# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 2.4.5-6
changelog:
  - Bump version to 2.4.5-6
  - Resolves: RHEL-30588 - [RFE] allows plugins to log multi-factor authentication notification


author: James Chapman <jachapma@redhat.com> - 2.5.1-1
changelog:
  - Bump version to 2.5.1-1
  - Resolves: RHEL-31777 - Rebase 389-ds-base.2.5.1 in RHEL 9.5
  - Resolves: RHEL-33348 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ requ


author: James Chapman <jachapma@redhat.com> - 2.5.1-2
changelog:
  - Bump version to 2.5.1-2
  - Resolves: RHEL-44324 - unauthenticated user can trigger a DoS by sending a specific extended search request
  - Resolves: RHEL-40946 - Malformed userPassword hash may cause Denial of Service
  - Resolves: RHEL-33087 - dsconf schema does not show inChain matching rule
  - Resolves: RHEL-28177 - Malformed userPassword may cause crash at do_modify in slapd/modify.c
  - Resolves: RHEL-25070 - nsslapd-haproxy-trusted-ip is not in schema


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-1
changelog:
  - Bump version to 2.5.2-1
  - Resolves: RHEL-5108 - ns-slapd crash in referint_get_config
  - Resolves: RHEL-5113 - nsslapd-numlisteners limit is not enforced
  - Resolves: RHEL-5115 - `dscreate ds-root` accepts relative path
  - Resolves: RHEL-5131 - ldif2db can be very slow
  - Resolves: RHEL-5138 - Logconv.pl CSV file contains mismatched header and data columns
  - Resolves: RHEL-14760 - ns-slapd crash in vlvIndex_delete
  - Resolves: RHEL-17511 - nsslapd-idletimeout is ignored
  - Resolves: RHEL-49454 - perf search result investigation for many large static groups and members
  - Resolves: RHEL-49458 - subsuffix are not returned in one level scoped search


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-2
changelog:
  - Bump version to 2.5.2-2
  - Resolves: RHEL-55744 - ipahealthcheck.ds.backends.BackendsCheck.DSBLE0006: BDB is deprecated and should not be used as a backend


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - Resolves: RHEL-5151 - [RFE] defer memberof nested updates
  - Resolves: RHEL-54148 - leaked_storage: Variable "childelems" going out of scope leaks the storage it points to.
  - Resolves: RHEL-60135 - deadlock during cleanAllRuv
  - Resolves: RHEL-61341 - After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-61349 - Remove deprecated setting for HR time stamps in logs
  - Resolves: RHEL-62875 - Passwords are not being updated to use the configured storage scheme ( nsslapd-enable-upgrade-hash is enabled ).
  - Resolves: RHEL-64438 - VLV errors with RSNv3 and pruning enabled [rhel-9]
  - Resolves: RHEL-64854 - cleanallruv consums CPU and is slow
  - Resolves: RHEL-65506 - AddressSanitizer: double-free
  - Resolves: RHEL-65512 - AddressSanitizer: heap-use-after-free in import_abort_all
  - Resolves: RHEL-65561 - LeakSanitizer: detected memory leaks in dbmdb_public_db_op
  - Resolves: RHEL-65662 - Replication issue between masters using cert based authentication
  - Resolves: RHEL-65664 - LDAP unprotected search query during certificate based authentication
  - Resolves: RHEL-65665 - Ambiguous warning about SELinux in dscreate for non-root user
  - Resolves: RHEL-65741 - LeakSanitizer: memory leak in ldbm_entryrdn.c
  - Resolves: RHEL-65776 - Wrong set of entries returned for some search filters [rhel-9]
  - Resolves: RHEL-67004 - "dsconf config replace" should handle multivalued attributes.
  - Resolves: RHEL-67005 - Online backup hangs sporadically.
  - Resolves: RHEL-67008 - Some replication status data are reset upon a restart.
  - Resolves: RHEL-67020 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index
  - Resolves: RHEL-67024 - Some nsslapd-haproxy-trusted-ip values are discarded upon a restart.
  - Resolves: RHEL-69806 - ipahealthcheck.ds.replication displays WARNING '1 conflict entries found under the replication suffix'
  - Resolves: RHEL-69826 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-9]
  - Resolves: RHEL-70127 - Crash in attrlist_find() when the Account Policy plugin is enabled. [rhel-9]
  - Resolves: RHEL-70252 - Freelist ordering causes high wtime
  - Resolves: RHEL-71218 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-9]
  - Resolves: RHEL-74153 - backup/restore broken [rhel-9]
  - Resolves: RHEL-74158 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex [rhel-9]
  - Resolves: RHEL-74163 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set [rhel-9]
  - Resolves: RHEL-74168 - On replica consumer, account policy plugin fails to manage the last login history [rhel-9]
  - Resolves: RHEL-74174 - Replication broken after backup restore with freeipa configuration [rhel-9]
  - Resolves: RHEL-74353 - nsslapd-haproxy-trusted-ip is not in schema [rhel-9]
  - Resolves: RHEL-76019 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-9]


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.48.10-1
changelog:
  - Unblock the autoconnect for children when parent is available (RHEL-46904)
  - Fix crash produced by malformed LLDP package when debug logging (RHEL-46199)
  - Support reapplying bridge-port VLANs (RHEL-26750)
  - Add small backoff time before resync (RHEL-29902)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.49.90-1
changelog:
  - Upgrade to 1.50 pre-release (rc1)
  - Retry reverse hostname resolution when it fails (RHEL-17972)
  - Allow VPNs to supply IP configurations with routes but no addresses (RHEL-21875)
  - Warn of dhclient deprecation when it's explicitly chose (RHEL-24622)
  - Allow cloud-setup to restart more rapidly (RHEL-49694)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.51.1-1
changelog:
  - Upgrade to 1.51.1 (dev)
  - Use meson and remove autotools configuration
  - Fix crashes (SIGABRT) in several functions (RHEL-17840)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.51.2-1
changelog:
  - Upgrade to 1.51.2 (dev)
  - Fix race condition on OVS interface deletion (RHEL-50747)
  - Fix validation of DPDK interface name (RHEL-60022)
  - Support IPVLAN interface (RHEL-47334)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.51.3-1
changelog:
  - Upgrade to 1.51.3 (dev)
  - Support configuring dhcp-send-hostname globally (RHEL-32685)
  - cloud-setup: Support OCI (Oracle Cloud) provider (RHEL-62729)
  - Support automatically adding DNS routes (RHEL-56555)
  - Support IPv6-Only Preferred DHCPv4 option (RHEL-58660)
  - Only validate SR-IOV capacity when enabled (RHEL-58397)
  - Steer IGMP/MLD queries to the active bond balance-slb primary port (RHEL-59559)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.51.4-1
changelog:
  - Upgrade to 1.51.4 (dev)
  - Add iputils as recommended dependency for ping command
  - Fix configs shown with NetworkManger --print-config (RHEL-14438)
  - Added ip-ping-addresses to check other hosts presence on activation (RHEL-21160)
  - Support ethtool Forward Error Correction (FEC) (RHEL-24055)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.51.5-1
changelog:
  - Upgrade to 1.51.5 (dev)
  - Never retry ACD on NOARP interfaces (RHEL-47301)
  - Delete routes added by NM to tables different than main (RHEL-67324)
  - Honor route-table property for the route to VPN server (RHEL-69901)
  - Send GARP on bonding-slb failover (RHEL-59558)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.51.6-1
changelog:
  - Update to 1.51.6 (dev)
  - Honor the routing-rules property for VPN connections (RHEL-69899)
  - Fix potential crash when ipv4.dhcp-send-release is enabled (RHEL-67918)
  - Support encrypted DNS servers (RHEL-66260)
  - Fix configuration of VLAN ingress/egress QoS mapping (RHEL-72475)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.2.18-2
changelog:
  - Support point-to-point IPSec tunnel (RHEL-20690)
  - Fix crash in libreswan_nmstate_iface_dpd_rsa (RHEL-21221)
  - Support configuring IPSec mode with 'type' (RHEL-21554)


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-7
changelog:
  - wla-redhat-Azure-CVM-specific-udev-rules.patch [bz#2162668]
  - Resolves: bz#2162668
    (Add support for importing remotely sealed TPM2 objects)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-8
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [bz#2165042]
  - Resolves: bz#2165042
    ([9.0.z] /dev/disk/azure/ is created as symlink to sr0 or sda and not as a directory[Azure])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-9
changelog:
  - wla-redhat-Adjust-tpm2_createprimary-key-attributes-to-m.patch [bz#2167322]
  - Resolves: bz#2167322
    (Adjust TPM primary key creation parameters to match Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-10
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-7273]
  - Resolves: RHEL-7273
    ([Azure][WALA] Consider to disable Log collector)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-11
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880]
  - Resolves: RHEL-5880
    ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface)


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radovan Sroka <rsroka@redhat.com> - 0.16-103
changelog:
  RHEL 9.6.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4331


author: Jaroslav Kysela <perex@perex.cz> - 2.2.5-2
changelog:
  - add sof-rpl-rt711-l0-rt1316-l12-rt714-l3.tplg for Dell SKU 0BDA
  - add xz compression support (with CRC32)


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.7-1
changelog:
  - Fix source spoke being inaccessible if payload thread errors out (mkolman)
    Resolves: RHEL-4721
  - Do not create default wired connections for bond ports (rvykydal)
    Resolves: RHEL-38451
  - Consolidate code for dumping network connections (rvykydal)
    Related: RHEL-38451


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.8-1
changelog:
  - Use proxy server also for FTP .treeinfo download (jkonecny)
    Resolves: RHEL-27938
  - Update translations from Weblate for rhel-9 (github-actions)


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.9-1
changelog:
  - network: ignore kickstart configuration of nBFT devices (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: do not dump configurations of nBFT devices (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: ignore nBFT devices connections in network configuration (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: add a test for ignoring ifname=nbft* for device renaming (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: do not create empty dir for only ifname=nbft* options (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: Avoid creating link files for 'nbft' interfaces (tbzatek)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - Update translations from Weblate for rhel-9 (github-actions)


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.5.10-1
changelog:
  - Fix check for biosboot partition in GRUB2.check (vtrefny)
    Resolves: RHEL-55922
  - Ignore all storage errors when trying to activate swaps (vtrefny)
    Resolves: RHEL-55922


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.11-1
changelog:
  - security: call /usr/libexec/fips-setup-helper (asosedkin)
    Resolves: RHEL-58667
  - release-notes: Document support for compressed kernel modules in Driver Discs
    (peter.georg)
    Related: RHEL-9913
  - Add documentation about support for compressed kernel modules (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Update test info to reflect added support for compressed kernel
    modules (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add test for zstd compressed kernel module (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add test for xz compressed kernel module (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add support for compressed kernel modules (peter.georg)
    Resolves: RHEL-9913
  - New version - 34.25.5.10 (k.koukiou)


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.5.13-1
changelog:
  - security: require pykickstart version with %certificates support (rvykydal)
    Resolves: RHEL-61430
  - security: do not crash initramfs ks parsing on failing certificate dump
    (rvykydal)
    Resolves: RHEL-61430
  - security: add service to transfer certificates from initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates in initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates in pre-install phase only for dnf payload
    (rvykydal)
    Resolves: RHEL-61430
  - security: raise exception if certificate destination is unknown (rvykydal)
    Resolves: RHEL-61430
  - security: log a warning when dumping certificate over an existing file
    (rvykydal)
    Resolves: RHEL-61430
  - security: pre-install certificates before payload installation (rvykydal)
    Resolves: RHEL-61430
  - security: add API to install certificates early before payload (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates on target system (rvykydal)
    Resolves: RHEL-61430
  - security: Add API for installation on target system (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates early after Anaconda start (rvykydal)
    Resolves: RHEL-61430
  - security: add API to import certificates to Anaconda environment (rvykydal)
    Resolves: RHEL-61430
  - security: add API: Certificate getter (rvykydal)
    Resolves: RHEL-61430
  - kickstart: extend section specification for list of section data (rvykydal)
  - security: implement the support to install certificates to Anaconda
    (rvykydal)
    Resolves: RHEL-61430
  - translations: bump dependency to l10n repo because of branch switch
    (k.koukiou)
  - util: correct errors and suppress stderr for common cases (riehecky)
  - util: Add additional information for EFI systems (riehecky)
    Resolves: RHEL-55128


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.15-1
changelog:
  - security: add a development note for certificates import in initramfs
    (rvykydal)
    Related: RHEL-77155
  - security: do not issue warning on existing certificate file during dump
    (rvykydal)
    Resolves: RHEL-77155
  - network: pass NM global dns configuration to the installed system (rvykydal)
    Resolves: RHEL-71824
  - network: pass global dns initrd option to the installed system (rvykydal)
    Resolves: RHEL-71824


author: Nick Clifron <nickc@redhat.com> - 12.64-1
changelog:
  - Rebase to 12.64, allowing build with LLVM 18.  (RHEL-49953)
  - Retire: annobin-strings-no-attach.patch
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)
  - Annocheck: Add OpenSSL Engine test.  (PTG-319)
  - Annocheck: Test for gaps even when only one note is present.
  - Annocheck: Skip AArch64 branch protection test for GO binaries.
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.
  - Annocheck: Update heuristics for detecting glibc code in executables.  (RHEL-30579)
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Annocheck: Improve detection of -mbranch-protection option.
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - GCC Plugin: Fix bug extracing the value of target specific command line options.
  - Configure: Remove check for FrontendPluginRegistry.h header as it is stored in a non-standard location on Debian systems.
  - Debuginfod test: Allow for the libdwfl library silently contacting the debuginfod server.
  - LLVM Plugin: Use llvm-config to get the correct paths and options for building executables.
  - Clang Plugin: Likewise.
  - Enable silent rules for most building.
  - Annocheck: Correctly extract DWARF attributes from DT_REL files.
  - Annocheck: Improve heuristics for locating debug info files.  (#2267097)
  - Configure: Harmonize configure options.    
  - Clang Plugin: Fix building with Clang 18.  (#31414)
  - GCC Plugin: Add support for MIPS specific target functions.
  - GCC Plugin: Use .dc.a for address expressions in 64-bit ELF format notes.
  - Annocheck: Improve heuristic for skipping LTO and FORTIFY tests.  (#2264000)
  - Annocheck: Also skip property note test for i686 binaries. (#2258571)
  - Annocheck: Also skip the entry point test for i686 binaries. (#2258571)
  - GCC Plugin: Do not use section groups with string format notes.
  - Annocheck: Disable cf-protection test for i686 architecture. (#2258571)
  - Annocheck: Improve detection of FIPS compliant GO binaries.
  - GCC Plugin: Fix recording of the -Wimplicit-int and -Wimplicit-function-declaration warnings.  Add active checks for when they are deliberately disabled.
  - Tests: Fix implicit-values test so that it will compile with gcc 14+.
  - GCC Plugin: Add support for -fhardended.


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - Spec File: Add LTO option to clang and llvm plugin builds.  (RHEL-50796)


author: Nick Clifton <nickc@redhat.com> - 12.83-1
changelog:
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.
  - Clang & LLVM Plugins: Include install directory in binary.  (RHEL-54069)
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76809)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-76040)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.4.1-1
changelog:
  - Update BuiildRequires to use ansible-core on RHEL > 8.8
  - Move RHEL related code into an include for spec readability
  - Update role to version 1.4.1 to add customizable storage paths
    Resolves: RHEL-529


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Fail on RHEL or CentOS 10 because it's not supported
    Resolves: RHEL-67804
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-67807
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68374
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69311


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204510)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.7-1
changelog:
  - ansible-core 2.14.7 release (rhbz#2221820)
  - rebuild with python 3.9 (rhbz#2221820)
  - remove bundled packaging, pyparsing and resolvelib.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.9-1
changelog:
  - ansible-core 2.14.9 release (rhbz#2232432)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.14-1
changelog:
  - ansible-core 2.14.14 release (RHEL-23783)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22124)


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13744
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4962
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13758
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17954
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17957
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-19123
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19130
  - Idempotency fixes
    Resolves: RHEL-19132
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19134
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19136


author: Thomas Woerner <twoerner@redhat.com> - 1.13.1-1
changelog:
  - Update to version 1.13.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.1
    Resolves: RHEL-35565
  - New inventory plugin
    Resolves: RHEL-35541
  - Enable batch command as backend
    Resolves: RHEL-38943
  - New collection sub package
    Resolves: RHEL-38931


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35565
  - Convert input certificates
    Resolves: RHEL-44614
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40869


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67566
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61431


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67566
  - Fix requirements for ansible-core
    Resolves: RHEL-69146


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67566
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40227
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-25009
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68439
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70016
  - Collection: No more role module duplication
    Resolves: RHEL-71123


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67566
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78230


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.10.9-15
changelog:
  - Implement new Java bindings and fix ant-manual license
  - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Richard Hughes <richard@hughsie.com> 1:9-20240827
changelog:
  - New metadata version
  - Do not ship fedora-specific files
  - Resolves: #RHEL-4522
  - Resolves: #RHEL-19012


author: Tom Deseyn <tom.deseyn@gmail.com> - 8.0.103-3
changelog:
  - We disable checking the signature of the last certificate in a chain if the certificate is supposedly self-signed.
    A side effect of not checking the self-signature of such a certificate is that disabled or unsupported message
    digests used for the signature are not treated as fatal errors.
  - Resolves: RHEL-28344


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.0-3
changelog:
  - Really prevent the loading of compromised headers (RHEL-28769, CVE-2024-2314)
  - Add python3-pyelftools dependency (RHEL-36583)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-16
changelog:
  - Prevent increased CPU load on large DNS messages (CVE-2023-4408)
  - Prevent assertion failure when nxdomain-redirect is used with
   RFC 1918 reverse zones (CVE-2023-5517)
  - Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
  - Specific recursive query patterns may lead to an out-of-memory
    condition (CVE-2023-6516)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-22
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Nick Clifton <nickc@redhat.com> - 2.35.2-51
changelog:
  - Backport commit 88141209e25ce19473ec07d7aac09cc68f06a630 to fix stripping lld linked binaries.  (RHEL-50536)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-52
changelog:
  - Backport commit 6fde04116b4b to stop objcopy from crashing when copying non-PE binaries into a PE output.  (RHEL-48882)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-53
changelog:
  - Backport commit bc5baa9f13ff to ensure that objcopy does not loose the minimum section alignment for PE binaries.  (RHEL-30268)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-55
changelog:
  - Add linker error/warning messages for executable stacks and RWX segments.  (RHEL-59801, RHEL-59802)


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-14
changelog:
  - Do not add new PVs to the LVM devices file if it doesn't exist and VGs are present
    Resolves: RHEL-473


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-15
changelog:
  - Backport fixes for Stratis support needed for storage role
    Resolves: RHEL-35382
  - Add support for resizing PVs to the size of the underlying block device
    Resolves: RHEL-35386


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-18
changelog:
  - Add a basic read-only support for UDF filesystem
    Resolves: RHEL-13329
  - nvme: Skip startup/write when NVMe plugin isn't available
    Resolves: RHEL-28124


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-27
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Bryan Gurney <bgurney@redhat.com> - 1.6.1-2
changelog:
  - Add issues resolved by release 1.6.1
  - Resolves: RHEL-36001
  - Resolves: RHEL-36664
  - Resolves: RHEL-36667
  - Resolves: RHEL-36691


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Viktor Malik <vmalik@redhat.com> - 0.17.0-1
changelog:
  - Rebase on bpftrace 0.17.0 (RHEL-286)
  - Fix runqlat.bt, tcpdrop.bt, and undump.bt on aarch64 (rhbz#2170838)


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 2:1.37.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/f31d99d)
  - Resolves: RHEL-61148


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/c060201)
  - Related: RHEL-60277


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-16
changelog:
  - ci-fix-add-schema-rules-for-baseurl-and-metalink-in-yum.patch [RHEL-46873]
  - Resolves: RHEL-46873
    (Suggest to update schema to support metalink)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-17
changelog:
  - ci-fix-Clean-cache-if-no-datasource-fallback-5499.patch [RHEL-49736]
  - ci-Support-setting-mirrorlist-in-yum-repository-config-.patch [RHEL-49674]
  - Resolves: RHEL-49736
    ([Cloud-init] [RHEL-9] Password reset feature broken with CloudstackDataSource)
  - Resolves: RHEL-49674
    (Support setting mirrorlist in yum repository config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-18
changelog:
  - ci-Revert-fix-vmware-Set-IPv6-to-dhcp-when-there-is-no-.patch [RHEL-54373]
  - Resolves: RHEL-54373
    ([RHEL9]Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)")


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-19
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54686]
  - Resolves: RHEL-54686
    ([RHEL-9.5] cloud-init schema validation fails.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-20
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-61224]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-61224]
  - Resolves: RHEL-61224
    (Configuring metric for default gateway is not working)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-21
changelog:
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-38927]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-38927]
  - Resolves: RHEL-38927
    (NoCloud - network_config bridges incorrectly configured)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-22
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768]
  - Resolves: RHEL-65768
    ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334]
  - Resolves: RHEL-74334
    ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122]
  - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122]
  - Resolves: RHEL-71122
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] )


author: Packit <hello@packit.dev> - 11-1
changelog:
  - Show SELinux security context in permissions dialog
  - Support changing permissions of enclosed files


author: Packit <hello@packit.dev> - 14-1
changelog:
  - Allow editing multiple file permissions
  - Support uploading files with administrator privileges
  - Add drag 'n drop support


author: Bob Mader <bob@redhat.com> - 0.1.7-2
changelog:
  - Initial build for EL9
  - Applying changes for gating - adding the .fmf directory
  - Resolves: RHEL-57044


author: Packit <hello@packit.dev> - 330-1
changelog:
  - Web server: Increased sandboxing, setuid removal, bootc support
  - Development: New install mode using systemd-sysext
  - ws container: Move to Fedora 41


author: Packit <hello@packit.dev> - 331-1
changelog:
  - ws: Prevent search engine indexing with robots.txt
  - container/ws: Support using an external SSH agent


author: Packit <hello@packit.dev> - 332-1
changelog:
  - containers/ws: Include cockpit-files
  - login: Beibooting to all supported OSes
  - metrics: Show system boots in metrics


author: Justin Stephenson <jstephen@redhat.com> - 13-1
changelog:
  - Play after rewind in testFastforwardControls
  - Set TZ to avoid CI failures with testFilter* tests
  - testZoomSpeedControls incorrectly checks scale
  - Fix testSessionRecordingConf
  - Read TMT_TEST_DATA variable for LOGS in browser.sh
  - Fix node-modules in run-test.sh
  - Install sssd-proxy in test browser.sh
  - Add Files path for test recordings
  - FMF: Run tests together
  - Add executable bit to browser shell scripts
  - FMF: Fix minor typo in plans
  - Add FMF tests and test scripts
  - Read existing sssd conf domains and services
  - Makefile: Update Cockpit lib to 269bf89276c679a03befc8a04244addd
  - Remove CentOS condition in testZoomSpeedControls
  - Add accessible name label for Progress component
  - Remove 'enable_files_domain' from SSSD Config
  - SSSD config changes
  - testFastforwardControls update after player-restart
  - Switch wait_present to wait_visible
  - ESLint error and warning fixes
  - Fix stylelint errors
  - Dependency updates
  - Bring up to date with cockpit starter kit
  - Config: Switch SSSD files provider to Proxy provider
  - Update fedora license in spec file
  - Makefile: Bump test API to 267
  - Makefile: drop installing cockpit-ws/cockpit-packagekit
  - src: load translations via po.js
  - .semaphore: update TEST_OS to Fedora 36
  - webpack.config.js: update compression plugin to succeed build
  - Makefile: Adjust to changed rpmspec -q behaviour
  - Use standard "translate" marker in HTML
  - Update dependencies excluding Patternfly
  - Remove unneeded tlog UID code


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2063148
  - Disable FIPS mode; it does not work and will not be certified
    Resolves: rhbz#2013669


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:2.226.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.226.0
  - Remove dependency on policycoreutils-python-utils
  - Related: Jira:RHEL-2112
  - Related: Jira:RHEL-18316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.227.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.227.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.228.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.228.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.1
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.230.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.230.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.231.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.231.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.232.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.232.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.233.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.233.0
  - Resolves: RHEL-58997


author: Jindrich Novy <jnovy@redhat.com> - 3:2.234.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.234.2
  - Related: RHEL-60277


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
  - Resolves: RHEL-28855


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65465)
  - Fix signal handling at exit
  - Minor edits in the rpm scripts and the changelog
  - Make xemacs a bcond


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-14
changelog:
  - RHEL-19201 redhat-lsb unnecessary pulls in cups and avahi dependencies
  - RHEL-16026 Cups Browsed does not correctly pull printer location and description information from print server


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-18
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 1.10-8.el9
changelog:
  - Supersede uninitialized value patch with upstream version
  - Add upstream patch: common: fix mismatch between prototype and body
  - Makefile: bypass check-doc in check target
  - Related: rhbz#1985096


author: Bryan Gurney <bgurney@redhat.com> - 1.10.1-1
changelog:
  - Update to PMDK version 1.10.1
  - Related: rhbz#1874208
  - Remove BuildRequires line for libfabric-devel
  - Related: rhbz#2009502


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Resolves: RHEL-22429


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-2
changelog:
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22429


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Pavel Valena <pvalena@redhat.com> - 057-38.git20230725
changelog:
  - fix(dracut.sh): use dynamically uefi's sections offset
  - fix(dracut.sh): handle imagebase for uefi
  - fix(dracut.sh): use gawk for strtonum
  - fix(rngd): install system service file
  - fix(nvmf): nvme list-subsys prints the address using commas
  - fix(nvmf): don't try to validate network connections in
  - fix(nvmf): no need to load the nvme module
  - fix(nvmf): don't create did-setup file
  - fix(nvmf): don't use "finished" queue for autoconnect
  - fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes
  - fix(nvmf): avoid calling "exit" in a cmdline hook
  - fix(nvmf): run cmdline hook before parse-ip-opts.sh
  - feat(nvmf): set rd.neednet=1 if tcp records encountered
  - fix(nvmf): install 8021q module unconditionally
  - fix(nvmf): support /etc/nvme/config.json
  - feat(nvmf): add code for parsing the NBFT


author: Pavel Valena <pvalena@redhat.com> - 057-43.git20230816
changelog:
  - feat(spec): include modules for IMA
  - fix(dracut): there can be \ at the end on line in awk script
  - fix(rngd): spacing
  - fix(integrity): do not enable EVM if there is no key
  - fix(fips): include openssl's fips.so and openssl.cnf


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Viktor Malik <vmalik@redhat.com> - 1.25-1
changelog:
  - Resolves: rhbz#2190484
  - Build with system libbpf
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Hui Wang <huwang@redhat.com> - 1:4.20-4
changelog:
  - Drop unnecessary javax16.api.jar
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-3
changelog:
  - edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch [RHEL-45899]
  - edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch [RHEL-45899]
  - Resolves: RHEL-45899
    ([RHEL-9.5.0] edk2 hit Failed to generate random data)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-4
changelog:
  - edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56081]
  - Resolves: RHEL-56081
    ([EDK2] Shim fallback reboot workaround might not work on SNP)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-5
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-45847]
  - Resolves: RHEL-45847
    ([RHEL9.5] Hotplug vcpu to a guest cause guest kernel panic)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-6
changelog:
  - edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974]
  - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336]
  - Resolves: RHEL-56974
    (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-9])
  - Resolves: RHEL-55336
    (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-7
changelog:
  - edk2-OvmfPkg-VirtioGpuDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-OvmfPkg-QemuVideoDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60833]
  - Resolves: RHEL-56248
    (507x510 display resolution should not crash the firmware [edk2,rhel-9.6])
  - Resolves: RHEL-60833
    (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-8
changelog:
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65725]
  - Resolves: RHEL-65725
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-9
changelog:
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]
  - Resolves: RHEL-66230
    ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Jon Maloy <jmaloy@redhat.com> - 20240524-10
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]
  - Resolves: RHEL-58631
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447]
  - Resolves: RHEL-72447
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9])


author: Felix Kolwa <fkolwa@redhat.com> - 1.35.1-7
changelog:
  - Bump revision number to 7.
  - Pull in changes from Major Hayden:
    - Skip version check test
      Opened upstream bug:
          https://github.com/aws/efs-utils/issues/194
    - Disable automatic version check


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Radovan Sroka <rsroka@redhat.com> - 1.0.3-3
changelog:
  RHEL 9 BETA
  - SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm
  Resolves: rhbz#1932225
  Resolves: rhbz#1977731


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-101
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespaces in trust files
  - use full paths in trust files
  Resolves: rhbz#2032408
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#2015307
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014449


author: Radovan Sroka <rsroka@redhat.com> - 1.1-100
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#2032408
  - introduce rules.d
  Resolves: rhbz#2054740
  - remove pretrans scriptlet
  Resolve: rhbz#2051481


author: Radovan Sroka <rsroka@redhat.com> - 1.1-104
changelog:
  RHEL 9.1.0 ERRATUM
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
  Resolves: rhbz#2069123
  - Faulty handling of static applications
  Resolves: rhbz#2096457


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-102
changelog:
  RHEL 9.1.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100041
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2097385
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070655
  - Introduce ppid rule attribute
  Resolves: rhbz#2102558
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111244
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111938
  - Remove dnf plugin
  Resolves: rhbz#2113959
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2115849


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-104
changelog:
  RHEL 9.2.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2097077
  - fapolicyd ineffective with systemd DynamicUser=yes
  Resolves: rhbz#2136802
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2160517
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2160518
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: RHEL-192


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-100
changelog:
  RHEL 9.3.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-430
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-621
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-624
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-623
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-622
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-627
  - fapolicyd-cli --update then mount/umount twice causes fapolicyd daemon to block (state 'D')
  Resolves: RHEL-817
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-730
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-816


author: Antonio Murdaca <amurdaca@redhat.com> - 0.5.1-1
changelog:
  * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625
   * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632
   * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629
   * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635
   * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638
   * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640
   * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634
   * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651
   * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650
   * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643
   * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639
   * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659
   * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656
   * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666
   * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664
   * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671
   * feat(manufacturing-server): implement an export OVs endpoint  by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673
   * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676
   * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678
   * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677
   * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675
   * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669
   * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683
   * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687
   * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681
   * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688
   * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692
   * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693

   * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-73
changelog:
  - fence_vmware_rest: detect if the API user has sufficient rights to
    manage the fence device
    Resolves: RHEL-25256


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-77
changelog:
  - fence_scsi: preempt clears all devices on the mpath device, so only
    run it for the first device
    Resolves: RHEL-59878
  - ha-cloud-support: remove bundled awscli and use awscli2 package
    instead
    Resolves: RHEL-60020


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-80
changelog:
  - fence_mpath: add support for hex-key format (used in multipath.conf)
    Resolves: RHEL-56138
  - fence_scsi/fence_mpath: add support for SPC-4 disks
    Resolves: RHEL-7629


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-81
changelog:
  - fence_ibm_powervs: add private endpoint and token file support
    Resolves: RHEL-62206
  - ha-cloud-support: bundle libs for the powervs-subnet resource agent
    Resolves: RHEL-64023


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-85
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76493


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Jan Grulich <jgrulich@redhat.com - 128.4.0-2
changelog:
  - Enable PipeWire camera support for RHEL 10
    + backport upstream fixes for PipeWire camera support
    Fixes: RHEL-64749


author: Eric Garver <egarver@redhat.com> - 1.3.4-6
changelog:
  - feat(IPv6_rpfilter): support loose rpfilter
  - feat(IPv6_rpfilter): support loose-forward rpfilter
  - feat(IPv6_rpfilter): support strict-forward rpfilter


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-12
changelog:
  - Resolves: RHEL-3541 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-2
changelog:
  - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15918 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Nick Clifton <nickc@redhat.com> - 10.73-2
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 11.08-4
changelog:
  - Fix building with Clang-16.  (#2216918)
  - Re-enable building with LTO.  (#2166579)
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)
  - Annocheck: Improve handling of tool versions.
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)
  - Rename gcc plugin to gts-annobin.  (#2111977)
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217814)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-39736)


author: Marek Polacek <polacek@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Guinevere Larsen <blarsen@redhat.com> - 14.2-1.el9
changelog:
  - Rebase to gdb-14.2 and update all bug references
    (Resolves: RHEL-39554)
    (Resolves: RHEL-39553)
    (Resolves: RHEL-10550)
    (Resolves: RHEL-39555)
    (Resolves: RHEL-39585)
    (Resolves: RHEL-36211)


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Ray Strode <rstrode@redhat.com> - 40.1-23
changelog:
  - Make /var/log/gdm tmpfiles.d snippet match files manifest
    to fix installability test
    Related: RHEL-19410


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Felipe Borges <feborges@redhat.com> - 40.0-38
changelog:
  - Scale up monitors drawing in display arrangment settings when multiple monitors
    Related: RHEL-4196


author: Ray Strode <rstrode@redhat.com> - 40.0-6
changelog:
  - Copy and run the script from XDG_RUNTIME_DIR
    Resolves: https://issues.redhat.com/browse/RHEL-25536


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: Alejandro Sáez <asm@redhat.com> - 1.22.3-1
changelog:
  - Rebase to 1.22.3
  - Removes re-enable-cgo.patch
  - Resolves: RHEL-35634
  - Resolves: RHEL-35883
  - Resolves: RHEL-10068
  - Resolves: RHEL-34924


author: Archana Ravindar <aravinda@redhat.com> - 1.22.4-1
changelog:
  - Rebase to Go1.22.4 that includes fixes for CVE-2024-24789 and CVE-2024-24790
  - Resolves: RHEL-40156


author: David Benoit <dbenoit@redhat.com> - 1.22.5-2
changelog:
  - Rebuild race detector archives from LLVM sources
  - Add golang-race subpackage
  - Resolves: RHEL-33421
  - Remove unused crypto/internal/boring/syso package
  - Resolves: RHEL-54335


author: Archana <aravinda@redhat.com> - 1.23.2-1
changelog:
  - Rebase to Go1.23.2
  - Remove fix standard crypto panic patch as the source already has changes
  - Resolves: RHEL-62392


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-2
changelog:
  - Fixes patch 1002 for update to golang-fips
  - Remove unused code under apsl-1.1 and apsl-1.2 licenses
  - Resolves RHEL-33655


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.1.1-1
changelog:
  - update to 5.1.1 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY


author: saypaul <paul.sayan@gmail.com> - 0.15.5-1
changelog:
  - The 0.15.5 release
  - Auto-detect image type and use correct rollback
  - Support for read only /boot mount
  - Warn users of missing disabled healthchecks
  - Add feature to disable healthchecks


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.15.5-3
changelog:
  - Moved greenboot config to /etc/grub.d.
  - %post symlink greenboot.cfg to bootupd if present
  - %postun remove symlink from bootupd if present


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.7-1
changelog:
  - Update to 0.15.7
  - Reword warning message for disabled checks
  - Fixed the issue that boot_counter cannot be unset and some scripts do not have executable permissions
  - Packit: only use IoT relevant branches


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.48.2-8
changelog:
  - Support Rocky Linux in virt-customize
    resolves: rhbz#2133443
  - Disable OpenSUSE repo in virt-builder
    resolves: rhbz#2145160


author: Richard W.M. Jones <rjones@redhat.com> - 1.50.1-1
changelog:
  - Rebase to guestfs-tools 1.50.1
    resolves: rhbz#2168626
  - Fix virt-drivers inspection of RHEL 9.2 guests
    resolves: rhbz#2184963


author: Laszlo Ersek <lersek@redhat.com> - 1.50.1-3
changelog:
  - let virt-inspector recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable "make check"; we now use "-cpu max" (libguestfs 30f74f38bd6e)
    resolves: rhbz#2209280


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-2
changelog:
  - Rebase to guestfs-tools 1.51.6
  - Implement --key all:...
    resolves: RHEL-19030
  - Fix crash because of off-by-one error
    resolves: RHEL-19062
  - Fix virt-customize --chown invalid format
    resolves: RHEL-21899


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-4
changelog:
  - Add support for nbd+unix:// URIs
    resolves: RHEL-33956
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-36634


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56811
  - Replace Jansson with json-c
    resolves: RHEL-65294


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.4
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-69761


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-60277


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Davide Caratti <dcaratti@redhat.com> - 2.9-15
changelog:
  - Disable 'badfuncs' in rpminspect tests
  - Build with -fPIE, and enable verbose build log
  - enable CONFIG_SUITEB192


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-68660 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
changelog:
  - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.40.20190303git
changelog:
  - hpvd-hypervkvpd.service-ordering-fixes.patch [bz#2103188]
  - Resolves: bz#2103188
    ([Hyper-V][RHEL-9] hypervkvpd.service service ordering)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.41.20190303git
changelog:
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [bz#2122115]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [bz#2139457]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [bz#2139457]
  - Resolves: bz#2122115
    ([Hyper-V][RHEL-9] Cannot set gateway properly when set static IPADDR0,NETMASK0,GATEWAY in ifcfg-eth0)
  - Resolves: bz#2139457
    ([Hyper-V][RHEL9.2] Update Hyper-V-Daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.42.20190303git
changelog:
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931]
  - Resolves: bz#2218931
    ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.43.20190303git
changelog:
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902]
  - Resolves: RHEL-9902
    ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.3.0-0.3.beta2
changelog:
  - Rebase to JSS 5.3.0-beta2
  - Bug 2017098 - pki pkcs12-cert-add command failing with 'Unable to validate PKCS #12 file: Digests do not match' exception


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-1
changelog:
  - Rebase to PKI 11.3.0
  - Bug #2091993 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug #2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Miguel Martín <mmartinv@redhat.com> - 2.19.0-3
changelog:
  - Update ignition-edge commit to support FIPS
      - https://github.com/fedora-iot/ignition-edge/pull/2


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-5
changelog:
  - Resolves: RHEL-67414 ipa dns-zone --allow-query '!198.18.2.0/24;any;' fails with Unrecognized IPAddress flags
  - Resolves: RHEL-67410 ipa-migrate should also migrate DNS forward zones
  - Resolves: RHEL-67409 ipa-migrate in stage mode fails with TypeError: 'NoneType' object is not iterable
  - Resolves: RHEL-66964 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-64135 IDP configuration in the IdM WebUI shows Organization is required


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-6
changelog:
  - Resolves: RHEL-68448 ipa trust-add fails in FIPS mode with an internal error has occurred
  - Resolves: RHEL-69301 Support GSSAPI in Cockpit on IPA servers


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-7
changelog:
  - Resolves: RHEL-70760 Fix typo in ipa-migrate log file i.e 'Privledges' to 'Privileges'
  - Resolves: RHEL-70481 ipa-server-upgrade fails after established trust with ad
  - Resolves: RHEL-69927 add support for python cryptography 44.0.0
  - Resolves: RHEL-69908 All user groups are not being included during HSM token validation
  - Resolves: RHEL-69900 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-8
changelog:
  - Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking [rhel-9]
  - Resolves: RHEL-71261 [RHEL-9.6] Include latest fixes in python3-ipatests package
  - Resolves: RHEL-67191 CVE-2024-11029 ipa: Administrative user data leaked through systemd journal [rhel-9.6]
  - Resolves: RHEL-59040 KRA installation failure caused by a certificate mismatch in NSS DB and configuration file.


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-9
changelog:
  - Resolves: RHEL-74465 kinit with external idp user is failing
  - Resolves: RHEL-75656 Include latest fixes in python3-ipatests package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-10
changelog:
  - Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking


author: Thomas Woerner <twoerner@redhat.com> - 4.12.2-11
changelog:
  - Resolves: RHEL-67913 Add DNS over TLS Support, Require bind9.18 32:9.18.29-2 and new bind-dyndb-ldap 11.11-1


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Resolves: rhbz#2077006


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u352-b07 (EA)
  - Update release notes for shenandoah-8u352-b07.
  - Switch to EA mode for 8u352 pre-release builds.
  - Rebase FIPS patch against 8u352-b07
  - Resolves: rhbz#2130623


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-3
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
  - Related: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.9-0.1.ea
changelog:
  - Update to jdk-17.0.13+9 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+9-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 9
  - Set rpmrelease to 1
  - Set portablerelease to 1
  - Update sources to openjdk-17.0.13+9-ea.tar.xz
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.10-0.1.ea
changelog:
  - Update to jdk-17.0.13+10 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+10-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 10
  - Update sources to openjdk-17.0.13+10-ea.tar.xz
  - Related: RHEL-58785


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.10-0.2.ea
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Set rpmrelease to 2
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.11-2
changelog:
  - Update to jdk-17.0.13+11 (GA)
  - Update .gitignore to ignore openjdk-17.0.13+11.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 11
  - Set is_ga to 1
  - Update sources to openjdk-17.0.13+11.tar.xz
  - Resolves: RHEL-58785
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.11-4
changelog:
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel', etc.
  - Set rpmrelease to 4
  - Resolves: RHEL-63034


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.14+1 (EA)
  - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
  - Set updatever to 14
  - Set buildver to 1
  - Set rpmrelease to 2
  - Set is_ga to 0
  - Update sources to openjdk-17.0.14+1-ea.tar.xz
  - Double percent signs consistently throughout comments
  - Set bundled giflib provide version to 5.2.2
  - Set bundled libpng provide version to 1.6.43
  - Warn about bundled provide version bumps and backouts in openjdk_news.sh
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
  - Revert: Use component in EPEL and Fedora bug URLs


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45355
  - Resolves: RHEL-47395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47023


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-2
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Related: RHEL-58797


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.9-0.2.ea
changelog:
  - Update to jdk-21.0.5+9 (EA)
  - Update release notes to 21.0.5+9
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-58797
  - Resolves: RHEL-17191


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Switch to GA mode.
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Resolves: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-3
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74403


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73562


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Kairui Song <kasong@redhat.com> - 006-4.20210721gitd046d22
changelog:
  - Update to latest git snapshot (20210721). Resolves: bz1937035, bz1959203
  - Apply RHEL only patch to enable kdump by default


author: Kairui Song <kasong@redhat.com> - 006-5.20210805gitce26db0
changelog:
  - Update to latest git snapshot, automated installation won't be blocked. Resolves: bz1986969
  - Update RHEL only patch, fix inst.kdump_addon=0 not working issue. Resolves: bz1986942


author: Kairui Song <kasong@redhat.com> - 006-7.20210812git5b74c1d
changelog:
  - Update to latest git snapshot, fix kdump spoke is incomplete after luks device is deleted. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-8.20210818git400359b
changelog:
  - Update to latest git snapshot, fix installation failure when reuse old partition. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-9.20210819git2026d20
changelog:
  - Update to latest git snapshot, fix encryption warning still present after disabling encryption. Resolves: bz1937035


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-560.el9]
changelog:
  - rhel-only: Fix up kfunc definitions in filter.c (Toke Høiland-Jørgensen) [RHEL-65787]
  - selftests/bpf: Test bpf_sock_destroy (Toke Høiland-Jørgensen) [RHEL-65787]
  - selftests/bpf: Add helper to get port using getsockname (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: Add bpf_sock_destroy kfunc (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: Avoid iter->offset making backward progress in bpf_iter_udp (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: iter_udp: Retry with a larger batch size without going back to the previous bucket (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: udp: Implement batching for sockets iterator (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: seq_file: Remove bpf_seq_afinfo from udp_iter_state (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: udp: Encapsulate logic to get udp table (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: seq_file: Helper function to match socket attributes (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: tcp: Avoid taking fast sock lock in iterator (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Access &udp_table via net. (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Set NULL to udp_seq_afinfo.udp_table. (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Set NULL to sk->sk_prot->h.udp_table. (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Clean up some functions. (Toke Høiland-Jørgensen) [RHEL-65787]
  - exfat: fix the infinite loop in exfat_readdir() (CKI Backport Bot) [RHEL-75663] {CVE-2024-57940}
  - exec: Fix ToCToU between perm check and set-uid/gid usage (CKI Backport Bot) [RHEL-55562] {CVE-2024-43882}
  - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (CKI Backport Bot) [RHEL-72355] {CVE-2024-53213}
  - net: xgbe: Convert tasklet API to new bottom half workqueue mechanism (Michal Schmidt) [RHEL-62004]
  - net: xgbe: remove extraneous #ifdef checks (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Avoid potential string truncation in name (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: propagate the correct speed and duplex status (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: handle the corner-case during tx completion (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: handle corner-case during sfp hotplug (Michal Schmidt) [RHEL-62004]
  - net: ethernet: Use device_get_match_data() (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - net: ethernet: amd: Convert to platform remove callback returning void (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: extend 10Mbps support to MAC version 21H (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix the false linkup in xgbe_phy_status (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix mismatched prototype (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: add support for rx-adaptation (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: add 2.5GbE support to 10G BaseT mode (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Replace MII_ADDR_C45 with XGBE_ADDR_C45 (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Separate C22 and C45 transactions (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Delay AN timeout during KR training (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Add support for 10 Mbps speed (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: add missed tasklet_kill (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Check only the minimum speed for active/passive cables (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Fix logic around active and passive cables (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: add the bit rate quirk for Molex cables (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix the SFP compliance codes check for DAC cables (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: enable PLL_CTL for fixed PHY modes only (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: use enums for mailbox cmd and sub_cmds (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Yellow carp devices do not need rrc (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix clang -Wformat warnings (Michal Schmidt) [RHEL-62004]
  - amd/xgbe: fix repeated words in comments (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: fix clang -Wformat warning (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: disable interrupts during pci removal (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: ensure to reset the tx_timer_active flag (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Disable the CDR workaround path for Yellow Carp Devices (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Alter the port speed bit range (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Add Support for Yellow Carp Ethernet device (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Toggle PLL settings during rate change (Michal Schmidt) [RHEL-62004]
  - net: convert users of bitmap_foo() to linkmode_foo() (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - ethernet: constify references to netdev->dev_addr in drivers (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - ethernet: Remove redundant 'flush_workqueue()' calls (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - ethernet: use eth_hw_addr_set() for dev->addr_len cases (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - signal: restore the override_rlimit logic (Radostin Stoyanov) [RHEL-68020] {CVE-2024-50271}
  - ucounts: Split rlimit and ucount values and max values (Radostin Stoyanov) [RHEL-68020] {CVE-2024-50271}
  - virtio_net: Add hash_key_length check (Jon Maloy) [RHEL-68253] {CVE-2024-53082}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-561.el9]
changelog:
  - net: sched: refine software bypass handling in tc_run (Xin Long) [RHEL-60271 RHEL-61181]
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi() (Jocelyn Falempe) [RHEL-53571]
  - drm: adv7511: Drop dsi single lane support (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Wait for migration job before unmapping pages (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Use non-interruptible wait when moving BO to system (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Correct the migration DMA map direction (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: use sjt mec fw on gfx943 for sriov (Jocelyn Falempe) [RHEL-53571]
  - drm/i915/dg1: Fix power gate sequence. (Jocelyn Falempe) [RHEL-53571]
  - drm/i915/cx0_phy: Fix C10 pll programming sequence (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Fix fault on fd close after unbind (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pf: Use correct function to check LMEM provisioning (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Revert some changes that break a mesa debug tool (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix backport of commit 73dae652dcac (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Move the coredump registration to the worker thread (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Take PM ref in delayed snapshot capture worker (Jocelyn Falempe) [RHEL-53571]
  - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (Jocelyn Falempe) [RHEL-53571]
  - udmabuf: also check for F_SEAL_FUTURE_WRITE (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/mmhub4.1: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/gfx12: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/nbio7.0: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/smu14.0.2: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/nbio7.7: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/nbio7.11: fix IP version check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: don't access invalid sched (Jocelyn Falempe) [RHEL-53571]
  - i915/guc: Accumulate active runtime on gt reset (Jocelyn Falempe) [RHEL-53571]
  - i915/guc: Ensure busyness counter increases motonically (Jocelyn Falempe) [RHEL-53571]
  - i915/guc: Reset engine utilization buffer before registration (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: synaptics-r63353: Fix regulator unbalance (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: st7701: Add prepare_prev_first flag to drm_panel (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: novatek-nt35950: fix return value check in nt35950_probe() (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference (Jocelyn Falempe) [RHEL-53571]
  - dma-buf: Fix __dma_buf_debugfs_list_del argument for !CONFIG_DEBUG_FS (Jocelyn Falempe) [RHEL-53571]
  - udmabuf: fix memory leak on last export_udmabuf() error path (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix amdgpu_coredump (Jocelyn Falempe) [RHEL-53571]
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Jocelyn Falempe) [RHEL-53571]
  - drm/amd: Update strapping for NBIO 2.5.0 (Jocelyn Falempe) [RHEL-53571]
  - drm/display: use ERR_PTR on DP tunnel manager creation fail (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/reg_sr: Remove register pool (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: fix the ERR_PTR() returned on failure to allocate tiny pt (Jocelyn Falempe) [RHEL-53571]
  - amdgpu/uvd: get ring reference from rq scheduler (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: hard-code MALL cacheline size for gfx11, gfx12 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: hard-code cacheline size for gfx11 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Dereference null return value (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix when the cleaner shader is emitted (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: Set SMU v13.0.7 default workload type (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix UVD contiguous CS mapping problem (Jocelyn Falempe) [RHEL-53571]
  - drm/i915: Fix NULL pointer dereference in capture_engine (Jocelyn Falempe) [RHEL-53571]
  - drm/i915/color: Stop using non-posted DSB writes for legacy LUT (Jocelyn Falempe) [RHEL-53571]
  - drm/i915: Fix memory leak by correcting cache object name in error handler (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: pause autosuspend when creating pdd (Jocelyn Falempe) [RHEL-53571]
  - drm/xe: Call invalidation_fence_fini for PT inval fences in error state (Jocelyn Falempe) [RHEL-53571]
  - drm/panic: remove spurious empty line to clean warning (Jocelyn Falempe) [RHEL-53571]
  - Revert "drm/amd/display: parse umc_info or vram_info based on ASIC" (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: rework resume handling for display (v2) (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Add option to retrieve detile buffer size (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/devcoredump: Update handling of xe_force_wake_get return (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/forcewake: Add a helper xe_force_wake_ref_has_domain() (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/guc: Copy GuC log prior to dumping (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/devcoredump: Add ASCII85 dump helper function (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/devcoredump: Improve section headings and add tile info (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/devcoredump: Use drm_puts and already cached local variables (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: set the right AMDGPU sg segment limitation (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Prune Invalid Modes For HDMI Output (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: parse umc_info or vram_info based on ASIC (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Remove hw w/a toggle if on DP2/HPO (Jocelyn Falempe) [RHEL-53571]
  - drm/panic: Add ABGR2101010 support (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix underflow when playing 8K video in full screen mode (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Dereference the ATCS ACPI buffer (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/gfx9: Add cleaner shader for GFX9.4.2 (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Adding array index check to prevent memory corruption (Jocelyn Falempe) [RHEL-53571]
  - drm/sched: memset() 'job' in drm_sched_job_init() (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Full exit out of IPS2 when all allow signals have been cleared (Jocelyn Falempe) [RHEL-53571]
  - drm/display: Fix building with GCC 15 (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/xe3: Add initial set of workarounds (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/ptl: L3bank mask is not available on the media GT (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: disable SG displays on cyan skillfish (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix garbage or black screen when resetting otg (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: skip disable CRTC in seemless bootup case (Jocelyn Falempe) [RHEL-53571]
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: it6505: Enable module autoloading (Jocelyn Falempe) [RHEL-53571]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK (Jocelyn Falempe) [RHEL-53571]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition (Jocelyn Falempe) [RHEL-53571]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pciid: Add new PCI id for ARL (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pciids: Add PVC's PCI device ID macros (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pciids: separate ARL and MTL PCI IDs (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/pciids: separate RPL-U and RPL-P PCI IDs (Jocelyn Falempe) [RHEL-53571]
  - dma-fence: Use kernel's sort for merging fences (Jocelyn Falempe) [RHEL-53571]
  - dma-fence: Fix reference leak on fence merge failure path (Jocelyn Falempe) [RHEL-53571]
  - dma-buf: fix dma_fence_array_signaled v4 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp5.2: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp7.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp5.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp4.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/hdp6.0: do a posting read when flushing HDP (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Add a left edge pixel if in YCbCr422 or YCbCr420 and odm (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Limit VTotal range to max hw cap minus fp (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Correct prefetch calculation (Jocelyn Falempe) [RHEL-53571]
  - drm/dp_mst: Fix resetting msg rx state after topology removal (Jocelyn Falempe) [RHEL-53571]
  - drm/dp_mst: Verify request type in the corresponding down message reply (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: fix and simplify workload handling (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: add MEC version that supports no PCIe atomics for GFX12 (Jocelyn Falempe) [RHEL-53571]
  - drm/dp_mst: Fix MST sideband message body length check (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: hard-code cacheline for gc943,gc944 (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Ignore scalar validation failure if pipe is phantom (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: calculate final viewport before TAP optimization (Jocelyn Falempe) [RHEL-53571]
  - Revert "drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs" (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Remove PIPE_DTO_SRC_SEL programming from set_dtbclk_dto (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: update pipe selection policy to check head pipe (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix handling of plane refcount (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: Remove arcturus min power limit (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: disable pcie speed switching on Intel platform for smu v14.0.2/3 (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7 (Jocelyn Falempe) [RHEL-53571]
  - drm/amd: Fix initialization mistake for NBIO 7.11 devices (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/pm: skip setting the power source on smu v14.0.2/3 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix usage slab after free (Jocelyn Falempe) [RHEL-53571]
  - drm/amd: Add some missing straps from NBIO 7.11.0 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/pm: add gen5 display to the user on smu v14.0.2/3 (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Use the correct wptr size (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/guc_submit: fix race around suspend_pending (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/migrate: use XE_BO_FLAG_PAGETABLE (Jocelyn Falempe) [RHEL-53571]
  - Revert "drm/radeon: Delay Connector detecting when HPD singals is unstable" (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/migrate: fix pat index usage (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: it6505: Fix inverted reset polarity (Jocelyn Falempe) [RHEL-53571]
  - drm/fbdev-dma: Select FB_DEFERRED_IO (Jocelyn Falempe) [RHEL-53571]
  - drm: panel: jd9365da-h3: Remove unused num_init_cmds structure member (Jocelyn Falempe) [RHEL-53571]
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Jocelyn Falempe) [RHEL-53571]
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Jocelyn Falempe) [RHEL-53571]
  - drm/panic: Fix uninitialized spinlock acquisition with CONFIG_DRM_PANIC=n (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/ufence: Wake up waiters after setting ufence->signalled (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe (Jocelyn Falempe) [RHEL-53571]
  - drm/radeon: Fix spurious unplug event on radeon HDMI (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Fix wrong usage of INIT_WORK() (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Fix map/unmap queue logic (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: fix ACA bank count boundary check error (Jocelyn Falempe) [RHEL-53571]
  - drm/panthor: Fix OPP refcnt leaks in devfreq initialisation (Jocelyn Falempe) [RHEL-53571]
  - drm/panthor: record current and maximum device clock frequencies (Jocelyn Falempe) [RHEL-53571]
  - drm/panthor: introduce job cycle and timestamp accounting (Jocelyn Falempe) [RHEL-53571]
  - drm: use ATOMIC64_INIT() for atomic64_t (Jocelyn Falempe) [RHEL-53571]
  - drm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfd_get_cu_occupancy()' (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info() (Jocelyn Falempe) [RHEL-53571]
  - drm/vkms: Drop unnecessary call to drm_crtc_cleanup() (Jocelyn Falempe) [RHEL-53571]
  - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Reduce HPD Detection Interval for IPS (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Increase idle worker HPD detection time (Jocelyn Falempe) [RHEL-53571]
  - drm/xe/hdcp: Fix gsc structure check in fw check status (Jocelyn Falempe) [RHEL-53571]
  - drm: panel: nv3052c: correct spi_device_id for RG35XX panel (Jocelyn Falempe) [RHEL-53571]
  - drm/panic: Select ZLIB_DEFLATE for DRM_PANIC_SCREEN_QR_CODE (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: tc358767: Fix link properties discovery (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: fix a memleak issue when driver is removed (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: it6505: Drop EDID cache on bridge power off (Jocelyn Falempe) [RHEL-53571]
  - drm/bridge: anx7625: Drop EDID cache on bridge power off (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfx_v9_0 Module (Jocelyn Falempe) [RHEL-53571]
  - drm/amdgpu: Fix JPEG v4.0.3 register write (Jocelyn Falempe) [RHEL-53571]
  - drm/panel: nt35510: Make new commands optional (Jocelyn Falempe) [RHEL-53571]
  - udmabuf: fix vmap_udmabuf error page set (Jocelyn Falempe) [RHEL-53571]
  - udmabuf: change folios array from kmalloc to kvmalloc (Jocelyn Falempe) [RHEL-53571]
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Fix incorrect DSC recompute trigger (Jocelyn Falempe) [RHEL-53571]
  - drm/amd/display: Skip Invalid Streams from DSC Policy (Jocelyn Falempe) [RHEL-53571]
  - redhat/configs: Enable CONFIG_TZMEM_MODE_GENERIC on aarch64 (Jennifer Berringer) [RHEL-73299]
  - redhat/configs: Add CONFIG_QCOM_QSEECOM for aarch64 (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: smc: Narrow 'mempool' variable scope (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: smc: Handle missing SCM device (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Cleanup global '__scm' on probe failures (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool() (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available() (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM bridge enabling (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: fix a NULL-pointer dereference (Jennifer Berringer) [RHEL-73299] {CVE-2024-53069}
  - firmware: qcom: scm: suppress download mode error (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire() (Jennifer Berringer) [RHEL-73299] {CVE-2024-46868}
  - firmware: qcom: tzmem: don't ask about allocator mode when not enabled (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Add multiple download mode support (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Refactor code to support multiple dload mode (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Disable SDI and write no dump to dump mode (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qseecom: remove unused functions (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: fix virtual-to-physical address conversion (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: blacklist more platforms for SHM Bridge (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: simplify returning pointer without cleanup (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: export devm_qcom_tzmem_pool_new() (Jennifer Berringer) [RHEL-73299]
  - arm64: dts: qcom: sa8775p: add a dedicated memory carveout for TZ (Jennifer Berringer) [RHEL-73299]
  - arm64: defconfig: enable SHM Bridge support for the TZ memory allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: clarify the comment in qcom_scm_pas_init_image() (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: add support for SHM bridge memory carveout (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: tzmem: enable SHM Bridge support (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: add support for SHM bridge operations (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qseecom: convert to using the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: make qcom_scm_qseecom_app_get_id() use the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: make qcom_scm_lmh_dcvsh() use the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: make qcom_scm_ice_set_key() use the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: make qcom_scm_assign_mem() use the TZ allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: smc: switch to using the SCM allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: enable the TZ mem allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: add a dedicated TrustZone buffer allocator (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Modify only the download bits in TCSR register (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Fix __scm and waitq completion variable initialization (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Rework dload mode availability check (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Remove redundant scm argument from qcom_scm_waitq_wakeup() (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: Remove log reporting memory allocation failure (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: uefisecapp: Fix memory related IO errors and crashes (Jennifer Berringer) [RHEL-73299] {CVE-2024-35994}
  - firmware: qcom: qseecom: fix memory leaks in error paths (Jennifer Berringer) [RHEL-73299] {CVE-2023-52684}
  - firmware: qcom: scm: Add gpu_init_regs call (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qcm: fix unused qcom_scm_qseecom_allowlist (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: remove unneeded 'extern' specifiers (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: scm: add a missing forward declaration for struct device (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: move Qualcomm code into its own directory (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qseecom: add missing include guards (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom: qseecom: Add missing AUXILIARY_BUS dependency (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom-scm: order includes alphabetically (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom-scm: drop unneeded 'extern' specifiers (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom_scm: Add missing extern specifier (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom_scm: Convert all symbols to EXPORT_SYMBOL_GPL (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom_scm: disable SDI if required (Jennifer Berringer) [RHEL-73299]
  - firmware: Add support for Qualcomm UEFI Secure Application (Jennifer Berringer) [RHEL-73299]
  - firmware: qcom_scm: Add support for Qualcomm Secure Execution Environment SCM interface (Jennifer Berringer) [RHEL-73299]
  - lib/ucs2_string: Add UCS-2 strscpy function (Jennifer Berringer) [RHEL-73299]
  - cpuidle: remove dead code from cpuidle_enter_state() (Mark Langsdorf) [RHEL-64032]
  - cpuidle: dt_idle_genpd: Simplify with scoped for each OF child loop (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Simplify with scoped for each OF child loop (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Enable the hierarchical topology for s2idle on PREEMPT_RT (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Enable the hierarchical topology for s2ram on PREEMPT_RT (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Drop redundant assignment of CPUIDLE_FLAG_RCU_IDLE (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci-domain: Enable system-wide suspend on PREEMPT_RT (Mark Langsdorf) [RHEL-64032]
  - cpuidle: haltpoll: add missing MODULE_DESCRIPTION() macro (Mark Langsdorf) [RHEL-64032]
  - cpuidle: menu: Cleanup after loadavg removal (Mark Langsdorf) [RHEL-64032]
  - cpuidle: ladder: fix ladder_do_selection() kernel-doc (Mark Langsdorf) [RHEL-64032]
  - cpuidle: Avoid explicit cpumask allocation on stack (Mark Langsdorf) [RHEL-64032]
  - cpumask: Introduce cpumask_first_and_and() (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Update init level to core_initcall() (Mark Langsdorf) [RHEL-64032]
  - cpuidle: psci: Drop superfluous wrappers psci_dt_attach|detach_cpu() (Mark Langsdorf) [RHEL-64032]
  - cpuidle: Avoid potential overflow in integer multiplication (Mark Langsdorf) [RHEL-64032]
  - cpuidle: haltpoll: do not shrink guest poll_limit_ns below grow_start (Mark Langsdorf) [RHEL-64032]
  - cpuidle: haltpoll: Do not enable interrupts when entering idle (Mark Langsdorf) [RHEL-64032]
  - cpuidle: pseries: Mark pseries_idle_proble() as __init (Mark Langsdorf) [RHEL-64032]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-562.el9]
changelog:
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Olga Kornievskaia) [RHEL-76402] {CVE-2024-56779}
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads (Tomas Glozar) [RHEL-72939]
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads (Tomas Glozar) [RHEL-72939]
  - rtla/osnoise: Distinguish missing workload option (Tomas Glozar) [RHEL-72939]
  - rtla: Report missed event count (Tomas Glozar) [RHEL-75777]
  - rtla: Add function to report missed events (Tomas Glozar) [RHEL-75777]
  - rtla: Count all processed events (Tomas Glozar) [RHEL-75777]
  - rtla: Count missed trace events (Tomas Glozar) [RHEL-75777]
  - tools/rtla: Add osnoise_trace_is_off() (Tomas Glozar) [RHEL-75777]
  - rtla/timerlat_top: Abort event processing on second signal (Tomas Glozar) [RHEL-75777]
  - rtla/timerlat_hist: Abort event processing on second signal (Tomas Glozar) [RHEL-75777]
  - rtla/timerlat_top: Stop timerlat tracer on signal (Tomas Glozar) [RHEL-75777]
  - rtla/timerlat_hist: Stop timerlat tracer on signal (Tomas Glozar) [RHEL-75777]
  - rtla: Add trace_instance_stop (Tomas Glozar) [RHEL-75777]
  - selinux: ignore unknown extended permissions (Ondrej Mosnacek) [RHEL-75631] {CVE-2024-57931}
  - rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (Rafael Aquini) [RHEL-72196] {CVE-2024-53160}
  - initramfs: avoid filename buffer overrun (Rafael Aquini) [RHEL-70275] {CVE-2024-53142}
  - libperf: evlist: Fix --cpu argument on hybrid platform (Michael Petlan) [RHEL-71069]
  - scsi: lpfc: Fix spelling errors 'asynchronously' (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Copyright updates for 14.4.0.6 patches (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Update lpfc version to 14.4.0.6 (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Dick Kennedy) [RHEL-70003]
  - Revert "scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo" (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Dick Kennedy) [RHEL-70003]
  - scsi: lpfc: Modify CGN warning signal calculation based on EDC response (Dick Kennedy) [RHEL-70003]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-563.el9]
changelog:
  - redhat: set aarch64 variants of kernel-rt as Tech Preview (Luis Claudio R. Goncalves) [RHEL-77160]
  - drm/ast: Fix ast_dp connection status (Jocelyn Falempe) [RHEL-76831]
  - Revert "perf util: Make util its own library" (Michael Petlan) [RHEL-65742]
  - octeontx2-af: fix a use-after-free in rvu_npa_register_reporters (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Remove dead code and semi-colon from rsrc_name() (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: fix error handling of devlink port in rvu_rep_create() (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: fix netdev memory leak in rvu_rep_create() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix build regression without CONFIG_DCB (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Fix compilation error when CONFIG_XFRM_OFFLOAD disabled (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix installation of PF multicast rule (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Enable outbound ipsec crypto offload (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Allow ipsec crypto offload for skb with SA (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Process outbound ipsec crypto offload (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Add SA add/del support for outb ipsec crypto offload (Sai Krishna) [RHEL-23617]
  - cn10k-ipsec: Init hardware for outbound ipsec crypto offload (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Disable backpressure between CPT and NIX (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Move skb fragment map/unmap to common code (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: map skb data as device writeable (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix SDP MAC link credits configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Quiesce traffic before NIX block reset (Sai Krishna) [RHEL-23617]
  - octeontx2-af: RPM: fix stale FCFEC counters (Sai Krishna) [RHEL-23617]
  - octeontx2-af: RPM: fix stale RSFEC counters (Sai Krishna) [RHEL-23617]
  - octeontx2-af: RPM: Fix low network performance (Sai Krishna) [RHEL-23617]
  - octeontx2-af: RPM: Fix mismatch in lmac type (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix spelling mistake "reprentator" -> "representor" (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Adds TC offload support (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Implement offload stats ndo for representors (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add devlink port support (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add representors for sdp MAC (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Configure VF mtu via representor (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add support to sync link state between representor and VFs (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Get VF stats via representor (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add packet path between representor and VF (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add basic net_device_ops (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Create representor netdev (Sai Krishna) [RHEL-23617]
  - redhat/configs: enable CONFIG_RVU_ESWITCH on RHEL (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: RVU representor driver (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Vary completion queue event size (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Refactor few NPC mcam APIs (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Move shared APIs to header file (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Reuse PF max mtu value (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add new APIs for queue memory alloc/free. (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Define common API for HW resources configuration (Sai Krishna) [RHEL-23617]
  - net: marvell: use ethtool string helpers (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix potential integer overflows on integer shifts (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Change block parameter to const pointer in get_lf_str_list (Sai Krishna) [RHEL-23617]
  - octeontx2-af: debugfs: Add Channel info to RPM map (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Modify SMQ flush sequence to drop packets (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Make iplen __be16 in otx2_sqe_add_ext() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Pass string literal as format argument of alloc_workqueue() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: configure default CPT credits for CN10KA B0 (Sai Krishna) [RHEL-23617]
  - octeontx2-af: avoid RXC register access for CN10KB (Sai Krishna) [RHEL-23617]
  - octeontx2-af: use dynamic interrupt vectors for CN10K (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix CPT AF register offset calculation (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix issue with IPv4 match for RSS (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix issue with IPv6 ext match for RSS (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix detection of IP layer (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix a issue with cpt_lf_alloc mailbox (Sai Krishna) [RHEL-23617]
  - octeontx2-af: replace cpt slot with lf id on reg write (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Sync NIX and NPA contexts from NDC to LLC/DRAM (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix coverity and klockwork issues in octeon PF driver (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix linking objects into multiple modules (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add error handling to VLAN unoffload handling (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add debugfs support to dump NIX TM topology (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Always allocate PF entries from low prioriy zone (Sai Krishna) [RHEL-23617]
  - Octeontx2-pf: Free send queue buffers incase of leaf to inner (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Reuse Transmit queue/Send queue index of HTB class (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Treat truncation of IRQ name as an error (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: flower: check for unsupported control flags (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add support for offload tc with skbedit mark action (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: fix FLOW_DIS_IS_FRAGMENT implementation (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix NIX SQ mode and BP config (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix transmit scheduler resource leak (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Reset MAC stats during probe (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add array index check (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: remove unused variables req_hdr and rsp_hdr (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: check negative error code in otx2_open() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Increase maximum BPID channels (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix issue with loading coalesced KPU profiles (Sai Krishna) [RHEL-23617]
  - Octeontx2-af: fix pause frame configuration in GMP mode (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Send UP messages to VF only when VF is up. (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Use default max_active works instead of one (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Wait till detach_resources msg is complete (Sai Krishna) [RHEL-23617]
  - octeontx2: Detect the mbox up or down message via register (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Use matching wake_up API variant in CGX command interface (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add TC flower offload support for TCP flags (Sai Krishna) [RHEL-23617]
  - Octeontx2-af: Fix an issue in firmware shared data reserved space (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Consider the action set by PF (Sai Krishna) [RHEL-23617]
  - Octeontx2-af: Fetch MAC channel info from firmware (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Remove the PF_FUNC validation for NPC transmit rules (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix a memleak otx2_sq_init (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Cleanup loopback device checks (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Create BPIDs free pool (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Remove xdp queues on program detach (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add filter profiles in hardware to extract packet headers (Sai Krishna) [RHEL-23617]
  - net: fill in MODULE_DESCRIPTION()s for rvu_mbox (Sai Krishna) [RHEL-23617]
  - octeontx2-af: CN10KB: Fix FIFO length calculation for RPM2 (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Re-enable MAC TX in otx2_stop processing (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Always configure NIX TX link credits based on max frame size (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix max NPC MCAM entry check while validating ref_entry (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix marking couple of structure as __packed (Sai Krishna) [RHEL-23617]
  - octeontx2-af: insert space after include (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix graceful exit during PFC configuration failure (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix multicast/mirror group lock/unlock issue (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix pause frame configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Update RSS algorithm index (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix promisc mcam entry action (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Update Tx link register range (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add missing mcs flr handler call (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix mcs stats register address (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix mcs sa cam entries size (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Adjust Tx credits when MCS external bypass is disabled (Sai Krishna) [RHEL-23617]
  - octeontx2-af: cn10k: Increase outstanding LMTST transactions (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix a use-after-free in rvu_nix_register_reporters (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: TC flower offload support for mirror (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add new mbox to support multicast/mirror offload (Sai Krishna) [RHEL-23617]
  - octeontx2-af: debugfs: update CQ context fields (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Check return value of nix_get_nixlf before using nixlf (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Restore TC ingress police rules when interface is up (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64 (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix possible buffer overflow (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: TC flower offload support for ICMP type and code (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix ntuple rule creation to direct packet to VF with higher Rx queue than its PF (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix memory leak during interface down (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Free pending and dropped SQEs (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix holes in error code (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix error codes (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Enable hardware timestamping for VFs (Sai Krishna) [RHEL-23617]
  - octeontx2-af: replace deprecated strncpy with strscpy (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: update PN only when update_pn is true (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Tc flower offload support for MPLS (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Do xdp_do_flush() after redirects. (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Enable PTP PPS output support (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler (Sai Krishna) [RHEL-23617]
  - octeontx2-af: print error message incase of invalid pf mapping (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add validation of lmac (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Don't treat lack of CGX interfaces as error (Sai Krishna) [RHEL-23617]
  - octeontx2-af: CN10KB: Add USGMII LMAC mode (Sai Krishna) [RHEL-23617]
  - cteonxt2-pf: Fix backpressure config for multiple PFC priorities to work simultaneously (Sai Krishna) [RHEL-23617]
  - octeontx2-af: CN10KB: fix PFC configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Fix PFC TX scheduler free (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Use PTP HW timestamp counter atomic update feature (Sai Krishna) [RHEL-23617]
  - octeontx2-af: SDP: fix receive link config (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Allow both ntuple and TC features on the interface (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Harden rule validation. (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Remove redundant functions rvu_npc_exact_mac2u64() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Use u64_to_ether_addr() to convert ethernet address (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Remove redundant functions mac2u64() and cfg2mac() (Sai Krishna) [RHEL-23617]
  - octeontx2-af: TC flower offload support for inner VLAN (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Code restructure to handle TC outer VLAN offload (Sai Krishna) [RHEL-23617]
  - octeontx2: Remove unnecessary ternary operators (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: TC flower offload support for SPI field (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Initialize 'cntr_val' to fix uninitialized symbol error (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix hash extraction enable configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Install TC filter rules in hardware based on priority (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: htb offload support for Round Robin scheduling (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: implement transmit schedular allocation algorithm (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Generate hash key using ecb(aes) (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Dont allocate BPIDs for LBK interfaces (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add additional check for MCAM rules (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Move validation of ptp pointer before its usage (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Promisc enable/disable through mbox (Sai Krishna) [RHEL-23617]
  - octeontx-af: fix hardware timestamp configuration (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Reset MAC features in FLR (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Add validation before accessing cgx and lmac (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix mapping for NIX block from CGX connection (Sai Krishna) [RHEL-23617]
  - octeontx2-af: cn10kb: fix interrupt csr addresses (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: TC flower offload support for rxqueue mapping (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush (Sai Krishna) [RHEL-23617]
  - octeontx2-af: add option to toggle DROP_RE enable in rx cfg (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Enable LBK links only when switch mode is on. (Sai Krishna) [RHEL-23617]
  - octeontx2-af: cn10k: Set NIX DWRR MTU for CN10KB silicon (Sai Krishna) [RHEL-23617]
  - octeontx2-af: extend RSS supported offload types (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fix lbk link credits on cn10k (Sai Krishna) [RHEL-23617]
  - octeontx2-af: fixed resource availability check (Sai Krishna) [RHEL-23617]
  - octeontx2-af: Fix promiscuous mode (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Support VLAN in clear text (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Remove unneeded semicolon (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: ethtool expose qos stats (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Add support for HTB offload (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Prepare for QOS offload (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Refactor schedular queue alloc/free calls (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: qos send queues management (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Rename tot_tx_queues to non_qos_queues (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Offload extended packet number(XPN) feature (Sai Krishna) [RHEL-23617]
  - macsec: Use helper macsec_netdev_priv for offload drivers (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Do not reset PN while updating secy (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Fix shared counters logic (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Clear stats before freeing resource (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Match macsec ethertype along with DMAC (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Fix NULL pointer dereferences (Sai Krishna) [RHEL-23617]
  - octeontx2-af: add mbox to return CPT_AF_FLT_INT info (Sai Krishna) [RHEL-23617]
  - octeontx2-af: update cpt lf alloc mailbox (Sai Krishna) [RHEL-23617]
  - octeontx2-af: restore rxc conf after teardown sequence (Sai Krishna) [RHEL-23617]
  - octeontx2-af: optimize cpt pf identification (Sai Krishna) [RHEL-23617]
  - octeontx2-af: modify FLR sequence for CPT (Sai Krishna) [RHEL-23617]
  - octeontx2-af: recover CPT engine when it gets fault (Sai Krishna) [RHEL-23617]
  - octeontx2-af: update CPT inbound inline IPsec config mailbox (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: Remove duplicate MACSEC setting (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: fix build error when CONFIG_OCTEONTX2_PF=y (Sai Krishna) [RHEL-23617]
  - net: octeontx2-pf: mcs: consider MACSEC setting (Sai Krishna) [RHEL-23617]
  - ethernet: marvell: octeontx2 Fix resource not freed after malloc (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: fix possible memory leak in otx2_probe() (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: fix missing unlock in some error paths (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: remove unneeded semicolon (Sai Krishna) [RHEL-23617]
  - octeontx2-pf: mcs: Introduce MACSEC hardware offloading (Sai Krishna) [RHEL-23617]
  - ice: stop storing XDP verdict within ice_rx_buf (Petr Oros) [RHEL-65102]
  - ice: gather page_count()'s of each frag right before XDP prog call (Petr Oros) [RHEL-65102]
  - ice: put Rx buffers after being done with current frame (Petr Oros) [RHEL-65102]
  - wifi: iwlwifi: bump FW API to 94 for BZ/SC devices (CKI Backport Bot) [RHEL-74377]
  - net: add reserved fields to psample_metadata (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to ethtool_keee (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to page_pool_stats and page_pool_params (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to devlink_ops (Sabrina Dubroca) [RHEL-60372]
  - Revert "net: exclude TC from kABI" (Sabrina Dubroca) [RHEL-60372]
  - Revert "net: exclude BPF/XDP from kABI" (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to kernel_hwtstamp_config (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to ip_tunnel_parm_kern (Sabrina Dubroca) [RHEL-60372]
  - net: add reserved fields to netdev_stat_ops and netdev_queue_mgmt_ops (Sabrina Dubroca) [RHEL-60372]
  - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73912]
  - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73270]
  - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73270]
  - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73270]
  - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73270]
  - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73270]
  - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73270]
  - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73270] {CVE-2024-40937}
  - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73270]
  - EDAC/igen6: Add Intel Meteor Lake-P SoCs support (Joel Savitz) [RHEL-53588]
  - EDAC/igen6: Add Intel Meteor Lake-PS SoCs support (Joel Savitz) [RHEL-53588]
  - EDAC/igen6: Add Intel Raptor Lake-P SoCs support (Joel Savitz) [RHEL-53588]
  - EDAC/igen6: Add Intel Alder Lake-N SoCs support (Joel Savitz) [RHEL-53588]
  - EDAC/igen6: Make get_mchbar() helper function (Joel Savitz) [RHEL-53588]
  - Revert "net: wwan: mark Qualcomm driver as tech preview" (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - Revert "net: wwan: mark t7xx driver as tech preview" (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - Revert "net: wwan: mark iosm driver as tech preview" (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc() (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: fix global oob in wwan_rtnl_policy (Jose Ignacio Tornos Martinez) [RHEL-66001 RHEL-67116] {CVE-2024-50128}
  - net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable() (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: t7xx: PCIe reset rescan (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: t7xx: add support for Dell DW5933e (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: mhi: make default data link id configurable (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - net: wwan: t7xx: Un-embed dummy device (Jose Ignacio Tornos Martinez) [RHEL-67116]
  - HID: bpf: drop unneeded casts discarding const (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: fix kfunc inclusions with newer bpftool (Benjamin Tissoires) [RHEL-53898]
  - Input: fix regression when re-registering input handlers (Benjamin Tissoires) [RHEL-53898]
  - HID: Ignore battery for all ELAN I2C-HID devices (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: fix cfi stubs for hid_bpf_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Hardcode (non-inverted) AES pens as BTN_TOOL_PEN (Benjamin Tissoires) [RHEL-53898]
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add support for B2402FVA track point (Benjamin Tissoires) [RHEL-53898]
  - HID: core: zero-initialize the report buffer (Benjamin Tissoires) [RHEL-53898]
  - selftest: hid: add the missing tests directory (Benjamin Tissoires) [RHEL-53898]
  - HID: plantronics: Workaround for an unexcepted opposite volume key (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (Benjamin Tissoires) [RHEL-53898 RHEL-66678] {CVE-2024-50189}
  - selftest: hid: add missing run-hid-tools-tests.sh (Benjamin Tissoires) [RHEL-53898]
  - HID: i2c-hid: ensure various commands do not interfere with each other (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Do not warn about dropped packets for first packet (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Support sequence numbers smaller than 16-bit (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Defer calculation of resolution until resolution_code is known (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: more appropriate tool type categorization (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Modify pen IDs (Benjamin Tissoires) [RHEL-53898]
  - HID: multitouch: Add support for GT7868Q (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: free driver_data after destroying hid device (Benjamin Tissoires) [RHEL-53898] {CVE-2024-46746}
  - hid-asus: add ROG Ally X prod ID to quirk list (Benjamin Tissoires) [RHEL-53898]
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Benjamin Tissoires) [RHEL-53898 RHEL-59317] {CVE-2024-46747}
  - selftests/hid: add test for attaching multiple time the same struct_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: prevent the same struct_ops to be attached more than once (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: disable struct_ops auto-attach (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: fix bpf_wq new API (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Move sensor discovery before HID device initialization (Benjamin Tissoires) [RHEL-53898]
  - hid: bpf: add BPF_JIT dependency (Benjamin Tissoires) [RHEL-53898]
  - Merge tag 'for-linus-2024071601' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-steam: Fix typo in goto label (Benjamin Tissoires) [RHEL-53898]
  - HID: mcp2221: Remove unnecessary semicolon (Benjamin Tissoires) [RHEL-53898]
  - HID: Fix spelling mistakes "Kensigton" -> "Kensington" (Benjamin Tissoires) [RHEL-53898]
  - HID: add more missing MODULE_DESCRIPTION() macros (Benjamin Tissoires) [RHEL-53898]
  - HID: samples: fix the 2 struct_ops definitions (Benjamin Tissoires) [RHEL-53898]
  - HID: apple: Add support for magic keyboard backlight on T2 Macs (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: doc fixes for hid_hw_request() hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: doc fixes for hid_hw_request() hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: fix gcc warning and unify __u64 into u64 (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: ensure CKI can compile our new tests on old kernels (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add an infinite loop test for hid_bpf_try_input_report (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add another test for injecting an event from an event hook (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: allow hid_device_event hooks to inject input reports on self (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add wq test for hid_bpf_input_report() (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: make hid_bpf_input_report() sleep until the device is ready (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add tests for hid_hw_output_report HID-BPF hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: add HID-BPF hooks for hid_hw_output_report (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add tests for hid_hw_raw_request HID-BPF hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: prevent infinite recursions with hid_hw_raw_requests hooks (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: add HID-BPF hooks for hid_hw_raw_requests (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: protect HID-BPF prog_list access by a SRCU (Benjamin Tissoires) [RHEL-53898]
  - HID: add source argument to HID low level functions (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: fix dispatch_hid_bpf_device_event uninitialized ret value (Benjamin Tissoires) [RHEL-53898]
  - HID: uclogic: Add module description (Benjamin Tissoires) [RHEL-53898]
  - HID: uclogic: Avoid linking common code into multiple modules (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: make part of struct hid_device writable (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: rework hid_bpf_ops_btf_struct_access (Benjamin Tissoires) [RHEL-53898]
  - bpf: allow bpf helpers to be used into HID-BPF struct_ops (Benjamin Tissoires) [RHEL-53898]
  - Documentation: HID: add a small blurb on udev-hid-bpf (Benjamin Tissoires) [RHEL-53898]
  - Documentation: HID: amend HID-BPF for struct_ops (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add subprog call test (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: remove tracing HID-BPF capability (Benjamin Tissoires) [RHEL-53898]
  - HID: samples: convert the 2 HID-BPF samples into struct_ops (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: convert the hid_bpf selftests with struct_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: implement HID-BPF through bpf_struct_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: add hid_get/put_device() helpers (Benjamin Tissoires) [RHEL-53898]
  - HID: rename struct hid_bpf_ops into hid_ops (Benjamin Tissoires) [RHEL-53898]
  - HID: Ignore battery for ELAN touchscreens 2F2C and 4116 (Benjamin Tissoires) [RHEL-53898]
  - HID: i2c-hid: elan: fix reset suspend current leakage (Benjamin Tissoires) [RHEL-53898]
  - hid: asus: asus_report_fixup: fix potential read out of bounds (Benjamin Tissoires) [RHEL-53898]
  - HID: add missing MODULE_DESCRIPTION() macros (Benjamin Tissoires) [RHEL-53898]
  - HID: logitech-dj: add missing MODULE_DESCRIPTION() macro (Benjamin Tissoires) [RHEL-53898]
  - HID: lg-g15: add missing MODULE_DESCRIPTION() macro (Benjamin Tissoires) [RHEL-53898]
  - HID: letsketch: add missing MODULE_DESCRIPTION() macro (Benjamin Tissoires) [RHEL-53898]
  - HID: usbhid: Share USB device firmware node with child HID device (Benjamin Tissoires) [RHEL-53898]
  - HID: logitech-hidpp: add missing MODULE_DESCRIPTION() macro (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: Fix an error handling path in nintendo_hid_probe() (Benjamin Tissoires) [RHEL-53898]
  - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() (Benjamin Tissoires) [RHEL-53898] {CVE-2024-40934}
  - HID: uclogic: Use Rx and Ry for touch strips (Benjamin Tissoires) [RHEL-53898]
  - HID: uclogic: Support HUION devices with up to 20 buttons (Benjamin Tissoires) [RHEL-53898]
  - HID: Use kvzalloc instead of kzalloc in hid_register_field() (Benjamin Tissoires) [RHEL-53898]
  - HID: core: remove unnecessary WARN_ON() in implement() (Benjamin Tissoires) [RHEL-53898] {CVE-2024-39509}
  - selftests/hid: skip tests with HID-BPF if udev-hid-bpf is not installed (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add tests for the Raptor Mach 2 joystick (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: move the gamepads definitions in the test file (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: import base_gamepad.py from hid-tools (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add Huion Kamvas Pro 19 tests (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: tablets: also check for XP-Pen offset correction (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: tablets: add a couple of XP-PEN tablets (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: tablets: reduce the number of pen state (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add support for HID-BPF pre-loading before starting a test (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: import base_device.py from hid-tools (Benjamin Tissoires) [RHEL-53898]
  - HID: do not assume HAT Switch logical max < 8 (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Use amd_get_c2p_val() to read C2P register (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Modify and log error only if case of functionality failures (Benjamin Tissoires) [RHEL-53898]
  - HID: kye: Change Device Usage from Puck to Mouse (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Fix calibration workaround for clone devices (Benjamin Tissoires) [RHEL-53898]
  - HID: i2c-hid: Retry address probe after delay (Benjamin Tissoires) [RHEL-53898]
  - HID: asus: add ROG Z13 lightbar (Benjamin Tissoires) [RHEL-53898]
  - HID: asus: add ROG Ally N-Key ID and keycodes (Benjamin Tissoires) [RHEL-53898]
  - HID: asus: make asus_kbd_init() generic, remove rog_nkey_led_init() (Benjamin Tissoires) [RHEL-53898]
  - HID: asus: fix more n-key report descriptors if n-key quirked (Benjamin Tissoires) [RHEL-53898]
  - HID: logitech: add a few Logitech HID++ device IDs (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-debug: add EV_FF and FF_STATUS mappings (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-debug: more informative output for EV_KEY (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-debug: fix Moir -> Moire typo (Benjamin Tissoires) [RHEL-53898]
  - HID: Add quirk for Logitech Casa touchpad (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-steam: Add Deck IMU support (Benjamin Tissoires) [RHEL-53898]
  - HID: sony: remove redundant assignment (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: Remove unused function (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: fix hid_bpf_input_report() when hid-core is not ready (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: allow to use bpf_timer_set_sleepable_cb() in tracing callbacks. (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add tests for hid_bpf_input_report (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: allow to inject HID event from BPF (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: Add test for hid_bpf_hw_output_report (Benjamin Tissoires) [RHEL-53898]
  - selftests/hid: add KASAN to the VM tests (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf: export hid_hw_output_report as a BPF kfunc (Benjamin Tissoires) [RHEL-53898]
  - HID: bpf/dispatch: regroup kfuncs definitions (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: Simplify device type ID (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Parse minimal report 0x01 (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Don't fail on calibration data request (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Don't fail on FW/HW version request (Benjamin Tissoires) [RHEL-53898]
  - HID: playstation: DS4: Fix LED blinking (Benjamin Tissoires) [RHEL-53898]
  - HID: uclogic: Expose firmware name (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-debug: add missing evdev and HID codes (Benjamin Tissoires) [RHEL-53898]
  - HID: corsair,lenovo: Convert sprintf() family to sysfs_emit() family (Benjamin Tissoires) [RHEL-53898]
  - HID: roccat: Convert sprintf() family to sysfs_emit() family (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-sensor-custom: Convert sprintf() family to sysfs_emit() family (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-picolcd*: Convert sprintf() family to sysfs_emit() family (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: Don't fail on setting baud rate (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: use ida for LED player id (Benjamin Tissoires) [RHEL-53898]
  - HID: surface-hid: kbd: Convert to platform remove callback returning void (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-sensor-custom: Convert to platform remove callback returning void (Benjamin Tissoires) [RHEL-53898]
  - HID: google: hammer: Convert to platform remove callback returning void (Benjamin Tissoires) [RHEL-53898]
  - hid: hid-picolcd: Remove struct backlight_ops.check_fb (Benjamin Tissoires) [RHEL-53898]
  - hid: hid-picolcd: Fix initialization order (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Set the AMD SFH driver to depend on x86 (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Extend MP2 register access to SFH (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Improve boot time when SFH is available (Benjamin Tissoires) [RHEL-53898]
  - HID: amd_sfh: Increase sensor command timeout (Benjamin Tissoires) [RHEL-53898]
  - HID: nintendo: Remove some unused functions (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-prodikeys: remove struct pk_device (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-prodikeys: remove unused struct pcmidi_snd members (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-multitouch: remove unused mt_application::dev_time (Benjamin Tissoires) [RHEL-53898]
  - HID: hid-lg3ff: remove unused struct lg3ff_device (Benjamin Tissoires) [RHEL-53898]
  - HID: protect hid_device::bpf by CONFIG_HID_BPF (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: remove unused hid_data::pressure (Benjamin Tissoires) [RHEL-53898]
  - HID: apple: remove unused members from struct apple_sc_backlight (Benjamin Tissoires) [RHEL-53898]
  - HID: wacom: Clean up use of struct->wacom_wac (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Add Samsung wireless bookcover and universal keyboard support (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Add Samsung wireless action mouse support (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Add Samsung wireless gamepad support (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Add Samsung wireless keyboard support (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Rewrite rdesc checking code using memcmp() (Benjamin Tissoires) [RHEL-53898]
  - HID: samsung: Broaden device compatibility in samsung driver (Benjamin Tissoires) [RHEL-53898]
  - input: Add support for "Do Not Disturb" (Benjamin Tissoires) [RHEL-53898]
  - input: Add event code for accessibility key (Benjamin Tissoires) [RHEL-53898]
  - Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination (Benjamin Tissoires) [RHEL-53898]
  - Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3 (Benjamin Tissoires) [RHEL-53898]
  - Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table (Benjamin Tissoires) [RHEL-53898]
  - Input: uinput - reject requests with unreasonable number of slots (Benjamin Tissoires) [RHEL-53898 RHEL-59311] {CVE-2024-46745}
  - Input: MT - limit max slots (Benjamin Tissoires) [RHEL-53898] {CVE-2024-45008}
  - Input: synaptics - enable SMBus for HP Elitebook 840 G2 (Benjamin Tissoires) [RHEL-53898]
  - Input: do not check number of events in input_pass_values() (Benjamin Tissoires) [RHEL-53898]
  - Input: preallocate memory to hold event values (Benjamin Tissoires) [RHEL-53898]
  - Input: rearrange input_alloc_device() to prepare for preallocating of vals (Benjamin Tissoires) [RHEL-53898]
  - Input: simplify event handling logic (Benjamin Tissoires) [RHEL-53898]
  - Input: make events() method return number of events processed (Benjamin Tissoires) [RHEL-53898]
  - Input: make sure input handlers define only one processing method (Benjamin Tissoires) [RHEL-53898]
  - Input: evdev - remove ->event() method (Benjamin Tissoires) [RHEL-53898]
  - Input: elan_i2c - do not leave interrupt disabled on suspend failure (Benjamin Tissoires) [RHEL-53898]
  - coresight: Make trace ID map spinlock local to the map (Mark Salter) [RHEL-21456]
  - coresight: Emit sink ID in the HW_ID packets (Mark Salter) [RHEL-21456]
  - coresight: Remove pending trace ID release mechanism (Mark Salter) [RHEL-21456]
  - coresight: Use per-sink trace ID maps for Perf sessions (Mark Salter) [RHEL-21456]
  - coresight: Make CPU id map a property of a trace ID map (Mark Salter) [RHEL-21456]
  - coresight: Expose map arguments in trace ID API (Mark Salter) [RHEL-21456]
  - coresight: Move struct coresight_trace_id_map to common header (Mark Salter) [RHEL-21456]
  - coresight: Clarify comments around the PID of the sink owner (Mark Salter) [RHEL-21456]
  - coresight: Remove unused ETM Perf stubs (Mark Salter) [RHEL-21456]
  - coresight: tmc: sg: Do not leak sg_table (Mark Salter) [RHEL-21456]
  - Coresight: Set correct cs_mode for dummy source to fix disable issue (Mark Salter) [RHEL-21456]
  - Coresight: Set correct cs_mode for TPDM to fix disable issue (Mark Salter) [RHEL-21456]
  - device property: Don't use "proxy" headers (Mark Salter) [RHEL-21456]
  - device property: Replace custom implementation of COUNT_ARGS() (Mark Salter) [RHEL-21456]
  - device property: Move enum dev_dma_attr to fwnode.h (Mark Salter) [RHEL-21456]
  - hwtracing: use for_each_endpoint_of_node() (Mark Salter) [RHEL-21456]
  - coresight: constify the struct device_type usage (Mark Salter) [RHEL-21456]
  - coresight: tmc: Remove duplicated include in coresight-tmc-core.c (Mark Salter) [RHEL-21456]
  - coresight: Fix ref leak when of_coresight_parse_endpoint() fails (Mark Salter) [RHEL-21456]
  - coresight: tmc: Enable SG capability on ACPI based SoC-400 TMC ETR devices (Mark Salter) [RHEL-21456]
  - coresight: Docs/ABI/testing/sysfs-bus-coresight-devices: Fix spelling errors (Mark Salter) [RHEL-21456]
  - coresight: tpiu: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: tmc: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: stm: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: debug: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: Remove duplicate linux/amba/bus.h header (Mark Salter) [RHEL-21456]
  - coresight: stm: Remove duplicate linux/acpi.h header (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix access to resource selector registers (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Safe access for TRCQCLTR (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Do not save/restore Data trace control registers (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Do not hardcode IOMEM access for register restore (Mark Salter) [RHEL-21456]
  - coresight: debug: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: stm: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: tmc: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: tpiu: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: catu: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: funnel: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: replicator: Move ACPI support from AMBA driver to platform driver (Mark Salter) [RHEL-21456]
  - coresight: Add helpers registering/removing both AMBA and platform drivers (Mark Salter) [RHEL-21456]
  - coresight: tmc: Extract device properties from AMBA pid based table lookup (Mark Salter) [RHEL-21456]
  - coresight: stm: Extract device name from AMBA pid based table lookup (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix unbalanced pm_runtime_enable() (Mark Salter) [RHEL-21456]
  - ARM: 9379/1: coresight: tpda: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9378/1: coresight: etm4x: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9376/1: coresight: tpdm: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9375/1: coresight: stm: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9374/1: coresight: etb10: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9373/1: coresight: funnel: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9371/1: coresight: cti: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9366/1: coresight: tpiu: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9365/1: coresight: tmc: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9364/1: coresight: replicator: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9363/1: coresight: etm3x: drop owner assignment (Mark Salter) [RHEL-21456]
  - ARM: 9362/1: coresight: catu: drop owner assignment (Mark Salter) [RHEL-21456]
  - coresight-tpda: Change qcom,dsb-element-size to qcom,dsb-elem-bits (Mark Salter) [RHEL-21456]
  - coresight: tpdm: Fix build break due to uninitialised field (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Set skip_power_up in etm4_init_arch_data function (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add msr register support for CMB (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add timestamp control register support for the CMB (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add pattern registers support for CMB (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add support to configure CMB (Mark Salter) [RHEL-21456]
  - coresight-tpda: Add support to configure CMB element (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add CMB dataset support (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Optimize the useage of tpdm_has_dsb_dataset (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Optimize the store function of tpdm simple dataset (Mark Salter) [RHEL-21456]
  - coresight: Add helper for setting csdev->mode (Mark Salter) [RHEL-21456]
  - coresight: Add a helper for getting csdev->mode (Mark Salter) [RHEL-21456]
  - coresight: Add helper for atomically taking the device (Mark Salter) [RHEL-21456]
  - coresight: Add explicit member initializers to coresight_dev_type (Mark Salter) [RHEL-21456]
  - coresight: Remove unused stubs (Mark Salter) [RHEL-21456]
  - coresight: Remove atomic type from refcnt (Mark Salter) [RHEL-21456]
  - coresight: Move all sysfs code to sysfs file (Mark Salter) [RHEL-21456]
  - coresight: Remove the 'enable' field. (Mark Salter) [RHEL-21456]
  - coresight: Move mode to struct coresight_device (Mark Salter) [RHEL-21456]
  - coresight: Remove ops callback checks (Mark Salter) [RHEL-21456]
  - coresight: Make language around "activated" sinks consistent (Mark Salter) [RHEL-21456]
  - coresight: make coresight_bustype const (Mark Salter) [RHEL-21456]
  - coresight: Fix undeclared variable warnings from sparse checker (Mark Salter) [RHEL-21456]
  - coresight: etm3x: Fix build warning (Mark Salter) [RHEL-21456]
  - coresight: Fix uninitialized struct warnings (Mark Salter) [RHEL-21456]
  - coresight: Fix issue where a source device's helpers aren't disabled (Mark Salter) [RHEL-21456]
  - redhat/configs: add new coresight configs (Mark Salter) [RHEL-21456]
  - redhat/configs: add CONFIG_ULTRASOC_SMB as disabled (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Use guards to cleanup (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: trbe: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: replicator: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: funnel: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: dummy: Convert to platform remove callback returning void (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix width of CCITMIN field (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Correct the property name of MSR number (Mark Salter) [RHEL-21456]
  - Documentation: ABI: coresight-tpdm: Fix Bit[3] description indentation (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes for dsb msr support (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes for timestamp request (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes to configure pattern match output (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes for dsb edge control (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add node to set dsb programming mode (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add nodes to set trigger timestamp and type (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add reset node to TPDM node (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Initialize DSB subunit configuration (Mark Salter) [RHEL-21456]
  - coresight-tpda: Add DSB dataset support (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Introduce TPDM subtype to TPDM driver (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Remove the unnecessary lock (Mark Salter) [RHEL-21456]
  - coresight: tmc: Make etr buffer mode user configurable from sysfs (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Add cc_threshold tunable (Mark Salter) [RHEL-21456]
  - coresight: etm: Make cycle count threshold user configurable (Mark Salter) [RHEL-21456]
  - coresight: etm: Override TRCIDR3.CCITMIN on errata affected cpus (Mark Salter) [RHEL-21456]
  - coresight: trbe: Enable ACPI based TRBE devices (Mark Salter) [RHEL-21456]
  - coresight: trbe: Add a representative coresight_platform_data for TRBE (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Fix uninitialized before use buf_hw_base (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Config SMB buffer before register sink (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: Fix sleep while close preempt in enable_smb (Mark Salter) [RHEL-21456]
  - Documentation: coresight: fix `make refcheckdocs` warning (Mark Salter) [RHEL-21456]
  - coresight: Fix crash when Perf and sysfs modes are used concurrently (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Remove bogous __exit annotation for some functions (Mark Salter) [RHEL-21456]
  - coresight: tmc-etr: Disable warnings for allocation failures (Mark Salter) [RHEL-21456]
  - coresight: Fix run time warnings while reusing ETR buffer (Mark Salter) [RHEL-21456]
  - coresight: trbe: Fix TRBE potential sleep in atomic context (Mark Salter) [RHEL-21456]
  - coresight: Fix memory leak in acpi_buffer->pointer (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Ensure valid drvdata and clock before clk_put() (Mark Salter) [RHEL-21456]
  - coresight: trbe: Allocate platform data per device (Mark Salter) [RHEL-21456]
  - coresight: dummy: simplify the code with module_platform_driver (Mark Salter) [RHEL-21456]
  - coresight: tmc: Explicit type conversions to prevent integer overflow (Mark Salter) [RHEL-21456]
  - coresight: trbe: Directly use ID_AA64DFR0_EL1_TraceBuffer_IMP (Mark Salter) [RHEL-21456]
  - coresight: Fix all W=1 build warnings (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Add ACPI support in platform driver (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Change etm4_platform_driver driver for MMIO devices (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Drop pid argument from etm4_probe() (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Drop iomem 'base' argument from etm4_probe() (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Allocate and device assign 'struct etmv4_drvdata' earlier (Mark Salter) [RHEL-21456]
  - hwtracing: coresight: Explicitly include correct DT includes (Mark Salter) [RHEL-21456]
  - coresight: dummy: Update type of mode parameter in dummy_{sink,source}_enable() (Mark Salter) [RHEL-21456]
  - Documentation: trace: Add documentation for Coresight Dummy Trace (Mark Salter) [RHEL-21456]
  - Coresight: Add coresight dummy driver (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Match all ETM4 instances based on DEVARCH and DEVTYPE (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Make etm4_remove_dev() return void (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix missing trctraceidr file in sysfs (Mark Salter) [RHEL-21456]
  - coresight: Fix CTI module refcount leak by making it a helper device (Mark Salter) [RHEL-21456]
  - coresight: Enable and disable helper devices adjacent to the path (Mark Salter) [RHEL-21456]
  - coresight: Refactor out buffer allocation function for ETR (Mark Salter) [RHEL-21456]
  - coresight: Make refcount a property of the connection (Mark Salter) [RHEL-21456]
  - coresight: Store in-connections as well as out-connections (Mark Salter) [RHEL-21456]
  - coresight: Simplify connection fixup mechanism (Mark Salter) [RHEL-21456]
  - coresight: Store pointers to connections rather than an array of them (Mark Salter) [RHEL-21456]
  - coresight: Dynamically add connections (Mark Salter) [RHEL-21456]
  - coresight: Rename connection members to make the direction explicit (Mark Salter) [RHEL-21456]
  - coresight: Rename nr_outports to nr_outconns (Mark Salter) [RHEL-21456]
  - coresight: Change name of pdata->conns (Mark Salter) [RHEL-21456]
  - coresight: Use enum type for cs_mode wherever possible (Mark Salter) [RHEL-21456]
  - coresight: Fix loss of connection info when a module is unloaded (Mark Salter) [RHEL-21456]
  - coresight: perf: Release Coresight path when alloc trace id failed (Mark Salter) [RHEL-21456]
  - coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() (Mark Salter) [RHEL-21456]
  - coresight: etm_pmu: Set the module field (Mark Salter) [RHEL-21456]
  - MAINTAINERS: Remove Mathieu Poirier as coresight maintainer (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Do not access TRCIDR1 for identification (Mark Salter) [RHEL-21456]
  - coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug (Mark Salter) [RHEL-21456]
  - coresight: tmc: Don't enable TMC when it's not ready. (Mark Salter) [RHEL-21456]
  - coresight: tpda: fix return value check in tpda_probe() (Mark Salter) [RHEL-21456]
  - Coresight: tpda/tpdm: remove incorrect __exit annotation (Mark Salter) [RHEL-21456]
  - coresight: perf: Output trace id only once (Mark Salter) [RHEL-21456]
  - coresight: Fix uninitialised variable use in coresight_disable (Mark Salter) [RHEL-21456]
  - Documentation: coresight: tpdm: Add dummy comment after sysfs list (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Extend title heading syntax in TPDM and TPDA documentation (Mark Salter) [RHEL-21456]
  - Documentation: trace: Add documentation for TPDM and TPDA (Mark Salter) [RHEL-21456]
  - Coresight: Add TPDA link driver (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add integration test support (Mark Salter) [RHEL-21456]
  - coresight-tpdm: Add DSB dataset support (Mark Salter) [RHEL-21456]
  - Coresight: Add coresight TPDM source driver (Mark Salter) [RHEL-21456]
  - coresight: core: Use IDR for non-cpu bound sources' paths. (Mark Salter) [RHEL-21456]
  - coresight: trace-id: Add debug & test macros to Trace ID allocation (Mark Salter) [RHEL-21456]
  - coresight: events: PERF_RECORD_AUX_OUTPUT_HW_ID used for Trace ID (Mark Salter) [RHEL-21456]
  - coresight: trace id: Remove legacy get trace ID function. (Mark Salter) [RHEL-21456]
  - coresight: etmX.X: stm: Remove trace_id() callback (Mark Salter) [RHEL-21456]
  - coresight: etm3x: Update ETM3 driver to use Trace ID API (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Update ETM4 driver to use Trace ID API (Mark Salter) [RHEL-21456]
  - coresight: stm: Update STM driver to use Trace ID API (Mark Salter) [RHEL-21456]
  - coresight: perf: traceid: Add perf ID allocation and notifiers (Mark Salter) [RHEL-21456]
  - coresight: Remove obsolete Trace ID unniqueness checks (Mark Salter) [RHEL-21456]
  - coresight: trace-id: Add API to dynamically assign Trace ID values (Mark Salter) [RHEL-21456]
  - coresight: ultrasoc-smb: fix return value check in smb_init_data_buffer() (Mark Salter) [RHEL-21456]
  - Documentation: Add document for UltraSoc SMB driver (Mark Salter) [RHEL-21456]
  - drivers/coresight: Add UltraSoc System Memory Buffer driver (Mark Salter) [RHEL-21456]
  - coresight: cti: Remove atomic type from enable_req_count (Mark Salter) [RHEL-21456]
  - coresight: cti: Add PM runtime call in enable_store (Mark Salter) [RHEL-21456]
  - coresight: cti: Prevent negative values of enable count (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR (Mark Salter) [RHEL-21456]
  - coresight: etm4x: fix repeated words in comments (Mark Salter) [RHEL-21456]
  - coresight: cti: Fix null pointer error on CTI init before ETM (Mark Salter) [RHEL-21456]
  - coresight: trbe: remove cpuhp instance node before remove cpuhp state (Mark Salter) [RHEL-21456]
  - coresight: etm4x: add CPU hotplug support for probing (Mark Salter) [RHEL-21456]
  - coresight: cti: Fix hang in cti_disable_hw() (Mark Salter) [RHEL-21456]
  - coresight: Fix possible deadlock with lock dependency (Mark Salter) [RHEL-21456]
  - coresight: cti-sysfs: Mark coresight_cti_reg_store() as __maybe_unused (Mark Salter) [RHEL-21456]
  - coresight: Make new csdev_access offsets unsigned (Mark Salter) [RHEL-21456]
  - coresight: cti-sysfs: Re-use same functions for similar sysfs register accessors (Mark Salter) [RHEL-21456]
  - coresight: Re-use same function for similar sysfs register accessors (Mark Salter) [RHEL-21456]
  - coresight: Simplify sysfs accessors by using csdev_access abstraction (Mark Salter) [RHEL-21456]
  - coresight: Remove unused function parameter (Mark Salter) [RHEL-21456]
  - coresight: etm4x: docs: Add documentation for 'ts_source' sysfs interface (Mark Salter) [RHEL-21456]
  - coresight: etm4x: Expose default timestamp source in sysfs (Mark Salter) [RHEL-21456]
  - coresight: docs: Fix a broken reference (Mark Salter) [RHEL-21456]
  - coresight: trbe: fix Kconfig "its" grammar (Mark Salter) [RHEL-21456]
  - coresight: etm4x: avoid build failure with unrolled loops (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Expand branch broadcast documentation (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Link config options to existing documentation (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Turn numbered subsections into real subsections (Mark Salter) [RHEL-21456]
  - coresight: Add config flag to enable branch broadcast (Mark Salter) [RHEL-21456]
  - Documentation: coresight: Escape coresight bindings file wildcard (Mark Salter) [RHEL-21456]
  - dt-bindings: arm: Convert CoreSight CPU debug to DT schema (Mark Salter) [RHEL-21456]
  - dt-bindings: arm: Convert CoreSight bindings to DT schema (Mark Salter) [RHEL-21456]
  - dt-bindings: arm: Rename Coresight filenames to match compatible (Mark Salter) [RHEL-21456]
  - coresight: Clear the connection field properly (Mark Salter) [RHEL-21456]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-564.el9]
changelog:
  - tg3: Disable tg3 PCIe AER on system reboot (Lenny Szubowicz) [RHEL-63747]
  - of: Add for_each_reserved_child_of_node() (Radu Rendec) [RHEL-77190]
  - of: Add of_get_next_status_child() and makes more generic of_get_next (Radu Rendec) [RHEL-77190]
  - of: Add __of_device_is_status() and makes more generic status check (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Fix 'soc' node handling in cpg_mssr_reserved_init() (Radu Rendec) [RHEL-77190]
  - clk: Use of_property_present() (Radu Rendec) [RHEL-77190]
  - clk: renesas: mstp: Remove obsolete clkdev registration (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Ignore all clocks assigned to non-Linux system (Radu Rendec) [RHEL-77190]
  - clk: renesas: mstp: Convert to readl_poll_timeout_atomic() (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Convert to readl_poll_timeout_atomic() (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Remove superfluous check in resume code (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Remove unused default PLL2/3/4/6 configs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Remove unused fixed PLL clock types (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Remove unused variable PLL2 clock type (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779f0: Model PLL1/2/3/6 as fractional PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Use defines for PLL control registers (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for fractional 9.24 PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for fixed variable PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for variable fractional PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for fractional multiplication (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Use defines for common CPG registers (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Add the DSI clocks (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Add the DU clock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779f0: cpg_pll_configs should be __initconst (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: cpg_pll_configs should be __initconst (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Fix CANFD parent clock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Add PWM clock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Tidy up DMAC name on SYS-DMAC (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Use FIELD_GET() (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Clarify custom PLL clock support (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Removed unused SSMODE_* definitions (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Restore PLL enum sort order (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen2: Use DEFINE_SPINLOCK() for static spinlock (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-lib: Use DEFINE_SPINLOCK() for global spinlock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a77970: Use common cpg_lock (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for FRQCRC1 (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779g0: Add custom clock for PLL2 (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Fix initconst confusion for cpg_pll_config (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: propagate return value of_genpd_add_provider_simple() (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Check return value of pm_genpd_init() (Radu Rendec) [RHEL-77190]
  - nfp: use irq_update_affinity_hint() (Mohammad Heib) [RHEL-40873]
  - PCI: imx6: Fix suspend/resume support on i.MX6QDL (Myron Stowe) [RHEL-73709] {CVE-2024-57809}
  - PCI: dwc: Rename 'dw_pcie::link_gen' to 'dw_pcie::max_link_speed' (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Add i.MX8Q PCIe Root Complex (RC) support (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Call common PHY API to set mode, speed, and submode (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Consolidate redundant if-checks (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Improve comment for workaround ERR010728 (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Simplify switch-case logic by involve core_reset callback (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Introduce SoC specific callbacks for controlling REFCLK (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Rename imx6_* with imx_* (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Fix missing call to phy_power_off() in error handling (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Fix i.MX8MP PCIe EP's occasional failure to trigger MSI (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Fix establish link failure in EP mode for i.MX8MM and i.MX8MP (Myron Stowe) [RHEL-73709]
  - PCI/MSI: Handle lack of irqdomain gracefully (Myron Stowe) [RHEL-72850] {CVE-2024-56760}
  - PCI: Fix use-after-free of slot->bus on hot remove (Myron Stowe) [RHEL-72370] {CVE-2024-53194}
  - PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert() (Myron Stowe) [RHEL-72122] {CVE-2024-53152}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-565.el9]
changelog:
  - net: renesas: rswitch: add mdio C22 support (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: use generic MPSM operation for mdio C45 (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: align mdio C45 operations with datasheet (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: use FIELD_PREP for remaining MPIC register fields (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: do not write to MPSM register at init time (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: remove speed from gwca structure (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: do not deinit disabled ports (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: rework ts tags management (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix initial MPIC register setting (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: enable only used MFWD features (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: handle stop vs interrupt race (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: avoid use-after-put for a device tree node (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix leaked pointer on error path (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix race window between tx start and complete (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix possible early skb release (Radu Rendec) [RHEL-78074]
  - net: mdiobus: fix an OF node reference leak (Jared Kangas) [RHEL-78049]
  - net: mdiobus: Debug print fwnode handle instead of raw pointer (Jared Kangas) [RHEL-78049]
  - net: mdiobus: Convert to use fwnode_device_is_compatible() (Jared Kangas) [RHEL-78049]
  - Revert "kbuild: use $(src) instead of $(srctree)/$(src) for source directory" (Jocelyn Falempe) [RHEL-76500]
  - PM: hibernate: Use kernel_can_power_off() (Maxim Levitsky) [RHEL-63107]
  - Bluetooth: btmtk: avoid UAF in btmtk_process_coredump (CKI Backport Bot) [RHEL-75872] {CVE-2024-56653}
  - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (CKI Backport Bot) [RHEL-75848] {CVE-2024-53208}
  - Bluetooth: fix use-after-free in device_for_each_child() (CKI Backport Bot) [RHEL-75844] {CVE-2024-53237}
  - KVM: arm64: Fix set_id_regs selftest for ASIDBITS becoming unwritable (Eric Auger) [RHEL-75792]
  - KVM: arm64: selftests: Add tests for MMIO external abort injection (Eric Auger) [RHEL-75792]
  - KVM: arm64: selftests: Convert to kernel's ESR terminology (Eric Auger) [RHEL-75792]
  - tools: arm64: Grab a copy of esr.h from kernel (Eric Auger) [RHEL-75792]
  - KVM: arm64: vgic-its: Add error handling in vgic_its_cache_translation (Eric Auger) [RHEL-75792]
  - KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden (Eric Auger) [RHEL-75792]
  - KVM: arm64: vgic: Don't check for vgic_ready() when setting NR_IRQS (Eric Auger) [RHEL-75792]
  - KVM: selftests: aarch64: Add writable test for ID_AA64PFR1_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Allow userspace to change ID_AA64PFR1_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Use kvm_has_feat() to check if FEAT_SSBS is advertised to the guest (Eric Auger) [RHEL-75792]
  - KVM: arm64: Disable fields that KVM doesn't know how to handle in ID_AA64PFR1_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Make the exposed feature bits in AA64DFR0_EL1 writable from userspace (Eric Auger) [RHEL-75792]
  - KVM: arm64: Honor trap routing for TCR2_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Initialize the hypervisor's VM state at EL2 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Refactor kvm_vcpu_enable_ptrauth() for hyp use (Eric Auger) [RHEL-75792]
  - Bluetooth: iso: Always release hdev at the end of iso_listen_bis (CKI Backport Bot) [RHEL-73635] {CVE-2024-57879}
  - xfrm: Export symbol xfrm_dev_state_delete. (Felix Maurer) [RHEL-68939]
  - xfrm: Fix unregister netdevice hang on hardware offload. (Felix Maurer) [RHEL-68939]
  - kasan: make report_lock a raw spinlock (Jared Kangas) [RHEL-70564]
  - config: wifi: enable ath12k driver (Jose Ignacio Tornos Martinez) [RHEL-37773]
  - wifi: ath12k: fix crash when unbinding (Jose Ignacio Tornos Martinez) [RHEL-37773]
  - wifi: ath12k: fix warning when unbinding (Jose Ignacio Tornos Martinez) [RHEL-37773]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-566.el9]
changelog:
  - redhat/configs: add CONFIG_CIFS_COMPRESSION (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-76046]
  - cifs: support reconnect with alternate password for SMB1 (Paulo Alcantara) [RHEL-76046]
  - smb: client: sync the root session and superblock context passwords before automounting (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove unused is_server_using_iface() (Paulo Alcantara) [RHEL-76046]
  - smb: enable reuse of deferred file handles for write operations (Paulo Alcantara) [RHEL-76046]
  - smb: use macros instead of constants for leasekey size and default cifsattrs value (Paulo Alcantara) [RHEL-76046]
  - smb: client: destroy cfid_put_wq on module exit (Paulo Alcantara) [RHEL-76046]
  - cifs: Use str_yes_no() helper in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-76046]
  - smb3: fix compiler warning in reparse code (Paulo Alcantara) [RHEL-76046]
  - smb3.1.1: fix posix mounts to older servers (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: Implement new SMB3 POSIX type (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX (Paulo Alcantara) [RHEL-76046]
  - cifs: unlock on error in smb3_reconfigure() (Paulo Alcantara) [RHEL-76046]
  - cifs: during remount, make sure passwords are in sync (Paulo Alcantara) [RHEL-76046]
  - cifs: support mounting with alternate password to allow password rotation (Paulo Alcantara) [RHEL-76046]
  - smb: During unmount, ensure all cached dir instances drop their dentry (Paulo Alcantara) [RHEL-76046] {CVE-2024-53176}
  - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of WSL reparse point buffers (Paulo Alcantara) [RHEL-76046]
  - cifs: Improve guard for excluding $LXDEV xattr (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for parsing WSL-style symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of native symlink (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix parsing native symlinks relative to the export (Paulo Alcantara) [RHEL-76046]
  - Update misleading comment in cifs_chan_update_iface (Paulo Alcantara) [RHEL-76046]
  - smb: client: change return value in open_cached_dir_by_dentry() if !cfids (Paulo Alcantara) [RHEL-76046]
  - smb: client: disable directory caching when dir_cache_timeout is zero (Paulo Alcantara) [RHEL-76046]
  - smb: client: remove unnecessary checks in open_cached_dir() (Paulo Alcantara) [RHEL-76046]
  - smb: prevent use-after-free due to open_cached_dir error paths (Paulo Alcantara) [RHEL-76046] {CVE-2024-53177}
  - smb: Don't leak cfid when reconnect races with open_cached_dir (Paulo Alcantara) [RHEL-76046] {CVE-2024-53178}
  - smb: client: handle max length for SMB symlinks (Paulo Alcantara) [RHEL-76046]
  - smb: client: get rid of bounds check in SMB2_ioctl_init() (Paulo Alcantara) [RHEL-76046]
  - smb: client: improve compound padding in encryption (Paulo Alcantara) [RHEL-76046]
  - smb3: request handle caching when caching directories (Paulo Alcantara) [RHEL-76046]
  - cifs: Recognize SFU char/block devices created by Windows NFS server on Windows Server <<2012 (Paulo Alcantara) [RHEL-76046]
  - CIFS: New mount option for cifs.upcall namespace resolution (Paulo Alcantara) [RHEL-76046]
  - smb/client: Prevent error pointer dereference (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: implement chmod() for SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-76046]
  - smb: cached directories can be more than root file handle (Paulo Alcantara) [RHEL-76046]
  - smb: client: Use str_yes_no() helper function (Paulo Alcantara) [RHEL-76046]
  - smb: client: memcpy() with surrounding object base address (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove pre-historic unused CIFSSMBCopy (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove unused functions (Paulo Alcantara) [RHEL-76046]
  - smb/client: Fix logically dead code (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix creating native symlinks pointing to current or parent directory (Paulo Alcantara) [RHEL-76046]
  - cifs: Improve creating native symlinks pointing to directory (Paulo Alcantara) [RHEL-76046]
  - cifs: Do not convert delimiter when parsing NFS-style symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of NFS reparse point buffer (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix buffer overflow when parsing NFS reparse points (Paulo Alcantara) [RHEL-76046] {CVE-2024-49996}
  - smb: client: Correct typos in multiple comments across various files (Paulo Alcantara) [RHEL-76046]
  - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove intermediate object of failed create reparse call (Paulo Alcantara) [RHEL-76046]
  - Revert "smb: client: make SHA-512 TFM ephemeral" (Paulo Alcantara) [RHEL-76046]
  - smb: Update comments about some reparse point tags (Paulo Alcantara) [RHEL-76046]
  - cifs: Check for UTF-16 null codepoint in SFU symlink target location (Paulo Alcantara) [RHEL-76046]
  - smb: client: make SHA-512 TFM ephemeral (Paulo Alcantara) [RHEL-76046]
  - smb: client: make HMAC-MD5 TFM ephemeral (Paulo Alcantara) [RHEL-76046]
  - smb: client: allocate crypto only for primary server (Paulo Alcantara) [RHEL-76046]
  - ksmbd: Correct typos in multiple comments across various files (Paulo Alcantara) [RHEL-76046]
  - smb3: fix incorrect mode displayed for read-only files (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix parsing of device numbers (Paulo Alcantara) [RHEL-76046]
  - smb: client: set correct device number on nfs reparse points (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix compression heuristic functions (Paulo Alcantara) [RHEL-76046]
  - cifs: Update SFU comments about fifos and sockets (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for creating SFU symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Recognize SFU socket type (Paulo Alcantara) [RHEL-76046]
  - cifs: Show debug message when SFU Fifo type was detected (Paulo Alcantara) [RHEL-76046]
  - cifs: Put explicit zero byte into SFU block/char types (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for reading SFU symlink location (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix recognizing SFU symlinks (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: fix an "illegal accesses" issue (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: fix a potential issue of freeing an invalid pointer (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: LZ77 code improvements cleanup (Paulo Alcantara) [RHEL-76046]
  - smb: client: insert compression check/call on write requests (Paulo Alcantara) [RHEL-76046]
  - smb3: mark compression as CONFIG_EXPERIMENTAL and fix missing compression operation (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove obsoleted declaration for cifs_dir_open (Paulo Alcantara) [RHEL-76046]
  - smb: client: Use min() macro (Paulo Alcantara) [RHEL-76046]
  - smb: add comment to STATUS_MCA_OCCURED (Paulo Alcantara) [RHEL-76046]
  - smb: move SMB2 Status code to common header file (Paulo Alcantara) [RHEL-76046]
  - smb: move some duplicate definitions to common/smbacl.h (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_ace to smb_ace (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_acl to smb_acl (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_sid to smb_sid (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_ntsd to smb_ntsd (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix FALLOC_FL_PUNCH_HOLE support (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix missing set of remote_i_size (Paulo Alcantara) [RHEL-76046]
  - cifs: Share server EOF pos with netfslib (Paulo Alcantara) [RHEL-76046]
  - ALSA: change configuration CONFIG_SND_HDA_SCODEC_TAS2781_SPI (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: fixup ASUS H7606W (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: fixup ASUS GA605W (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (Jaroslav Kysela) [RHEL-76110]
  - ASoC: rt722: add delay time to wait for the calibration procedure (Jaroslav Kysela) [RHEL-76110]
  - ALSA: seq: oss: Send fragmented SysEx messages immediately (Jaroslav Kysela) [RHEL-76110]
  - ALSA: seq: oss: Fix races at processing SysEx messages (Jaroslav Kysela) [RHEL-76110] {CVE-2024-57893}
  - ALSA: seq: Check UMP support for midi_version change (Jaroslav Kysela) [RHEL-76110]
  - sound: usb: format: don't warn that raw DSD is unsupported (Jaroslav Kysela) [RHEL-76110]
  - ASoC: audio-graph-card: Call of_node_put() on correct node (Jaroslav Kysela) [RHEL-76110]
  - sound: usb: enable DSD output for ddHiFi TC44C (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (Jaroslav Kysela) [RHEL-76110]
  - ALSA: usb-audio: US16x08: Initialize array before use (Jaroslav Kysela) [RHEL-76110]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 83JX, 83MC and 83NM (Jaroslav Kysela) [RHEL-76110]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 83LC (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Delete some dead code (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix bogus error handling in tas2781_hda_spi_probe() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix error code in tas2781_read_acpi() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix -Wsometimes-uninitialized in tasdevice_spi_switch_book() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: select CRC32 instead of CRC32_SARWATE (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/tas2781: Add tas2781 hda SPI driver (Jaroslav Kysela) [RHEL-76110]
  - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one (CKI Backport Bot) [RHEL-75898] {CVE-2024-56663}
  - perf/x86/intel: Add Arrow Lake U support (Michael Petlan) [RHEL-33309]
  - wifi: cfg80211: clear link ID from bitmap during link delete after clean up (Jose Ignacio Tornos Martinez) [RHEL-73817 RHEL-74089] {CVE-2024-57898}
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Jose Ignacio Tornos Martinez) [RHEL-72282 RHEL-73817] {CVE-2024-56602}
  - wifi: rtw89: coex: initialize local .dbcc_2g_phy in _set_btg_ctrl() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (Jose Ignacio Tornos Martinez) [RHEL-73669 RHEL-73817] {CVE-2024-48873}
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (Jose Ignacio Tornos Martinez) [RHEL-72421 RHEL-73817] {CVE-2024-53190}
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jose Ignacio Tornos Martinez) [RHEL-72111 RHEL-73817] {CVE-2024-53156}
  - wifi: iwlwifi: fix CRF name for Bz (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: sme: init n_channels before channels[] access (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: wake the queues in case of failure in resume (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: fix a queue stall in certain cases of CSA (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: fix station NSS capability initialization order (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: Remove the Medium Synchronization Delay validity check (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg() (Jose Ignacio Tornos Martinez) [RHEL-72322 RHEL-73817] {CVE-2024-56535}
  - wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: mvm: tell iwlmei when we finished suspending (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: allow fast resume on ax200 (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: Fix TX fail with A2DP after scanning (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: remove msdu_end structure for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - bus: mhi: host: Switch trace_mhi_gen_tre fields to native endian (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: fix one more memcpy size error (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: check radio iface combination for multi radio per wiphy (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: Skip Rx TID cleanup for self peer (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_* (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - perf test: Remove cpu-list BPF cgroup counter test (Michael Petlan) [RHEL-33006]
  - loop: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - loop: refactor queue limits updates (Ming Lei) [RHEL-71345]
  - usb-storage: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - nbd: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - nvme: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - block: fix queue freeze vs limits lock order in sysfs store methods (Ming Lei) [RHEL-71345]
  - block: add a store_limit operations for sysfs entries (Ming Lei) [RHEL-71345]
  - block: don't update BLK_FEAT_POLL in __blk_mq_update_nr_hw_queues (Ming Lei) [RHEL-71345]
  - block: check BLK_FEAT_POLL under q_usage_count (Ming Lei) [RHEL-71345]
  - block: add a queue_limits_commit_update_frozen helper (Ming Lei) [RHEL-71345]
  - block: fix docs for freezing of queue limits updates (Ming Lei) [RHEL-71345]
  - block: return void from the queue_sysfs_entry load_module method (Ming Lei) [RHEL-71345]
  - loop: Fix ABBA locking race (Ming Lei) [RHEL-71345]
  - loop: Simplify discard granularity calc (Ming Lei) [RHEL-71345]
  - loop: Use bdev limit helpers for configuring discard (Ming Lei) [RHEL-71345]
  - nvme-rdma: unquiesce admin_q before destroy it (CKI Backport Bot) [RHEL-73644] {CVE-2024-49569}
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington) [RHEL-60028]
  - SUNRPC: Fix a hang in TLS sock_close if sk_write_pending (Benjamin Coddington) [RHEL-60028]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-567.el9]
changelog:
  - spi: pxa2xx: Add MTP-S, ARL-H, LNL-M support (David Arcari) [RHEL-78311]
  - erofs: promote to full support (Ian Kent) [RHEL-78339]
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-78016] {CVE-2024-43871}
  - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75825]
  - RDMA/mlx5: Move events notifier registration to be after device registration (CKI Backport Bot) [RHEL-72349] {CVE-2024-53224}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-568.el9]
changelog:
  - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix parsing native symlinks directory/file type (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating WSL-style symlinks (Paulo Alcantara) [RHEL-78655]
  - smb3: add support for IAKerb (Paulo Alcantara) [RHEL-78655]
  - oid_registry: Add OIDs for missing Spnego auth mechanisms to Macs (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix struct FILE_ALL_INFO (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating NFS-style symlinks (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating native Windows sockets (Paulo Alcantara) [RHEL-78655]
  - cifs: Add mount option -o reparse=none (Paulo Alcantara) [RHEL-78655]
  - cifs: Add mount option -o symlink= for choosing symlink create type (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix creating and resolving absolute NT-style symlinks (Paulo Alcantara) [RHEL-78655]
  - cifs: Simplify reparse point check in cifs_query_path_info() function (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove symlink member from cifs_open_info_data union (Paulo Alcantara) [RHEL-78655]
  - cifs: Update description about ACL permissions (Paulo Alcantara) [RHEL-78655]
  - cifs: Rename struct reparse_posix_data to reparse_nfs_data_buffer and move to common/smb2pdu.h (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove struct reparse_posix_data from struct cifs_open_info_data (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove unicode parameter from parse_reparse_point() function (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix getting and setting SACLs over SMB1 (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove intermediate object of failed create SFU call (Paulo Alcantara) [RHEL-78655]
  - cifs: Validate EAs for WSL reparse points (Paulo Alcantara) [RHEL-78655]
  - cifs: Change translation of STATUS_PRIVILEGE_NOT_HELD to -EPERM (Paulo Alcantara) [RHEL-78655]
  - cifs: Change translation of STATUS_NOT_A_REPARSE_POINT to -ENODATA (Paulo Alcantara) [RHEL-78655]
  - smb: client: handle lack of EA support in smb2_query_path_info() (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-78655]
  - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove duplicate struct reparse_symlink_data and SYMLINK_FLAG_RELATIVE (Paulo Alcantara) [RHEL-78655]
  - cifs: Do not attempt to call CIFSGetSrvInodeNumber() without CAP_INFOLEVEL_PASSTHRU (Paulo Alcantara) [RHEL-78655]
  - cifs: Do not attempt to call CIFSSMBRenameOpenFile() without CAP_INFOLEVEL_PASSTHRU (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove declaration of dead CIFSSMBQuerySymLink function (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix printing Status code into dmesg (Paulo Alcantara) [RHEL-78655]
  - cifs: Add missing NT_STATUS_* codes from nterr.h to nterr.c (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix endian types in struct rfc1002_session_packet (Paulo Alcantara) [RHEL-78655]
  - cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c (Paulo Alcantara) [RHEL-78655]
  - smb3: add missing tracepoint for querying wsl EAs (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix order of arguments of tracepoints (Paulo Alcantara) [RHEL-78655]
  - smb: client: correctly handle ErrorContextData as a flexible array (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-78655]
  - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-78655]
  - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-78655]
  - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-78655]
  - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-78655]
  - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-78655]
  - thermal/drivers/rcar_gen3: Update temperature approximation calculation (Radu Rendec) [RHEL-78506]
  - thermal/drivers/rcar_gen3: Move Tj_T storage to shared private data (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: checker: Rework drive and bias pin iteration (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: checker: Fix miscalculation of number of states (Radu Rendec) [RHEL-78506]
  - i2c: rcar: fix NACK handling when being a target (Radu Rendec) [RHEL-78506]
  - i2c: rcar: ensure Gen3+ reset does not disturb local targets (Radu Rendec) [RHEL-78506]
  - i2c: rcar: clear NO_RXDMA flag after resetting (Radu Rendec) [RHEL-78506]
  - i2c: rcar: bring hardware to known state when probing (Radu Rendec) [RHEL-78506]
  - i2c: rcar: add FastMode+ support for Gen4 (Radu Rendec) [RHEL-78506]
  - i2c: rcar: introduce Gen4 devices (Radu Rendec) [RHEL-78506]
  - gpio: rcar: drop of_match_ptr for ID table (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_tmu: Mark driver as non-removable (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_cmt: Address race condition for clock events (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_cmt: Mark driver as non-removable (Radu Rendec) [RHEL-78506]
  - serial: sh-sci: Increment the runtime usage counter for the earlycon device (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Move runtime PM enable to sci_probe_single() (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Drop __initdata macro for port_cfg (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Use plain struct copy in early_console_setup() (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: simplify locking when re-issuing RXDMA fails (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: let timeout timer only run when DMA is scheduled (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: describe locking requirements for invalidating RXDMA (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: protect invalidating RXDMA on shutdown (Jared Kangas) [RHEL-78246]
  - rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack (Marc Dionne) [RHEL-78217]
  - rxrpc, afs: Fix peer hash locking vs RCU callback (Marc Dionne) [RHEL-78217]
  - afs: Add more tracepoints to do with tracking validity (Marc Dionne) [RHEL-78217]
  - netfs: Remove some extraneous directory invalidations (Marc Dionne) [RHEL-78217]
  - afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (Marc Dionne) [RHEL-78217]
  - afs: Add rootcell checks (Marc Dionne) [RHEL-78217]
  - afs: Make /afs/.<cell> as well as /afs/<cell> mountpoints (Marc Dionne) [RHEL-78217]
  - afs: Fix the maximum cell name length (Marc Dionne) [RHEL-78217] {CVE-2025-21646}
  - afs: Fix cleanup of immediately failed async calls (Marc Dionne) [RHEL-78217]
  - afs: Fix directory format encoding struct (Marc Dionne) [RHEL-78217]
  - afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (Marc Dionne) [RHEL-78217]
  - afs: Don't use mutex for I/O operation lock (Marc Dionne) [RHEL-78217]
  - rxrpc: Use a large kvec[] in rxrpc_local rather than every rxrpc_txbuf (Marc Dionne) [RHEL-78217]
  - rxrpc: Request an ACK on impending Tx stall (Marc Dionne) [RHEL-78217]
  - rxrpc: Show stats counter for received reason-0 ACKs (Marc Dionne) [RHEL-78217]
  - rxrpc: Don't set the MORE-PACKETS rxrpc wire header flag (Marc Dionne) [RHEL-78217]
  - rxrpc: Clean up Tx header flags generation handling (Marc Dionne) [RHEL-78217]
  - rxrpc: Fix handling of received connection abort (Marc Dionne) [RHEL-78217]
  - rxrpc: Add a tracepoint for aborts being proposed (Marc Dionne) [RHEL-78217]
  - afs: Fix missing subdir edit when renamed between parent dirs (Marc Dionne) [RHEL-78217]
  - rxrpc: Fix uninitialised variable in rxrpc_send_data() (Marc Dionne) [RHEL-78217]
  - afs: Fix the setting of the server responding flag (Marc Dionne) [RHEL-64506 RHEL-78217] {CVE-2024-49999}
  - afs: Remove unused struct and function prototype (Marc Dionne) [RHEL-78217]
  - afs: Fix possible infinite loop with unresponsive servers (Marc Dionne) [RHEL-78217]
  - rxrpc: Remove unused function declarations (Marc Dionne) [RHEL-78217]
  - afs: drop usage of folio_file_pos (Marc Dionne) [RHEL-78217]
  - afs: Convert comma to semicolon (Marc Dionne) [RHEL-78217]
  - afs: Add __counted_by for struct afs_acl and use struct_size() (Marc Dionne) [RHEL-78217]
  - afs: move afs_xattr_handlers to .rodata (Marc Dionne) [RHEL-78217]
  - afs: Annotate struct afs_permits with __counted_by (Marc Dionne) [RHEL-78217]
  - afs: convert to ctime accessor functions (Marc Dionne) [RHEL-78217]
  - afs: Don't use folio->private to record partial modification (Marc Dionne) [RHEL-78217]
  - afs: Remove whitespace before most ')' from the trace header (Marc Dionne) [RHEL-78217]
  - firmware: psci: Fix return value from psci_system_suspend() (Jared Kangas) [RHEL-78060]
  - libperf cpumap: Grow array of read CPUs in smaller increments (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Remove perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Remove use of perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - perf pmu: Remove use of perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Be tolerant of newline at the end of a cpumask (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Hide/reduce scope of MAX_NR_CPUS (Michael Petlan) [RHEL-71187]
  - perf cpumap: Reduce transitive dependencies on libperf MAX_NR_CPUS (Michael Petlan) [RHEL-71187]
  - perf: Increase MAX_NR_CPUS to 4096 (Michael Petlan) [RHEL-71187]
  - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-74147]
  - dev: Acquire netdev_rename_lock before restoring dev->name in dev_change_name(). (Toke Høiland-Jørgensen) [RHEL-77329]
  - Enable CONFIG_INTEL_MEI_PXP and CONFIG_DRM_I915_PXP on rhel (David Arcari) [RHEL-77170]
  - redhat/configs: disable CONFIG_INTEL_MEI_VSC_HW (David Arcari) [RHEL-77170]
  - mei: vsc: Fix typo "maintstepping" -> "mainstepping" (David Arcari) [RHEL-77170]
  - mei: vsc: Improve error logging in vsc_identify_silicon() (David Arcari) [RHEL-77170]
  - mei: vsc: Do not re-enable interrupt from vsc_tp_reset() (David Arcari) [RHEL-77170]
  - mei: clean pending read with vtag on bus (David Arcari) [RHEL-77170]
  - mei: use kvmalloc for read buffer (David Arcari) [RHEL-77170]
  - mei: bus: Reorganize kerneldoc parameter names (David Arcari) [RHEL-77170]
  - finally take no_llseek out [partial] (David Arcari) [RHEL-77170]
  - mei: vsc: Fix spelling error (David Arcari) [RHEL-77170]
  - mei: vsc: Enhance SPI transfer of IVSC ROM (David Arcari) [RHEL-77170]
  - mei: vsc: Utilize the appropriate byte order swap function (David Arcari) [RHEL-77170]
  - mei: vsc: Prevent timeout error with added delay post-firmware download (David Arcari) [RHEL-77170]
  - mei: vsc: Enhance IVSC chipset stability during warm reboot (David Arcari) [RHEL-77170]
  - mei: bus-fixup: set timeout for MKHI send operations (David Arcari) [RHEL-77170]
  - mei: vsc: Fix wrong invocation of ACPI SID method (David Arcari) [RHEL-77170]
  - mei: vsc: Don't stop/restart mei device during system suspend/resume (David Arcari) [RHEL-77170]
  - mei: me: release irq in mei_me_pci_resume error path (David Arcari) [RHEL-77170]
  - mei: demote client disconnect warning on suspend to debug (David Arcari) [RHEL-77170]
  - mei: pxp: match against PCI_CLASS_DISPLAY_OTHER (David Arcari) [RHEL-77170]
  - mei: bus: constify the struct mei_cl_bus_type usage (David Arcari) [RHEL-77170]
  - mei: vsc: Unregister interrupt handler for system suspend (David Arcari) [RHEL-77170]
  - Revert "mei: vsc: Call wake_up() in the threaded IRQ handler" (David Arcari) [RHEL-77170]
  - mei: Avoid a bunch of -Wflex-array-member-not-at-end warnings (David Arcari) [RHEL-77170]
  - mei: gsc_proxy: match component when GSC is on different bus (David Arcari) [RHEL-77170]
  - mei: vsc: Convert to platform remove callback returning void (David Arcari) [RHEL-77170]
  - mei: vsc: Assign pinfo fields in variable declaration (David Arcari) [RHEL-77170]
  - mei: vsc: Don't use sleeping condition in wait_event_timeout() (David Arcari) [RHEL-77170]
  - mei: vsc: Call wake_up() in the threaded IRQ handler (David Arcari) [RHEL-77170]
  - mei: me: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: txe: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: gsc: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: Add Meteor Lake support for IVSC device (David Arcari) [RHEL-77170]
  - mei: pxp: add dependency on Xe driver (David Arcari) [RHEL-77170]
  - mei: hdcp: add dependency on Xe driver (David Arcari) [RHEL-77170]
  - mei: pxp: match without driver name (David Arcari) [RHEL-77170]
  - mei: hdcp: match without driver name (David Arcari) [RHEL-77170]
  - mei: gsc: add support for auxiliary device created by Xe driver (David Arcari) [RHEL-77170]
  - mei: rework Kconfig dependencies (David Arcari) [RHEL-77170]
  - mei: fix vsc dependency (David Arcari) [RHEL-77170]
  - mei: vsc: Rework firmware image names (David Arcari) [RHEL-77170]
  - mei: pxp: spdx should be at first line (David Arcari) [RHEL-77170]
  - mei: Add MEI hardware support for IVSC device (David Arcari) [RHEL-77170]
  - mei: Add transport driver for IVSC device (David Arcari) [RHEL-77170]
  - misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write (David Arcari) [RHEL-77170]
  - misc: mei: client.c: return negative error code in mei_cl_write (David Arcari) [RHEL-77170]
  - mei: pxp: fix mei_pxp_send_message return value (David Arcari) [RHEL-77170]
  - mei: me: emit error only if reset was unexpected (David Arcari) [RHEL-77170]
  - misc: mei: main.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: interrupt.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hw-me.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hbm.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: dma-ring.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: client.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hw.h: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - mei: update mei-pxp's component interface with timeouts [partial] (David Arcari) [RHEL-77170]
  - mei: pxp: re-enable client on errors (David Arcari) [RHEL-77170]
  - mei: pxp: recover from recv fail under memory pressure (David Arcari) [RHEL-77170]
  - mei: bus: add send and recv api with timeout (David Arcari) [RHEL-77170]
  - mei: docs: fix spelling errors (David Arcari) [RHEL-77170]
  - mei: docs: add missing entries to kdoc in struct mei_cfg_idx (David Arcari) [RHEL-77170]
  - mei: docs: use correct structures name in kdoc (David Arcari) [RHEL-77170]
  - mei: make mei_class a static const structure (David Arcari) [RHEL-77170]
  - mei: gsc: add module description (David Arcari) [RHEL-77170]
  - mei: pxp: Keep a const qualifier when calling mei_cldev_send() (David Arcari) [RHEL-77170]
  - mei: obtain firmware version only on gsc. (David Arcari) [RHEL-77170]
  - mei: bus: enable asynchronous suspend. (David Arcari) [RHEL-77170]
  - mei: log firmware status on hw_start failure. (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Move away from master naming to arbiter [partial] (David Arcari) [RHEL-77170]
  - mei: bus-fixup: fix buffer type (David Arcari) [RHEL-77170]
  - mei: bus: drop useless cldev null check (David Arcari) [RHEL-77170]
  - virt: acrn: Mark the uuid field as unused (David Arcari) [RHEL-77170]
  - mei: Move uuid.h to the MEI namespace (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Refactor HDCP API structures [partial] (David Arcari) [RHEL-77170]
  - uuid: remove licence boilerplate text from the header (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Use generic names for HDCP helpers and structs [partial] (David Arcari) [RHEL-77170]
  - mei: lower the log level for non-fatal failed messages (David Arcari) [RHEL-77170]
  - mei: bus: disallow driver match while dismantling device (David Arcari) [RHEL-77170]
  - mei: Move uuid_le_cmp() to its only user (David Arcari) [RHEL-77170]
  - uuid: Decouple guid_t and uuid_le types and respective macros (David Arcari) [RHEL-77170]
  - uuid: discourage people from using UAPI header in new code (David Arcari) [RHEL-77170]
  - mei: mei-me: resume device in prepare (David Arcari) [RHEL-77170]
  - mei: gsc: Remove redundant dev_err call (David Arcari) [RHEL-77170]
  - mei: fix repeated words in comments (David Arcari) [RHEL-77170]
  - misc: move from strlcpy with unused retval to strscpy [partial] (David Arcari) [RHEL-77170]
  - sunrpc: simplify one-level sysctl registration for xs_tunables_table (Benjamin Coddington) [RHEL-73723]
  - sunrpc: simplify one-level sysctl registration for xr_tunables_table (Benjamin Coddington) [RHEL-73723]
  - sunrpc: move sunrpc_table and proc routines above (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Silence compiler complaints about tautological comparisons (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Revert e0a912e8ddba (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Remove unused declarations (Benjamin Coddington) [RHEL-73723]
  - sunrpc: Remove unused extern declarations (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: change svc_xprt::xpt_flags bits to enum (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Remove unused declaration rpc_modcount() (Benjamin Coddington) [RHEL-73723]
  - lockd: define nlm_port_min,max with CONFIG_SYSCTL (Benjamin Coddington) [RHEL-73723]
  - nfs/blocklayout: Limit repeat device registration on failure (Benjamin Coddington) [RHEL-73723]
  - nfs/blocklayout: Don't attempt unregister for invalid block device (Benjamin Coddington) [RHEL-73723]
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (Benjamin Coddington) [RHEL-73723]
  - nfsd: fix refcount leak when file is unhashed after being found (Benjamin Coddington) [RHEL-73723]
  - net: initialize net->notrefcnt_tracker earlier (Benjamin Coddington) [RHEL-73723]
  - mptcp: fix tracking issue in mptcp_subflow_create_socket() (Benjamin Coddington) [RHEL-73723]
  - net: add a refcount tracker for kernel sockets (Benjamin Coddington) [RHEL-73723]
  - NFSD: Fix nfsd4_shutdown_copy() (Benjamin Coddington) [RHEL-73723]
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Benjamin Coddington) [RHEL-73723]
  - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work" (Benjamin Coddington) [RHEL-73723]
  - nfsd: release svc_expkey/svc_export with rcu_work (Benjamin Coddington) [RHEL-73723]
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Benjamin Coddington) [RHEL-73723]
  - nfsd: restore callback functionality for NFSv4.0 (Benjamin Coddington) [RHEL-73723]
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Benjamin Coddington) [RHEL-73723]
  - NFSD: Remove a never-true comparison (Benjamin Coddington) [RHEL-73723]
  - Revert "nfs: don't reuse partially completed requests in nfs_lock_and_join_requests" (Benjamin Coddington) [RHEL-73723]
  - nfsd: drop inode parameter from nfsd4_change_attribute() (Benjamin Coddington) [RHEL-73723]
  - svcrdma: Address an integer overflow (Benjamin Coddington) [RHEL-73723]
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Benjamin Coddington) [RHEL-73723]
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Benjamin Coddington) [RHEL-73723]
  - NFSv3: only use NFS timeout for MOUNT when protocols are compatible (Benjamin Coddington) [RHEL-73723]
  - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Fix integer overflow in decode_rc_list() (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: clnt.c: Remove misleading comment (Benjamin Coddington) [RHEL-73723]
  - nfs: fix memory leak in error path of nfs4_do_reclaim (Benjamin Coddington) [RHEL-73723]
  - nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net() failed (Benjamin Coddington) [RHEL-73723]
  - NFSD: Mark filecache "down" if init fails (Benjamin Coddington) [RHEL-73723]
  - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Benjamin Coddington) [RHEL-73723]
  - NFSD: Fix NFSv4's PUTPUBFH operation (Benjamin Coddington) [RHEL-73723]
  - nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (Benjamin Coddington) [RHEL-73723]
  - Revert "net/tls: fix tls_sk_proto_close executed repeatedly" (Benjamin Coddington) [RHEL-73723]
  - net/tls: fix tls_sk_proto_close executed repeatedly (Benjamin Coddington) [RHEL-73723]
  - hugetlb: prioritize surplus allocation from current node (Aristeu Rozanski) [RHEL-68966]
  - net: tun: call napi_schedule_prep() to ensure we own a napi (Jared Kangas) [RHEL-76236]
  - net: tun: Fix memory leaks of napi_get_frags (Jared Kangas) [RHEL-76236]
  - virtio-net: fix overflow inside virtnet_rq_alloc (Jon Maloy) [RHEL-73638] {CVE-2024-57843}
  - RDMA/uverbs: Prevent integer overflow issue (CKI Backport Bot) [RHEL-74224] {CVE-2024-57890}
  - EDAC/igen6: Add Intel Arrow Lake-U/H SoCs support (Joel Savitz) [RHEL-33317 RHEL-52289]
  - EDAC/bluefield: Fix potential integer overflow (Aristeu Rozanski) [RHEL-72108] {CVE-2024-53161}
  - virtio/vsock: Improve MSG_ZEROCOPY error handling (Jon Maloy) [RHEL-69661] {CVE-2024-53117}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68028] {CVE-2024-50264}
  - powerpc/boot: Fix incorrect version calculation issue in ld_version (Waiman Long) [RHEL-68367]
  - powerpc: suppress some linker warnings in recent linker versions (Waiman Long) [RHEL-68367]
  - Makefile: link with -z noexecstack --no-warn-rwx-segments (Waiman Long) [RHEL-68367]
  - fs: Fix file_set_fowner LSM hook inconsistencies (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add layout1.refer_mount_root (Ryan Sullivan) [RHEL-8810]
  - fs/ioctl: Add a comment to keep the logic in sync with LSM policies (Ryan Sullivan) [RHEL-8810]
  - landlock: Document IOCTL support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Exhaustive test for the IOCTL allow-list (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTLs on named pipes (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTL with memfds (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTL support (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add cred_transfer test (Ryan Sullivan) [RHEL-8810]
  - landlock: Don't lose track of restrictions on cred_transfer (Ryan Sullivan) [RHEL-8810]
  - Enable CONFIG_SECURITY_LANDLOCK for RHEL (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Handle TEST_F()'s explicit exit codes (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix tests timeout and race condition (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix vfork() side effects (Ryan Sullivan) [RHEL-8810]
  - selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix port parsing in sandboxer (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix d_parent walk (Ryan Sullivan) [RHEL-8810]
  - hostfs: fix dev_t handling (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix fixture teardown (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix interleaved scheduling leading to race conditions (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Prevent infinite loop due to Assert in FIXTURE_TEARDOWN (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Share _metadata between forked processes (Ryan Sullivan) [RHEL-8810]
  - landlock: Add IOCTL access right for character and block devices (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix incorrect free in populate_ruleset_net (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Do not allocate memory in fixture data (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix FS tests when run on a private mount point (Ryan Sullivan) [RHEL-8810]
  - fs: Return ENOTTY directly if FS_IOC_GETUUID or FS_IOC_GETFSSYSFSPATH fail (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Don't error out if a file path cannot be opened (Ryan Sullivan) [RHEL-8810]
  - landlock: Use f_cred in security_file_open() hook (Ryan Sullivan) [RHEL-8810]
  - landlock: Rename "ptrace" files to "task" (Ryan Sullivan) [RHEL-8810]
  - landlock: Simplify current_check_access_socket() (Ryan Sullivan) [RHEL-8810]
  - landlock: Warn once if a Landlock action is requested while disabled (Ryan Sullivan) [RHEL-8810]
  - landlock: Extend documentation for kernel support (Ryan Sullivan) [RHEL-8810]
  - landlock: Add support for KUnit tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Clean up error logs related to capabilities (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix TEST_F()'s vfork handling (Ryan Sullivan) [RHEL-8810]
  - selftests: kselftest_harness: use exit code to store skip (Ryan Sullivan) [RHEL-8810]
  - selftests: kselftest_harness: save full exit code in metadata (Jakub Kicinski) [RHEL-8810]
  - selftests/harness: Merge TEST_F_FORK() into TEST_F() (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Redefine TEST_F() as TEST_F_FORK() (Ryan Sullivan) [RHEL-8810]
  - fs: add FS_IOC_GETFSSYSFSPATH (Ryan Sullivan) [RHEL-8810]
  - fs: super_set_uuid() (Ryan Sullivan) [RHEL-8810]
  - kernfs: attach uuid for every kernfs and report it in fsid (Ryan Sullivan) [RHEL-8810]
  - fs: FS_IOC_GETUUID (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix asymmetric private inodes referring (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix fs_test build with old libc (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix net_test build with old libc (Ryan Sullivan) [RHEL-8810]
  - landlock: Optimize the number of calls to get_access_mask slightly (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Rename "permitted" to "allowed" in ftruncate tests (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v6.6] (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v6.1] (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v5.15] (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests to check unhandled rule's access rights (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests to check unknown rule's access rights (Ryan Sullivan) [RHEL-8810]
  - lsm: new security_file_ioctl_compat() hook (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix capability for net_test (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for FS topology changes with network rules (Ryan Sullivan) [RHEL-8810]
  - landlock: Document network support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Support TCP restrictions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add network tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Share enforce_ruleset() helper (Ryan Sullivan) [RHEL-8810]
  - landlock: Support network rules with TCP bind and connect (Ryan Sullivan) [RHEL-8810]
  - hostfs: Fix ephemeral inodes (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor landlock_add_rule() syscall (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor layer helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Move and rename layer helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor merge/inherit_ruleset helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor landlock_find_rule/insert_rule helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Allow FS topology changes for domains without such rule type (Ryan Sullivan) [RHEL-8810]
  - landlock: Make ruleset's access masks more generic (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix a resource leak (Ryan Sullivan) [RHEL-8810]
  - landlock: Annotate struct landlock_rule with __counted_by (Ryan Sullivan) [RHEL-8810]
  - security: Create file_truncate hook from path_truncate hook (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add hostfs tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for pseudo filesystems (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Make mounts configurable (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add supports_filesystem() helper (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Don't create useless file layouts (Ryan Sullivan) [RHEL-8810]
  - landlock: Clarify documentation for the LANDLOCK_ACCESS_FS_REFER right (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ptrace as much as possible with Yama (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Skip overlayfs tests when not supported (Ryan Sullivan) [RHEL-8810]
  - landlock: Explain file descriptor access rights (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Document best-effort approach for LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Document Landlock's file truncation support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Extend sample tool to support LANDLOCK_ACCESS_FS_TRUNCATE (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ftruncate on FDs created by memfd_create(2) (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test FD passing from restricted to unrestricted processes (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Locally define __maybe_unused (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test open() and ftruncate() in multiple scenarios (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test file truncation support (Ryan Sullivan) [RHEL-8810]
  - landlock: Support file truncation (Ryan Sullivan) [RHEL-8810]
  - landlock: Document init_layer_masks() helper (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor check_access_path_dual() into is_access_to_paths_allowed() (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix documentation style (Ryan Sullivan) [RHEL-8810]
  - landlock: Slightly improve documentation and fix spelling (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Print hints about ABI versions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix out-of-tree builds (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Explain how to support Landlock (Ryan Sullivan) [RHEL-8810]
  - landlock: Add design choices documentation for filesystem access rights (Ryan Sullivan) [RHEL-8810]
  - landlock: Document good practices about filesystem policies (Ryan Sullivan) [RHEL-8810]
  - landlock: Document LANDLOCK_ACCESS_FS_REFER and ABI versioning (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add support for file reparenting (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add 11 new test suites dedicated to file reparenting (Ryan Sullivan) [RHEL-8810]
  - landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Move filesystem helpers and add a new one (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix same-layer rule unions (Ryan Sullivan) [RHEL-8810]
  - landlock: Create find_rule() from unmask_layers() (Ryan Sullivan) [RHEL-8810]
  - landlock: Reduce the maximum number of layers to 16 (Ryan Sullivan) [RHEL-8810]
  - landlock: Define access_mask_t to enforce a consistent access mask size (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test landlock_create_ruleset(2) argument check ordering (Ryan Sullivan) [RHEL-8810]
  - landlock: Change landlock_restrict_self(2) check ordering (Ryan Sullivan) [RHEL-8810]
  - landlock: Change landlock_add_rule(2) argument check ordering (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for O_PATH (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fully test file rename with "remove" access (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Extend access right tests to directories (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for unknown access rights (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Extend tests for minimal valid attribute size (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Make tests build with old libc (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix landlock_add_rule(2) documentation (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Format with clang-format (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Format with clang-format (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Normalize array assignment (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - fs: fix an infinite loop in iomap_fiemap (Ryan Sullivan) [RHEL-8810]
  - landlock: Use square brackets around "landlock-ruleset" (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix path_list memory leak (Ryan Sullivan) [RHEL-8810]
  - fs/ioctl: remove unnecessary __user annotation (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: remove ARRAY_SIZE define from common.h (Ryan Sullivan) [RHEL-8810]
  - fs: forbid invalid project ID (Ryan Sullivan) [RHEL-8810]
  - fs: remove generic_block_fiemap (Ryan Sullivan) [RHEL-8810]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-569.el9]
changelog:
  - scsi: ufs: core: Store min and max clk freq from OPP table (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Cancel RTC work during ufshcd_remove() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix the build for the old ARM OABI (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Improve ufshcd_mcq_sq_cleanup() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Start the RTC update work later (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix another deadlock during RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Requeue aborted request (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix the issue of ICU failure (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove ufshcd_urgent_bkops() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Move UFS trace events to private header (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Add HCI capabilities sysfs group (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Prepare to add HCI capabilities sysfs (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Support Updating UIC Command Timeout (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Do not set link to OFF state while waking up from hibernation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix deadlock during RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Bypass quick recovery if force reset is needed (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Check LSDBS cap when !mcq (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add fill_crypto_prdt variant op (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Make .get_hba_mac() optional (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Inline ufshcd_mcq_vops_get_hba_mac() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Move the ufshcd_mcq_enable() call (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Move the "hba->mcq_enabled = true" assignment (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Inline is_mcq_enabled() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Initialize hba->reserved_slot earlier (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename the MASK_TRANSFER_REQUESTS_SLOTS constant (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove two constants (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Initialize struct uic_command once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Declare functions once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove SCSI host only if added (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Suspend clk scaling on no request (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Prevent no I/O queue case for MCQ (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Convert MCQ_CFG_n to an inline function (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix missing argument 'hba' in MCQ_OPR_OFFSET_n (Radu Rendec) [RHEL-79078]
  - scsi: ufs: sysfs: Make max_number_of_rtt read-write (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Maximum RTT supported by the host driver (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Allow RTT negotiation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_abort_one racing issue (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_clear_cmd racing issue (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Free memory allocated for model before reinit (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Quiesce request queues before checking pending cmds (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix error output and clean up ufshcd_mcq_abort() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: mcq: Fix ufshcd_mcq_sqe_search() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Changing the status to check inflight (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove support for old UFSHCI versions (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unnecessary wmb() prior to writing run/stop regs (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unnecessary wmb() after ringing doorbell (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after disabling interrupts (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after writing UTP_TASK_REQ_LIST_BASE_H (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Drop driver owner initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Reuse compose_devman_upiu (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Reuse compose_dev_cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Reuse exec_dev_cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Reuse device management locking code (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ mode dev command timeout (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: WLUN suspend dev/link state error recovery (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ MAC configuration (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Remove unused parameters (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use ufshcd_mcq_req_to_hwq() to simplify updating hwq (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add definition for REG_UFS_MEM_CFG register (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Migrate to UFSHCD generic CPU latency PM QoS support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add CPU latency QoS support for UFS driver (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Uninitialized variable in ufshcd_devfreq_target() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove the ufshcd_release() in ufshcd_err_handling_prepare() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify power management during async scan (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify ufshcd_auto_hibern8_update() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename ufshcd_auto_hibern8_enable() and make it static (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add sysfs node for UFS RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFS RTC support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add ufshcd_is_ufs_dev_busy() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Warn if the request tag is truncated (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Make fault injection dynamically configurable per HBA (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-sysfs: Expose UFS power info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Let the sq_lock protect sq_tail_slot access (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Clear cmd if abort succeeds in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Expand MCQ queue slot to DeviceQueueDepth + 1 (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Leave space for '\0' in utf8 desc string (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Conversion to bool not necessary (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix race between force complete and ISR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove dev cmd clock scaling busy (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: WLUN send SSU timeout recovery (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set the Command Priority (CP) flag for RT requests (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify ufshcd_comp_scsi_upiu() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove request tag range checks (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Include the SCSI ID in UFS command tracing output (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Correct clear TM error log (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: No need to update UPIU.header.flags and lun in advanced RPMB handler (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add advanced RPMB support where UFSHCI 4.0 does not support EHS length in UTRD (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix the build for gcc 9 and before (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify response header parsing (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify transfer request header initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove a member variable (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify ufshcd_abort_all() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove a local variable from ufshcd_abort_all() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Improve type safety (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify zero-initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Minimize #include directives (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Rename a function argument (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix kernel-doc headers (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Document all return values (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Follow the kernel-doc syntax for documenting return values (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix residual handling (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove HPB support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix some kernel-doc comments (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Add MCQ support for MTK platform (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Export symbols for MTK driver module (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Convert UPIU_HEADER_DWORD() into a function (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix the search/wrap around logic (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add support for qTimestamp attribute (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unused function declaration (Radu Rendec) [RHEL-79078]
  - scsi: ufs: wb: Add explicit flush_threshold sysfs attribute (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Set UFSHCD_QUIRK_MCQ_BROKEN_RTC quirk (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Set UFSHCD_QUIRK_MCQ_BROKEN_INTR quirk (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add host quirk UFSHCD_QUIRK_MCQ_BROKEN_RTC (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add host quirk UFSHCD_QUIRK_MCQ_BROKEN_INTR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove dedicated hwq for dev command (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: mcq: Fix the incorrect OCS value for the device command (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Combine ufshcd_mq_poll_cqe functions (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_inc_sq_tail() function bug (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove a ufshcd_add_command_trace() call (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify driver shutdown (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Move ufshcd_wl_shutdown() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix handling of lrbp->cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Increase the START STOP UNIT timeout from one to ten seconds (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add error handling for MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use ufshcd_mcq_poll_cqe_lock() in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Added ufshcd_mcq_abort() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add support for cleaning up MCQ resources (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add supporting functions for MCQ abort (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Update the ufshcd_clear_cmds() functionality (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Combine 32-bit command_desc_base_addr_lo/hi (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Replace all non-returning strlcpy() with strscpy() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Do not open code SZ_x (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Ungate the clock synchronously (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Declare ufshcd_{hold,release}() once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Conditionally enable the BLK_MQ_F_BLOCKING flag (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Return earlier if ufshcd_hba_init_crypto_capabilities() fails (Radu Rendec) [RHEL-79078]
  - scsi: ufs: hwmon: Constify pointers to hwmon_channel_info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Change the module parameter macro of use_mcq_mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ nr_hw_queues (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ tag calculation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use pointer arithmetic in ufshcd_send_command() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Annotate ufshcd_inc_sq_tail() appropriately (Radu Rendec) [RHEL-79078]
  - scsi: core: Clean up struct ufs_saved_pwr_info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add trace event for MCQ (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Print trs for pending requests in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set the residual byte count (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Disable the reset settle delay (Radu Rendec) [RHEL-79078]
  - scsi: mpi3mr: Avoid reply queue full condition (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Fix possible crash when setting up bsg fails (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update driver version to 8.12.0.3.50 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Handling of fault code for insufficient power (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Start controller indexing from 0 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Chandrakanth Patil) [RHEL-49780] {CVE-2024-57804}
  - scsi: mpi3mr: Synchronize access to ioctl data buffer (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Validate SAS port assignments (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Improve wait logic while controller transitions to READY state (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update MPI Headers to revision 34 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Use firmware-provided timestamp update interval (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Enhance the Enable Controller retry logic (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: A performance fix (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update consumer index of reply queues after every 100 replies (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Return complete ioc_status for ioctl commands (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Avoid MAX_PAGE_ORDER WARNING for buffer allocations (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Add missing spin_lock_init() for mrioc->trigger_lock (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Prevent PCI writes from driver during PCI error recovery (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Support PCI Error Recovery callback handlers (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Correct a test in mpi3mr_sas_port_add() (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Add ioctl support for HDB (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Trigger support (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: HDB allocation and posting for hardware and firmware buffers (Chandrakanth Patil) [RHEL-49780]
  - rpmsg: virtio: Free driver_override when rpmsg_remove() (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Replace deprecated strncpy with strscpy/_pad (Jared Kangas) [RHEL-78824]
  - rpmsg: Replace deprecated strncpy with strscpy_pad (Jared Kangas) [RHEL-78824]
  - rpmsg: core: Replace deprecated strncpy with strscpy (Jared Kangas) [RHEL-78824]
  - rpmsg: glink: Release driver_override (Jared Kangas) [RHEL-78824]
  - rpmsg: ctrl: Add lock to rpmsg_ctrldev_remove (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Add lock to avoid race when rpmsg device is released (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Avoid double destroy of default endpoint (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (Jared Kangas) [RHEL-78824]
  - rpmsg: Strcpy is not safe, use strscpy_pad() instead (Jared Kangas) [RHEL-78824]
  - rpmsg: mtk_rpmsg: Fix circular locking dependency (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Add mutex protection for rpmsg_eptdev_open() (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge (Jared Kangas) [RHEL-78824]
  - rpmsg: use local 'dev' variable (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix calling device_lock() on non-initialized device (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev() (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix possible double free in rpmsg_probe() (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix parameter naming for announce_create/destroy ops (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix kfree() of static memory on setting driver_override (Jared Kangas) [RHEL-78824]
  - rpmsg: Constify local variable in field store macro (Jared Kangas) [RHEL-78824]
  - clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (Waiman Long) [RHEL-76143]
  - clocksource: Use pr_info() for "Checking clocksource synchronization" message (Waiman Long) [RHEL-76143]
  - clocksource: Make watchdog and suspend-timing multiplication overflow safe (Waiman Long) [RHEL-76143]
  - clocksource: Scale the watchdog read retries automatically (Waiman Long) [RHEL-76143]
  - clocksource: Skip watchdog check for large watchdog intervals (Waiman Long) [RHEL-76143]
  - torture: Enable clocksource watchdog with "tsc=watchdog" (Waiman Long) [RHEL-76143]
  - clocksource: Suspend the watchdog temporarily when high read latency detected (Waiman Long) [RHEL-76143]
  - clocksource: Loosen clocksource watchdog constraints (Waiman Long) [RHEL-76143]
  - clocksource: Replace cpumask_weight() with cpumask_empty() (Waiman Long) [RHEL-76143]
  - clocksource: Add a Kconfig option for WATCHDOG_MAX_SKEW (Waiman Long) [RHEL-76143]
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (CKI Backport Bot) [RHEL-77211] {CVE-2025-21666}
  - net: atlantic: use irq_update_affinity_hint() (Izabela Bakollari) [RHEL-73855 RHEL-76480]
  - net: atlantic: convert comma to semicolon (Izabela Bakollari) [RHEL-73855]
  - net: atlantic: Avoid warning about potential string truncation (Izabela Bakollari) [RHEL-73855]
  - net: atlantic: use ethtool_sprintf (Izabela Bakollari) [RHEL-73855]
  - x86: bring back rep movsq for user access on CPUs without ERMS (Herton R. Krzesinski) [RHEL-74389]
  - x86/retpolines: Enable the default thunk warning only on relevant configs (Waiman Long) [RHEL-71467]
  - x86/vdso: Fix rethunk patching for vdso-image-{32,64}.o (Waiman Long) [RHEL-71467]
  - x86/retpoline: Ensure default return thunk isn't used at runtime (Waiman Long) [RHEL-71467]
  - objtool: Revert "skip non-text sections when adding return-thunk sites" (Waiman Long) [RHEL-71467]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-15
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook
     server certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'
    Resolves: RHEL-78057
    Resolves: RHEL-78313
    Resolves: RHEL-78316


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Matej Matuska <mmatuska@redhat.com> - 0.21.0-4
changelog:
  - Require leapp-framework 6.0+
  - Update leapp-deps package to satisfy leapp-framework-dependencies 6
  - Add dependency on libdb-utils
  - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token
  - Adjust resource limitations for leapp to be able to perform the upgrade
  - Cap max size of the sparse files to 1TiB for storage with large amount of free space
  - Check that detected Intel CPU microarchitecture is supported on target system
  - Fix the report when handling broken parsing of kernel cmdline
  - Generate proper error message instead of ModelViolationError when parsing invalid repository definition
  - Handle default kernel cmdline when multiple boot entries for the default kernel are defined
  - Migrate Ruby IRB during the upgrade
  - Migrate pam_userdb backend during the upgrade
  - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs
  - Update leapp upgrade data files
  - Resolves: RHEL-57043


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-5
changelog:
  - Obsolete RHEL9 GPG key signed with SHA1
  - Activate LVM VGs with `--sysinit` option to correct the use in the upgrade initramfs
  - Fix output of commands executed inside systemd-nspawn containers
  - Fix pes events scanner crashing when there are duplicate packages in the received instructions
  - Fix pes events scanner not respecting user’s transaction configuration
  - Fix remediation instructions for deprecated NM configuration
  - Fix storage scanner crashing when command outputs contain colon character
  - Minor improvements in preupgrade reports
  - Resolves: RHEL-57043, RHEL-31428, RHEL-33373, RHEL-69829, RHEL-71517


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Detect XFS file systems with problematic parameters
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Resolves: RHEL-57043, RHEL-52309, RHEL-60034


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-4
changelog:
  - Rebase libguestfs to 1.50.1
    resolves: rhbz#2168625
  - Use q35 machine type for libguestfs appliance
    resolves: rhbz#2168578
  - Run SELinux relabelling in parallel [for virt-v2v]
    resolves: rhbz#2190276


author: Laszlo Ersek <lersek@redhat.com> - 1:1.50.1-5
changelog:
  - let "guestfish -i" recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable quickcheck; we now use "-cpu max" (upstream 30f74f38bd6e)
    resolves: rhbz#2209279


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Michel Normand <normand@linux.vnet.ibm.com> 1.1.0-5
changelog:
  - Add remove_2_backslashes_in_shell_call.patch
    Add remove_eng_inc_in_version_pl.patch
    to avoid f33 build failure


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
  - qemu_domain: Strip <acpi/> from s390(x) definitions (RHEL-49516)
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
  - vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-1
changelog:
  - Rebased to libvirt-10.8.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-688, RHEL-7122, RHEL-19379, RHEL-22166, RHEL-24746
      RHEL-28827, RHEL-45200, RHEL-45952, RHEL-53964, RHEL-54550
      RHEL-56611, RHEL-58446


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61576)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61576)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61576)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61576)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61576)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-7036, RHEL-7122, RHEL-35752, RHEL-46870, RHEL-52314
      RHEL-60030, RHEL-60033, RHEL-64341


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-23607, RHEL-24850, RHEL-29267, RHEL-30842, RHEL-53963
      RHEL-54325, RHEL-54326, RHEL-55240, RHEL-64341, RHEL-65372
      RHEL-65780, RHEL-65844, RHEL-67702, RHEL-67836, RHEL-68614
      RHEL-69417


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69938)
  - qemu: tpm: do not update profile name for transient domains (RHEL-71072)
  - qemu: Enable I/O APIC if needed (RHEL-65844)
  - cpu_map: Sort data files in meson.build (RHEL-70052)
  - sync_qemu_models_i386: Update meson.build (RHEL-70052)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70052)
  - cpu_map: Add 486-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70052)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70052)
  - cpu_map: Add n270-v1 CPU model (RHEL-70052)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70052)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70052)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70052)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70052)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70052)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70052)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70052)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Brian C. Lane <bcl@redhat.com> 34.9.19-1
changelog:
  - mkksiso: Optionally support 3 arguments or --ks (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Add -U to xorriso on ppc64le (bcl)
    Resolves: rhbz#2109665
  - mkksiso: Fix passing -iso-level to xorriso (bcl)
    Related: rhbz#2109665


author: Brian C. Lane <bcl@redhat.com> 34.9.20-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042057
  - templates: Update path to license files (bcl)
    Related: rhbz#2042057
  - templates: Update boot timeout to 5s (bcl)
    Related: rhbz#2042057


author: Brian C. Lane <bcl@redhat.com> 34.9.23-1
changelog:
  - rsyslog.conf: Set WorkDirectory to /var/lib/rsyslog (bcl)
    Resolves: rhbz#2158731
  - lorax.spec: fix changelog entry for 2132511 (bcl)
    Related: rhbz#2132511


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Brian C. Lane <bcl@redhat.com> - 9.6-1
changelog:
  - Bump release version to 9.6 (bcl)
    Related: RHEL-69011
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-69011


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.31-0.1.beta
changelog:
  - New version
    Resolves: rhbz#1758783
  - Dropped no-scp, no-optimization, compile-fix, crash-fix patches (all upstreamed)
  - Dropped fgnu89-inline patch (probably not needed)


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.36-1
changelog:
  - Upgrade to 2.2.36
  - Support route source. RHEL-56258
  - Fix setting empty MPTCP flags. RHEL-38607
  - Fix gc mode on blackhole route. RHEL-56727
  - Support ipsec require-id-on-certificate. RHEL-50696
  - Reselect iface DNS if desired. RHEL-56557


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Do not deactivate connection when removing routes. RHEL-70138
  - Use specific libnmstate logger. RHEL-72016
  - Do not deactivate connection if mptcp flags didn't change. RHEL-53211


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Jan Staněk <jstanek@redhat.com> - 1:18.14.2-3
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes CVE-2024-25629 (c-ares)


author: Andrei Radchenko <aradchen@redhat.com>
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76363 RHEL-76554 RHEL-76540


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


