Paulo Alcantara) [RHEL-76046]
  - cifs: Improve guard for excluding $LXDEV xattr (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for parsing WSL-style symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of native symlink (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix parsing native symlinks relative to the export (Paulo Alcantara) [RHEL-76046]
  - Update misleading comment in cifs_chan_update_iface (Paulo Alcantara) [RHEL-76046]
  - smb: client: change return value in open_cached_dir_by_dentry() if !cfids (Paulo Alcantara) [RHEL-76046]
  - smb: client: disable directory caching when dir_cache_timeout is zero (Paulo Alcantara) [RHEL-76046]
  - smb: client: remove unnecessary checks in open_cached_dir() (Paulo Alcantara) [RHEL-76046]
  - smb: prevent use-after-free due to open_cached_dir error paths (Paulo Alcantara) [RHEL-76046] {CVE-2024-53177}
  - smb: Don't leak cfid when reconnect races with open_cached_dir (Paulo Alcantara) [RHEL-76046] {CVE-2024-53178}
  - smb: client: handle max length for SMB symlinks (Paulo Alcantara) [RHEL-76046]
  - smb: client: get rid of bounds check in SMB2_ioctl_init() (Paulo Alcantara) [RHEL-76046]
  - smb: client: improve compound padding in encryption (Paulo Alcantara) [RHEL-76046]
  - smb3: request handle caching when caching directories (Paulo Alcantara) [RHEL-76046]
  - cifs: Recognize SFU char/block devices created by Windows NFS server on Windows Server <<2012 (Paulo Alcantara) [RHEL-76046]
  - CIFS: New mount option for cifs.upcall namespace resolution (Paulo Alcantara) [RHEL-76046]
  - smb/client: Prevent error pointer dereference (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: implement chmod() for SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-76046]
  - smb: cached directories can be more than root file handle (Paulo Alcantara) [RHEL-76046]
  - smb: client: Use str_yes_no() helper function (Paulo Alcantara) [RHEL-76046]
  - smb: client: memcpy() with surrounding object base address (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove pre-historic unused CIFSSMBCopy (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove unused functions (Paulo Alcantara) [RHEL-76046]
  - smb/client: Fix logically dead code (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix creating native symlinks pointing to current or parent directory (Paulo Alcantara) [RHEL-76046]
  - cifs: Improve creating native symlinks pointing to directory (Paulo Alcantara) [RHEL-76046]
  - cifs: Do not convert delimiter when parsing NFS-style symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of NFS reparse point buffer (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix buffer overflow when parsing NFS reparse points (Paulo Alcantara) [RHEL-76046] {CVE-2024-49996}
  - smb: client: Correct typos in multiple comments across various files (Paulo Alcantara) [RHEL-76046]
  - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove intermediate object of failed create reparse call (Paulo Alcantara) [RHEL-76046]
  - Revert "smb: client: make SHA-512 TFM ephemeral" (Paulo Alcantara) [RHEL-76046]
  - smb: Update comments about some reparse point tags (Paulo Alcantara) [RHEL-76046]
  - cifs: Check for UTF-16 null codepoint in SFU symlink target location (Paulo Alcantara) [RHEL-76046]
  - smb: client: make SHA-512 TFM ephemeral (Paulo Alcantara) [RHEL-76046]
  - smb: client: make HMAC-MD5 TFM ephemeral (Paulo Alcantara) [RHEL-76046]
  - smb: client: allocate crypto only for primary server (Paulo Alcantara) [RHEL-76046]
  - ksmbd: Correct typos in multiple comments across various files (Paulo Alcantara) [RHEL-76046]
  - smb3: fix incorrect mode displayed for read-only files (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix parsing of device numbers (Paulo Alcantara) [RHEL-76046]
  - smb: client: set correct device number on nfs reparse points (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix compression heuristic functions (Paulo Alcantara) [RHEL-76046]
  - cifs: Update SFU comments about fifos and sockets (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for creating SFU symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Recognize SFU socket type (Paulo Alcantara) [RHEL-76046]
  - cifs: Show debug message when SFU Fifo type was detected (Paulo Alcantara) [RHEL-76046]
  - cifs: Put explicit zero byte into SFU block/char types (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for reading SFU symlink location (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix recognizing SFU symlinks (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: fix an "illegal accesses" issue (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: fix a potential issue of freeing an invalid pointer (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: LZ77 code improvements cleanup (Paulo Alcantara) [RHEL-76046]
  - smb: client: insert compression check/call on write requests (Paulo Alcantara) [RHEL-76046]
  - smb3: mark compression as CONFIG_EXPERIMENTAL and fix missing compression operation (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove obsoleted declaration for cifs_dir_open (Paulo Alcantara) [RHEL-76046]
  - smb: client: Use min() macro (Paulo Alcantara) [RHEL-76046]
  - smb: add comment to STATUS_MCA_OCCURED (Paulo Alcantara) [RHEL-76046]
  - smb: move SMB2 Status code to common header file (Paulo Alcantara) [RHEL-76046]
  - smb: move some duplicate definitions to common/smbacl.h (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_ace to smb_ace (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_acl to smb_acl (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_sid to smb_sid (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_ntsd to smb_ntsd (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix FALLOC_FL_PUNCH_HOLE support (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix missing set of remote_i_size (Paulo Alcantara) [RHEL-76046]
  - cifs: Share server EOF pos with netfslib (Paulo Alcantara) [RHEL-76046]
  - ALSA: change configuration CONFIG_SND_HDA_SCODEC_TAS2781_SPI (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: fixup ASUS H7606W (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: fixup ASUS GA605W (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (Jaroslav Kysela) [RHEL-76110]
  - ASoC: rt722: add delay time to wait for the calibration procedure (Jaroslav Kysela) [RHEL-76110]
  - ALSA: seq: oss: Send fragmented SysEx messages immediately (Jaroslav Kysela) [RHEL-76110]
  - ALSA: seq: oss: Fix races at processing SysEx messages (Jaroslav Kysela) [RHEL-76110] {CVE-2024-57893}
  - ALSA: seq: Check UMP support for midi_version change (Jaroslav Kysela) [RHEL-76110]
  - sound: usb: format: don't warn that raw DSD is unsupported (Jaroslav Kysela) [RHEL-76110]
  - ASoC: audio-graph-card: Call of_node_put() on correct node (Jaroslav Kysela) [RHEL-76110]
  - sound: usb: enable DSD output for ddHiFi TC44C (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (Jaroslav Kysela) [RHEL-76110]
  - ALSA: usb-audio: US16x08: Initialize array before use (Jaroslav Kysela) [RHEL-76110]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 83JX, 83MC and 83NM (Jaroslav Kysela) [RHEL-76110]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 83LC (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Delete some dead code (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix bogus error handling in tas2781_hda_spi_probe() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix error code in tas2781_read_acpi() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix -Wsometimes-uninitialized in tasdevice_spi_switch_book() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: select CRC32 instead of CRC32_SARWATE (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/tas2781: Add tas2781 hda SPI driver (Jaroslav Kysela) [RHEL-76110]
  - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one (CKI Backport Bot) [RHEL-75898] {CVE-2024-56663}
  - perf/x86/intel: Add Arrow Lake U support (Michael Petlan) [RHEL-33309]
  - wifi: cfg80211: clear link ID from bitmap during link delete after clean up (Jose Ignacio Tornos Martinez) [RHEL-73817 RHEL-74089] {CVE-2024-57898}
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Jose Ignacio Tornos Martinez) [RHEL-72282 RHEL-73817] {CVE-2024-56602}
  - wifi: rtw89: coex: initialize local .dbcc_2g_phy in _set_btg_ctrl() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (Jose Ignacio Tornos Martinez) [RHEL-73669 RHEL-73817] {CVE-2024-48873}
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (Jose Ignacio Tornos Martinez) [RHEL-72421 RHEL-73817] {CVE-2024-53190}
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jose Ignacio Tornos Martinez) [RHEL-72111 RHEL-73817] {CVE-2024-53156}
  - wifi: iwlwifi: fix CRF name for Bz (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: sme: init n_channels before channels[] access (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: wake the queues in case of failure in resume (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: fix a queue stall in certain cases of CSA (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: fix station NSS capability initialization order (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: Remove the Medium Synchronization Delay validity check (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg() (Jose Ignacio Tornos Martinez) [RHEL-72322 RHEL-73817] {CVE-2024-56535}
  - wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: mvm: tell iwlmei when we finished suspending (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: allow fast resume on ax200 (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: Fix TX fail with A2DP after scanning (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: remove msdu_end structure for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - bus: mhi: host: Switch trace_mhi_gen_tre fields to native endian (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: fix one more memcpy size error (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: check radio iface combination for multi radio per wiphy (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: Skip Rx TID cleanup for self peer (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_* (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - perf test: Remove cpu-list BPF cgroup counter test (Michael Petlan) [RHEL-33006]
  - loop: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - loop: refactor queue limits updates (Ming Lei) [RHEL-71345]
  - usb-storage: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - nbd: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - nvme: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - block: fix queue freeze vs limits lock order in sysfs store methods (Ming Lei) [RHEL-71345]
  - block: add a store_limit operations for sysfs entries (Ming Lei) [RHEL-71345]
  - block: don't update BLK_FEAT_POLL in __blk_mq_update_nr_hw_queues (Ming Lei) [RHEL-71345]
  - block: check BLK_FEAT_POLL under q_usage_count (Ming Lei) [RHEL-71345]
  - block: add a queue_limits_commit_update_frozen helper (Ming Lei) [RHEL-71345]
  - block: fix docs for freezing of queue limits updates (Ming Lei) [RHEL-71345]
  - block: return void from the queue_sysfs_entry load_module method (Ming Lei) [RHEL-71345]
  - loop: Fix ABBA locking race (Ming Lei) [RHEL-71345]
  - loop: Simplify discard granularity calc (Ming Lei) [RHEL-71345]
  - loop: Use bdev limit helpers for configuring discard (Ming Lei) [RHEL-71345]
  - nvme-rdma: unquiesce admin_q before destroy it (CKI Backport Bot) [RHEL-73644] {CVE-2024-49569}
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington) [RHEL-60028]
  - SUNRPC: Fix a hang in TLS sock_close if sk_write_pending (Benjamin Coddington) [RHEL-60028]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-567.el9]
changelog:
  - spi: pxa2xx: Add MTP-S, ARL-H, LNL-M support (David Arcari) [RHEL-78311]
  - erofs: promote to full support (Ian Kent) [RHEL-78339]
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-78016] {CVE-2024-43871}
  - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75825]
  - RDMA/mlx5: Move events notifier registration to be after device registration (CKI Backport Bot) [RHEL-72349] {CVE-2024-53224}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-568.el9]
changelog:
  - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix parsing native symlinks directory/file type (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating WSL-style symlinks (Paulo Alcantara) [RHEL-78655]
  - smb3: add support for IAKerb (Paulo Alcantara) [RHEL-78655]
  - oid_registry: Add OIDs for missing Spnego auth mechanisms to Macs (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix struct FILE_ALL_INFO (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating NFS-style symlinks (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating native Windows sockets (Paulo Alcantara) [RHEL-78655]
  - cifs: Add mount option -o reparse=none (Paulo Alcantara) [RHEL-78655]
  - cifs: Add mount option -o symlink= for choosing symlink create type (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix creating and resolving absolute NT-style symlinks (Paulo Alcantara) [RHEL-78655]
  - cifs: Simplify reparse point check in cifs_query_path_info() function (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove symlink member from cifs_open_info_data union (Paulo Alcantara) [RHEL-78655]
  - cifs: Update description about ACL permissions (Paulo Alcantara) [RHEL-78655]
  - cifs: Rename struct reparse_posix_data to reparse_nfs_data_buffer and move to common/smb2pdu.h (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove struct reparse_posix_data from struct cifs_open_info_data (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove unicode parameter from parse_reparse_point() function (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix getting and setting SACLs over SMB1 (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove intermediate object of failed create SFU call (Paulo Alcantara) [RHEL-78655]
  - cifs: Validate EAs for WSL reparse points (Paulo Alcantara) [RHEL-78655]
  - cifs: Change translation of STATUS_PRIVILEGE_NOT_HELD to -EPERM (Paulo Alcantara) [RHEL-78655]
  - cifs: Change translation of STATUS_NOT_A_REPARSE_POINT to -ENODATA (Paulo Alcantara) [RHEL-78655]
  - smb: client: handle lack of EA support in smb2_query_path_info() (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-78655]
  - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove duplicate struct reparse_symlink_data and SYMLINK_FLAG_RELATIVE (Paulo Alcantara) [RHEL-78655]
  - cifs: Do not attempt to call CIFSGetSrvInodeNumber() without CAP_INFOLEVEL_PASSTHRU (Paulo Alcantara) [RHEL-78655]
  - cifs: Do not attempt to call CIFSSMBRenameOpenFile() without CAP_INFOLEVEL_PASSTHRU (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove declaration of dead CIFSSMBQuerySymLink function (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix printing Status code into dmesg (Paulo Alcantara) [RHEL-78655]
  - cifs: Add missing NT_STATUS_* codes from nterr.h to nterr.c (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix endian types in struct rfc1002_session_packet (Paulo Alcantara) [RHEL-78655]
  - cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c (Paulo Alcantara) [RHEL-78655]
  - smb3: add missing tracepoint for querying wsl EAs (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix order of arguments of tracepoints (Paulo Alcantara) [RHEL-78655]
  - smb: client: correctly handle ErrorContextData as a flexible array (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-78655]
  - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-78655]
  - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-78655]
  - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-78655]
  - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-78655]
  - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-78655]
  - thermal/drivers/rcar_gen3: Update temperature approximation calculation (Radu Rendec) [RHEL-78506]
  - thermal/drivers/rcar_gen3: Move Tj_T storage to shared private data (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: checker: Rework drive and bias pin iteration (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: checker: Fix miscalculation of number of states (Radu Rendec) [RHEL-78506]
  - i2c: rcar: fix NACK handling when being a target (Radu Rendec) [RHEL-78506]
  - i2c: rcar: ensure Gen3+ reset does not disturb local targets (Radu Rendec) [RHEL-78506]
  - i2c: rcar: clear NO_RXDMA flag after resetting (Radu Rendec) [RHEL-78506]
  - i2c: rcar: bring hardware to known state when probing (Radu Rendec) [RHEL-78506]
  - i2c: rcar: add FastMode+ support for Gen4 (Radu Rendec) [RHEL-78506]
  - i2c: rcar: introduce Gen4 devices (Radu Rendec) [RHEL-78506]
  - gpio: rcar: drop of_match_ptr for ID table (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_tmu: Mark driver as non-removable (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_cmt: Address race condition for clock events (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_cmt: Mark driver as non-removable (Radu Rendec) [RHEL-78506]
  - serial: sh-sci: Increment the runtime usage counter for the earlycon device (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Move runtime PM enable to sci_probe_single() (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Drop __initdata macro for port_cfg (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Use plain struct copy in early_console_setup() (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: simplify locking when re-issuing RXDMA fails (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: let timeout timer only run when DMA is scheduled (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: describe locking requirements for invalidating RXDMA (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: protect invalidating RXDMA on shutdown (Jared Kangas) [RHEL-78246]
  - rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack (Marc Dionne) [RHEL-78217]
  - rxrpc, afs: Fix peer hash locking vs RCU callback (Marc Dionne) [RHEL-78217]
  - afs: Add more tracepoints to do with tracking validity (Marc Dionne) [RHEL-78217]
  - netfs: Remove some extraneous directory invalidations (Marc Dionne) [RHEL-78217]
  - afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (Marc Dionne) [RHEL-78217]
  - afs: Add rootcell checks (Marc Dionne) [RHEL-78217]
  - afs: Make /afs/.<cell> as well as /afs/<cell> mountpoints (Marc Dionne) [RHEL-78217]
  - afs: Fix the maximum cell name length (Marc Dionne) [RHEL-78217] {CVE-2025-21646}
  - afs: Fix cleanup of immediately failed async calls (Marc Dionne) [RHEL-78217]
  - afs: Fix directory format encoding struct (Marc Dionne) [RHEL-78217]
  - afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (Marc Dionne) [RHEL-78217]
  - afs: Don't use mutex for I/O operation lock (Marc Dionne) [RHEL-78217]
  - rxrpc: Use a large kvec[] in rxrpc_local rather than every rxrpc_txbuf (Marc Dionne) [RHEL-78217]
  - rxrpc: Request an ACK on impending Tx stall (Marc Dionne) [RHEL-78217]
  - rxrpc: Show stats counter for received reason-0 ACKs (Marc Dionne) [RHEL-78217]
  - rxrpc: Don't set the MORE-PACKETS rxrpc wire header flag (Marc Dionne) [RHEL-78217]
  - rxrpc: Clean up Tx header flags generation handling (Marc Dionne) [RHEL-78217]
  - rxrpc: Fix handling of received connection abort (Marc Dionne) [RHEL-78217]
  - rxrpc: Add a tracepoint for aborts being proposed (Marc Dionne) [RHEL-78217]
  - afs: Fix missing subdir edit when renamed between parent dirs (Marc Dionne) [RHEL-78217]
  - rxrpc: Fix uninitialised variable in rxrpc_send_data() (Marc Dionne) [RHEL-78217]
  - afs: Fix the setting of the server responding flag (Marc Dionne) [RHEL-64506 RHEL-78217] {CVE-2024-49999}
  - afs: Remove unused struct and function prototype (Marc Dionne) [RHEL-78217]
  - afs: Fix possible infinite loop with unresponsive servers (Marc Dionne) [RHEL-78217]
  - rxrpc: Remove unused function declarations (Marc Dionne) [RHEL-78217]
  - afs: drop usage of folio_file_pos (Marc Dionne) [RHEL-78217]
  - afs: Convert comma to semicolon (Marc Dionne) [RHEL-78217]
  - afs: Add __counted_by for struct afs_acl and use struct_size() (Marc Dionne) [RHEL-78217]
  - afs: move afs_xattr_handlers to .rodata (Marc Dionne) [RHEL-78217]
  - afs: Annotate struct afs_permits with __counted_by (Marc Dionne) [RHEL-78217]
  - afs: convert to ctime accessor functions (Marc Dionne) [RHEL-78217]
  - afs: Don't use folio->private to record partial modification (Marc Dionne) [RHEL-78217]
  - afs: Remove whitespace before most ')' from the trace header (Marc Dionne) [RHEL-78217]
  - firmware: psci: Fix return value from psci_system_suspend() (Jared Kangas) [RHEL-78060]
  - libperf cpumap: Grow array of read CPUs in smaller increments (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Remove perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Remove use of perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - perf pmu: Remove use of perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Be tolerant of newline at the end of a cpumask (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Hide/reduce scope of MAX_NR_CPUS (Michael Petlan) [RHEL-71187]
  - perf cpumap: Reduce transitive dependencies on libperf MAX_NR_CPUS (Michael Petlan) [RHEL-71187]
  - perf: Increase MAX_NR_CPUS to 4096 (Michael Petlan) [RHEL-71187]
  - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-74147]
  - dev: Acquire netdev_rename_lock before restoring dev->name in dev_change_name(). (Toke Høiland-Jørgensen) [RHEL-77329]
  - Enable CONFIG_INTEL_MEI_PXP and CONFIG_DRM_I915_PXP on rhel (David Arcari) [RHEL-77170]
  - redhat/configs: disable CONFIG_INTEL_MEI_VSC_HW (David Arcari) [RHEL-77170]
  - mei: vsc: Fix typo "maintstepping" -> "mainstepping" (David Arcari) [RHEL-77170]
  - mei: vsc: Improve error logging in vsc_identify_silicon() (David Arcari) [RHEL-77170]
  - mei: vsc: Do not re-enable interrupt from vsc_tp_reset() (David Arcari) [RHEL-77170]
  - mei: clean pending read with vtag on bus (David Arcari) [RHEL-77170]
  - mei: use kvmalloc for read buffer (David Arcari) [RHEL-77170]
  - mei: bus: Reorganize kerneldoc parameter names (David Arcari) [RHEL-77170]
  - finally take no_llseek out [partial] (David Arcari) [RHEL-77170]
  - mei: vsc: Fix spelling error (David Arcari) [RHEL-77170]
  - mei: vsc: Enhance SPI transfer of IVSC ROM (David Arcari) [RHEL-77170]
  - mei: vsc: Utilize the appropriate byte order swap function (David Arcari) [RHEL-77170]
  - mei: vsc: Prevent timeout error with added delay post-firmware download (David Arcari) [RHEL-77170]
  - mei: vsc: Enhance IVSC chipset stability during warm reboot (David Arcari) [RHEL-77170]
  - mei: bus-fixup: set timeout for MKHI send operations (David Arcari) [RHEL-77170]
  - mei: vsc: Fix wrong invocation of ACPI SID method (David Arcari) [RHEL-77170]
  - mei: vsc: Don't stop/restart mei device during system suspend/resume (David Arcari) [RHEL-77170]
  - mei: me: release irq in mei_me_pci_resume error path (David Arcari) [RHEL-77170]
  - mei: demote client disconnect warning on suspend to debug (David Arcari) [RHEL-77170]
  - mei: pxp: match against PCI_CLASS_DISPLAY_OTHER (David Arcari) [RHEL-77170]
  - mei: bus: constify the struct mei_cl_bus_type usage (David Arcari) [RHEL-77170]
  - mei: vsc: Unregister interrupt handler for system suspend (David Arcari) [RHEL-77170]
  - Revert "mei: vsc: Call wake_up() in the threaded IRQ handler" (David Arcari) [RHEL-77170]
  - mei: Avoid a bunch of -Wflex-array-member-not-at-end warnings (David Arcari) [RHEL-77170]
  - mei: gsc_proxy: match component when GSC is on different bus (David Arcari) [RHEL-77170]
  - mei: vsc: Convert to platform remove callback returning void (David Arcari) [RHEL-77170]
  - mei: vsc: Assign pinfo fields in variable declaration (David Arcari) [RHEL-77170]
  - mei: vsc: Don't use sleeping condition in wait_event_timeout() (David Arcari) [RHEL-77170]
  - mei: vsc: Call wake_up() in the threaded IRQ handler (David Arcari) [RHEL-77170]
  - mei: me: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: txe: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: gsc: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: Add Meteor Lake support for IVSC device (David Arcari) [RHEL-77170]
  - mei: pxp: add dependency on Xe driver (David Arcari) [RHEL-77170]
  - mei: hdcp: add dependency on Xe driver (David Arcari) [RHEL-77170]
  - mei: pxp: match without driver name (David Arcari) [RHEL-77170]
  - mei: hdcp: match without driver name (David Arcari) [RHEL-77170]
  - mei: gsc: add support for auxiliary device created by Xe driver (David Arcari) [RHEL-77170]
  - mei: rework Kconfig dependencies (David Arcari) [RHEL-77170]
  - mei: fix vsc dependency (David Arcari) [RHEL-77170]
  - mei: vsc: Rework firmware image names (David Arcari) [RHEL-77170]
  - mei: pxp: spdx should be at first line (David Arcari) [RHEL-77170]
  - mei: Add MEI hardware support for IVSC device (David Arcari) [RHEL-77170]
  - mei: Add transport driver for IVSC device (David Arcari) [RHEL-77170]
  - misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write (David Arcari) [RHEL-77170]
  - misc: mei: client.c: return negative error code in mei_cl_write (David Arcari) [RHEL-77170]
  - mei: pxp: fix mei_pxp_send_message return value (David Arcari) [RHEL-77170]
  - mei: me: emit error only if reset was unexpected (David Arcari) [RHEL-77170]
  - misc: mei: main.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: interrupt.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hw-me.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hbm.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: dma-ring.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: client.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hw.h: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - mei: update mei-pxp's component interface with timeouts [partial] (David Arcari) [RHEL-77170]
  - mei: pxp: re-enable client on errors (David Arcari) [RHEL-77170]
  - mei: pxp: recover from recv fail under memory pressure (David Arcari) [RHEL-77170]
  - mei: bus: add send and recv api with timeout (David Arcari) [RHEL-77170]
  - mei: docs: fix spelling errors (David Arcari) [RHEL-77170]
  - mei: docs: add missing entries to kdoc in struct mei_cfg_idx (David Arcari) [RHEL-77170]
  - mei: docs: use correct structures name in kdoc (David Arcari) [RHEL-77170]
  - mei: make mei_class a static const structure (David Arcari) [RHEL-77170]
  - mei: gsc: add module description (David Arcari) [RHEL-77170]
  - mei: pxp: Keep a const qualifier when calling mei_cldev_send() (David Arcari) [RHEL-77170]
  - mei: obtain firmware version only on gsc. (David Arcari) [RHEL-77170]
  - mei: bus: enable asynchronous suspend. (David Arcari) [RHEL-77170]
  - mei: log firmware status on hw_start failure. (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Move away from master naming to arbiter [partial] (David Arcari) [RHEL-77170]
  - mei: bus-fixup: fix buffer type (David Arcari) [RHEL-77170]
  - mei: bus: drop useless cldev null check (David Arcari) [RHEL-77170]
  - virt: acrn: Mark the uuid field as unused (David Arcari) [RHEL-77170]
  - mei: Move uuid.h to the MEI namespace (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Refactor HDCP API structures [partial] (David Arcari) [RHEL-77170]
  - uuid: remove licence boilerplate text from the header (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Use generic names for HDCP helpers and structs [partial] (David Arcari) [RHEL-77170]
  - mei: lower the log level for non-fatal failed messages (David Arcari) [RHEL-77170]
  - mei: bus: disallow driver match while dismantling device (David Arcari) [RHEL-77170]
  - mei: Move uuid_le_cmp() to its only user (David Arcari) [RHEL-77170]
  - uuid: Decouple guid_t and uuid_le types and respective macros (David Arcari) [RHEL-77170]
  - uuid: discourage people from using UAPI header in new code (David Arcari) [RHEL-77170]
  - mei: mei-me: resume device in prepare (David Arcari) [RHEL-77170]
  - mei: gsc: Remove redundant dev_err call (David Arcari) [RHEL-77170]
  - mei: fix repeated words in comments (David Arcari) [RHEL-77170]
  - misc: move from strlcpy with unused retval to strscpy [partial] (David Arcari) [RHEL-77170]
  - sunrpc: simplify one-level sysctl registration for xs_tunables_table (Benjamin Coddington) [RHEL-73723]
  - sunrpc: simplify one-level sysctl registration for xr_tunables_table (Benjamin Coddington) [RHEL-73723]
  - sunrpc: move sunrpc_table and proc routines above (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Silence compiler complaints about tautological comparisons (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Revert e0a912e8ddba (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Remove unused declarations (Benjamin Coddington) [RHEL-73723]
  - sunrpc: Remove unused extern declarations (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: change svc_xprt::xpt_flags bits to enum (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Remove unused declaration rpc_modcount() (Benjamin Coddington) [RHEL-73723]
  - lockd: define nlm_port_min,max with CONFIG_SYSCTL (Benjamin Coddington) [RHEL-73723]
  - nfs/blocklayout: Limit repeat device registration on failure (Benjamin Coddington) [RHEL-73723]
  - nfs/blocklayout: Don't attempt unregister for invalid block device (Benjamin Coddington) [RHEL-73723]
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (Benjamin Coddington) [RHEL-73723]
  - nfsd: fix refcount leak when file is unhashed after being found (Benjamin Coddington) [RHEL-73723]
  - net: initialize net->notrefcnt_tracker earlier (Benjamin Coddington) [RHEL-73723]
  - mptcp: fix tracking issue in mptcp_subflow_create_socket() (Benjamin Coddington) [RHEL-73723]
  - net: add a refcount tracker for kernel sockets (Benjamin Coddington) [RHEL-73723]
  - NFSD: Fix nfsd4_shutdown_copy() (Benjamin Coddington) [RHEL-73723]
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Benjamin Coddington) [RHEL-73723]
  - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work" (Benjamin Coddington) [RHEL-73723]
  - nfsd: release svc_expkey/svc_export with rcu_work (Benjamin Coddington) [RHEL-73723]
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Benjamin Coddington) [RHEL-73723]
  - nfsd: restore callback functionality for NFSv4.0 (Benjamin Coddington) [RHEL-73723]
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Benjamin Coddington) [RHEL-73723]
  - NFSD: Remove a never-true comparison (Benjamin Coddington) [RHEL-73723]
  - Revert "nfs: don't reuse partially completed requests in nfs_lock_and_join_requests" (Benjamin Coddington) [RHEL-73723]
  - nfsd: drop inode parameter from nfsd4_change_attribute() (Benjamin Coddington) [RHEL-73723]
  - svcrdma: Address an integer overflow (Benjamin Coddington) [RHEL-73723]
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Benjamin Coddington) [RHEL-73723]
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Benjamin Coddington) [RHEL-73723]
  - NFSv3: only use NFS timeout for MOUNT when protocols are compatible (Benjamin Coddington) [RHEL-73723]
  - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Fix integer overflow in decode_rc_list() (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: clnt.c: Remove misleading comment (Benjamin Coddington) [RHEL-73723]
  - nfs: fix memory leak in error path of nfs4_do_reclaim (Benjamin Coddington) [RHEL-73723]
  - nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net() failed (Benjamin Coddington) [RHEL-73723]
  - NFSD: Mark filecache "down" if init fails (Benjamin Coddington) [RHEL-73723]
  - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Benjamin Coddington) [RHEL-73723]
  - NFSD: Fix NFSv4's PUTPUBFH operation (Benjamin Coddington) [RHEL-73723]
  - nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (Benjamin Coddington) [RHEL-73723]
  - Revert "net/tls: fix tls_sk_proto_close executed repeatedly" (Benjamin Coddington) [RHEL-73723]
  - net/tls: fix tls_sk_proto_close executed repeatedly (Benjamin Coddington) [RHEL-73723]
  - hugetlb: prioritize surplus allocation from current node (Aristeu Rozanski) [RHEL-68966]
  - net: tun: call napi_schedule_prep() to ensure we own a napi (Jared Kangas) [RHEL-76236]
  - net: tun: Fix memory leaks of napi_get_frags (Jared Kangas) [RHEL-76236]
  - virtio-net: fix overflow inside virtnet_rq_alloc (Jon Maloy) [RHEL-73638] {CVE-2024-57843}
  - RDMA/uverbs: Prevent integer overflow issue (CKI Backport Bot) [RHEL-74224] {CVE-2024-57890}
  - EDAC/igen6: Add Intel Arrow Lake-U/H SoCs support (Joel Savitz) [RHEL-33317 RHEL-52289]
  - EDAC/bluefield: Fix potential integer overflow (Aristeu Rozanski) [RHEL-72108] {CVE-2024-53161}
  - virtio/vsock: Improve MSG_ZEROCOPY error handling (Jon Maloy) [RHEL-69661] {CVE-2024-53117}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68028] {CVE-2024-50264}
  - powerpc/boot: Fix incorrect version calculation issue in ld_version (Waiman Long) [RHEL-68367]
  - powerpc: suppress some linker warnings in recent linker versions (Waiman Long) [RHEL-68367]
  - Makefile: link with -z noexecstack --no-warn-rwx-segments (Waiman Long) [RHEL-68367]
  - fs: Fix file_set_fowner LSM hook inconsistencies (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add layout1.refer_mount_root (Ryan Sullivan) [RHEL-8810]
  - fs/ioctl: Add a comment to keep the logic in sync with LSM policies (Ryan Sullivan) [RHEL-8810]
  - landlock: Document IOCTL support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Exhaustive test for the IOCTL allow-list (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTLs on named pipes (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTL with memfds (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTL support (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add cred_transfer test (Ryan Sullivan) [RHEL-8810]
  - landlock: Don't lose track of restrictions on cred_transfer (Ryan Sullivan) [RHEL-8810]
  - Enable CONFIG_SECURITY_LANDLOCK for RHEL (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Handle TEST_F()'s explicit exit codes (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix tests timeout and race condition (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix vfork() side effects (Ryan Sullivan) [RHEL-8810]
  - selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix port parsing in sandboxer (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix d_parent walk (Ryan Sullivan) [RHEL-8810]
  - hostfs: fix dev_t handling (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix fixture teardown (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix interleaved scheduling leading to race conditions (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Prevent infinite loop due to Assert in FIXTURE_TEARDOWN (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Share _metadata between forked processes (Ryan Sullivan) [RHEL-8810]
  - landlock: Add IOCTL access right for character and block devices (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix incorrect free in populate_ruleset_net (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Do not allocate memory in fixture data (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix FS tests when run on a private mount point (Ryan Sullivan) [RHEL-8810]
  - fs: Return ENOTTY directly if FS_IOC_GETUUID or FS_IOC_GETFSSYSFSPATH fail (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Don't error out if a file path cannot be opened (Ryan Sullivan) [RHEL-8810]
  - landlock: Use f_cred in security_file_open() hook (Ryan Sullivan) [RHEL-8810]
  - landlock: Rename "ptrace" files to "task" (Ryan Sullivan) [RHEL-8810]
  - landlock: Simplify current_check_access_socket() (Ryan Sullivan) [RHEL-8810]
  - landlock: Warn once if a Landlock action is requested while disabled (Ryan Sullivan) [RHEL-8810]
  - landlock: Extend documentation for kernel support (Ryan Sullivan) [RHEL-8810]
  - landlock: Add support for KUnit tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Clean up error logs related to capabilities (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix TEST_F()'s vfork handling (Ryan Sullivan) [RHEL-8810]
  - selftests: kselftest_harness: use exit code to store skip (Ryan Sullivan) [RHEL-8810]
  - selftests: kselftest_harness: save full exit code in metadata (Jakub Kicinski) [RHEL-8810]
  - selftests/harness: Merge TEST_F_FORK() into TEST_F() (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Redefine TEST_F() as TEST_F_FORK() (Ryan Sullivan) [RHEL-8810]
  - fs: add FS_IOC_GETFSSYSFSPATH (Ryan Sullivan) [RHEL-8810]
  - fs: super_set_uuid() (Ryan Sullivan) [RHEL-8810]
  - kernfs: attach uuid for every kernfs and report it in fsid (Ryan Sullivan) [RHEL-8810]
  - fs: FS_IOC_GETUUID (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix asymmetric private inodes referring (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix fs_test build with old libc (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix net_test build with old libc (Ryan Sullivan) [RHEL-8810]
  - landlock: Optimize the number of calls to get_access_mask slightly (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Rename "permitted" to "allowed" in ftruncate tests (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v6.6] (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v6.1] (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v5.15] (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests to check unhandled rule's access rights (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests to check unknown rule's access rights (Ryan Sullivan) [RHEL-8810]
  - lsm: new security_file_ioctl_compat() hook (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix capability for net_test (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for FS topology changes with network rules (Ryan Sullivan) [RHEL-8810]
  - landlock: Document network support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Support TCP restrictions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add network tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Share enforce_ruleset() helper (Ryan Sullivan) [RHEL-8810]
  - landlock: Support network rules with TCP bind and connect (Ryan Sullivan) [RHEL-8810]
  - hostfs: Fix ephemeral inodes (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor landlock_add_rule() syscall (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor layer helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Move and rename layer helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor merge/inherit_ruleset helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor landlock_find_rule/insert_rule helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Allow FS topology changes for domains without such rule type (Ryan Sullivan) [RHEL-8810]
  - landlock: Make ruleset's access masks more generic (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix a resource leak (Ryan Sullivan) [RHEL-8810]
  - landlock: Annotate struct landlock_rule with __counted_by (Ryan Sullivan) [RHEL-8810]
  - security: Create file_truncate hook from path_truncate hook (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add hostfs tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for pseudo filesystems (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Make mounts configurable (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add supports_filesystem() helper (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Don't create useless file layouts (Ryan Sullivan) [RHEL-8810]
  - landlock: Clarify documentation for the LANDLOCK_ACCESS_FS_REFER right (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ptrace as much as possible with Yama (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Skip overlayfs tests when not supported (Ryan Sullivan) [RHEL-8810]
  - landlock: Explain file descriptor access rights (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Document best-effort approach for LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Document Landlock's file truncation support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Extend sample tool to support LANDLOCK_ACCESS_FS_TRUNCATE (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ftruncate on FDs created by memfd_create(2) (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test FD passing from restricted to unrestricted processes (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Locally define __maybe_unused (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test open() and ftruncate() in multiple scenarios (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test file truncation support (Ryan Sullivan) [RHEL-8810]
  - landlock: Support file truncation (Ryan Sullivan) [RHEL-8810]
  - landlock: Document init_layer_masks() helper (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor check_access_path_dual() into is_access_to_paths_allowed() (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix documentation style (Ryan Sullivan) [RHEL-8810]
  - landlock: Slightly improve documentation and fix spelling (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Print hints about ABI versions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix out-of-tree builds (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Explain how to support Landlock (Ryan Sullivan) [RHEL-8810]
  - landlock: Add design choices documentation for filesystem access rights (Ryan Sullivan) [RHEL-8810]
  - landlock: Document good practices about filesystem policies (Ryan Sullivan) [RHEL-8810]
  - landlock: Document LANDLOCK_ACCESS_FS_REFER and ABI versioning (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add support for file reparenting (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add 11 new test suites dedicated to file reparenting (Ryan Sullivan) [RHEL-8810]
  - landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Move filesystem helpers and add a new one (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix same-layer rule unions (Ryan Sullivan) [RHEL-8810]
  - landlock: Create find_rule() from unmask_layers() (Ryan Sullivan) [RHEL-8810]
  - landlock: Reduce the maximum number of layers to 16 (Ryan Sullivan) [RHEL-8810]
  - landlock: Define access_mask_t to enforce a consistent access mask size (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test landlock_create_ruleset(2) argument check ordering (Ryan Sullivan) [RHEL-8810]
  - landlock: Change landlock_restrict_self(2) check ordering (Ryan Sullivan) [RHEL-8810]
  - landlock: Change landlock_add_rule(2) argument check ordering (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for O_PATH (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fully test file rename with "remove" access (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Extend access right tests to directories (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for unknown access rights (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Extend tests for minimal valid attribute size (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Make tests build with old libc (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix landlock_add_rule(2) documentation (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Format with clang-format (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Format with clang-format (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Normalize array assignment (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - fs: fix an infinite loop in iomap_fiemap (Ryan Sullivan) [RHEL-8810]
  - landlock: Use square brackets around "landlock-ruleset" (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix path_list memory leak (Ryan Sullivan) [RHEL-8810]
  - fs/ioctl: remove unnecessary __user annotation (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: remove ARRAY_SIZE define from common.h (Ryan Sullivan) [RHEL-8810]
  - fs: forbid invalid project ID (Ryan Sullivan) [RHEL-8810]
  - fs: remove generic_block_fiemap (Ryan Sullivan) [RHEL-8810]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-569.el9]
changelog:
  - scsi: ufs: core: Store min and max clk freq from OPP table (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Cancel RTC work during ufshcd_remove() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix the build for the old ARM OABI (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Improve ufshcd_mcq_sq_cleanup() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Start the RTC update work later (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix another deadlock during RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Requeue aborted request (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix the issue of ICU failure (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove ufshcd_urgent_bkops() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Move UFS trace events to private header (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Add HCI capabilities sysfs group (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Prepare to add HCI capabilities sysfs (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Support Updating UIC Command Timeout (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Do not set link to OFF state while waking up from hibernation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix deadlock during RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Bypass quick recovery if force reset is needed (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Check LSDBS cap when !mcq (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add fill_crypto_prdt variant op (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Make .get_hba_mac() optional (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Inline ufshcd_mcq_vops_get_hba_mac() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Move the ufshcd_mcq_enable() call (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Move the "hba->mcq_enabled = true" assignment (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Inline is_mcq_enabled() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Initialize hba->reserved_slot earlier (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename the MASK_TRANSFER_REQUESTS_SLOTS constant (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove two constants (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Initialize struct uic_command once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Declare functions once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove SCSI host only if added (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Suspend clk scaling on no request (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Prevent no I/O queue case for MCQ (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Convert MCQ_CFG_n to an inline function (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix missing argument 'hba' in MCQ_OPR_OFFSET_n (Radu Rendec) [RHEL-79078]
  - scsi: ufs: sysfs: Make max_number_of_rtt read-write (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Maximum RTT supported by the host driver (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Allow RTT negotiation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_abort_one racing issue (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_clear_cmd racing issue (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Free memory allocated for model before reinit (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Quiesce request queues before checking pending cmds (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix error output and clean up ufshcd_mcq_abort() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: mcq: Fix ufshcd_mcq_sqe_search() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Changing the status to check inflight (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove support for old UFSHCI versions (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unnecessary wmb() prior to writing run/stop regs (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unnecessary wmb() after ringing doorbell (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after disabling interrupts (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after writing UTP_TASK_REQ_LIST_BASE_H (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Drop driver owner initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Reuse compose_devman_upiu (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Reuse compose_dev_cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Reuse exec_dev_cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Reuse device management locking code (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ mode dev command timeout (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: WLUN suspend dev/link state error recovery (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ MAC configuration (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Remove unused parameters (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use ufshcd_mcq_req_to_hwq() to simplify updating hwq (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add definition for REG_UFS_MEM_CFG register (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Migrate to UFSHCD generic CPU latency PM QoS support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add CPU latency QoS support for UFS driver (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Uninitialized variable in ufshcd_devfreq_target() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove the ufshcd_release() in ufshcd_err_handling_prepare() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify power management during async scan (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify ufshcd_auto_hibern8_update() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename ufshcd_auto_hibern8_enable() and make it static (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add sysfs node for UFS RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFS RTC support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add ufshcd_is_ufs_dev_busy() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Warn if the request tag is truncated (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Make fault injection dynamically configurable per HBA (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-sysfs: Expose UFS power info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Let the sq_lock protect sq_tail_slot access (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Clear cmd if abort succeeds in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Expand MCQ queue slot to DeviceQueueDepth + 1 (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Leave space for '\0' in utf8 desc string (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Conversion to bool not necessary (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix race between force complete and ISR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove dev cmd clock scaling busy (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: WLUN send SSU timeout recovery (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set the Command Priority (CP) flag for RT requests (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify ufshcd_comp_scsi_upiu() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove request tag range checks (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Include the SCSI ID in UFS command tracing output (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Correct clear TM error log (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: No need to update UPIU.header.flags and lun in advanced RPMB handler (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add advanced RPMB support where UFSHCI 4.0 does not support EHS length in UTRD (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix the build for gcc 9 and before (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify response header parsing (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify transfer request header initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove a member variable (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify ufshcd_abort_all() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove a local variable from ufshcd_abort_all() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Improve type safety (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify zero-initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Minimize #include directives (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Rename a function argument (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix kernel-doc headers (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Document all return values (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Follow the kernel-doc syntax for documenting return values (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix residual handling (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove HPB support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix some kernel-doc comments (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Add MCQ support for MTK platform (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Export symbols for MTK driver module (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Convert UPIU_HEADER_DWORD() into a function (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix the search/wrap around logic (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add support for qTimestamp attribute (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unused function declaration (Radu Rendec) [RHEL-79078]
  - scsi: ufs: wb: Add explicit flush_threshold sysfs attribute (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Set UFSHCD_QUIRK_MCQ_BROKEN_RTC quirk (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Set UFSHCD_QUIRK_MCQ_BROKEN_INTR quirk (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add host quirk UFSHCD_QUIRK_MCQ_BROKEN_RTC (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add host quirk UFSHCD_QUIRK_MCQ_BROKEN_INTR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove dedicated hwq for dev command (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: mcq: Fix the incorrect OCS value for the device command (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Combine ufshcd_mq_poll_cqe functions (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_inc_sq_tail() function bug (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove a ufshcd_add_command_trace() call (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify driver shutdown (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Move ufshcd_wl_shutdown() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix handling of lrbp->cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Increase the START STOP UNIT timeout from one to ten seconds (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add error handling for MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use ufshcd_mcq_poll_cqe_lock() in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Added ufshcd_mcq_abort() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add support for cleaning up MCQ resources (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add supporting functions for MCQ abort (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Update the ufshcd_clear_cmds() functionality (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Combine 32-bit command_desc_base_addr_lo/hi (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Replace all non-returning strlcpy() with strscpy() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Do not open code SZ_x (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Ungate the clock synchronously (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Declare ufshcd_{hold,release}() once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Conditionally enable the BLK_MQ_F_BLOCKING flag (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Return earlier if ufshcd_hba_init_crypto_capabilities() fails (Radu Rendec) [RHEL-79078]
  - scsi: ufs: hwmon: Constify pointers to hwmon_channel_info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Change the module parameter macro of use_mcq_mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ nr_hw_queues (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ tag calculation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use pointer arithmetic in ufshcd_send_command() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Annotate ufshcd_inc_sq_tail() appropriately (Radu Rendec) [RHEL-79078]
  - scsi: core: Clean up struct ufs_saved_pwr_info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add trace event for MCQ (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Print trs for pending requests in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set the residual byte count (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Disable the reset settle delay (Radu Rendec) [RHEL-79078]
  - scsi: mpi3mr: Avoid reply queue full condition (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Fix possible crash when setting up bsg fails (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update driver version to 8.12.0.3.50 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Handling of fault code for insufficient power (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Start controller indexing from 0 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Chandrakanth Patil) [RHEL-49780] {CVE-2024-57804}
  - scsi: mpi3mr: Synchronize access to ioctl data buffer (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Validate SAS port assignments (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Improve wait logic while controller transitions to READY state (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update MPI Headers to revision 34 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Use firmware-provided timestamp update interval (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Enhance the Enable Controller retry logic (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: A performance fix (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update consumer index of reply queues after every 100 replies (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Return complete ioc_status for ioctl commands (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Avoid MAX_PAGE_ORDER WARNING for buffer allocations (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Add missing spin_lock_init() for mrioc->trigger_lock (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Prevent PCI writes from driver during PCI error recovery (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Support PCI Error Recovery callback handlers (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Correct a test in mpi3mr_sas_port_add() (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Add ioctl support for HDB (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Trigger support (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: HDB allocation and posting for hardware and firmware buffers (Chandrakanth Patil) [RHEL-49780]
  - rpmsg: virtio: Free driver_override when rpmsg_remove() (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Replace deprecated strncpy with strscpy/_pad (Jared Kangas) [RHEL-78824]
  - rpmsg: Replace deprecated strncpy with strscpy_pad (Jared Kangas) [RHEL-78824]
  - rpmsg: core: Replace deprecated strncpy with strscpy (Jared Kangas) [RHEL-78824]
  - rpmsg: glink: Release driver_override (Jared Kangas) [RHEL-78824]
  - rpmsg: ctrl: Add lock to rpmsg_ctrldev_remove (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Add lock to avoid race when rpmsg device is released (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Avoid double destroy of default endpoint (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (Jared Kangas) [RHEL-78824]
  - rpmsg: Strcpy is not safe, use strscpy_pad() instead (Jared Kangas) [RHEL-78824]
  - rpmsg: mtk_rpmsg: Fix circular locking dependency (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Add mutex protection for rpmsg_eptdev_open() (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge (Jared Kangas) [RHEL-78824]
  - rpmsg: use local 'dev' variable (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix calling device_lock() on non-initialized device (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev() (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix possible double free in rpmsg_probe() (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix parameter naming for announce_create/destroy ops (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix kfree() of static memory on setting driver_override (Jared Kangas) [RHEL-78824]
  - rpmsg: Constify local variable in field store macro (Jared Kangas) [RHEL-78824]
  - clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (Waiman Long) [RHEL-76143]
  - clocksource: Use pr_info() for "Checking clocksource synchronization" message (Waiman Long) [RHEL-76143]
  - clocksource: Make watchdog and suspend-timing multiplication overflow safe (Waiman Long) [RHEL-76143]
  - clocksource: Scale the watchdog read retries automatically (Waiman Long) [RHEL-76143]
  - clocksource: Skip watchdog check for large watchdog intervals (Waiman Long) [RHEL-76143]
  - torture: Enable clocksource watchdog with "tsc=watchdog" (Waiman Long) [RHEL-76143]
  - clocksource: Suspend the watchdog temporarily when high read latency detected (Waiman Long) [RHEL-76143]
  - clocksource: Loosen clocksource watchdog constraints (Waiman Long) [RHEL-76143]
  - clocksource: Replace cpumask_weight() with cpumask_empty() (Waiman Long) [RHEL-76143]
  - clocksource: Add a Kconfig option for WATCHDOG_MAX_SKEW (Waiman Long) [RHEL-76143]
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (CKI Backport Bot) [RHEL-77211] {CVE-2025-21666}
  - net: atlantic: use irq_update_affinity_hint() (Izabela Bakollari) [RHEL-73855 RHEL-76480]
  - net: atlantic: convert comma to semicolon (Izabela Bakollari) [RHEL-73855]
  - net: atlantic: Avoid warning about potential string truncation (Izabela Bakollari) [RHEL-73855]
  - net: atlantic: use ethtool_sprintf (Izabela Bakollari) [RHEL-73855]
  - x86: bring back rep movsq for user access on CPUs without ERMS (Herton R. Krzesinski) [RHEL-74389]
  - x86/retpolines: Enable the default thunk warning only on relevant configs (Waiman Long) [RHEL-71467]
  - x86/vdso: Fix rethunk patching for vdso-image-{32,64}.o (Waiman Long) [RHEL-71467]
  - x86/retpoline: Ensure default return thunk isn't used at runtime (Waiman Long) [RHEL-71467]
  - objtool: Revert "skip non-text sections when adding return-thunk sites" (Waiman Long) [RHEL-71467]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-570.el9]
changelog:
  - rhel-9: gate on kernel-qe tests results not cki ones (Bruno Goncalves)
  - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (CKI Backport Bot) [RHEL-78682] {CVE-2025-21689}
  - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (CKI Backport Bot) [RHEL-78307]
  - pmdomain: imx8mp-blk-ctrl: add missing loop break condition (CKI Backport Bot) [RHEL-77237] {CVE-2025-21668}
  - vsock/virtio: discard packets if the transport changes (CKI Backport Bot) [RHEL-77228] {CVE-2025-21669}
  - s390/mm/hugetlbfs: Add missing includes (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Add PTE_MARKER support for hugetlbfs mappings (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Introduce region-third and segment table swap entries (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Introduce region-third and segment table entry present bits (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Rearrange region-third and segment table entry SW bits (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() (Aristeu Rozanski) [RHEL-74362]
  - s390/pgtable: Switch read and write softbits for puds (Aristeu Rozanski) [RHEL-74362]
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (CKI Backport Bot) [RHEL-75840] {CVE-2024-56611}
  - workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (Waiman Long) [RHEL-74107] {CVE-2024-57888}
  - ovl: Filter invalid inodes with missing lookup function (Miklos Szeredi) [RHEL-72307] {CVE-2024-56570}
  - pmdomain: imx93-blk-ctrl: correct remove path (CKI Backport Bot) [RHEL-70045] {CVE-2024-53134}
  - i2c: tegra: Do not mark ACPI devices as irq safe (Mark Salter) [RHEL-50601]
  - i2c: tegra: allow VI support to be compiled out (Mark Salter) [RHEL-50601]
  - i2c: tegra: allow DVC support to be compiled out (Mark Salter) [RHEL-50601]
  - i40e: fix race condition by adding filter's intermediate sync state (CKI Backport Bot) [RHEL-68274] {CVE-2024-53088}


author: Tao Liu <ltao@redhat.com> - 2.0.27-10
changelog:
  - mkdumprd: Fix makedumpfile parameter check.
  - Install the driver of physical device for a SR-IOV virtual device
  - Try to install PHY and MDIO bus drivers explicitly


author: Tao Liu <ltao@redhat.com> - 2.0.27-13
changelog:
  - kdump-lib: Drop 'file' dependency in is_uki
  - kdumpctl.8: Add description to reset-crashkernel --reboot
  - kdumpctl: Fix misleading message and erratic reboot in reset_crashkernel
  - kdumpctl: Drop default kexec '-d' option


author: Tao Liu <ltao@redhat.com> - 2.0.29-2
changelog:
  - Re-introduce vmcore creation notification to kdump
  - Revert "Introduce vmcore creation notification to kdump"
  - Add kdump dracut config
  - kdump-lib-initramfs: Improve mount point retrieval logic


author: Tao Liu <ltao@redhat.com> - 2.0.29-3
changelog:
  - fadump: fix passing additional parameters for capture kernel
  - fadump: pass additional parameters for capture kernel


author: - Chung Chung <cchung@redhat.com> - 8.2.5.2-155.el9
changelog:
  - TEMPORARY FIX to correct build failures regarding blk_limits_io_{min,opt} error
  - Related: RHEL-61201


author: - Chung Chung <cchung@redhat.com> - 8.2.5.2-147.el9
changelog:
  - Fixed discards to use correct size limit.
  - Removed spurious metadata assertion.
  - Resolves: RHEL-66271


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Christopher Snyder <csnyder@redhat.com> 1.29.31-1
changelog:
  - warning: refname 'subscription-manager-1.29.30-1' is ambiguous.
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - tests: fix typos in test method names (ptoscano@redhat.com)
  - 2125227: Fixed incorrect registration warning with yum/dnf
    (jajerome@redhat.com)
  - 2094942: Fixed expected message for manual attach case (jajerome@redhat.com)
  - ENT-5102: Type-hint rhsmlib/facts (mhorky@redhat.com)
  - 2094942: Improve warning message (auto-attach in SCA mode)
    (jhnidek@redhat.com)
  - Update INSTALL.md (mhorky@redhat.com)
  - Remove unused classes of DBus tests (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Unregister objects (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Register objects (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Products object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of AllFacts object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Entitlement object (mhorky@redhat.com)
  - Fix typo in method name of EntitlementService (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Consumer object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Attach object (mhorky@redhat.com)
  - Fix possible parsing issues of dmidecode output (mhorky@redhat.com)
  - ENT-5317: New way to test DBus methods, starting with Config
    (mhorky@redhat.com)
  - cockpit: disable the reference branch for sub-man-cockpit
    (ptoscano@redhat.com)
  - TESTING.md: Remove mention of pytest-xdist (mhorky@redhat.com)
  - INSTALL.md: Update list of packages to be installed (mhorky@redhat.com)
  - Stop calling pytest with --failed-first (mhorky@redhat.com)
  - GCP: Better computing of cached token TTL (jhnidek@redhat.com)
  - 2101510: Fix D-Bus Register() and update entitlement certs
    (jhnidek@redhat.com)
  - 2120744: Close keycloak connection properly (jhnidek@redhat.com)
  - 2094942: [RFE] Improve the message, when  SCA is enabled (jhnidek@redhat.com)
  - Replaced list[] with List[] and dict[] with Dict[]. (jhnidek@redhat.com)
  - Update TESTING.md (mhorky@redhat.com)
  - Update README.md (mhorky@redhat.com)
  - Add INSTALL.md (mhorky@redhat.com)
  - Added type hints to package rhsmlib.service (jhnidek@redhat.com)
  - Added some missing imports. (jhnidek@redhat.com)
  - Reformated using black. (jhnidek@redhat.com)
  - Added one FIXME to redeem.py (jhnidek@redhat.com)
  - Added type hints and FIXMEs to rhsm package. (jhnidek@redhat.com)
  - [wip] ENT-5100: Type hint rhsm (mhorky@redhat.com)
  - Added type hints to syspurpose package (jhnidek@redhat.com)
  - Drop libnotify-devel usage (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.32-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - utils: import pkg_resources only when needed (ptoscano@redhat.com)
  - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com)
  - Alter import of rhsm.config functions (mhorky@redhat.com)
  - Handle tests in containers better (mhorky@redhat.com)
  - Call parent methods in DBusServerStubProvider (mhorky@redhat.com)
  - Base D-Bus tests on SubManFixture (mhorky@redhat.com)
  - ENT-5532: Call rhsm-package-profile-uploader with --force-upload
    (jhnidek@redhat.com)
  - 2108549: do not detect containers in OCP as such (ptoscano@redhat.com)
  - tests: extend InContainerTests for path checks (ptoscano@redhat.com)
  - Resolved issues in PR feedback (jajerome@redhat.com)
  - Updated request handling in connection.py (jajerome@redhat.com)
  - Resolve issues from PR review (jajerome@redhat.com)
  - Removed fixme since activateMachine() is still used (jajerome@redhat.com)
  - Black/flake8 fixes (jajerome@redhat.com)
  - FIXME: renamed default argument to not shadow inbuilt type
    (jajerome@redhat.com)
  - FIXME: removed Restlib and using only BaseRestLib (jajerome@redhat.com)
  - FIXME: updated unregisterConsumer() to return True if status code is 204
    (jajerome@redhat.com)
  - FIXME: changed unbindBySerial/unbindByPoolId to return bool
    (jajerome@redhat.com)
  - FIXME: changed default value of facts in updateConsumerFacts()
    (jajerome@redhat.com)
  - FIXME: sanitized email/lang variables in activateMachine()
    (jajerome@redhat.com)
  - FIXME: made email argument required in activatemachine()
    (jajerome@redhat.com)
  - FIXME: changed default value of serials argument to None
    (jajerome@redhat.com)
  - FIXME: removed unused username/password arguments (jajerome@redhat.com)
  - FIXME: raise exceptions where sanitizing guest Id returns None
    (jajerome@redhat.com)
  - FIXME: renamed response argument to result in validateResponse()
    (jajerome@redhat.com)
  - FIXME: rename info argument to params in _request() (jajerome@redhat.com)
  - FIXME: added error message when redeeming subscription fails
    (jajerome@redhat.com)
  - FIXME: removed unused UEPConnection class methods (jajerome@redhat.com)
  - Fixed profile tests setting Package release numbers as int instead of str
    (jajerome@redhat.com)
  - FIXME: changed epoch data type to str in Package class (jajerome@redhat.com)
  - FIXME: added null-checks for stdout/stderr wrapper (jajerome@redhat.com)
  - FIXME: re-iterated a fix is not needed for urlparse (jajerome@redhat.com)
  - FIXME: added exception messages to parse_url() (jajerome@redhat.com)
  - FIXME: changed  lists to tuples in StatusSpinnerStyle class
    (jajerome@redhat.com)
  - FIXME: fixed type hints for _normalize_string() (jajerome@redhat.com)
  - FIXME: use super() instead of class name (jajerome@redhat.com)
  - FIXME: fixed strings not being translated in is_log_level_valid()
    (jajerome@redhat.com)
  - FIXME: resolved improper use of tempfile in save() (jajerome@redhat.com)
  - FIXME: fixed config_file argument not being used in save()
    (jajerome@redhat.com)
  - FIXME: updated default value for files_name argument in read()
    (jajerome@redhat.com)
  - FIXME: fixed minor typo in bogus() (jajerome@redhat.com)
  - FIXME: changed read() to return self instead of None (jajerome@redhat.com)
  - FIXME: set default argument 'facts' to None in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: renamed argument 'type' to 'consumer_type' in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: ping() resolved in rhsm/connection.py (jajerome@redhat.com)
  - Remove test dependency 'mock' (mhorky@redhat.com)
  - Fix failures of D-Bus' Register tests (mhorky@redhat.com)
  - Mark D-Bus tests (mhorky@redhat.com)
  - 2131789: Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com)
  - Catch generic OSError during HTTPSConnection.connect() (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com)
  - Catch also CertificateLoadingError for identity cert loading
    (ptoscano@redhat.com)
  - ENT-4286: Additional fix for exception handling (jajerome@redhat.com)
  - Remove D-Bus env vars from container and CI files (mhorky@redhat.com)
  - 2121350: Implement "force" register option in rhsm dbus python binding
    (jajerome@redhat.com)
  - Show locals in pytest output (mhorky@redhat.com)
  - Improve formatting of CertificateLoadingError (ptoscano@redhat.com)
  - Raise a new CertificateLoadingError on X.509 loading failures
    (ptoscano@redhat.com)
  - Improve formatting of UnknownContentException (ptoscano@redhat.com)
  - connection: improve the internal UnknownContentException
    (ptoscano@redhat.com)
  - utils: add terminal_printable_content (ptoscano@redhat.com)
  - connection: rename NetworkException to UnknownContentException
    (ptoscano@redhat.com)
  - Improve formatting of ProxyException (ptoscano@redhat.com)
  - connection: improve the internal ProxyException (ptoscano@redhat.com)
  - Improve formatting of socket.gaierror (ptoscano@redhat.com)
  - Improve formatting of ConnectionError (ptoscano@redhat.com)
  - Improve formatting of BadCertificateException (ptoscano@redhat.com)
  - connection: extend BadCertificateException w/ SSL exception
    (ptoscano@redhat.com)
  - connection: drop dead code (ptoscano@redhat.com)
  - ENT-4286: Simplify exception reporting with system_exit()
    (jajerome@redhat.com)
  - 2136694: Clear progress messages properly (mhorky@redhat.com)
  - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com)
  - 2097679: Additional fix for non-interactive parameters (jajerome@redhat.com)
  - 2097679: Fixed script hang in non-interactive execution (jajerome@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.33-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (ljanda@redhat.com)
  - Translated using Weblate (French) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (jsefler@redhat.com)
  - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
  - Test libdnf plugin using GitHub Actions (mhorky@redhat.com)
  - libdnf: fix return value of findProductId() (ptoscano@redhat.com)
  - ENT-5541: Publish PR coverage (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Spanish) (ptoscano@redhat.com)
  - Simplify test setup for D-Bus fact collection (mhorky@redhat.com)
  - ENT-3759: Test on GitHub Actions (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.34-1
changelog:
  - Update TESTING.md (mhorky@redhat.com)
  - Improved debug print of http traffic, when proxy is used (jhnidek@redhat.com)
  - ENT-5544: Remove Jenkins jobs, Containers (mhorky@redhat.com)
  - ENT-5549: Remove unused code from entcertlib (mhorky@redhat.com)
  - ENT-5549: Fix issues found when type-hinting (mhorky@redhat.com)
  - ENT-5549: Fix return code handling of CLI (mhorky@redhat.com)
  - ENT-5549: Fix found type hint issues (mhorky@redhat.com)
  - ENT-5549: Fix object instantiation in EntitlementDirectory
    (mhorky@redhat.com)
  - ENT-5549: Refactor ProductDirectory (mhorky@redhat.com)
  - ENT-5549: Change internal implementation for some Cache methods
    (mhorky@redhat.com)
  - ENT-5549: Clean up _sync_with_server arguments of cache objects
    (mhorky@redhat.com)
  - ENT-5549: Remove 'autoheal' argument from Action clients (mhorky@redhat.com)
  - Refactored code a little bit (jhnidek@redhat.com)
  - 2093291: Make locking more reliable (jhnidek@redhat.com)
  - test: add simple test for 2178610 (ptoscano@redhat.com)
  - Small improvement of debugging of http traffic (jhnidek@redhat.com)
  - 2093883: Fix issue with race condition in rhsm.service (jhnidek@redhat.com)
  - 2178610: do not collect unentitled products in SCA mode (ptoscano@redhat.com)
  - 2174297: register: do a simple strip() on environment(s) input
    (ptoscano@redhat.com)
  - Stop subclassing 'object' (ptoscano@redhat.com)
  - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com)
  - tests: Install dnf-plugins-core every time (mhorky@redhat.com)
  - 2169251: connection: restore UEPConnection.getJob() (ptoscano@redhat.com)
  - ENT-5106: Type-hint subscription_manager/ files (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.41-1
changelog:
  - feat: update man page with deprecation notices (jajerome@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - feat: Deprecate 'syspurpose addons' (mhorky@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Deprecate import command (zpetrace@redhat.com)
  - fix: 1.29 modify section about remove command in man page
    (jhnidek@redhat.com)
  - feat: 1.29 Deprecate redeem sub-command (jhnidek@redhat.com)
  - fix: Reformated man page of subscription-manager (jhnidek@redhat.com)
  - fix: [1.29] Remove command should not be primary command (jhnidek@redhat.com)
  - feat: deprecate autosubscribe/auto-attach register options
    (jajerome@redhat.com)
  - feat: deprecate attach/auto-attach modules (jajerome@redhat.com)
  - docs: deprecate attach/auto-attach in man page (jajerome@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat: 1.29 Deprecate remove sub-command (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora latest
    (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora rawhide
    (jhnidek@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.43-1
changelog:
  - [1.29] feat/cct-868: Subset of list command options marked as deprecated *
    Options --available, --all, --ondate, --servicelevel --no-overlap --match-
    install, --pool-only, --afterdate were marked as deprecated in ListCommand
    definition of their help string. (mgrunwal@redhat.com)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - docs: update proxy details in man page (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.44-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.45-1
changelog:
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Dan Horák <dan[at]danny.cz> - 3.8.0-1
changelog:
  - updated to 3.8.0 (#1869532)
  - eliminate SW fallback functions (#1924119)
  - updated for OpenSSL 3.0 (#1952946)
  - disable FIPS support (broken)
  - Resolves: #1869532 #1924119 #1952946


author: Dan Horák <dhorak@redhat.com> - 4.2.3-1
changelog:
  - updated to 4.2.3 (RHEL-11415)
  - fix selfcheck in FIPS mode (RHEL-9918)
  - Resolves: RHEL-11415 RHEL-9918


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Jiri Pirko <jiri@resnulli.us> - 1.31-1
changelog:
  1.31 release
  utils/bond2team: remove TYPE in ifcfg file
  utils/bond2team: keep delivering config to file if stdout not supplied
  teamd/lacp: silence ignore none LACP frames
  teamd: fix ctx->hwaddr value assignment
  Send LACP PDU right after the Actor state has been changed
  Skip setting the same hwaddr to a lag port if not needed
  Make all netlink socket RCVBUF sizes configurable
  Don't return an error when timerfd socket return 0
  Fix ifinfo_link_with_port race condition with newlink
  teamd: fix possible race in master ifname callback


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Renaming python package according to the standard
  - Resolves: rhbz#1951968

  =======
  >>>>>>> 96fbb4a91a8471e931d872e7b696d176fc351605


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Enable audit library in the build 
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Dan Horák <dan[at]danny.cz> - 2.2.0-10
changelog:
  - build with libzfcphbaapi as standalone library to avoid dependency on obsolete libhbaapi (#1922413)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-13
changelog:
  - tests: extend dtype test case to cover expression with integer type
  - evaluate: set evaluation context for set elements


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-3.3
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Related: #2044179, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110314, rebase to 3.19.0
  - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110476, openCryptoki ep11 token: master key consistency
  - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-30
changelog:
  - Some non-terminating processes were listening on ports.
    Resolves: rhbz#2177768
  - On sshd startup, we check whether signing using the SHA1 for signing is
    available and don't use it when it isn't.
  - On ssh private key conversion we explicitly use SHA2 for testing RSA keys.
  - In sshd, when SHA1 signatures are unavailable, we fallback (fall forward :) )
    to SHA2 on host keys proof confirmation.
  - On a client side we permit SHA2-based proofs from server when requested SHA1
    proof (or didn't specify the hash algorithm that implies SHA1 on the client
    side). It is aligned with already present exception for RSA certificates.
  - We fallback to SHA2 if SHA1 signatures is not available on the client side
    (file sshconnect2.c).
  - We skip dss-related tests (they don't work without SHA1).
    Resolves: rhbz#2070163
  - FIPS compliance efforts for dh, ecdh and signing
    Resolves: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-31
changelog:
  - Fix minor issues with openssh-8.7p1-evp-fips-compl-dh.patch:
  - Check return values
  - Use EVP API to get the size of DH
  - Add some log debug lines
  - Related: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-19
changelog:
  - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode
    Resolves: rhbz#2169757


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-20
changelog:
  - Fix possible DoS translating ASN.1 object identifiers
    Resolves: CVE-2023-2650
  - Release the DRBG in global default libctx early
    Resolves: rhbz#2211340


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Dan Horák <dan@danny.cz> - 2.2.0-1
changelog:
  - updated to 2.2.0 (#1869531)
  - eliminate SW fallback functions (#1924117)
  - Resolves: #1869531 #1924117


author: Dan Horák <dhorak@redhat.com> - 2.3.0-1
changelog:
  - updated to 2.3.0 (#2044177)
  - add provider for openssl 3.x (#2044185)
  - Resolves: #2044177 #2044185


author: Dan Horák <dhorak@redhat.com> - 2.4.0-2
changelog:
  - engine: Only register those algos specified with default_algorithms (#2221894)
  - Resolves: #2221894


author: Dan Horák <dhorak@redhat.com> - 2.4.0-4
changelog:
  - provider: RSA: Fix get_params to retrieve max-size, bits, and security-bits (#2222878 #2224568)
  - provider: Default debug directory to /tmp but make it configurable (#2160084)
  - Resolves: #2222878 #2160084 #2224568


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Tom Stellard <tstellar@redhat.com> - 3.78-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-2
changelog:
  - gettext: handle unsupported languages properly (#2100378)
  - semodule: rename --rebuild-if-modules-changed to --refresh
  - python: Split "semanage import" into two transactions (#2063353)
  - selinux-autorelabel: Do not force reboot (#2093133)


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-3
changelog:
  - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399
  - Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-25
changelog:
  - Followup on #2166383
  - Add compat scripts calling external find-debug, sepdebugcrcfix and debugedit
  - Add %__find_debuginfo macro


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-26
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.3-1
changelog:
  - SETools 4.4.3 release
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Charalampos Stratakis <cstratak@redhat.com> - 0.29.32-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        nbecker <ndbecker2@gmail.com>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <marcel.plch@protonmail.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@gmail.com>
        Sahana Prasad <sahana@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Till Maas <opensource@till.name>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Victor Stinner <vstinner@python.org>
        Ville Skyttä <ville.skytta@iki.fi>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Sumit Bose <sbose@redhat.com> - 0.17.0-8
changelog:
  - LDAP socket timeout, fix duplicated logs and new Samba command line options
    Resolves: rhbz#2038260
    Resolves: rhbz#2038268
    Resolves: rhbz#2028530


author: Sumit Bose <sbose@redhat.com>
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: jira#RHEL-12112
  - fix ccache handling for leave operation
    Resolves: jira#RHEL-5104


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-1
changelog:
  - Update the sources to 6.13
  - Add important fixes from the upstream
  - Remove Provides: jitterentropy-rngd as it was retired in f29.


author: Vladis Dronov <vdronov@redhat.com> - 6.13-3
changelog:
  - Adjust rngd-wake-threshold.service and post section so udevadm
    is not run in a container (bz 1965318)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-4.git.d207e0b6
changelog:
  - Update to the upstream v6.13 + tip of origin/master + onecpu
    branch + revert of 2ce93190 (bz 1965318)
  - Rebuild rng-tools against the latest jitterentropy library
    3.0.2-2.git.409828cf with fixes for an important issue
  - Adjust Source0 to a more proper one


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update to the upstream v6.15 @ 172bf0e3 (bz 2075977)
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Vladis Dronov <vdronov@redhat.com> - 6.15-2
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ 6dcc9ec2 (bz 2124605)
  - Do not require selinux-policy if it is not present


author: Vladis Dronov <vdronov@redhat.com> - 6.15-3
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ cb8cc624 (bz 2156554)
  - Fix a number of issues found by covscan code scanner
  - Add a jitter init timeout for tests
  - Add a start condition for the FIPS mode (bz 2154804)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-1
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 0e560296 (bz 2174916)
  - Get rid of text relocations in -fPIE build
  - Add a hint for opensc package (bz 1845854)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-7
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 98cf8d63 (RHEL-30953)
  - Use proper SPDX license identifiers
  - Fix a test failure


author: Vladis Dronov <vdronov@redhat.com> - 6.17-1
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-64951)


author: Steve Dickson <steved@redhat.com> - 1.2.6-1
changelog:
  - Use sysconfig variable in service file (bz 1972094)
  - Make sure policycoreutils is installed before using it (bz 1972133)
  - Make sure /var/lib/rpcbind exists (bz 1972133)
  - Corrected the URL reference (bz 1972117)


author: Steve Dickson <steved@redhat.com> - 1.2.6-4
changelog:
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-17
changelog:
  - Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-21
changelog:
  - Resolves: RHEL-70265 - Rebase rsync to 3.2.5
  - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
  - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
  - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-2
changelog:
  - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70208 - Path traversal vulnerability in rsync
  - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links


author: Dan Horák <dhorak@redhat.com> - 2:2.24.0-1
changelog:
  - rebased to 2.24.0 (#2110310)
  - KVM: Tool to process encrypted Secure Execution guest dumps (#2044198)
  - zdev: Site-aware device configuration (#2044202)
  - Support IBM z16 Processor-Activity-Instrumentation Facility (#2110298)
  - Transparent DASD PPRC (Peer-to-Peer Remote Copy) handling (#2126617)
  - Support IBM z16 Processor Activity Instrumentation Extension 1 (#2127435)
  - Display Processor Activity Instrumentation CPACF counters (#2111012)
  - Resolves: #2110310 #2044198 #2044202 #2110298 #2126617 #2127435 #2111012


author: Dan Horák <dhorak@redhat.com> - 2:2.25.0-1
changelog:
  - rebased to 2.25.0 (#2110310)
  - zipl: Support for Secure Boot IPL and Dump from ECKD DASD (#2044200)
  - zipl: Add secure boot trailer (#2142883)
  - Resolves: #2110310 #2044200 #2142883


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-1
changelog:
  - rebased to 2.27.0 (#2160062)
  - lszcrypt fails when querying a specific domain (#2177612)
  - DASD autoquiesce support (#2196517)
  - zcrypt DD: AP command filtering (#2170360)
  - vmconvert and zgetdump consolidation (#2173924)
  - Support for List-Directed dump from ECKD DASD (#2160052)
  - Support for List-Directed IPL and re-IPL from ECKD DASD (#2160040)
  - Resolves: #2160062 #2177612 #2196517 #2170360 #2173924 #2160052 #2160040


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-2
changelog:
  - zdev: cleanup patches to fix warnings (#2223304)
  - zdev: add missing label in the udev-rules (#2222900)
  - Resolves: #2223304 #2222900


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-1
changelog:
  - rebased to 2.29.0 (RHEL-11408)
  - KVM: Support AP Bindings in SE Header (RHEL-10572)
  - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10578)
  - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11440)
  - vmur: fix handling of option -t (RHEL-11480)
  - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16527)
  - enable multi-arch build (RHEL-10567)
  - Resolves: RHEL-11408 RHEL-10572 RHEL-10578 RHEL-11440 RHEL-11480 RHEL-16527 RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.33.1-1
changelog:
  - rebased to 2.33.1 (RHEL-23704)
  - dbginfo.sh: missing data of new ROCE cards (RHEL-24109)
  - SE-tooling: New IBM host-key subject locality (RHEL-30273)
  - Fix disk type detection when running under QEMU (RHEL-40358)
  - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-50026)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030)
  - Resolves: RHEL-50026 RHEL-50030


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-50026)
  - cpacfinfo: new tool to provide CPACF information (RHEL-50020)
  - chpstat: Additional Channel Measurements (RHEL-50023)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024)
  - KVM: Support extended attestation for Secure Execution (RHEL-50009)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64705)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853)
  - KVM: Rewrite genprotimg in Rust (RHEL-72023)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019)
  - zkey key support for dm-crypt with XTS keys (RHEL-50010)
  - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010


