# changelog

author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-541.el9]
changelog:
  - platform/x86/amd/pmc: Detect when STB is not available (CKI Backport Bot) [RHEL-68176] {CVE-2024-53072}
  - fs: dlm: avoid false-positive checker warning (Alexander Aring) [RHEL-60001]
  - ice: change q_index variable type to s16 to store -1 value (Petr Oros) [RHEL-49816]
  - ice: Fix use after free during unload with ports in bridge (Petr Oros) [RHEL-49816]
  - ice: fix crash on probe for DPLL enabled E810 LOM (Petr Oros) [RHEL-49816]
  - ice: block SF port creation in legacy mode (Petr Oros) [RHEL-49816]
  - ice: Fix increasing MSI-X on VF (Petr Oros) [RHEL-49816]
  - ice: Flush FDB entries before reset (Petr Oros) [RHEL-49816]
  - ice: Fix netif_is_ice() in Safe Mode (Petr Oros) [RHEL-49816]
  - ice: Fix entering Safe Mode (Petr Oros) [RHEL-49816]
  - ice: fix VLAN replay after reset (Petr Oros) [RHEL-49816]
  - ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins (Petr Oros) [RHEL-49816]
  - ice: fix memleak in ice_init_tx_topology() (Petr Oros) [RHEL-49816]
  - ice: clear port vlan config during reset (Petr Oros) [RHEL-49816]
  - ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() (Petr Oros) [RHEL-49816]
  - ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() (Petr Oros) [RHEL-49816]
  - ice: set correct dst VSI in only LAN filters (Petr Oros) [RHEL-49816]
  - ice: Fix a NULL vs IS_ERR() check in probe() (Petr Oros) [RHEL-49816]
  - ice: Fix a couple NULL vs IS_ERR() bugs (Petr Oros) [RHEL-49816]
  - ice: Fix lldp packets dropping after changing the number of channels (Petr Oros) [RHEL-49816]
  - ice: subfunction activation and base devlink ops (Petr Oros) [RHEL-49816]
  - ice: basic support for VLAN in subfunctions (Petr Oros) [RHEL-49816]
  - ice: support subfunction devlink Tx topology (Petr Oros) [RHEL-49816]
  - ice: implement netdevice ops for SF representor (Petr Oros) [RHEL-49816]
  - ice: check if SF is ready in ethtool ops (Petr Oros) [RHEL-49816]
  - ice: don't set target VSI for subfunction (Petr Oros) [RHEL-49816]
  - ice: create port representor for SF (Petr Oros) [RHEL-49816]
  - ice: make representor code generic (Petr Oros) [RHEL-49816]
  - ice: implement netdev for subfunction (Petr Oros) [RHEL-49816]
  - ice: base subfunction aux driver (Petr Oros) [RHEL-49816]
  - ice: allocate devlink for subfunction (Petr Oros) [RHEL-49816]
  - ice: treat subfunction VSI the same as PF VSI (Petr Oros) [RHEL-49816]
  - ice: add basic devlink subfunctions support (Petr Oros) [RHEL-49816]
  - ice: export ice ndo_ops functions (Petr Oros) [RHEL-49816]
  - ice: add new VSI type for subfunctions (Petr Oros) [RHEL-49816]
  - ice: do not bring the VSI up, if it was down before the XDP setup (Petr Oros) [RHEL-49816]
  - ice: remove ICE_CFG_BUSY locking from AF_XDP code (Petr Oros) [RHEL-49816]
  - ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset (Petr Oros) [RHEL-49816]
  - ice: check for XDP rings instead of bpf program when unconfiguring (Petr Oros) [RHEL-49816]
  - ice: protect XDP configuration with a mutex (Petr Oros) [RHEL-49816]
  - ice: move netif_queue_set_napi to rtnl-protected sections (Petr Oros) [RHEL-49816]
  - ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node() (Petr Oros) [RHEL-49816]
  - ice: Report NVM version numbers on mismatch during load (Petr Oros) [RHEL-49816]
  - ice: remove unnecessary control queue cmd_buf arrays (Petr Oros) [RHEL-49816]
  - ice: reword comments referring to control queues (Petr Oros) [RHEL-49816]
  - ice: stop intermixing AQ commands/responses debug dumps (Petr Oros) [RHEL-49816]
  - ice: do not clutter debug logs with unused data (Petr Oros) [RHEL-49816]
  - ice: improve debug print for control queue messages (Petr Oros) [RHEL-49816]
  - ice: implement and use rd32_poll_timeout for ice_sq_done timeout (Petr Oros) [RHEL-49816]
  - ice: add callbacks for Embedded SYNC enablement on dpll pins (Petr Oros) [RHEL-49816]
  - ice: use internal pf id instead of function number (Petr Oros) [RHEL-49816]
  - ice: Fix a 32bit bug (Petr Oros) [RHEL-49816]
  - ice: enable FDIR filters from raw binary patterns for VFs (Petr Oros) [RHEL-49816]
  - ice: add method to disable FDIR SWAP option (Petr Oros) [RHEL-49816]
  - virtchnl: support raw packet in protocol header (Petr Oros) [RHEL-49816]
  - ice: add API for parser profile initialization (Petr Oros) [RHEL-49816]
  - ice: add UDP tunnels support to the parser (Petr Oros) [RHEL-49816]
  - ice: support turning on/off the parser's double vlan mode (Petr Oros) [RHEL-49816]
  - ice: add parser execution main loop (Petr Oros) [RHEL-49816]
  - ice: add parser internal helper functions (Petr Oros) [RHEL-49816]
  - ice: add debugging functions for the parser sections (Petr Oros) [RHEL-49816]
  - ice: parse and init various DDP parser sections (Petr Oros) [RHEL-49816]
  - ice: add parser create and destroy skeleton (Petr Oros) [RHEL-49816]
  - ice: Fix incorrect assigns of FEC counts (Petr Oros) [RHEL-49816]
  - ice: Skip PTP HW writes during PTP reset procedure (Petr Oros) [RHEL-49816]
  - ice: Fix reset handler (Petr Oros) [RHEL-49816]
  - ice: Fix recipe read procedure (Petr Oros) [RHEL-49816]
  - ice: Add tracepoint for adding and removing switch rules (Petr Oros) [RHEL-49816]
  - ice: Remove unused members from switch API (Petr Oros) [RHEL-49816]
  - ice: Optimize switch recipe creation (Petr Oros) [RHEL-49816]
  - ice: remove unused recipe bookkeeping data (Petr Oros) [RHEL-49816]
  - ice: Simplify bitmap setting in adding recipe (Petr Oros) [RHEL-49816]
  - ice: Remove reading all recipes before adding a new one (Petr Oros) [RHEL-49816]
  - ice: Remove unused struct ice_prot_lkup_ext members (Petr Oros) [RHEL-49816]
  - ice: remove eswitch rebuild (Petr Oros) [RHEL-49816]
  - ice: Add support for devlink local_forwarding param (Petr Oros) [RHEL-49816]
  - ice: Implement driver functionality to dump serdes equalizer values (Petr Oros) [RHEL-49816]
  - ice: Implement driver functionality to dump fec statistics (Petr Oros) [RHEL-49816]
  - ice: Extend Sideband Queue command to support flags (Petr Oros) [RHEL-49816]
  - ice: do not init struct ice_adapter more times than needed (Petr Oros) [RHEL-49816]
  - ice: Distinguish driver reset and removal for AQ shutdown (Petr Oros) [RHEL-49816]
  - ice: Allow different FW API versions based on MAC type (Petr Oros) [RHEL-49816]
  - ice: Check all ice_vsi_rebuild() errors in function (Petr Oros) [RHEL-49816]
  - ice: Add get/set hw address for VFs using devlink commands (Petr Oros) [RHEL-49816]
  - ice: update representor when VSI is ready (Petr Oros) [RHEL-49816]
  - ice: move VSI configuration outside repr setup (Petr Oros) [RHEL-49816]
  - ice: move devlink locking outside the port creation (Petr Oros) [RHEL-49816]
  - ice: store representor ID in bridge port (Petr Oros) [RHEL-49816]
  - ice: add and use roundup_u64 instead of open coding equivalent (Petr Oros) [RHEL-49816]
  - ice: check for unregistering correct number of devlink params (Petr Oros) [RHEL-49816]
  - ice: flower: validate control flags (Petr Oros) [RHEL-49816]
  - ice: Document tx_scheduling_layers parameter (Petr Oros) [RHEL-49816]
  - ice: Add tx_scheduling_layers devlink param (Petr Oros) [RHEL-49816]
  - ice: Enable switching default Tx scheduler topology (Petr Oros) [RHEL-49816]
  - ice: Adjust the VSI/Aggregator layers (Petr Oros) [RHEL-49816]
  - ice: Support 5 layer topology (Petr Oros) [RHEL-49816]
  - net: intel: implement modern PM ops declarations (ice) (Petr Oros) [RHEL-49816]
  - overflow: Change DEFINE_FLEX to take __counted_by member (Petr Oros) [RHEL-49816]
  - ice: Implement RSS settings for GTP using ethtool (Petr Oros) [RHEL-49816]
  - net: intel: fix old compiler regressions (ice) (Petr Oros) [RHEL-49816]
  - intel: fix string truncation warnings (ice) (Petr Oros) [RHEL-49816]
  - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). (ice) (Petr Oros) [RHEL-49816]
  - Documentation: networking: correct spelling (ice) (Petr Oros) [RHEL-49816]
  - cpufreq: intel_pstate: Update asym capacity for CPUs that were offline initially (Steve Best) [RHEL-68120]
  - x86/sev: Ensure that RMP table fixups are reserved (Bandan Das) [RHEL-68360]
  - redhat/configs: aarch64: compile cpufreq-dt-platdev as built-in (Radu Rendec) [RHEL-68851]
  - iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift (Jerry Snitselaar) [RHEL-67994]
  - iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (CKI Backport Bot) [RHEL-65892] {CVE-2024-50101}
  - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-69123]
  - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-69123]
  - sfc: Don't invoke xdp_do_flush() from netpoll. (Michal Schmidt) [RHEL-52776]
  - sfc: Add X4 PF support (Michal Schmidt) [RHEL-52776]
  - sfc: siena: rip out rss-context dead code (Michal Schmidt) [RHEL-52776]
  - sfc: convert comma to semicolon (Michal Schmidt) [RHEL-52776]
  - sfc/siena: Convert comma to semicolon (Michal Schmidt) [RHEL-52776]
  - sfc: Convert to use ERR_CAST() (Michal Schmidt) [RHEL-52776]
  - sfc: remove .cap_rss_ctx_supported from updated drivers (Michal Schmidt) [RHEL-52776]
  - sfc: falcon: Make I2C terminology more inclusive (Michal Schmidt) [RHEL-52776]
  - sfc: remove get_rxfh_context dead code (Michal Schmidt) [RHEL-52776]
  - sfc: use new rxfh_context API (Michal Schmidt) [RHEL-52776]
  - sfc: use flow_rule_is_supp_control_flags() (Michal Schmidt) [RHEL-52776]
  - sfc: adopt skb_network_offset() and similar helpers (Michal Schmidt) [RHEL-52776]
  - sfc: fix a double-free bug in efx_probe_filters (Michal Schmidt) [RHEL-52776]
  - sfc-siena: Implement ndo_hwtstamp_(get|set) (Michal Schmidt) [RHEL-52776]
  - sfc: Implement ndo_hwtstamp_(get|set) (Michal Schmidt) [RHEL-52776]
  - sfc: cleanup and reduce netlink error messages (Michal Schmidt) [RHEL-52776]
  - sfc: support offloading ct(nat) action in RHS rules (Michal Schmidt) [RHEL-52776]
  - sfc: parse mangle actions (NAT) in conntrack entries (Michal Schmidt) [RHEL-52776]
  - sfc: replace deprecated strncpy with strscpy (Michal Schmidt) [RHEL-52776]
  - sfc: support TC rules which require OR-AR-CT-AR flow (Michal Schmidt) [RHEL-52776]
  - sfc: ensure an extack msg from efx_tc_flower_replace_foreign EOPNOTSUPPs (Michal Schmidt) [RHEL-52776]
  - sfc: offload foreign RHS rules without an encap match (Michal Schmidt) [RHEL-52776]
  - sfc: support TC left-hand-side rules on foreign netdevs (Michal Schmidt) [RHEL-52776]
  - sfc: Replace xdp_do_flush_map() with xdp_do_flush(). (Michal Schmidt) [RHEL-52776]
  - sfc: handle error pointers returned by rhashtable_lookup_get_insert_fast() (Michal Schmidt) [RHEL-52776]
  - sfc: make coding style of PTP addresses consistent with core (Michal Schmidt) [RHEL-52776]
  - sfc: check for zero length in EF10 RX prefix (Michal Schmidt) [RHEL-52776]
  - sfc: extend pedit add action to handle decrement ipv6 hop limit (Michal Schmidt) [RHEL-52776]
  - sfc: introduce pedit add actions on the ipv4 ttl field (Michal Schmidt) [RHEL-52776]
  - sfc: add decrement ipv6 hop limit by offloading set hop limit actions (Michal Schmidt) [RHEL-52776]
  - sfc: add decrement ttl by offloading set ipv4 ttl actions (Michal Schmidt) [RHEL-52776]
  - sfc: add mac source and destination pedit action offload (Michal Schmidt) [RHEL-52776]
  - sfc: introduce ethernet pedit set action infrastructure (Michal Schmidt) [RHEL-52776]
  - sfc: Remove unneeded semicolon (Michal Schmidt) [RHEL-52776]
  - sfc: don't fail probe if MAE/TC setup fails (Michal Schmidt) [RHEL-52776]
  - sfc: don't unregister flow_indr if it was never registered (Michal Schmidt) [RHEL-52776]
  - sfc: offload left-hand side rules for conntrack (Michal Schmidt) [RHEL-52776]
  - sfc: conntrack state matches in TC rules (Michal Schmidt) [RHEL-52776]
  - sfc: handle non-zero chain_index on TC rules (Michal Schmidt) [RHEL-52776]
  - sfc: offload conntrack flow entries (match only) from CT zones (Michal Schmidt) [RHEL-52776]
  - sfc: functions to insert/remove conntrack entries to MAE hardware (Michal Schmidt) [RHEL-52776]
  - sfc: functions to register for conntrack zone offload (Michal Schmidt) [RHEL-52776]
  - sfc: add MAE table machinery for conntrack table (Michal Schmidt) [RHEL-52776]
  - sfc: fix use-after-free in efx_tc_flower_record_encap_match() (Michal Schmidt) [RHEL-52776]
  - sfc: support TC decap rules matching on enc_src_port (Michal Schmidt) [RHEL-52776]
  - sfc: support TC decap rules matching on enc_ip_tos (Michal Schmidt) [RHEL-52776]
  - sfc/falcon: fix repeated words in comments (Michal Schmidt) [RHEL-52776]
  - sfc: falcon: Use the bitmap API to allocate bitmaps (Michal Schmidt) [RHEL-52776]
  - sfc:falcon: fix repeated words in comments (Michal Schmidt) [RHEL-52776]
  - sfc: Stop using iommu_present() (Michal Schmidt) [RHEL-52776]
  - sfc: falcon: Check null pointer of rx_queue->page_ring (Michal Schmidt) [RHEL-52776]
  - sfc: use swap() to make code cleaner (Michal Schmidt) [RHEL-52776]
  - s390/cio: Externalize full CMG characteristics (Mete Durlu) [RHEL-50790]
  - s390/cio: export CHPID operating speed (Mete Durlu) [RHEL-50790]
  - s390/cio: export measurement data for all CMGs (Mete Durlu) [RHEL-50790]
  - s390/cio: export extended channel-path-measurement data (Mete Durlu) [RHEL-50790]
  - s390/cio: simplify measurement attribute registration (Mete Durlu) [RHEL-50790]
  - s390/cio: rework channel-utilization-block handling (Mete Durlu) [RHEL-50790]
  - vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data() (Alex Williamson) [RHEL-69746]
  - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (Alex Williamson) [RHEL-69746]
  - bpf: Do not alloc arena on unsupported arches (Viktor Malik) [RHEL-66263]
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids (Steve Best) [RHEL-70007]
  - netfilter: br_netfilter: fix panic with metadata_dst skb (Ivan Vecera) [RHEL-59418]
  - bridge: mcast: Fail MDB get request on empty entry (Ivan Vecera) [RHEL-59418]
  - mptcp: error out earlier on disconnect (CKI Backport Bot) [RHEL-69692] {CVE-2024-53123}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-542.el9]
changelog:
  - bpf: Get better reg range with ldsx and 32bit compare (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Use -4095 as the bad address for bits iterator (Viktor Malik) [RHEL-30774]
  - selftests/bpf: update send_signal to lower perf evemts frequency (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add three test cases for bits_iter (Viktor Malik) [RHEL-30774]
  - bpf: Use __u64 to save the bits in bits iterator (Viktor Malik) [RHEL-30774]
  - bpf: Check the validity of nr_words in bpf_iter_bits_new() (Viktor Malik) [RHEL-30774]
  - bpf: Add bpf_mem_alloc_check_size() helper (Viktor Malik) [RHEL-30774]
  - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add test case for delta propagation (Viktor Malik) [RHEL-30774]
  - bpf: Fix print_reg_state's constant scalar dump (Viktor Malik) [RHEL-30774]
  - bpf: Fix incorrect delta propagation between linked registers (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add more test case for field flattening (Viktor Malik) [RHEL-30774]
  - bpf: Check the remaining info_cnt before repeating btf fields (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add a selftest to check for incorrect names (Viktor Malik) [RHEL-30774]
  - bpftool: Fix handling enum64 in btf dump sorting (Viktor Malik) [RHEL-30774]
  - libbpf: Ensure new BTF objects inherit input endianness (Viktor Malik) [RHEL-30774]
  - bpf: Fix a crash when btf_parse_base() returns an error pointer (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add a test to verify previous stacksafe() fix (Viktor Malik) [RHEL-30774]
  - bpf: Fix updating attached freplace prog in prog_array map (Viktor Malik) [RHEL-30774]
  - libbpf: Fix license for btf_relocate.c (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Filter out _GNU_SOURCE when compiling test_cpp (Viktor Malik) [RHEL-30774]
  - tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids (Viktor Malik) [RHEL-30774]
  - bpf, events: Use prog to emit ksymbol event for main program (Viktor Malik) [RHEL-30774]
  - bpftool: Fix typo in usage help (Viktor Malik) [RHEL-30774]
  - libbpf: Fix no-args func prototype BTF dumping syntax (Viktor Malik) [RHEL-30774]
  - selftests/bpf: fexit_sleep: Fix stack allocation for arm64 (Viktor Malik) [RHEL-30774]
  - test_bpf: convert comma to semicolon (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Test for null-pointer-deref bugfix in resolve_prog_type() (Viktor Malik) [RHEL-30774]
  - bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT (Viktor Malik) [RHEL-30774]
  - selftests/bpf: DENYLIST.aarch64: Skip fexit_sleep again (Viktor Malik) [RHEL-30774]
  - bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o (Viktor Malik) [RHEL-30774]
  - bpf: annotate BTF show functions with __printf (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add ASSERT_OK_FD macro (Viktor Malik) [RHEL-30774]
  - bpf: relax zero fixed offset constraint on KF_TRUSTED_ARGS/KF_RCU (Viktor Malik) [RHEL-30774]
  - libbpf: improve old BPF skeleton handling for map auto-attach (Viktor Malik) [RHEL-30774]
  - libbpf: fix BPF skeleton forward/backward compat handling (Viktor Malik) [RHEL-30774]
  - bpftool: improve skeleton backwards compat with old buggy libbpfs (Viktor Malik) [RHEL-30774]
  - selftests/bpf: DENYLIST.aarch64: Remove fexit_sleep (Viktor Malik) [RHEL-30774]
  - libbpf: Add NULL checks to bpf_object__{prev_map,next_map} (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Remove exceptions tests from DENYLIST.s390x (Viktor Malik) [RHEL-30774]
  - s390/bpf: Implement exceptions (Viktor Malik) [RHEL-30774]
  - s390/bpf: Change seen_reg to a mask (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Remove arena tests from DENYLIST.s390x (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add UAF tests for arena atomics (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Introduce __arena_global (Viktor Malik) [RHEL-30774]
  - s390/bpf: Support arena atomics (Viktor Malik) [RHEL-30774]
  - s390/bpf: Enable arena (Viktor Malik) [RHEL-30774]
  - s390/bpf: Support address space cast instruction (Viktor Malik) [RHEL-30774]
  - s390/bpf: Support BPF_PROBE_MEM32 (Viktor Malik) [RHEL-30774]
  - s390/bpf: Land on the next JITed instruction after exception (Viktor Malik) [RHEL-30774]
  - s390/bpf: Introduce pre- and post- probe functions (Viktor Malik) [RHEL-30774]
  - s390/bpf: Get rid of get_probe_mem_regno() (Viktor Malik) [RHEL-30774]
  - s390/bpf: Factor out emitting probe nops (Viktor Malik) [RHEL-30774]
  - bpftool: Mount bpffs when pinmaps path not under the bpffs (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add testcase where 7th argment is struct (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Factor out many args tests from tracing_struct (Viktor Malik) [RHEL-30774]
  - bpf: Use precise image size for struct_ops trampoline (Viktor Malik) [RHEL-30774]
  - libbpf: Fix error handling in btf__distill_base() (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Move ARRAY_SIZE to bpf_misc.h (Viktor Malik) [RHEL-30774]
  - libbpf: Fix clang compilation error in btf_relocate.c (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Don't close(-1) in serial_test_fexit_stress() (Viktor Malik) [RHEL-30774]
  - bpf: add new negative selftests to cover missing check_func_arg_reg_off() and reg->type check (Viktor Malik) [RHEL-30774]
  - bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses (Viktor Malik) [RHEL-30774]
  - bpf: Fix tailcall cases in test_bpf (Viktor Malik) [RHEL-30774]
  - libbpf: Skip base btf sanity checks (Viktor Malik) [RHEL-30774]
  - selftests/bpf: add test validating uprobe/uretprobe stack traces (Viktor Malik) [RHEL-30774]
  - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined (Viktor Malik) [RHEL-30774]
  - bpf, docs: Address comments from IETF Area Directors (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod (Viktor Malik) [RHEL-30774]
  - kbuild,bpf: Add module-specific pahole flags for distilled base BTF (Viktor Malik) [RHEL-30774]
  - libbpf,bpf: Share BTF relocate-related code with kernel (Viktor Malik) [RHEL-30774]
  - libbpf: Split field iter code into its own file kernel (Viktor Malik) [RHEL-30774]
  - module, bpf: Store BTF base pointer in struct module (Viktor Malik) [RHEL-30774]
  - libbpf: BTF relocation followup fixing naming, loop logic (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Match tests against regular expression (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Support checks against a regular expression (Viktor Malik) [RHEL-30774]
  - libbpf: Checking the btf_type kind when fixing variable offsets (Viktor Malik) [RHEL-30774]
  - bpf: Add security_file_post_open() LSM hook to sleepable_lsm_hooks (Viktor Malik) [RHEL-30774]
  - bpftool: Allow compile-time checks of BPF map auto-attach support in skeleton (Viktor Malik) [RHEL-30774]
  - bpf: remove redeclaration of new_n in bpf_verifier_vlog (Viktor Malik) [RHEL-30774]
  - bpf: remove unused parameter in __bpf_free_used_btfs (Viktor Malik) [RHEL-30774]
  - bpf: remove unused parameter in bpf_jit_binary_pack_finalize (Viktor Malik) [RHEL-30774]
  - bpf, x64: Remove tail call detection (Viktor Malik) [RHEL-30774]
  - bpf, verifier: Correct tail_call_reachable for bpf prog (Viktor Malik) [RHEL-30774]
  - resolve_btfids: Handle presence of .BTF.base section (Viktor Malik) [RHEL-30774]
  - libbpf: Make btf_parse_elf process .BTF.base transparently (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Extend distilled BTF tests to cover BTF relocation (Viktor Malik) [RHEL-30774]
  - libbpf: Split BTF relocation (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Test distilled base, split BTF generation (Viktor Malik) [RHEL-30774]
  - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add tests for add_const (Viktor Malik) [RHEL-30774]
  - bpf: Support can_loop/cond_break on big endian (Viktor Malik) [RHEL-30774]
  - bpf: Track delta between "linked" registers. (Viktor Malik) [RHEL-30774]
  - selftests: bpf: add testmod kfunc for nullable params (Viktor Malik) [RHEL-30774]
  - bpf: verifier: make kfuncs args nullalble (Viktor Malik) [RHEL-30774]
  - bpf: selftests: Do not use generated kfunc prototypes for arena progs (Viktor Malik) [RHEL-30774]
  - bpf: Fix bpf_dynptr documentation comments (Viktor Malik) [RHEL-30774]
  - bpftool: Support dumping kfunc prototypes from BTF (Viktor Malik) [RHEL-30774]
  - bpf: selftests: xfrm: Opt out of using generated kfunc prototypes (Viktor Malik) [RHEL-30774]
  - bpf: selftests: nf: Opt out of using generated kfunc prototypes (Viktor Malik) [RHEL-30774]
  - bpf: treewide: Align kfunc signatures to prog point-of-view (Viktor Malik) [RHEL-30774]
  - bpf: verifier: Relax caller requirements for kfunc projection type args (Viktor Malik) [RHEL-30774]
  - bpf: selftests: Fix bpf_map_sum_elem_count() kfunc prototype (Viktor Malik) [RHEL-30774]
  - bpf: selftests: Fix bpf_cpumask_first_zero() kfunc prototype (Viktor Malik) [RHEL-30774]
  - bpf: selftests: Fix fentry test kfunc prototypes (Viktor Malik) [RHEL-30774]
  - bpf: selftests: Fix bpf_iter_task_vma_new() prototype (Viktor Malik) [RHEL-30774]
  - kbuild: bpf: Tell pahole to DECL_TAG kfuncs (Viktor Malik) [RHEL-30774]
  - bpftool: Query only cgroup-related attach types (Viktor Malik) [RHEL-30774]
  - libbpf: Auto-attach struct_ops BPF maps in BPF skeleton (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add btf_field_iter selftests (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT (Viktor Malik) [RHEL-30774]
  - libbpf: Remove callback-based type/string BTF field visitor helpers (Viktor Malik) [RHEL-30774]
  - bpftool: Use BTF field iterator in btfgen (Viktor Malik) [RHEL-30774]
  - libbpf: Make use of BTF field iterator in BTF handling code (Viktor Malik) [RHEL-30774]
  - libbpf: Make use of BTF field iterator in BPF linker code (Viktor Malik) [RHEL-30774]
  - libbpf: Add BTF field iterator (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Ignore .llvm.<hash> suffix in kallsyms_find() (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Fix bpf_cookie and find_vma in nested VM (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Test global bpf_list_head arrays. (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Test global bpf_rb_root arrays and fields in nested struct types. (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Test kptr arrays and kptrs in nested struct fields. (Viktor Malik) [RHEL-30774]
  - bpf: limit the number of levels of a nested struct type. (Viktor Malik) [RHEL-30774]
  - bpf: look into the types of the fields of a struct type recursively. (Viktor Malik) [RHEL-30774]
  - bpf: create repeated fields for arrays. (Viktor Malik) [RHEL-30774]
  - bpf: refactor btf_find_struct_field() and btf_find_datasec_var(). (Viktor Malik) [RHEL-30774]
  - bpf: Remove unnecessary call to btf_field_type_size(). (Viktor Malik) [RHEL-30774]
  - bpf: Remove unnecessary checks on the offset of btf_field. (Viktor Malik) [RHEL-30774]
  - test_bpf: Add missing MODULE_DESCRIPTION() (Viktor Malik) [RHEL-30774]
  - bpftool: Fix typo in MAX_NUM_METRICS macro name (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Remove unused struct 'libcap' (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Remove unused 'key_t' structs (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Remove unused struct 'scale_test_def' (Viktor Malik) [RHEL-30774]
  - bpftool: Change pid_iter.bpf.c to comply with the change of bpf_link_fops. (Viktor Malik) [RHEL-30774]
  - selftests/bpf: test struct_ops with epoll (Viktor Malik) [RHEL-30774]
  - bpf: export bpf_link_inc_not_zero. (Viktor Malik) [RHEL-30774]
  - bpf: support epoll from bpf struct_ops links. (Viktor Malik) [RHEL-30774]
  - bpf: enable detaching links of struct_ops objects. (Viktor Malik) [RHEL-30774]
  - bpf: pass bpf_struct_ops_link to callbacks in bpf_struct_ops. (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Add selftest for bits iter (Viktor Malik) [RHEL-30774]
  - bpf: Add bits iterator (Viktor Malik) [RHEL-30774]
  - bitops: make BYTES_TO_BITS() treewide-available (Viktor Malik) [RHEL-30774]
  - libbpf: Configure log verbosity with env variable (Viktor Malik) [RHEL-30774]
  - bpf, docs: Fix instruction.rst indentation (Viktor Malik) [RHEL-30774]
  - bpf, docs: Clarify call local offset (Viktor Malik) [RHEL-30774]
  - bpf, docs: Add table captions (Viktor Malik) [RHEL-30774]
  - bpf, docs: clarify sign extension of 64-bit use of 32-bit imm (Viktor Malik) [RHEL-30774]
  - bpf, docs: Use RFC 2119 language for ISA requirements (Viktor Malik) [RHEL-30774]
  - bpf, docs: Move sentence about returning R0 to abi.rst (Viktor Malik) [RHEL-30774]
  - bpf: constify member bpf_sysctl_kern:: Table (Viktor Malik) [RHEL-30774]
  - selftests/bpf: Fix prog numbers in test_sockmap (Viktor Malik) [RHEL-30774]
  - bpf: Remove unused variable "prev_state" (Viktor Malik) [RHEL-30774]
  - bpftool: Un-const bpf_func_info to fix it for llvm 17 and newer (Viktor Malik) [RHEL-30774]
  - kbuild, bpf: Use test-ge check for v1.25-only pahole (Viktor Malik) [RHEL-30774]
  - bpftool: Introduce btf c dump sorting (Viktor Malik) [RHEL-30774]
  - bpftool: Fix make dependencies for vmlinux.h (Viktor Malik) [RHEL-30774]
  - redhat: Add protected XTS and HMAC config files (Mete Durlu) [RHEL-50772]
  - s390/pkey: Add AES xts and HMAC clear key token support (Mete Durlu) [RHEL-50772]
  - s390/cpacf: Add MSA 10 and 11 new PCKMO functions (Mete Durlu) [RHEL-50772]
  - s390/pkey_pckmo: Return with success for valid protected key types (Mete Durlu) [RHEL-50772]
  - s390/pkey: Add function to enforce pkey handler modules load (Mete Durlu) [RHEL-50772]
  - s390/pkey: Add slowpath function to CCA and EP11 handler (Mete Durlu) [RHEL-50772]
  - s390/pkey: Introduce pkey base with handler registry and handler modules (Mete Durlu) [RHEL-50772]
  - s390/pkey: Unify pkey cca, ep11 and pckmo functions signatures (Mete Durlu) [RHEL-50772]
  - s390/pkey: Rework and split PKEY kernel module code (Mete Durlu) [RHEL-50772]
  - s390/pkey: Split pkey_unlocked_ioctl function (Mete Durlu) [RHEL-50772]
  - s390/pkey: Wipe copies of protected- and secure-keys (Mete Durlu) [RHEL-50772]
  - s390/pkey: Wipe copies of clear-key structures on failure (Mete Durlu) [RHEL-50772]
  - s390/pkey: Wipe sensitive data on failure (Mete Durlu) [RHEL-50772]
  - s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings (Mete Durlu) [RHEL-50772]
  - scsi: aacraid: Fix double-free on probe failure (Tomas Henzl) [RHEL-64334] {CVE-2024-46673}
  - selftests/landlock: Build without static libraries (Mamatha Inamdar) [RHEL-59644]
  - selftests/landlock: Fix out-of-tree builds (Mamatha Inamdar) [RHEL-59644]
  - selftests/landlock: fix broken include of linux/landlock.h (Mamatha Inamdar) [RHEL-59644]
  - selftests/landlock: drop deprecated headers dependency (Mamatha Inamdar) [RHEL-59644]
  - fscache: Fix oops due to race with cookie_lru and use_cookie (CKI Backport Bot) [RHEL-63701] {CVE-2022-48989}
  - block: sed-opal: add ioctl IOC_OPAL_SET_SID_PW (Ming Lei) [RHEL-56730]
  - uprobes: fix kernel info leak via "[uprobes]" vma (Oleg Nesterov) [RHEL-63997] {CVE-2024-49975}
  - selftests: forwarding: Add IPv6 GRE remote change tests (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Sync Rx buffers for device (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Sync Rx buffers for CPU (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_ptp: Add missing verification before pushing Tx header (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: fix xa_store() error checking (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Fix -Wformat-truncation warning (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Remove unnecessary assignments (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Remove unnecessary checks (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Simplify rollback (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Make mlxsw_thermal_module_{init, fini} symmetric (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Remove unused arguments (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Fold two loops into one (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Remove another unnecessary check (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Remove unnecessary check (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Call thermal_zone_device_unregister() unconditionally (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Lock configuration space of upstream bridge during reset (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Report valid current state during cooling device registration (Ivan Vecera) [RHEL-67125]
  - mlxsw: Warn about invalid accesses to array fields (Ivan Vecera) [RHEL-67125]
  - selftests: mlxsw: mirror_gre: Obey TESTS (Ivan Vecera) [RHEL-67125]
  - selftests: mlxsw: mirror_gre: Simplify (Ivan Vecera) [RHEL-67125]
  - mlxsw: Implement ethtool operation to write to a transceiver module EEPROM (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Use fragmented buffers (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Store number of scatter/gather entries for maximum packet size (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Fix driver initialization with Spectrum-4 (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Use napi_consume_skb() to free SKB as part of Tx completion (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Do not store SKB for RDQ elements (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Optimize data buffer access (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Use page pool for Rx buffers allocation (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Initialize page pool per CQ (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Store CQ pointer as part of RDQ structure (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Split NAPI setup/teardown into two steps (Ivan Vecera) [RHEL-67125]
  - mlxsw: Use the same maximum MTU value throughout the driver (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Set more accurate values for netdevice min/max MTU (Ivan Vecera) [RHEL-67125]
  - mlxsw: Adjust MTU value to hardware check (Ivan Vecera) [RHEL-67125]
  - mlxsw: port: Edit maximum MTU value (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Apply user-defined multipath hash seed (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_erp: Fix object nesting warning (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_atcam: Fix wrong comment (Ivan Vecera) [RHEL-67125]
  - lib: test_objagg: Fix spelling (Ivan Vecera) [RHEL-67125]
  - lib: objagg: Fix spelling (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Constify struct devlink_dpipe_table_ops (Ivan Vecera) [RHEL-67125]
  - devlink: Constify the 'table_ops' parameter of devl_dpipe_table_register() (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Use NAPI for event processing (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Reorganize 'mlxsw_pci_queue' structure (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Initialize dummy net devices for NAPI (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Ring RDQ and CQ doorbells once per several completions (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Handle up to 64 Rx completions in tasklet (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_tcam: Rate limit error message (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_tcam: Fix race in region ID allocation (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Fix driver initialization with old firmware (Ivan Vecera) [RHEL-67125]
  - mlxsw: core: Unregister EMAD trap using FORWARD action (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_flower: validate control flags (Ivan Vecera) [RHEL-67125]
  - selftests: mlxsw: ethtool_lanes: Wait for lanes parameter dump explicitly (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_ethtool: Add support for 100Gb/s per lane link modes (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Store DQ pointer as part of CQ structure (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Remove mlxsw_pci_cq_count() (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Remove mlxsw_pci_sdq_count() (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Break mlxsw_pci_cq_tasklet() into tasklets per queue type (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Make style change in mlxsw_pci_cq_tasklet() (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Remove unused wait queue (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Use only one event queue (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Rename MLXSW_PCI_EQS_COUNT (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Poll command interface for each cmd_exec() (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Make style changes in mlxsw_pci_eq_tasklet() (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Remove unused counters (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Arm CQ doorbell regardless of number of completions (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Do not setup tasklet from operation (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Move mlxsw_pci_cq_{init, fini}() (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Move mlxsw_pci_eq_{init, fini}() (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Share nexthop counters in resilient groups (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Support nexthop group hardware statistics (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Track NH ID's of group members (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Add helpers for nexthop counters (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Avoid allocating NH counters twice (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Allow fetch-and-clear of flow counters (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Have mlxsw_sp_nexthop_counter_enable() return int (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Rename two functions (Ivan Vecera) [RHEL-67125]
  - mlxsw: core_thermal: Set THERMAL_TRIP_FLAG_RW_TEMP directly (Ivan Vecera) [RHEL-67125]
  - mlxsw: remove I2C_CLASS_HWMON from drivers w/o detect and address_list (Ivan Vecera) [RHEL-67125]
  - mlxsw: Use refcount_t for reference counting (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Refactor LAG create and destroy code (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Search for free LAD ID once (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Query max_lag once (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Remove mlxsw_sp_lag_get() (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Change mlxsw_sp_upper to LAG structure (Ivan Vecera) [RHEL-67125]
  - selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes (Ivan Vecera) [RHEL-67125]
  - selftests: mlxsw: qos_pfc: Remove wrong description (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Set NVE flood profile as part of FID configuration (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add an "any" packet type (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Add nve_flood_prf_id field to SFMR (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Use CFF mode where available (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add support for rFID family in CFF flood mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add a family for bridge FIDs in CFF flood mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Initialize flood profiles in CFF mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add profile_id to flood profile (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add an object to keep flood profiles (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add hooks for RSP table maintenance (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add a not-UC packet type (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add an op for packing SFMR (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add an op to get PGT address of a FID (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add an op to get PGT allocation size (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Add an op for flood table initialization (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Move mlxsw_sp_fid_flood_table_init() up (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Make mlxsw_sp_fid_ops.setup return an int (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Split a helper out of mlxsw_sp_fid_flood_table_mid() (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Rename FID ops, families, arrays (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Privatize FID families (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Fix missing error checking (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Call RIF setup before obtaining FID (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_router: Add a helper to get subport number from a RIF (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Extract SFMR packing into a helper (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Drop unnecessary conditions (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Permit enabling CFF mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: core, pci: Add plumbing related to CFF mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Add to SFMR register the fields related to CFF flood mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Extract flood-mode specific part of mlxsw_reg_sfmr_pack() (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Drop unnecessary writes from mlxsw_reg_sfmr_pack() (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Mark SFGC & some SFMR fields as reserved in CFF mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Add Switch FID Flooding Profiles Register (Ivan Vecera) [RHEL-67125]
  - mlxsw: resources: Add max_cap_nve_flood_prf (Ivan Vecera) [RHEL-67125]
  - mlxsw: cmd: Add MLXSW_CMD_MBOX_CONFIG_PROFILE_FLOOD_MODE_CFF (Ivan Vecera) [RHEL-67125]
  - mlxsw: cmd: Add cmd_mbox.query_fw.cff_support (Ivan Vecera) [RHEL-67125]
  - selftests: mlxsw: Add PCI reset test (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Implement PCI reset handlers (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Add support for new reset flow (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Move software reset code to a separate function (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Rename mlxsw_pci_sw_reset() (Ivan Vecera) [RHEL-67125]
  - mlxsw: Extend MRSR pack() function to support new commands (Ivan Vecera) [RHEL-67125]
  - PCI: Add no PM reset quirk for NVIDIA Spectrum devices (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Set SW LAG mode on Spectrum>1 (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum: Allocate LAG table when in SW LAG mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_pgt: Generalize PGT allocation (Ivan Vecera) [RHEL-67125]
  - mlxsw: spectrum_fid: Allocate PGT for the whole FID family in one go (Ivan Vecera) [RHEL-67125]
  - mlxsw: pci: Permit toggling LAG mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: core, pci: Add plumbing related to LAG mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: cmd: Add QUERY_FW.lag_mode_support (Ivan Vecera) [RHEL-67125]
  - mlxsw: cmd: Add CONFIG_PROFILE.{set_, }lag_mode (Ivan Vecera) [RHEL-67125]
  - mlxsw: cmd: Fix omissions in CONFIG_PROFILE field names in comments (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Add SGCR.lag_lookup_pgt_base (Ivan Vecera) [RHEL-67125]
  - mlxsw: reg: Drop SGCR.llb (Ivan Vecera) [RHEL-67125]
  - cachefiles: fix dentry leak in cachefiles_open_file() (CKI Backport Bot) [RHEL-63602] {CVE-2024-49870}
  - nfsd: fix race between laundromat and free_stateid (Olga Kornievskaia) [RHEL-65915] {CVE-2024-50106}
  - dm cache: fix potential out-of-bounds access on the first resume (Benjamin Marzinski) [RHEL-69092]
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Benjamin Marzinski) [RHEL-69092]
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Benjamin Marzinski) [RHEL-69092]
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr error (Benjamin Marzinski) [RHEL-69092]
  - dm cache: correct the number of origin blocks to match the target length (Benjamin Marzinski) [RHEL-69092]
  - dm-verity: don't crash if panic_on_corruption is not selected (Benjamin Marzinski) [RHEL-69092]
  - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Benjamin Marzinski) [RHEL-69092]
  - dm: fix a crash if blk_alloc_disk fails (Benjamin Marzinski) [RHEL-69092]
  - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Olga Kornievskaia) [RHEL-66036] {CVE-2024-50121}
  - md/raid10: fix null ptr dereference in raid10_size() (Nigel Croxon) [RHEL-66030] {CVE-2024-50109}
  - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (CKI Backport Bot) [RHEL-66865] {CVE-2024-50256}
  - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (CKI Backport Bot) [RHEL-66865] {CVE-2024-50256}
  - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (Olga Kornievskaia) [RHEL-63854] {CVE-2024-50046}
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-9848]
  - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-9848]
  - media: Convert from tasklet to BH workqueue (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: add missing MODULE_DESCRIPTION() macro (Kate Hsuan) [RHEL-67885]
  - usb: uvc: add missing MODULE_DESCRIPTION() macro (Kate Hsuan) [RHEL-67885]
  - media: uapi: Add PiSP Compressed RAW Bayer formats (Kate Hsuan) [RHEL-67885]
  - media: uapi: Add a pixel format for BGR48 and RGB48 (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Fix typo in documentation (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Drop unreacheable warning (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: core: Drop unneeded forward declaration (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add average QP control (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Provide const-aware subdev state accessors (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Fix v4l2_subdev_state_get_format() documentation (Kate Hsuan) [RHEL-67885]
  - media: subdev: Improve s_stream documentation (Kate Hsuan) [RHEL-67885]
  - media: subdev: Support non-routing subdevs in v4l2_subdev_s_stream_helper() (Kate Hsuan) [RHEL-67885]
  - media: subdev: Support single-stream case in v4l2_subdev_enable/disable_streams() (Kate Hsuan) [RHEL-67885]
  - media: subdev: Refactor v4l2_subdev_enable/disable_streams() (Kate Hsuan) [RHEL-67885]
  - media: subdev: Add v4l2_subdev_is_streaming() (Kate Hsuan) [RHEL-67885]
  - media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback (Kate Hsuan) [RHEL-67885]
  - media: subdev: Fix use of sd->enabled_streams in call_s_stream() (Kate Hsuan) [RHEL-67885]
  - media: subdev: Add checks for subdev features (Kate Hsuan) [RHEL-67885]
  - media: subdev: Use v4l2_subdev_has_op() in v4l2_subdev_enable/disable_streams() (Kate Hsuan) [RHEL-67885]
  - Revert "media: v4l2-ctrls: show all owned controls in log_status" (Kate Hsuan) [RHEL-67885]
  - media: cec: cec.h: 2.1 ms -> 2100 ms (Kate Hsuan) [RHEL-67885]
  - media: uapi: v4l: Don't expose generic metadata formats to userspace (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Add trivial set_routing support (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Return routes set using S_ROUTING (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Add len_routes field to struct v4l2_subdev_routing (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Copy argument back to user also for S_ROUTING (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Add a function to lock two sub-device states, use it (Kate Hsuan) [RHEL-67885]
  - media: v4l: Set line based metadata flag in V4L2 core (Kate Hsuan) [RHEL-67885]
  - media: v4l: Support line-based metadata capture (Kate Hsuan) [RHEL-67885]
  - media: uapi: v4l: Add generic 8-bit metadata format definitions (Kate Hsuan) [RHEL-67885]
  - media: Documentation: Rename meta format files (Kate Hsuan) [RHEL-67885]
  - media: uapi: Document which mbus format fields are valid for metadata (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Clearly document that the crop API won't be extended (Kate Hsuan) [RHEL-67885]
  - media: v4l: async: Set owner for async sub-devices (Kate Hsuan) [RHEL-67885]
  - media: v4l: Set sub-device's owner field to the caller's module (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: improve max_num_buffers sanity checks (Kate Hsuan) [RHEL-67885]
  - media: cec: return -ENODEV instead of -ENXIO if unregistered (Kate Hsuan) [RHEL-67885]
  - media: v4l2-core: hold videodev_lock until dev reg, finishes (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Return handler error in creating new fwnode properties (Kate Hsuan) [RHEL-67885]
  - media: mc: mark the media devnode as registered from the, start (Kate Hsuan) [RHEL-67885]
  - media: videodev2: Fix v4l2_ext_control packing. (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Fix stream handling for crop API (Kate Hsuan) [RHEL-67885]
  - media: mc: Fix graph walk in media_pipeline_start (Kate Hsuan) [RHEL-67885]
  - media: mc: Add nop implementations of media_device_{init,cleanup} (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Remove non-pad dv timing callbacks (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Add pad versions of dv timing subdev calls (Kate Hsuan) [RHEL-67885]
  - media: v4l2-common: Add Y210 and Y216 format info (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: add support for area type logging (Kate Hsuan) [RHEL-67885]
  - media: v4l2: Add REMOVE_BUFS ioctl (Kate Hsuan) [RHEL-67885]
  - media: core: Free range of buffers (Kate Hsuan) [RHEL-67885]
  - media: core: Add bitmap manage bufs array entries (Kate Hsuan) [RHEL-67885]
  - media: core: Rework how create_buf index returned value is computed (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Add min_reqbufs_allocation field to vb2_queue structure (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Update vb2_is_busy() logic (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Add missing doc comment for waiting_in_dqbuf (Kate Hsuan) [RHEL-67885]
  - media: core: v4l2-ioctl.c: use is_valid_ioctl() (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls-core.c: check min/max for menu, controls (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Follow renaming of SPI "master" to "controller" (Kate Hsuan) [RHEL-67885]
  - media: mc: Expand MUST_CONNECT flag to always require an enabled link (Kate Hsuan) [RHEL-67885]
  - media: mc: Rename pad variable to clarify intent (Kate Hsuan) [RHEL-67885]
  - media: mc: Add num_links flag to media_pad (Kate Hsuan) [RHEL-67885]
  - media: mc: Fix flags handling when creating pad links (Kate Hsuan) [RHEL-67885]
  - media: mc: Add local pad to pipeline regardless of the link state (Kate Hsuan) [RHEL-67885]
  - media: media-devnode: make media_bus_type const (Kate Hsuan) [RHEL-67885]
  - media: cec: make cec_bus_type const (Kate Hsuan) [RHEL-67885]
  - media: v4l2-common.h: kerneldoc: correctly format return values (Kate Hsuan) [RHEL-67885]
  - media: cec.h: Fix kerneldoc (Kate Hsuan) [RHEL-67885]
  - media: videodev2.h: Fix kerneldoc (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: show all owned controls in log_status (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Fix doc comment (Kate Hsuan) [RHEL-67885]
  - media: v4l: Add a helper for setting up link-frequencies control (Kate Hsuan) [RHEL-67885]
  - media: vb2: refactor setting flags and caps, fix missing cap (Kate Hsuan) [RHEL-67885]
  - media: media videobuf2: Stop direct calls to queue num_buffers field (Kate Hsuan) [RHEL-67885]
  - media: mc: Drop useless debug print on file handle release (Kate Hsuan) [RHEL-67885]
  - media: v4l2-mc: Add debug prints for v4l2_fwnode_create_links_for_pad() (Kate Hsuan) [RHEL-67885]
  - media: media-entity.h: fix Excess kernel-doc description warnings (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: core: Rename min_buffers_needed field in vb2_queue (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Store frame interval in subdev state (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Move out subdev state lock macros outside CONFIG_MEDIA_CONTROLLER (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: request more buffers for vb2_read (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Fix indentation in v4l2-subdev.h (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Rename .init_cfg() operation to .init_state() (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Return NULL from pad access functions on error (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Remove stream-unaware sub-device state access (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Always compile sub-device state access functions (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Make stream argument optional in state access functions (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: v4l2_subdev_state_get_format always returns format now (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Rename sub-device state information access functions (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Also return pads array information on stream functions (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Store the sub-device in the sub-device state (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Drop outdated comment for v4l2_subdev_pad_config (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Rename pad config 'try_*' fields (Kate Hsuan) [RHEL-67885]
  - media: videodev2.h: add missing __user to p_h264_pps (Kate Hsuan) [RHEL-67885]
  - media: drop CONFIG_MEDIA_CONTROLLER_REQUEST_API (Kate Hsuan) [RHEL-67885]
  - media: v4l2-mem2mem.h: fix typo in comment (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dev: Check that g/s_selection are valid before selecting crop (Kate Hsuan) [RHEL-67885]
  - media: v4l2-common: Add 10bpp RGB formats info (Kate Hsuan) [RHEL-67885]
  - media: core: v4l2-ioctl: check if ioctl is known to avoid NULL name (Kate Hsuan) [RHEL-67885]
  - media: core: Report the maximum possible number of buffers for the queue (Kate Hsuan) [RHEL-67885]
  - media: media videobuf2: Be more flexible on the number of queue stored buffers (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Use vb2_get_num_buffers() helper (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Add helper to get queue number of buffers (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Remove duplicated index vs q->num_buffers check (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Access vb2_queue bufs array through helper functions (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Use vb2_buffer instead of index (Kate Hsuan) [RHEL-67885]
  - media: dvb_vb2: fix possible out of bound access (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Stop spamming kernel log with all queue counter (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Rework offset 'cookie' encoding pattern (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Rename offset parameter (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Fix a 64bit bug (Kate Hsuan) [RHEL-67885]
  - media: v4l2: Add ignore_streaming flag (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Fix IS_ERR checking in vb2_vmalloc_put_userptr() (Kate Hsuan) [RHEL-67885]
  - media: subdev: Don't report V4L2_SUBDEV_CAP_STREAMS when the streams API is disabled (Kate Hsuan) [RHEL-67885]
  - media: mc: Check pad flag validity (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Print debug information on frame descriptor (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Clear frame descriptor before get_frame_desc (Kate Hsuan) [RHEL-67885]
  - media: v4l2-event: Annotate struct v4l2_subscribed_event with __counted_by (Kate Hsuan) [RHEL-67885]
  - media: v4l2-device.h: drop V4L2_DEVICE_NAME_SIZE (Kate Hsuan) [RHEL-67885]
  - media: use sizeof() instead of V4L2_SUBDEV_NAME_SIZE (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev.h: increase struct v4l2_subdev name size (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dev.h: increase struct video_device name size (Kate Hsuan) [RHEL-67885]
  - media: cec.h: increase input_phys buffer (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add user control base for Nuvoton NPCM controls (Kate Hsuan) [RHEL-67885]
  - media: v4l: Add HEXTILE compressed format (Kate Hsuan) [RHEL-67885]
  - media: use struct_size() helper (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Document and enforce .s_stream() requirements (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Document that routing support depends on streams (Kate Hsuan) [RHEL-67885]
  - media: v4l2-mc: Make v4l2_pipeline_pm_{get,put} deprecated (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: fix typo: vb2_dbuf -> vb2_qbuf (Kate Hsuan) [RHEL-67885]
  - media: vb2: frame_vector.c: replace WARN_ONCE with a comment (Kate Hsuan) [RHEL-67885]
  - media: subdev: Add debug prints to enable/disable_streams (Kate Hsuan) [RHEL-67885]
  - media: subdev: Constify v4l2_subdev_set_routing_with_fmt() param (Kate Hsuan) [RHEL-67885]
  - media: subdev: Drop implicit zeroing of stream field (Kate Hsuan) [RHEL-67885]
  - media: cec-pin: only enable interrupts when monitoring the CEC pin (Kate Hsuan) [RHEL-67885]
  - media: cec-pin: improve interrupt handling (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Don't assert held reservation lock for dma-buf mmapping (Kate Hsuan) [RHEL-67885]
  - media: Add NV15_4L4 pixel format (Kate Hsuan) [RHEL-67885]
  - media: v4l2-common: Add support for fractional bpp (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Fix missing kerneldoc for client_caps (Kate Hsuan) [RHEL-67885]
  - media: v4l2-mc: Drop subdev check in v4l2_create_fwnode_links_to_pad() (Kate Hsuan) [RHEL-67885]
  - media: uapi: Use unsigned int values for assigning bits in u32 fields (Kate Hsuan) [RHEL-67885]
  - media: mc: Make media_entity_get_fwnode_pad() fwnode argument const (Kate Hsuan) [RHEL-67885]
  - media: videodev2.h: Fix struct v4l2_input tuner index comment (Kate Hsuan) [RHEL-67885]
  - media: Adjust column width for pdfdocs (Kate Hsuan) [RHEL-67885]
  - media: videodev2.h: Fix p_s32 and p_s64 pointer types (Kate Hsuan) [RHEL-67885]
  - media: v4l2-mem2mem: add lock to protect parameter num_rdy (Kate Hsuan) [RHEL-67885]
  - media: Add ABGR64_12 video format (Kate Hsuan) [RHEL-67885]
  - media: Add BGR48_12 video format (Kate Hsuan) [RHEL-67885]
  - media: Add YUV48_12 video format (Kate Hsuan) [RHEL-67885]
  - media: Add Y212 v4l2 format info (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Add new ioctl for client capabilities (Kate Hsuan) [RHEL-67885]
  - media: Accept non-subdev sinks in v4l2_create_fwnode_links_to_pad() (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Fix doc for v4l2_ctrl_request_hdl_find (Kate Hsuan) [RHEL-67885]
  - media: subdev: Add V4L2_SUBDEV_ROUTING_NO_MULTIPLEXING (Kate Hsuan) [RHEL-67885]
  - media: subdev: Split V4L2_SUBDEV_ROUTING_NO_STREAM_MIX (Kate Hsuan) [RHEL-67885]
  - media: subdev: Use 'shall' instead of 'may' in route validation (Kate Hsuan) [RHEL-67885]
  - media: v4l2-core: zero field base in struct v4l2_framebuffer (Kate Hsuan) [RHEL-67885]
  - media: videodev.h: drop V4L2_FBUF_CAP_LIST/BITMAP_CLIPPING (Kate Hsuan) [RHEL-67885]
  - media: v4l2-core: drop v4l2_window clipping and bitmap support (Kate Hsuan) [RHEL-67885]
  - media: drop unnecessary networking includes (Kate Hsuan) [RHEL-67885]
  - media: rc: add common keymap for Dreambox RC10/RC0 and RC20/RC-BT remotes (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dev.c: check for V4L2_CAP_STREAMING to enable streaming ioctls (Kate Hsuan) [RHEL-67885]
  - media: vb2: set owner before calling vb2_read (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Make link validation safer (Kate Hsuan) [RHEL-67885]
  - media: subdev: Fix validation state lockdep issue (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev.c: clear stream field (Kate Hsuan) [RHEL-67885]
  - media: videobuf2-core: drop obsolete sanity check in __vb2_queue_free() (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Fix minor issues in comments and documentation (Kate Hsuan) [RHEL-67885]
  - media: mc: Get media_device directly from pad (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Add entity iterator for media_pipeline (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Add pad iterator for media_pipeline (Kate Hsuan) [RHEL-67885]
  - media: Add stream to frame descriptor (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Add v4l2_subdev_s_stream_helper() function (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Add subdev .(enable|disable)_streams() operations (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Add v4l2_subdev_state_xlate_streams() helper (Kate Hsuan) [RHEL-67885]
  - media: subdev: add v4l2_subdev_routing_validate() helper (Kate Hsuan) [RHEL-67885]
  - media: subdev: add v4l2_subdev_set_routing_with_fmt() helper (Kate Hsuan) [RHEL-67885]
  - media: subdev: add streams to v4l2_subdev_get_fmt() helper function (Kate Hsuan) [RHEL-67885]
  - media: subdev: add "opposite" stream helper funcs (Kate Hsuan) [RHEL-67885]
  - media: subdev: use streams in v4l2_subdev_link_validate() (Kate Hsuan) [RHEL-67885]
  - media: subdev: add stream based configuration (Kate Hsuan) [RHEL-67885]
  - media: subdev: Add for_each_active_route() macro (Kate Hsuan) [RHEL-67885]
  - media: subdev: add v4l2_subdev_set_routing helper() (Kate Hsuan) [RHEL-67885]
  - media: subdev: add v4l2_subdev_has_pad_interdep() (Kate Hsuan) [RHEL-67885]
  - media: subdev: Require code change to enable [GS]_ROUTING (Kate Hsuan) [RHEL-67885]
  - media: subdev: Add [GS]_ROUTING subdev ioctls and operations (Kate Hsuan) [RHEL-67885]
  - media: add V4L2_SUBDEV_CAP_STREAMS (Kate Hsuan) [RHEL-67885]
  - media: add V4L2_SUBDEV_FL_STREAMS (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Sort includes (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Fix doc for media_graph_walk_init (Kate Hsuan) [RHEL-67885]
  - media: mc: Improve the media_entity_has_pad_interdep() documentation (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls-api.c: move ctrl->is_new = 1 to the correct line (Kate Hsuan) [RHEL-67885]
  - media: Add Y210, Y212 and Y216 formats (Kate Hsuan) [RHEL-67885]
  - media: Add 2-10-10-10 RGB formats (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls-api.c: add back dropped ctrl->is_new = 1 (Kate Hsuan) [RHEL-67885]
  - media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() (Kate Hsuan) [RHEL-67885]
  - headers: Remove some left-over license text in include/uapi/linux/v4l2-* (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: revert "get_userptr: buffers are always writable" (Kate Hsuan) [RHEL-67885]
  - media: videobuf2-dma-sg: Fix buf->vb NULL pointer dereference (Kate Hsuan) [RHEL-67885]
  - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails (Kate Hsuan) [RHEL-67885]
  - media: add nv12_8l128 and nv12_10be_8l128 video format. (Kate Hsuan) [RHEL-67885]
  - media: v4l: Use memset_after() helper (Kate Hsuan) [RHEL-67885]
  - media: dvb_ringbuffer: Fix typo in dvb_ringbuffer_pkt_write() kerneldoc (Kate Hsuan) [RHEL-67885]
  - media: subdev: Replace custom implementation of device_match_fwnode() (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dv-timings.c: fix too strict blanking sanity checks (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Reserve controls for ASPEED (Kate Hsuan) [RHEL-67885]
  - media: v4l: Add definition for the Aspeed JPEG format (Kate Hsuan) [RHEL-67885]
  - v4l: subdev: Warn if disabling streaming failed, return success (Kate Hsuan) [RHEL-67885]
  - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dv-timings: add sanity checks for blanking values (Kate Hsuan) [RHEL-67885]
  - media: v4l: ctrls: Add a control for HDR mode (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Document s_power() callback is deprecated (Kate Hsuan) [RHEL-67885]
  - media: Fix documentation typos in media-entity.h (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ioctl.c: Unify YCbCr/YUV terms in format descriptions (Kate Hsuan) [RHEL-67885]
  - videodev2.h: add p_s32 and p_s64 pointers (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Fix off-by-one error in integer menu control check (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ioctl.c: fix incorrect error path (Kate Hsuan) [RHEL-67885]
  - media: v4l2-compat-ioctl32.c: zero buffer passed to v4l2_compat_get_array_args() (Kate Hsuan) [RHEL-67885]
  - media: mc: convert pipeline funcs to take media_pad (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Add has_pad_interdep entity operation (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Rewrite media_pipeline_start() (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: add alloc variant of pipeline_start (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dev: Add videodev wrappers for media pipelines (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Add media_entity_pipeline() to access the media pipeline (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Move media_entity_get_fwnode_pad() out of graph walk section (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Merge media_entity_enum_init and __media_entity_enum_init (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Add iterator helper for entity pads (Kate Hsuan) [RHEL-67885]
  - media: mc: entity: Rename streaming_count -> start_count (Kate Hsuan) [RHEL-67885]
  - media: subdev: increase V4L2_FRAME_DESC_ENTRY_MAX to 8 (Kate Hsuan) [RHEL-67885]
  - media: media-entity.h: add include for min() (Kate Hsuan) [RHEL-67885]
  - media: Remove incorrect comment from struct v4l2_fwnode_endpoint (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Fail graciously when getting try data for NULL state (Kate Hsuan) [RHEL-67885]
  - media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: drop 'elems' argument from control type ops. (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Remove vb2_find_timestamp() (Kate Hsuan) [RHEL-67885]
  - media: videodev2.h: drop V4L2_CAP_ASYNCIO (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Fix typo in VP8 comment (Kate Hsuan) [RHEL-67885]
  - media: vb2: videobuf -> videobuf2 (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ioctl: Fix typo 'the the' in comment (Kate Hsuan) [RHEL-67885]
  - media: v4l: uapi: Add user control base for DW100 controls (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Export default v4l2_ctrl_type_ops callbacks (Kate Hsuan) [RHEL-67885]
  - media: Documentation: mc-core: Fix typo (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: optimize type_ops for arrays (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: add change flag for when dimensions change (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: add v4l2_ctrl_modify_dimensions (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: alloc arrays in ctrl_ref (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: allocate space for arrays (Kate Hsuan) [RHEL-67885]
  - media: mc-entity: Add a new helper function to get a remote pad for a pad (Kate Hsuan) [RHEL-67885]
  - media: mc-entity: Add a new helper function to get a remote pad (Kate Hsuan) [RHEL-67885]
  - media: mc-entity: Rename media_entity_remote_pad() to media_pad_remote_pad_first() (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: Introduce vb2_find_buffer() (Kate Hsuan) [RHEL-67885]
  - media: Add P010 tiled format (Kate Hsuan) [RHEL-67885]
  - media: uapi: HEVC: Add SEI pic struct flags (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: add support for dynamically allocated arrays. (Kate Hsuan) [RHEL-67885]
  - media: videodev2.h: add V4L2_CTRL_FLAG_DYNAMIC_ARRAY (Kate Hsuan) [RHEL-67885]
  - media: entity: Use dedicated data link iterator (Kate Hsuan) [RHEL-67885]
  - media: entity: Add iterator for entity data links (Kate Hsuan) [RHEL-67885]
  - media: subdev: Add v4l2_subdev_call_state_try() macro (Kate Hsuan) [RHEL-67885]
  - media: v4l2: Sanitize colorspace values in the framework (Kate Hsuan) [RHEL-67885]
  - media: pixfmt-yuv-planar.rst: fix PIX_FMT labels (Kate Hsuan) [RHEL-67885]
  - media: v4l2: Make colorspace validity checks more future-proof (Kate Hsuan) [RHEL-67885]
  - media: v4l: Add packed YUV 4:4:4 YUVA and YUVX pixel formats (Kate Hsuan) [RHEL-67885]
  - media: Fix incorrect P010 chroma order description (Kate Hsuan) [RHEL-67885]
  - media: Add P010 video format (Kate Hsuan) [RHEL-67885]
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - gpl-2.0_168.RULE (part 2) (Kate Hsuan) [RHEL-67885]
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - gpl-2.0_30.RULE (part 2) (Kate Hsuan) [RHEL-67885]
  - media: Add CSI-2 bus configuration to frame descriptors (Kate Hsuan) [RHEL-67885]
  - media: Add bus type to frame descriptors (Kate Hsuan) [RHEL-67885]
  - media: cec-pin.c: don't zero work_pin_num_events in adap_enable (Kate Hsuan) [RHEL-67885]
  - media: cec-pin.c: disabling the adapter cannot call kthread_stop (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctls-core.c: kvmalloc_array -> kvcalloc (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev.c: kvmalloc_array -> kvcalloc (Kate Hsuan) [RHEL-67885]
  - media: videobuf2-v4l2: Expose vb2_queue_is_busy() to drivers (Kate Hsuan) [RHEL-67885]
  - media: v4l2: fix uninitialized value tuner_status(CWE-457) (Kate Hsuan) [RHEL-67885]
  - media: ext-ctrls-codec.rst: fix indentation (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add intra-refresh type control (Kate Hsuan) [RHEL-67885]
  - media: v4l: Add Qualcomm custom compressed pixel formats (Kate Hsuan) [RHEL-67885]
  - media: media-entity.h: Fix documentation for media_create_intf_link (Kate Hsuan) [RHEL-67885]
  - media: media.h: remove unneeded <stdint.h> inclusion (Kate Hsuan) [RHEL-67885]
  - media: subdev: add v4l2_subdev_get_fmt() helper function (Kate Hsuan) [RHEL-67885]
  - media: subdev: add locking wrappers to subdev op wrappers (Kate Hsuan) [RHEL-67885]
  - media: subdev: add subdev state locking (Kate Hsuan) [RHEL-67885]
  - media: subdev: pass also the active state to subdevs from ioctls (Kate Hsuan) [RHEL-67885]
  - media: subdev: rename v4l2_subdev_get_pad_* helpers (Kate Hsuan) [RHEL-67885]
  - media: subdev: add active state to struct v4l2_subdev (Kate Hsuan) [RHEL-67885]
  - media: subdev: rename subdev-state alloc & free (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: drop extra #ifdef (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: fix #endif comments (Kate Hsuan) [RHEL-67885]
  - media: mc: delete redundant code in __media_device_unregister_entity (Kate Hsuan) [RHEL-67885]
  - media: v4l: ioctl: Set bus_info in v4l_querycap() (Kate Hsuan) [RHEL-67885]
  - media: mc: Set bus_info in media_device_init() (Kate Hsuan) [RHEL-67885]
  - media: mc: Provide a helper for setting bus_info field (Kate Hsuan) [RHEL-67885]
  - media: mc: media_device_init() initialises a media_device, not media_entity (Kate Hsuan) [RHEL-67885]
  - media: mc: Remove redundant documentation (Kate Hsuan) [RHEL-67885]
  - media: entity: Add support for ancillary links (Kate Hsuan) [RHEL-67885]
  - media: entity: Add link_type_name() helper (Kate Hsuan) [RHEL-67885]
  - media: media.h: Add new media link type (Kate Hsuan) [RHEL-67885]
  - media: entity: Skip non-data links in graph iteration (Kate Hsuan) [RHEL-67885]
  - media: entity: skip non-data link when removing reverse links (Kate Hsuan) [RHEL-67885]
  - media: add nv12m_8l128 and nv12m_10be_8l128 video format. (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add new V4L2_H264_DECODE_PARAM_FLAG_P/BFRAME flags (Kate Hsuan) [RHEL-67885]
  - media: media-entity: Clarify media_entity_cleanup() usage (Kate Hsuan) [RHEL-67885]
  - media: media-entity: Simplify media_pipeline_start() (Kate Hsuan) [RHEL-67885]
  - media: media-entity: Add media_pad_is_streaming() helper function (Kate Hsuan) [RHEL-67885]
  - media: v4l2-core: Initialize h264 scaling matrix (Kate Hsuan) [RHEL-67885]
  - media: uapi: Init VP9 stateless decode params (Kate Hsuan) [RHEL-67885]
  - media: v4l2-mediabus: Drop legacy V4L2_MBUS_CSI2_*_LANE flags (Kate Hsuan) [RHEL-67885]
  - media: v4l: Avoid unaligned access warnings when printing 4cc modifiers (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Drop .set_mbus_config() operation (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dev: Use non-atomic bitmap API when applicable (Kate Hsuan) [RHEL-67885]
  - media: hevc: Remove RPS named flags (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: make array range static (Kate Hsuan) [RHEL-67885]
  - media: dmxdev: drop unneeded <linux/kernel.h> inclusion from other headers (Kate Hsuan) [RHEL-67885]
  - media: mc: mc-entity.c: Use bitmap_zalloc() when applicable (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: add WARN_ON_ONCE if bytesused is bigger than buffer length (Kate Hsuan) [RHEL-67885]
  - media: vb2: frame_vector.c: don't overwrite error code (Kate Hsuan) [RHEL-67885]
  - media: mc: drop an unused debug function (Kate Hsuan) [RHEL-67885]
  - media: uapi: Add VP9 stateless decoder controls (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add RGB color effects control (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add V4L2_CID_COLORFX_CBCR max setting (Kate Hsuan) [RHEL-67885]
  - media: v4l2-mem2mem: add v4l2_m2m_get_unmapped_area for no-mmu platform (Kate Hsuan) [RHEL-67885]
  - media: v4l2-core: fix VIDIOC_DQEVENT handling on non-x86 (Kate Hsuan) [RHEL-67885]
  - include/media/media-entity.h: replace kernel.h with the necessary inclusions (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dev.h: move open brace after struct video_device (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: handle V4L2_MEMORY_FLAG_NON_COHERENT flag (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: add queue memory coherency parameter (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: add V4L2_MEMORY_FLAG_NON_COHERENT flag (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: split buffer cache_hints initialisation (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: inverse buffer cache_hints flags (Kate Hsuan) [RHEL-67885]
  - media: videobuf2: rework vb2_mem_ops API (Kate Hsuan) [RHEL-67885]
  - media: Request API is no longer experimental (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ioctl: S_CTRL output the right value (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ioctl: Fix check_ext_ctrls (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add V4L2_CID_NOTIFY_GAINS control (Kate Hsuan) [RHEL-67885]
  - media: add Mediatek's MM21 format (Kate Hsuan) [RHEL-67885]
  - media: Clean V4L2_PIX_FMT_NV12MT documentation (Kate Hsuan) [RHEL-67885]
  - media: Add NV12_4L4 tiled format (Kate Hsuan) [RHEL-67885]
  - media: Rename V4L2_PIX_FMT_HM12 to V4L2_PIX_FMT_NV12_16L16 (Kate Hsuan) [RHEL-67885]
  - media: Rename V4L2_PIX_FMT_SUNXI_TILED_NV12 to V4L2_PIX_FMT_NV12_32L32 (Kate Hsuan) [RHEL-67885]
  - media: videobuf2-core: sanity checks for requests and qbuf (Kate Hsuan) [RHEL-67885]
  - media: hevc: Add scaling matrix control (Kate Hsuan) [RHEL-67885]
  - media: v4l2-ctrls: Add intra-refresh period control (Kate Hsuan) [RHEL-67885]
  - media: docs: ext-ctrls-codec: Document cyclic intra-refresh zero control value (Kate Hsuan) [RHEL-67885]
  - media: v4l2-dv-timings.c: fix wrong condition in two for-loops (Kate Hsuan) [RHEL-67885]
  - media: v4l: subdev: Add pre_streamon and post_streamoff callbacks (Kate Hsuan) [RHEL-67885]
  - media: mc-device.c: use DEVICE_ATTR_RO() helper macro (Kate Hsuan) [RHEL-67885]
  - media: v4l2-subdev: Fix documentation of the subdev_notifier member (Kate Hsuan) [RHEL-67885]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-543.el9]
changelog:
  - scsi: lpfc: Fix a possible null pointer dereference (Ewan D. Milne) [RHEL-64869] {CVE-2024-43821}
  - smb: client: fix NULL ptr deref in crypto_aead_setkey() (Paulo Alcantara) [RHEL-63909]
  - smb: client: fix UAF in async decryption (Paulo Alcantara) [RHEL-63909] {CVE-2024-50047}
  - macsec: Fix use-after-free while sending the offloading packet (CKI Backport Bot) [RHEL-66910] {CVE-2024-50261}
  - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-68541]
  - ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS for ChainDMA (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Use single token list for the copiers (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin format (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Adjust the params based on DAI formats (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Improve readability of sof_ipc4_prepare_dai_copier() (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology/pcm: Rename sof_ipc4_copier_is_single_format() (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Print out the channel count in sof_ipc4_dbg_audio_format (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: support tdm slot number query (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc3-topology: support tdm slot number query (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: sof-audio: add sof_dai_get_tdm_slots function (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: sof-audio: rename dai clock setting query function (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Add support for NHLT with 16-bit only DMIC blob (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Correct DAI copier config and NHLT blob request (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: Allow selective update in sof_ipc4_update_hw_params (Jaroslav Kysela) [RHEL-54539]
  - ASoC: SOF: ipc4-topology: remove shadowed variable (Jaroslav Kysela) [RHEL-54539]
  - redhat/configs: Move GPIO configs under rhel (Rupinderjit Singh) [RHEL-69941]
  - platform/x86/intel/tpmi/plr: Fix output in plr_print_bits() (David Arcari) [RHEL-46074]
  - doc: TPMI: Add entry for Performance Limit Reasons (David Arcari) [RHEL-46074]
  - platform/x86/intel/tpmi/plr: Add support for the plr mailbox (David Arcari) [RHEL-46074]
  - platform/x86/intel/tpmi: Add new auxiliary driver for performance limits (David Arcari) [RHEL-46074]
  - redhat: configs: enable INTEL_PLR_TPMI for RHEL (David Arcari) [RHEL-46074]
  - platform/x86/intel: TPMI domain id and CPU mapping (David Arcari) [RHEL-46074]
  - platform/x86/intel/tpmi: Add API to get debugfs root (David Arcari) [RHEL-46074]
  - platform/x86/intel/tpmi: Add support for performance limit reasons (David Arcari) [RHEL-46074]
  - doc: TPMI: Add debugfs documentation (David Arcari) [RHEL-46074]
  - MAINTAINERS: Add entry for TPMI driver (David Arcari) [RHEL-46074]
  - gso: fix dodgy bit handling for GSO_UDP_L4 (Guillaume Nault) [RHEL-69903]
  - udp: allow header check for dodgy GSO_UDP_L4 packets. (Guillaume Nault) [RHEL-69903]
  - redhat: configs: Disable DVB settings (Kate Hsuan) [RHEL-65104]
  - cache: add __cacheline_group_{begin, end}_aligned() (+ couple more) (CKI Backport Bot) [RHEL-68652]
  - uapi: stddef.h: Provide UAPI macros for __counted_by_{le, be} (Michal Schmidt) [RHEL-68653]
  - compiler_types: add Endianness-dependent __counted_by_{le,be} (Michal Schmidt) [RHEL-68653]
  - docs: ignore __counted_by attribute in structure definitions (Michal Schmidt) [RHEL-68653]
  - Documentation: conf.py: Add __force to c_id_attributes (Michal Schmidt) [RHEL-68653]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-544.el9]
changelog:
  - x86/apic: Always explicitly disarm TSC-deadline timer (David Arcari) [RHEL-65750]
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [RHEL-35819]
  - CVE-2024-53122 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Patrick Talbert) [RHEL-69670] {CVE-2024-53122}
  - x86/tdx: mark TDX guest as fully supported (Vitaly Kuznetsov) [RHEL-70465]
  - net: usb: cdc_ether: don't spew notifications (Jose Ignacio Tornos Martinez) [RHEL-52777]
  - USB: zaurus: Add ID for A-300/B-500/C-700 (Jose Ignacio Tornos Martinez) [RHEL-52777]
  - net: usb: cdc_ether: add u-blox 0x1313 composition. (Jose Ignacio Tornos Martinez) [RHEL-52777]
  - USB: serial: xr: add TIOCGRS485 and TIOCSRS485 ioctls (Desnes Nunes) [RHEL-67057]
  - USB: serial: xr: avoid requesting zero DTE rate (Desnes Nunes) [RHEL-67057]
  - redhat: configs: enable xr_serial on rhel (Desnes Nunes) [RHEL-67057]
  - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-68558] {CVE-2024-53095}
  - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-67852]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-545.el9]
changelog:
  - net: fix data-races around sk->sk_forward_alloc (CKI Backport Bot) [RHEL-69689] {CVE-2024-53124}
  - nvme-fabrics: handle zero MAXCMD without closing the connection (Maurizio Lombardi) [RHEL-71164]
  - redhat: add test_klp_syscall to mod-internal.list (Ryan Sullivan) [RHEL-69931]
  - blk_iocost: fix more out of bound shifts (CKI Backport Bot) [RHEL-63978] {CVE-2024-49933}
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()" (Rafael Aquini) [RHEL-27745 RHEL-70053] {CVE-2024-53136}
  - mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (Rafael Aquini) [RHEL-27745 RHEL-69683] {CVE-2024-53105}
  - filemap: Fix bounds checking in filemap_read() (Rafael Aquini) [RHEL-27745 RHEL-68011] {CVE-2024-50272}
  - mm/mlock: set the correct prev on failure (Rafael Aquini) [RHEL-27745]
  - vmscan,migrate: fix page count imbalance on node stats when demoting pages (Rafael Aquini) [RHEL-27745]
  - kasan: remove vmalloc_percpu test (Rafael Aquini) [RHEL-27745]
  - mm: krealloc: Fix MTE false alarm in __do_krealloc (Rafael Aquini) [RHEL-27745 RHEL-68909] {CVE-2024-53097}
  - mm: shmem: fix data-race in shmem_getattr() (Rafael Aquini) [RHEL-27745 RHEL-66818] {CVE-2024-50228}
  - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Rafael Aquini) [RHEL-27745 RHEL-66794] {CVE-2024-50219}
  - fork: only invoke khugepaged, ksm hooks if no error (Rafael Aquini) [RHEL-27745]
  - fork: do not invoke uffd on fork if error occurs (Rafael Aquini) [RHEL-27745]
  - maple_tree: add regression test for spanning store bug (Rafael Aquini) [RHEL-27745 RHEL-66950] {CVE-2024-50200}
  - maple_tree: correct tree corruption on spanning store (Rafael Aquini) [RHEL-27745 RHEL-66950] {CVE-2024-50200}
  - mm/mglru: only clear kswapd_failures if reclaimable (Rafael Aquini) [RHEL-27745]
  - mm/swapfile: skip HugeTLB pages for unuse_vma (Rafael Aquini) [RHEL-27745 RHEL-66977] {CVE-2024-50199}
  - mm: don't install PMD mappings when THPs are disabled by the hw/process/vma (Rafael Aquini) [RHEL-27745]
  - mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw() (Rafael Aquini) [RHEL-27745]
  - mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point (Rafael Aquini) [RHEL-27745]
  - mm/mremap: fix move_normal_pmd/retract_page_tables race (Rafael Aquini) [RHEL-27745]
  - secretmem: disable memfd_secret() if arch cannot set direct map (Rafael Aquini) [RHEL-27745 RHEL-66627] {CVE-2024-50182}
  - memory tiers: use default_dram_perf_ref_source in log message (Rafael Aquini) [RHEL-27745 RHEL-62336]
  - mm: migrate: annotate data-race in migrate_folio_unmap() (Rafael Aquini) [RHEL-27745]
  - mm: avoid leaving partial pfn mappings around in error case (Rafael Aquini) [RHEL-27745]
  - mm: Kconfig: fixup zsmalloc configuration (Rafael Aquini) [RHEL-27745]
  - mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock (Rafael Aquini) [RHEL-27745]
  - sched/numa: Fix the vma scan starving issue (Rafael Aquini) [RHEL-27745]
  - mm: krealloc: consider spare memory for __GFP_ZERO (Rafael Aquini) [RHEL-27745]
  - mm: only enforce minimum stack gap size if it's sensible (Rafael Aquini) [RHEL-27745]
  - mm/memcontrol: respect zswap.writeback setting from parent cg too (Rafael Aquini) [RHEL-27745]
  - Revert "mm: skip CMA pages when they are not available" (Rafael Aquini) [RHEL-27745]
  - mm: vmalloc: ensure vmap_block is initialised before adding to queue (Rafael Aquini) [RHEL-27745]
  - mm: Fix missing folio invalidation calls during truncation (Rafael Aquini) [RHEL-27745]
  - mm: fix endless reclaim on machines with unaccepted memory (Rafael Aquini) [RHEL-27745]
  - mm/numa: no task_numa_fault() call if PMD is changed (Rafael Aquini) [RHEL-27745]
  - mm/numa: no task_numa_fault() call if PTE is changed (Rafael Aquini) [RHEL-27745]
  - memcg_write_event_control(): fix a user-triggerable oops (Rafael Aquini) [RHEL-27745]
  - mm/page_alloc: fix pcp->count race between drain_pages_zone() vs __rmqueue_pcplist() (Rafael Aquini) [RHEL-27745]
  - mm/mglru: fix ineffective protection calculation (Rafael Aquini) [RHEL-27745 RHEL-54929] {CVE-2024-42316}
  - mm/hugetlb: fix possible recursive locking detected warning (Rafael Aquini) [RHEL-27745]
  - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-27745]
  - mm/mglru: fix overshooting shrinker memory (Rafael Aquini) [RHEL-27745 RHEL-54929] {CVE-2024-42316}
  - mm/mglru: fix div-by-zero in vmpressure_calc_level() (Rafael Aquini) [RHEL-27745 RHEL-54929] {CVE-2024-42316}
  - mm: ignore data-race in __swap_writepage (Rafael Aquini) [RHEL-27745]
  - mm, virt: merge AS_UNMOVABLE and AS_INACCESSIBLE (Rafael Aquini) [RHEL-27745]
  - mm/hugetlb: fix potential race in __update_and_free_hugetlb_folio() (Rafael Aquini) [RHEL-27745]
  - mm: gup: stop abusing try_grab_folio (Rafael Aquini) [RHEL-27745]
  - mm: refactor folio_undo_large_rmappable() (Rafael Aquini) [RHEL-27745]
  - mm: page_ref: remove folio_try_get_rcu() (Rafael Aquini) [RHEL-27745]
  - mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer (Rafael Aquini) [RHEL-27745]
  - mm/memory_hotplug: prevent accessing by index=-1 (Rafael Aquini) [RHEL-27745]
  - x86/mm: Cleanup prctl_enable_tagged_addr() nr_bits error checking (Rafael Aquini) [RHEL-27745]
  - x86/mm: Fix LAM inconsistency during context switch (Rafael Aquini) [RHEL-27745]
  - mm/page_alloc: Separate THP PCP into movable and non-movable categories (Rafael Aquini) [RHEL-27745]
  - mm: fix incorrect vbq reference in purge_fragmented_block (Rafael Aquini) [RHEL-27745]
  - Revert "mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default" (Rafael Aquini) [RHEL-27745]
  - mm/debug_vm_pgtable: drop RANDOM_ORVALUE trick (Rafael Aquini) [RHEL-27745]
  - mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default (Rafael Aquini) [RHEL-27745]
  - mm/hugetlb: do not call vma_add_reservation upon ENOMEM (Rafael Aquini) [RHEL-27745]
  - kmsan: do not wipe out origin when doing partial unpoisoning (Rafael Aquini) [RHEL-27745]
  - kasan, fortify: properly rename memintrinsics (Rafael Aquini) [RHEL-27745]
  - mm: Introduce AS_INACCESSIBLE for encrypted/confidential memory (Rafael Aquini) [RHEL-27745]
  - mm/hugetlb: align cma on allocation order, not demotion order (Rafael Aquini) [RHEL-27745]
  - mm: fix race between __split_huge_pmd_locked() and GUP-fast (Rafael Aquini) [RHEL-27745]
  - mm/page_table_check: support userfault wr-protect entries (Rafael Aquini) [RHEL-27745]
  - mm/slab: make __free(kfree) accept error pointers (Rafael Aquini) [RHEL-27745]
  - mm/slub: handle bulk and single object freeing separately (Rafael Aquini) [RHEL-27745]
  - mm/hugetlb: pass correct order_per_bit to cma_declare_contiguous_nid (Rafael Aquini) [RHEL-27745]
  - mm/cma: drop incorrect alignment check in cma_init_reserved_mem (Rafael Aquini) [RHEL-27745]
  - hugetlb: convert alloc_buddy_hugetlb_folio to use a folio (Rafael Aquini) [RHEL-27745]
  - mm: page_alloc: use the correct THP order for THP PCP (Rafael Aquini) [RHEL-27745]
  - khugepaged: use a folio throughout hpage_collapse_scan_file() (Rafael Aquini) [RHEL-27745]
  - khugepaged: use a folio throughout collapse_file() (Rafael Aquini) [RHEL-27745]
  - khugepaged: pass a folio to __collapse_huge_page_copy() (Rafael Aquini) [RHEL-27745]
  - khugepaged: remove hpage from collapse_huge_page() (Rafael Aquini) [RHEL-27745]
  - khugepaged: remove hpage from collapse_file() (Rafael Aquini) [RHEL-27745]
  - khugepaged: convert alloc_charge_hpage to alloc_charge_folio (Rafael Aquini) [RHEL-27745]
  - khugepaged: inline hpage_collapse_alloc_folio() (Rafael Aquini) [RHEL-27745]
  - selftest/mm: ksm_functional_tests: extend test case for ksm fork/exec (Rafael Aquini) [RHEL-27745]
  - selftest/mm: ksm_functional_tests: refactor mmap_and_merge_range() (Rafael Aquini) [RHEL-27745]
  - mm/ksm: fix ksm exec support for prctl (Rafael Aquini) [RHEL-27745]
  - mm: page_alloc: control latency caused by zone PCP draining (Rafael Aquini) [RHEL-27745]
  - mm: zswap: fix shrinker NULL crash with cgroup_disable=memory (Rafael Aquini) [RHEL-27745]
  - mm: turn folio_test_hugetlb into a PageType (Rafael Aquini) [RHEL-27745]
  - mm: support page_mapcount() on page_has_type() pages (Rafael Aquini) [RHEL-27745]
  - mm, pagemap: remove SLOB and SLQB from comments and documentation (Rafael Aquini) [RHEL-27745]
  - mm: create FOLIO_FLAG_FALSE and FOLIO_TYPE_OPS macros (Rafael Aquini) [RHEL-27745]
  - mm/shmem: inline shmem_is_huge() for disabled transparent hugepages (Rafael Aquini) [RHEL-27745]
  - mm,swapops: update check in is_pfn_swap_entry for hwpoison entries (Rafael Aquini) [RHEL-27745]
  - mm/madvise: make MADV_POPULATE_(READ|WRITE) handle VM_FAULT_RETRY properly (Rafael Aquini) [RHEL-27745]
  - mm: zswap: fix writeback shinker GFP_NOIO/GFP_NOFS recursion (Rafael Aquini) [RHEL-27745]
  - mm: recover pud_leaf() definitions in nopmd case (Rafael Aquini) [RHEL-27745]
  - mm/treewide: align up pXd_leaf() retval across archs (Rafael Aquini) [RHEL-27745]
  - mm/treewide: drop pXd_large() (Rafael Aquini) [RHEL-27745]
  - mm/treewide: replace pud_large() with pud_leaf() (Rafael Aquini) [RHEL-27745]
  - mm/treewide: replace pmd_large() with pmd_leaf() (Rafael Aquini) [RHEL-27745]
  - mm/kasan: use pXd_leaf() in shadow_mapped() (Rafael Aquini) [RHEL-27745]
  - mm/x86: drop two unnecessary pud_leaf() definitions (Rafael Aquini) [RHEL-27745]
  - mm/x86: replace pgd_large() with pgd_leaf() (Rafael Aquini) [RHEL-27745]
  - mm/x86: replace p4d_large() with p4d_leaf() (Rafael Aquini) [RHEL-27745]
  - mm/powerpc: replace pXd_is_leaf() with pXd_leaf() (Rafael Aquini) [RHEL-27745]
  - mm/powerpc: define pXd_large() with pXd_leaf() (Rafael Aquini) [RHEL-27745]
  - mm: memory: fix shift-out-of-bounds in fault_around_bytes_set (Rafael Aquini) [RHEL-27745]
  - mm: remove cast from page_to_nid() (Rafael Aquini) [RHEL-27745]
  - mm: constify more page/folio tests (Rafael Aquini) [RHEL-27745]
  - mm: constify testing page/folio flags (Rafael Aquini) [RHEL-27745]
  - mm: make dump_page() take a const argument (Rafael Aquini) [RHEL-27745]
  - mm: add __dump_folio() (Rafael Aquini) [RHEL-27745]
  - mm: remove PageYoung and PageIdle definitions (Rafael Aquini) [RHEL-27745]
  - mm: remove PageWaiters, PageSetWaiters and PageClearWaiters (Rafael Aquini) [RHEL-27745]
  - mm: separate out FOLIO_FLAGS from PAGEFLAGS (Rafael Aquini) [RHEL-27745]
  - mm: support order-1 folios in the page cache (Rafael Aquini) [RHEL-27745]
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations (Rafael Aquini) [RHEL-27745]
  - madvise:madvise_cold_or_pageout_pte_range(): allow split while folio_estimated_sharers = 0 (Rafael Aquini) [RHEL-27745]
  - selftests/mm: run_vmtests.sh: add hugetlb_madv_vs_map (Rafael Aquini) [RHEL-27745 RHEL-61137]
  - mm/hugetlb: restore the reservation if needed (Rafael Aquini) [RHEL-27745 RHEL-61137]
  - x86/mm: delete unused cpu argument to leave_mm() (Rafael Aquini) [RHEL-27745]
  - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-27745]
  - mm: kmsan: remove runtime checks from kmsan_unpoison_memory() (Rafael Aquini) [RHEL-27745]
  - mm/swap_state: update zswap LRU's protection range with the folio locked (Rafael Aquini) [RHEL-27745]
  - mm: zswap: fix missing folio cleanup in writeback race path (Rafael Aquini) [RHEL-27745]
  - mm/zswap: don't return LRU_SKIP if we have dropped lru lock (Rafael Aquini) [RHEL-27745]
  - fs/hugetlbfs/inode.c: mm/memory-failure.c: fix hugetlbfs hwpoison handling (Rafael Aquini) [RHEL-27745]
  - efi: disable mirror feature during crashkernel (Rafael Aquini) [RHEL-27745]
  - mm, treewide: rename MAX_ORDER to MAX_PAGE_ORDER (Rafael Aquini) [RHEL-27745]
  - mm, treewide: introduce NR_PAGE_ORDERS (Rafael Aquini) [RHEL-27745]
  - mm/khugepaged: use a folio more in collapse_file() (Rafael Aquini) [RHEL-27745]
  - zswap: memcontrol: implement zswap writeback disabling (Rafael Aquini) [RHEL-27745]
  - mm: remove unnecessary ia64 code and comment (Rafael Aquini) [RHEL-27745]
  - fs: improve dump_mapping() robustness (Rafael Aquini) [RHEL-27745]
  - mm: migrate: fix getting incorrect page mapping during page migration (Rafael Aquini) [RHEL-27745 RHEL-28873] {CVE-2023-52490}
  - mm: convert swap_cluster_readahead and swap_vma_readahead to return a folio (Rafael Aquini) [RHEL-27745]
  - mm: return a folio from read_swap_cache_async() (Rafael Aquini) [RHEL-27745]
  - mm: remove page_swap_info() (Rafael Aquini) [RHEL-27745]
  - mm: convert swap_readpage() to swap_read_folio() (Rafael Aquini) [RHEL-27745]
  - mm: convert swap_page_sector() to swap_folio_sector() (Rafael Aquini) [RHEL-27745]
  - mm: pass a folio to swap_readpage_bdev_async() (Rafael Aquini) [RHEL-27745]
  - mm: pass a folio to swap_readpage_bdev_sync() (Rafael Aquini) [RHEL-27745]
  - mm: pass a folio to swap_readpage_fs() (Rafael Aquini) [RHEL-27745]
  - mm: pass a folio to swap_writepage_bdev_async() (Rafael Aquini) [RHEL-27745]
  - mm: pass a folio to swap_writepage_bdev_sync() (Rafael Aquini) [RHEL-27745]
  - mm: pass a folio to swap_writepage_fs() (Rafael Aquini) [RHEL-27745]
  - mm: pass a folio to __swap_writepage() (Rafael Aquini) [RHEL-27745]
  - mm: return the folio from __read_swap_cache_async() (Rafael Aquini) [RHEL-27745]
  - mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx (Rafael Aquini) [RHEL-27745]
  - mm/zswap: cleanup zswap_writeback_entry() (Rafael Aquini) [RHEL-27745]
  - mm/zswap: cleanup zswap_load() (Rafael Aquini) [RHEL-27745]
  - mm/zswap: refactor out __zswap_load() (Rafael Aquini) [RHEL-27745]
  - mm/zswap: reuse dstmem when decompress (Rafael Aquini) [RHEL-27745]
  - mm: convert collapse_huge_page() to use a folio (Rafael Aquini) [RHEL-27745]
  - lib/maple_tree.c: fix build error due to hotfix alteration (Rafael Aquini) [RHEL-27745]
  - mm/memory-failure: cast index to loff_t before shifting it (Rafael Aquini) [RHEL-27745]
  - mm/memory-failure: check the mapcount of the precise page (Rafael Aquini) [RHEL-27745]
  - mm/memory-failure: pass the folio and the page to collect_procs() (Rafael Aquini) [RHEL-27745]
  - mm/filemap: avoid buffered read/write race to read inconsistent data (Rafael Aquini) [RHEL-27745]
  - mm/readahead: do not allow order-1 folio (Rafael Aquini) [RHEL-27745]
  - zswap: shrink zswap pool based on memory pressure (Rafael Aquini) [RHEL-27745]
  - maple_tree: mtree_range_walk() clean up (Rafael Aquini) [RHEL-27745]
  - maple_tree: don't find node end in mtree_lookup_walk() (Rafael Aquini) [RHEL-27745]
  - maple_tree: use maple state end for write operations (Rafael Aquini) [RHEL-27745]
  - maple_tree: remove mas_searchable() (Rafael Aquini) [RHEL-27745]
  - maple_tree: separate ma_state node from status (Rafael Aquini) [RHEL-27745]
  - maple_tree: clean up inlines for some functions (Rafael Aquini) [RHEL-27745]
  - maple_tree: use cached node end in mas_destroy() (Rafael Aquini) [RHEL-27745]
  - maple_tree: use cached node end in mas_next() (Rafael Aquini) [RHEL-27745]
  - maple_tree: add end of node tracking to the maple state (Rafael Aquini) [RHEL-27745]
  - maple_tree: move debug check to __mas_set_range() (Rafael Aquini) [RHEL-27745]
  - maple_tree: make mas_erase() more robust (Rafael Aquini) [RHEL-27745]
  - maple_tree: remove unnecessary default labels from switch statements (Rafael Aquini) [RHEL-27745]
  - mm/zswap: replace kmap_atomic() with kmap_local_page() (Rafael Aquini) [RHEL-27745]
  - mm: remove invalidate_inode_page() (Rafael Aquini) [RHEL-27745]
  - mm: convert isolate_page() to mf_isolate_folio() (Rafael Aquini) [RHEL-27745]
  - mm: convert soft_offline_in_use_page() to use a folio (Rafael Aquini) [RHEL-27745]
  - mm: use mapping_evict_folio() in truncate_error_page() (Rafael Aquini) [RHEL-27745]
  - mm: convert __do_fault() to use a folio (Rafael Aquini) [RHEL-27745]
  - mm: make mapping_evict_folio() the preferred way to evict clean folios (Rafael Aquini) [RHEL-27745]
  - fork: use __mt_dup() to duplicate maple tree in dup_mmap() (Rafael Aquini) [RHEL-27745]
  - maple_tree: preserve the tree attributes when destroying maple tree (Rafael Aquini) [RHEL-27745]
  - maple_tree: update check_forking() and bench_forking() (Rafael Aquini) [RHEL-27745]
  - maple_tree: skip other tests when BENCH is enabled (Rafael Aquini) [RHEL-27745]
  - maple_tree: update the documentation of maple tree (Rafael Aquini) [RHEL-27745]
  - maple_tree: add test for mtree_dup() (Rafael Aquini) [RHEL-27745]
  - maple_tree: introduce interfaces __mt_dup() and mtree_dup() (Rafael Aquini) [RHEL-27745]
  - maple_tree: introduce {mtree,mas}_lock_nested() (Rafael Aquini) [RHEL-27745]
  - maple_tree: add mt_free_one() and mt_attr() helpers (Rafael Aquini) [RHEL-27745]
  - mm/hugetlb: have CONFIG_HUGETLB_PAGE select CONFIG_XARRAY_MULTI (Rafael Aquini) [RHEL-27745]
  - mm: kmem: properly initialize local objcg variable in current_obj_cgroup() (Rafael Aquini) [RHEL-27745]
  - mm/slub: optimize free fast path code layout (Rafael Aquini) [RHEL-27745]
  - mm/slab: move kmalloc() functions from slab_common.c to slub.c (Rafael Aquini) [RHEL-27745]
  - mm/slab: move kmalloc_slab() to mm/slab.h (Rafael Aquini) [RHEL-27745]
  - mm/slab: move kfree() from slab_common.c to slub.c (Rafael Aquini) [RHEL-27745]
  - mm/slab: move struct kmem_cache_node from slab.h to slub.c (Rafael Aquini) [RHEL-27745]
  - mm/slab: move memcg related functions from slab.h to slub.c (Rafael Aquini) [RHEL-27745]
  - mm/slab: move pre/post-alloc hooks from slab.h to slub.c (Rafael Aquini) [RHEL-27745]
  - mm/slab: consolidate includes in the internal mm/slab.h (Rafael Aquini) [RHEL-27745]
  - mm/slab: move the rest of slub_def.h to mm/slab.h (Rafael Aquini) [RHEL-27745]
  - mm/slab: move struct kmem_cache_cpu declaration to slub.c (Rafael Aquini) [RHEL-27745]
  - mm/slab: remove CONFIG_SLAB code from slab common code (Rafael Aquini) [RHEL-27745]
  - mempolicy: alloc_pages_mpol() for NUMA policy without vma (Rafael Aquini) [RHEL-27745]
  - mm: add page_rmappable_folio() wrapper (Rafael Aquini) [RHEL-27745]
  - mempolicy: clean up minor dead code in queue_pages_test_walk() (Rafael Aquini) [RHEL-27745]
  - mempolicy: remove confusing MPOL_MF_LAZY dead code (Rafael Aquini) [RHEL-27745]
  - mempolicy: mpol_shared_policy_init() without pseudo-vma (Rafael Aquini) [RHEL-27745]
  - mempolicy trivia: use pgoff_t in shared mempolicy tree (Rafael Aquini) [RHEL-27745]
  - mempolicy trivia: slightly more consistent naming (Rafael Aquini) [RHEL-27745]
  - mempolicy trivia: delete those ancient pr_debug()s (Rafael Aquini) [RHEL-27745]
  - mempolicy: fix migrate_pages(2) syscall return nr_failed (Rafael Aquini) [RHEL-27745]
  - kernfs: drop shared NUMA mempolicy hooks (Rafael Aquini) [RHEL-27745]
  - hugetlbfs: drop shared NUMA mempolicy pretence (Rafael Aquini) [RHEL-27745]
  - mm: migrate: record the mlocked page status to remove unnecessary lru drain (Rafael Aquini) [RHEL-27745]
  - mm: page_alloc: check the order of compound page even when the order is zero (Rafael Aquini) [RHEL-27745]
  - mm/khugepaged: convert collapse_pte_mapped_thp() to use folios (Rafael Aquini) [RHEL-27745]
  - mm/khugepaged: convert alloc_charge_hpage() to use folios (Rafael Aquini) [RHEL-27745]
  - mm/khugepaged: convert is_refcount_suitable() to use folios (Rafael Aquini) [RHEL-27745]
  - mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios (Rafael Aquini) [RHEL-27745]
  - mm/khugepaged: convert __collapse_huge_page_isolate() to use folios (Rafael Aquini) [RHEL-27745]
  - mm/migrate: add nr_split to trace_mm_migrate_pages stats. (Rafael Aquini) [RHEL-27745]
  - mm/migrate: correct nr_failed in migrate_pages_sync() (Rafael Aquini) [RHEL-27745]
  - bootmem: use kmemleak_free_part_phys in free_bootmem_page (Rafael Aquini) [RHEL-27745]
  - bootmem: use kmemleak_free_part_phys in put_page_bootmem (Rafael Aquini) [RHEL-27745]
  - mm: kmem: reimplement get_obj_cgroup_from_current() (Rafael Aquini) [RHEL-27745]
  - percpu: scoped objcg protection (Rafael Aquini) [RHEL-27745]
  - mm: kmem: scoped objcg protection (Rafael Aquini) [RHEL-27745]
  - mm: kmem: make memcg keep a reference to the original objcg (Rafael Aquini) [RHEL-27745]
  - mm: kmem: add direct objcg pointer to task_struct (Rafael Aquini) [RHEL-27745]
  - mm: kmem: optimize get_obj_cgroup_from_current() (Rafael Aquini) [RHEL-27745]
  - mm: abstract VMA merge and extend into vma_merge_extend() helper (Rafael Aquini) [RHEL-27745]
  - mm: abstract merge for new VMAs into vma_merge_new_vma() (Rafael Aquini) [RHEL-27745]
  - mm: make vma_merge() and split_vma() internal (Rafael Aquini) [RHEL-27745]
  - mm: abstract the vma_merge()/split_vma() pattern for mprotect() et al. (Rafael Aquini) [RHEL-27745]
  - mm: move vma_policy() and anon_vma_name() decls to mm_types.h (Rafael Aquini) [RHEL-27745]
  - mm/mprotect: allow unfaulted VMAs to be unaccounted on mprotect() (Rafael Aquini) [RHEL-27745]
  - mm/thp: fix "mm: thp: kill __transhuge_page_enabled()" (Rafael Aquini) [RHEL-27745]
  - mm/gup: adapt get_user_page_vma_remote() to never return NULL (Rafael Aquini) [RHEL-27745]
  - mm/gup: make failure to pin an error if FOLL_NOWAIT not specified (Rafael Aquini) [RHEL-27745]
  - mm/gup: explicitly define and check internal GUP flags, disallow FOLL_TOUCH (Rafael Aquini) [RHEL-27745]
  - mm: make __access_remote_vm() static (Rafael Aquini) [RHEL-27745]
  - shmem: _add_to_page_cache() before shmem_inode_acct_blocks() (Rafael Aquini) [RHEL-27745]
  - shmem: move memcg charge out of shmem_add_to_page_cache() (Rafael Aquini) [RHEL-27745]
  - shmem: shmem_acct_blocks() and shmem_inode_acct_blocks() (Rafael Aquini) [RHEL-27745]
  - shmem: factor shmem_falloc_wait() out of shmem_fault() (Rafael Aquini) [RHEL-27745]
  - shmem: remove vma arg from shmem_get_folio_gfp() (Rafael Aquini) [RHEL-27745]
  - shmem: shrink shmem_inode_info: dir_offsets in a union (Rafael Aquini) [RHEL-27745]
  - mm: memcg: normalize the value passed into memcg_rstat_updated() (Rafael Aquini) [RHEL-27745]
  - mm: memcg: refactor page state unit helpers (Rafael Aquini) [RHEL-27745]
  - maple_tree: add GFP_KERNEL to allocations in mas_expected_entries() (Rafael Aquini) [RHEL-27745]
  - mm/filemap: remove hugetlb special casing in filemap.c (Rafael Aquini) [RHEL-27745]
  - sched/numa, mm: make numa migrate functions to take a folio (Rafael Aquini) [RHEL-27745]
  - mm: mempolicy: make mpol_misplaced() to take a folio (Rafael Aquini) [RHEL-27745]
  - mm: memory: make numa_migrate_prep() to take a folio (Rafael Aquini) [RHEL-27745]
  - mm: memory: use a folio in do_numa_page() (Rafael Aquini) [RHEL-27745]
  - mm: huge_memory: use a folio in do_huge_pmd_numa_page() (Rafael Aquini) [RHEL-27745]
  - mm: memory: add vm_normal_folio_pmd() (Rafael Aquini) [RHEL-27745]
  - memcg: remove unused do_memsw_account in memcg1_stat_format (Rafael Aquini) [RHEL-27745]
  - memcg: expose swapcache stat for memcg v1 (Rafael Aquini) [RHEL-27745]
  - mm/writeback: update filemap_dirty_folio() comment (Rafael Aquini) [RHEL-27745]
  - mm/hugetlb: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-27745]
  - mm: migrate: remove isolated variable in add_page_for_migration() (Rafael Aquini) [RHEL-27745]
  - mm: migrate: remove PageHead() check for HugeTLB in add_page_for_migration() (Rafael Aquini) [RHEL-27745]
  - mm: migrate: use a folio in add_page_for_migration() (Rafael Aquini) [RHEL-27745]
  - mm: migrate: use __folio_test_movable() (Rafael Aquini) [RHEL-27745]
  - mm: migrate: convert migrate_misplaced_page() to migrate_misplaced_folio() (Rafael Aquini) [RHEL-27745]
  - mm: migrate: convert numamigrate_isolate_page() to numamigrate_isolate_folio() (Rafael Aquini) [RHEL-27745]
  - mm: migrate: remove THP mapcount check in numamigrate_isolate_page() (Rafael Aquini) [RHEL-27745]
  - mm: migrate: remove PageTransHuge check in numamigrate_isolate_page() (Rafael Aquini) [RHEL-27745]
  - mm/rmap: pass folio to hugepage_add_anon_rmap() (Rafael Aquini) [RHEL-27745]
  - mm/rmap: simplify PageAnonExclusive sanity checks when adding anon rmap (Rafael Aquini) [RHEL-27745]
  - mm/rmap: warn on new PTE-mapped folios in page_add_anon_rmap() (Rafael Aquini) [RHEL-27745]
  - mm/rmap: move folio_test_anon() check out of __folio_set_anon() (Rafael Aquini) [RHEL-27745]
  - mm/rmap: move SetPageAnonExclusive out of __page_set_anon_rmap() (Rafael Aquini) [RHEL-27745]
  - mm/rmap: drop stale comment in page_add_anon_rmap and hugepage_add_anon_rmap() (Rafael Aquini) [RHEL-27745]
  - mm: memcg: add THP swap out info for anonymous reclaim (Rafael Aquini) [RHEL-27745]
  - kmsan: introduce test_memcpy_initialized_gap() (Rafael Aquini) [RHEL-27745]
  - kmsan: merge test_memcpy_aligned_to_unaligned{,2}() together (Rafael Aquini) [RHEL-27745]
  - kmsan: prevent optimizations in memcpy tests (Rafael Aquini) [RHEL-27745]
  - kmsan: simplify kmsan_internal_memmove_metadata() (Rafael Aquini) [RHEL-27745]
  - mm: remove duplicated vma->vm_flags check when expanding stack (Rafael Aquini) [RHEL-27745]
  - mm: convert DAX lock/unlock page to lock/unlock folio (Rafael Aquini) [RHEL-27745]
  - mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype() (Rafael Aquini) [RHEL-27745]
  - mm/mremap: fix unaccount of memory on vma_merge() failure (Rafael Aquini) [RHEL-27745]
  - mm/compaction: factor out code to test if we should run compaction for target order (Rafael Aquini) [RHEL-27745]
  - mm/compaction: improve comment of is_via_compact_memory (Rafael Aquini) [RHEL-27745]
  - mm/compaction: remove repeat compact_blockskip_flush check in reset_isolation_suitable (Rafael Aquini) [RHEL-27745]
  - mm/compaction: correctly return failure with bogus compound_order in strict mode (Rafael Aquini) [RHEL-27745]
  - mm/compaction: call list_is_{first}/{last} more intuitively in move_freelist_{head}/{tail} (Rafael Aquini) [RHEL-27745]
  - mm/compaction: use correct list in move_freelist_{head}/{tail} (Rafael Aquini) [RHEL-27745]
  - mm/slub: simplify the last resort slab order calculation (Rafael Aquini) [RHEL-27745]
  - mm/slub: add sanity check for slub_min/max_order cmdline setup (Rafael Aquini) [RHEL-27745]
  - maple_tree: add MAS_UNDERFLOW and MAS_OVERFLOW states (Rafael Aquini) [RHEL-27745]
  - maple_tree: add mas_is_active() to detect in-tree walks (Rafael Aquini) [RHEL-27745]
  - arm/xen: remove lazy mode related definitions (Rafael Aquini) [RHEL-27745]
  - mm: Remove kmem_valid_obj() (Rafael Aquini) [RHEL-27745]
  - maple_tree: clean up mas_wr_append() (Rafael Aquini) [RHEL-27745]
  - maple_tree: replace data before marking dead in split and spanning store (Rafael Aquini) [RHEL-27745]
  - maple_tree: change mas_adopt_children() parent usage (Rafael Aquini) [RHEL-27745]
  - maple_tree: introduce mas_tree_parent() definition (Rafael Aquini) [RHEL-27745]
  - maple_tree: introduce mas_put_in_tree() (Rafael Aquini) [RHEL-27745]
  - maple_tree: reorder replacement of nodes to avoid live lock (Rafael Aquini) [RHEL-27745]
  - maple_tree: add hex output to maple_arange64 dump (Rafael Aquini) [RHEL-27745]
  - maple_tree: Be more strict about locking (Rafael Aquini) [RHEL-27745]
  - fs/address_space: add alignment padding for i_map and i_mmap_rwsem to mitigate a false sharing. (Rafael Aquini) [RHEL-15601 RHEL-27745]
  - maple_tree: drop mas_first_entry() (Rafael Aquini) [RHEL-27745]
  - maple_tree: replace mas_logical_pivot() with mas_safe_pivot() (Rafael Aquini) [RHEL-27745]
  - maple_tree: update mt_validate() (Rafael Aquini) [RHEL-27745]
  - maple_tree: make mas_validate_limits() check root node and node limit (Rafael Aquini) [RHEL-27745]
  - maple_tree: fix mas_validate_child_slot() to check last missed slot (Rafael Aquini) [RHEL-27745]
  - maple_tree: make mas_validate_gaps() to check metadata (Rafael Aquini) [RHEL-27745]
  - maple_tree: don't use MAPLE_ARANGE64_META_MAX to indicate no gap (Rafael Aquini) [RHEL-27745]
  - maple_tree: add a fast path case in mas_wr_slot_store() (Rafael Aquini) [RHEL-27745]
  - maple_tree: optimize mas_wr_append(), also improve duplicating VMAs (Rafael Aquini) [RHEL-27745]
  - maple_tree: add test for expanding range in RCU mode (Rafael Aquini) [RHEL-27745]
  - maple_tree: add test for mas_wr_modify() fast path (Rafael Aquini) [RHEL-27745]
  - shmem: Refactor shmem_symlink() (Rafael Aquini) [RHEL-27745]
  - XArray: Do not return sibling entries from xa_load() (Rafael Aquini) [RHEL-27745]
  - bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page (Rafael Aquini) [RHEL-27745]
  - kasan, doc: note kasan.fault=panic_on_write behaviour for async modes (Rafael Aquini) [RHEL-27745]
  - fs: hugetlbfs: set vma policy only when needed for allocating folio (Rafael Aquini) [RHEL-27745]
  - afs: fix the afs_dir_get_folio return value (Rafael Aquini) [RHEL-27745]
  - of: reserved_mem: Have kmemleak ignore dynamically allocated reserved mem (Rafael Aquini) [RHEL-27745]
  - powerpc/64s: Fix local irq disable when PMIs are disabled (Rafael Aquini) [RHEL-27745]
  - powerpc/book3e: remove #include <generated/utsrelease.h> (Rafael Aquini) [RHEL-27745]
  - s390: avoid using global register for current_stack_pointer (Rafael Aquini) [RHEL-27745]
  - s390/virtio_ccw: Fix dma_parm pointer not set up (Thomas Huth) [RHEL-70246]
  - fs/mnt_idmapping.c: Return -EINVAL when no map is written (Ian Kent) [RHEL-62007]
  - fs: reformat idmapped mounts entry (Ian Kent) [RHEL-62007]
  - mnt_idmapping: decouple from namespaces (Ian Kent) [RHEL-62007]
  - mnt_idmapping: remove nop check (Ian Kent) [RHEL-62007]
  - mnt_idmapping: remove check_fsmapping() (Ian Kent) [RHEL-62007]
  - fs: export mnt_idmap_get/mnt_idmap_put (Ian Kent) [RHEL-62007]
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Fix connection issue with Pluggable UD-4VPD dock (Desnes Nunes) [RHEL-59052]
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Desnes Nunes) [RHEL-59052] {CVE-2024-50268}
  - usb: dwc3: fix fault at system suspend if device was already runtime suspended (Desnes Nunes) [RHEL-59052 RHEL-68268] {CVE-2024-53070}
  - USB: serial: io_edgeport: fix use after free in debug printk (Desnes Nunes) [RHEL-59052] {CVE-2024-50267}
  - USB: serial: option: add Quectel RG650V (Desnes Nunes) [RHEL-59052]
  - USB: serial: option: add Fibocom FG132 0x0112 composition (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Add only on-board retimers when !CONFIG_USB4_DEBUGFS_MARGINING (Desnes Nunes) [RHEL-59052]
  - usb: phy: Fix API devm_usb_put_phy() can not release the phy (Desnes Nunes) [RHEL-59052]
  - usb: typec: use cleanup facility for 'altmodes_node' (Desnes Nunes) [RHEL-59052]
  - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (Desnes Nunes) [RHEL-59052]
  - usb: acpi: fix boot hang due to early incorrect 'tunneled' USB3 device links (Desnes Nunes) [RHEL-59052]
  - xhci: Fix Link TRB DMA in command ring stopped completion event (Desnes Nunes) [RHEL-59052]
  - xhci: Use pm_runtime_get to prevent RPM on unsupported systems (Desnes Nunes) [RHEL-59052]
  - phy: tegra: xusb: Add error pointer check in xusb.c (Desnes Nunes) [RHEL-59052]
  - phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Honor TMU requirements in the domain when setting TMU mode (Desnes Nunes) [RHEL-59052]
  - misc: rtsx: list supported models in Kconfig help (Desnes Nunes) [RHEL-59052]
  - media: pulse8-cec: fix data timestamp at pulse8_setup() (Desnes Nunes) [RHEL-59052]
  - redhat/configs: Adding CONFIG_USB_ONBOARD_DEV_USB5744 (Desnes Nunes) [RHEL-59052]
  - USB: serial: option: add Telit FN920C04 MBIM compositions (Desnes Nunes) [RHEL-59052]
  - USB: serial: option: add support for Quectel EG916Q-GL (Desnes Nunes) [RHEL-59052]
  - xhci: dbc: honor usb transfer size boundaries. (Desnes Nunes) [RHEL-59052]
  - usb: xhci: Fix handling errors mid TD followed by other errors (Desnes Nunes) [RHEL-59052]
  - xhci: Mitigate failed set dequeue pointer commands (Desnes Nunes) [RHEL-59052]
  - xhci: Fix incorrect stream context type macro (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: core: Fix system suspend on TI AM62 platforms (Desnes Nunes) [RHEL-59052]
  - xhci: tegra: fix checked USB2 port number (Desnes Nunes) [RHEL-59052 RHEL-65123] {CVE-2024-50075}
  - usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG (Desnes Nunes) [RHEL-59052]
  - usb: typec: altmode should keep reference to parent (Desnes Nunes) [RHEL-59052 RHEL-66511] {CVE-2024-50150}
  - usb: xhci: Fix problem with xhci resume from suspend (Desnes Nunes) [RHEL-59052]
  - usb: misc: onboard_usb_dev: introduce new config symbol for usb5744 SMBus support (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: core: Stop processing of pending events if controller is halted (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: re-enable runtime PM after failed resume (Desnes Nunes) [RHEL-59052]
  - usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (Desnes Nunes) [RHEL-59052]
  - usb: gadget: core: force synchronous registration (Desnes Nunes) [RHEL-59052]
  - usbnet: fix cyclical race on disconnect with work queue (Desnes Nunes) [RHEL-59052]
  - usbnet: Fix linkwatch use-after-free on disconnect (Desnes Nunes) [RHEL-59052]
  - usbnet: Run unregister_netdev() before unbind() again (Desnes Nunes) [RHEL-59052]
  - USB: appledisplay: close race between probe and completion handler (Desnes Nunes) [RHEL-59052]
  - USB: class: CDC-ACM: fix race between get_serial and set_serial (Desnes Nunes) [RHEL-59052]
  - usb: storage: ene_ub6250: Fix right shift warnings (Desnes Nunes) [RHEL-59052]
  - usb: roles: Improve the fix for a false positive recursive locking complaint (Desnes Nunes) [RHEL-59052]
  - locking/mutex: Introduce mutex_init_with_key() (Desnes Nunes) [RHEL-59052]
  - locking/mutex: Define mutex_init() once (Desnes Nunes) [RHEL-59052]
  - leds: mlxreg: Use devm_mutex_init() for mutex initialization (Desnes Nunes) [RHEL-59052] {CVE-2024-42129}
  - locking/mutex: Introduce devm_mutex_init() (Desnes Nunes) [RHEL-59052]
  - locking/rwsem: Make DEBUG_RWSEMS and PREEMPT_RT mutually exclusive (Desnes Nunes) [RHEL-59052]
  - locking/rwsem: Clarify that RWSEM_READER_OWNED is just a hint (Desnes Nunes) [RHEL-59052]
  - locking/qspinlock: Fix 'wait_early' set but not used warning (Desnes Nunes) [RHEL-59052]
  - locking/mutex: Simplify <linux/mutex.h> (Desnes Nunes) [RHEL-59052]
  - locking/mutex: split out mutex_types.h (Desnes Nunes) [RHEL-59052]
  - usb: xhci: fix loss of data on Cadence xHC (Desnes Nunes) [RHEL-59052]
  - usb: xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: qcom: simplify with devm_platform_ioremap_resource (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: qcom: use scoped device node handling to simplify error paths (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: imx8mp: disable SS_CON and U3 wakeup for system sleep (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: imx8mp: add 2 software managed quirk properties for host mode (Desnes Nunes) [RHEL-59052]
  - usb: host: xhci-plat: Parse xhci-missing_cas_quirk and apply quirk (Desnes Nunes) [RHEL-59052]
  - usb: misc: onboard_usb_dev: add Microchip usb5744 SMBus programming support (Desnes Nunes) [RHEL-59052]
  - usb: misc: onboard_dev: extend platform data to add power on delay field (Desnes Nunes) [RHEL-59052]
  - usb: cdnsp: Fix incorrect usb_request status (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci: support edge irq (Desnes Nunes) [RHEL-59052]
  - usb: chipidea: npcm: Fix coding style with clarification of data type (Desnes Nunes) [RHEL-59052]
  - usb: common: Switch to device_property_match_property_string() (Desnes Nunes) [RHEL-59052]
  - device property: Add fwnode_property_match_property_string() (Desnes Nunes) [RHEL-59052]
  - device property: Use fwnode_property_string_array_count() (Desnes Nunes) [RHEL-59052]
  - USB: usbtmc: prevent kernel-usb-infoleak (Desnes Nunes) [RHEL-59052] {CVE-2024-47671}
  - USB: serial: pl2303: add device id for Macrosilicon MS3020 (Desnes Nunes) [RHEL-59052]
  - redhat/configs: Adding CONFIG_USB_EXTRON_DA_HD_4K_PLUS_CEC (Desnes Nunes) [RHEL-59052]
  - media: cec: extron-da-hd-4k-plus: add the Extron DA HD 4K Plus CEC driver (Desnes Nunes) [RHEL-59052]
  - media: cec: move cec_get/put_device to header (Desnes Nunes) [RHEL-59052]
  - media: input: serio.h: add SERIO_EXTRON_DA_HD_PLUS (Desnes Nunes) [RHEL-59052]
  - media: admin-guide: cec.rst (Desnes Nunes) [RHEL-59052]
  - xhci: support setting interrupt moderation IMOD for secondary interrupters (Desnes Nunes) [RHEL-59052]
  - xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them. (Desnes Nunes) [RHEL-59052]
  - usb: xhci: adjust empty TD list handling in handle_tx_event() (Desnes Nunes) [RHEL-59052]
  - usb: xhci: remove 'retval' from xhci_pci_resume() (Desnes Nunes) [RHEL-59052]
  - usb: xhci: add comments explaining specific interrupt behaviour (Desnes Nunes) [RHEL-59052]
  - usb: xhci: make 'sbrn' a local variable (Desnes Nunes) [RHEL-59052]
  - usb: xhci: remove unused variables from struct 'xhci_hcd' (Desnes Nunes) [RHEL-59052]
  - usb: xhci: remove excessive Bulk short packet debug message (Desnes Nunes) [RHEL-59052]
  - usb: xhci: remove excessive isoc frame debug message spam (Desnes Nunes) [RHEL-59052]
  - xhci: Remove unused function declarations (Desnes Nunes) [RHEL-59052]
  - xhci: dbc: add dbgtty request to end of list once it completes (Desnes Nunes) [RHEL-59052]
  - xhci: dbc: Fix STALL transfer event handling (Desnes Nunes) [RHEL-59052]
  - dt-bindings: extcon: convert extcon-usb-gpio.txt to yaml format (Desnes Nunes) [RHEL-59052]
  - redhat/configs: Adding CONFIG_EXTCON_LC824206XA (Desnes Nunes) [RHEL-59052]
  - extcon: Add LC824206XA microUSB switch driver (Desnes Nunes) [RHEL-59052]
  - power: supply: Change usb_types from an array into a bitmask (Desnes Nunes) [RHEL-59052]
  - power: supply: sysfs: Move power_supply_show_enum_with_available() up (Desnes Nunes) [RHEL-59052]
  - power: supply: sysfs: Add power_supply_show_enum_with_available() helper (Desnes Nunes) [RHEL-59052]
  - power: supply: "usb_type" property may be written to (Desnes Nunes) [RHEL-59052]
  - power: supply: core: simplify charge_behaviour formatting (Desnes Nunes) [RHEL-59052]
  - power: supply: core: fix charge_behaviour formatting (Desnes Nunes) [RHEL-59052]
  - power: supply: core: ease special formatting implementations (Desnes Nunes) [RHEL-59052]
  - dt-bindings: phy: mxs-usb-phy: add nxp,sim property (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Don't create device link from USB4 Host Interface to USB3 xHC host (Desnes Nunes) [RHEL-59052]
  - usb: acpi: add device link between tunneled USB3 device and USB4 Host Interface (Desnes Nunes) [RHEL-59052]
  - device property: Move fwnode_handle_put() into property.h (Desnes Nunes) [RHEL-59052]
  - usb: Add tunnel_mode parameter to usb device structure (Desnes Nunes) [RHEL-59052]
  - xhci: Add USB4 tunnel detection for USB3 devices on Intel hosts (Desnes Nunes) [RHEL-59052]
  - usb: chipidea: npcm: Fix coding style with missing space (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: imx8mp: use scoped device node handling to simplify error paths (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: imx8mp: simplify with dev_err_probe (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: imx8mp: simplify with devm_clk_get_enabled (Desnes Nunes) [RHEL-59052]
  - usb-storage: Constify struct usb_device_id and us_unusual_dev (Desnes Nunes) [RHEL-59052]
  - phy: broadcom: brcm-sata: Simplify with scoped for each OF child loop (Desnes Nunes) [RHEL-59052]
  - USB: serial: kobil_sct: restore initial terminal settings (Desnes Nunes) [RHEL-59052]
  - USB: serial: drop driver owner initialization (Desnes Nunes) [RHEL-59052]
  - USB: serial: set driver owner when registering drivers (Desnes Nunes) [RHEL-59052]
  - usb: roles: add lockdep class key to struct usb_role_switch (Desnes Nunes) [RHEL-59052]
  - usb: typec: tipd: Free IRQ only if it was requested before (Desnes Nunes) [RHEL-59052 RHEL-63862] {CVE-2024-50057}
  - Documentation: msm-hsusb.txt: remove (Desnes Nunes) [RHEL-59052]
  - usb: typec: ucsi: Add DATA_RESET option of Connector Reset command (Desnes Nunes) [RHEL-59052]
  - dt-bindings: usb: qcom,dwc3: Document X1E80100 MP controller (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Improve software receiver lane margining (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Add optional voltage offset range for receiver lane margining (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Consolidate margining parameters into a structure (Desnes Nunes) [RHEL-59052]
  - thunderbolt: Add missing usb4_port_sb_read() to usb4_port_sw_margin() (Desnes Nunes) [RHEL-59052]
  - xhci: dbgtty: use kfifo from tty_port struct (Desnes Nunes) [RHEL-59052]
  - xhci: dbgtty: remove kfifo_out() wrapper (Desnes Nunes) [RHEL-59052]
  - usb: common: Use helper function for_each_node_with_property() (Desnes Nunes) [RHEL-59052]
  - usb: phy: mxs: enable weak 1p1 regulator for imx6ul during suspend (Desnes Nunes) [RHEL-59052]
  - usb: phy: mxs: add wakeup enable for imx7ulp (Desnes Nunes) [RHEL-59052]
  - usb: phy: mxs: keep USBPHY2's clk always on (Desnes Nunes) [RHEL-59052]
  - usb: phy: mxs: enable regulator phy-3p0 to improve signal qualilty (Desnes Nunes) [RHEL-59052]
  - xhci-pci: Make xhci-pci-renesas a proper modular driver (Desnes Nunes) [RHEL-59052]
  - usb: dwc3: imx8mp: Switch to RUNTIME/SYSTEM_SLEEP_PM_OPS() (Desnes Nunes) [RHEL-59052]
  - usb: chipidea: Use of_property_present() (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci: use GENMASK() for TCPC_TRANSMIT register fields (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci: use GENMASK() for TCPC_MSG_HDR_INFO_REV (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci: use GENMASK() for TCPC_ROLE_CTRL_RP_VAL (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci: use GENMASK() for TCPC_ROLE_CTRL_CC[12] (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci: use GENMASK() for TCPC_CC_STATUS_CC[12] (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci_rt1711h: Drop CONFIG_OF ifdeffery (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci_rt1711h: Convert enum->pointer for data in the match tables (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci_rt1711h: Remove trailing comma in the terminator entry for OF table (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpm/tcpci_maxim: clarify a comment (Desnes Nunes) [RHEL-59052]
  - usb: typec: tcpci: fix a comment typo (Desnes Nunes) [RHEL-59052]
  - dt-bindings: usb: qcom,dwc3: Update ipq5332 clock details (Desnes Nunes) [RHEL-59052]
  - USB: ohci-ppc-of: Drop ohci-littledian compatible (Desnes Nunes) [RHEL-59052]
  - usb: ohci-ppc-of: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-59052]
  - fsnotify: fix sending inotify event with unexpected filename (Ian Kent) [RHEL-37493]
  - block, bfq: fix possible UAF for bfqq->bic with merge chain (CKI Backport Bot) [RHEL-63388] {CVE-2024-47706}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-546.el9]
changelog:
  - net/mlx5: Update the list of the PCI supported devices (Benjamin Poirier) [RHEL-70419]
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Guillaume Nault) [RHEL-70449]
  - crypto: rng - Fix extrng EFAULT handling (Herbert Xu) [RHEL-68420]
  - Bluetooth: btmtk: adjust the position to init iso data anchor (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add 2 USB HW IDs for MT7925 (0xe118/e) (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add Mediatek MT7925 support ID 0x13d3:0x3608 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Invert LE State flag to set invalid rather then valid (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Add DSBR support for BlazarIW, BlazarU and GaP (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Bastien Nocera) [RHEL-61734]
  - redhat/configs: Fix Bluetooth configs for automotive (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Direct exception event to bluetooth stack (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Disable works on hci_unregister_dev (Bastien Nocera) [RHEL-61734]
  - workqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask() (Bastien Nocera) [RHEL-61734]
  - workqueue: Implement disable/enable for (delayed) work items (Bastien Nocera) [RHEL-61734]
  - workqueue: Preserve OFFQ bits in cancel[_sync] paths (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Fix not being able to reconnect after suspend (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Remove debugfs directory on module init failure (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Don't fail external suspend requests (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add one more ID 0x13d3:0x3623 for Qualcomm WCN785x (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Allocate memory for driver private data (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Fix not handling ZPL/short-transfer (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btsdio: Do not bind to non-removable CYW4373 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL (Bastien Nocera) [RHEL-61734]
  - Bluetooth: CMTP: Mark BT_CMTP as DEPRECATED (Bastien Nocera) [RHEL-61734]
  - Bluetooth: replace deprecated strncpy with strscpy_pad (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Use led_set_brightness() in LED trigger activate() callback (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btrtl: Use kvmemdup to simplify the code (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btrtl: Add the support for RTL8922A (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_ldisc: Use speed set by btattach as oper_speed (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_conn: Remove redundant memset after kzalloc (Bastien Nocera) [RHEL-61734]
  - Bluetooth: L2CAP: Remove unused declarations (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Add support for ISO packets (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_h4: Add support for ISO packets in h4_recv.h (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_uart: Add support for Amlogic HCI UART (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add MediaTek MT7925-B22M support ID 0x13d3:0x3604 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Add support for ISO data (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Add a helper function to extract iso header (Bastien Nocera) [RHEL-61734]
  - Bluetooth: MGMT: Ignore keys being loaded with invalid type (Bastien Nocera) [RHEL-61734]
  - Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" (Bastien Nocera) [RHEL-61734]
  - Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: If memdump doesn't work, re-enable IBS (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Fix not handling hibernation actions (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Fix random crash seen while removing driver (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Allow configuring drive strength of BRI (Bastien Nocera) [RHEL-61734]
  - Bluetooth: SMP: Fix assumption of Central always being Initiator (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Fix LE quote calculation (Bastien Nocera) [RHEL-61734]
  - Bluetooth: HCI: Invert LE State quirk to be opt-out rather then opt-in (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: avoid dup filtering when passive scanning with adv monitor (Bastien Nocera) [RHEL-61734]
  - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: fix a NULL-pointer derefence at shutdown (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: fix QCA6390 support on non-DT platforms (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: don't call pwrseq_power_off() twice for QCA6390 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_event: Fix setting DISCOVERY_FINDING for passive scanning (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: remove #ifdef around declarations (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: Fix btmtk.c undefined reference build error (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Fix suspending with wrong filter policy (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: Fix kernel crash when entering btmtk_usb_suspend (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Fail setup on error (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: Mark all stub functions as inline (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: Fix build error (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: use the power sequencer for wcn7850 and wcn6855 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: make pwrseq calls the default if available (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: unduplicate calls to hci_uart_register_device() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: schedule a devm action for disabling the clock (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Fix warnings for suspend and resume functions (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Add system suspend and resume handlers (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Add support for IW615 chipset (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Add support for AW693 A1 chipset (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Add support for Whale Peak2 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Add support for BlazarU core (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: mediatek: add ISO data transmission functions (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: move btusb_recv_acl_mtk to btmtk.c (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: move btusb_mtk_[setup, shutdown] to btmtk.c (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: move btusb_mtk_hci_wmt_sync to btmtk.c (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: add callback function in btusb suspend/resume (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: rename btmediatek_data (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: mediatek: return error for failed reg access (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: mediatek: remove the unnecessary goto tag (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Remove hci_request.{c,h} (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Remove remaining dependencies of hci_request (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Move handling of interleave_scan (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Don't use hci_prepare_cmd (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Remove usage of hci_req_sync (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: cleanup struct hci_dev (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Fix the sfi name for BlazarU (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: don't disable power management for QCA6390 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci: fix build when POWER_SEQUENCING=m (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Fix spelling of *intermediate* in comment (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: use the power sequencer for QCA6390 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Add firmware ID to firmware name (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core, hci_sync: cleanup struct discovery_state (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_event: Set QoS encryption from BIGInfo report (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Add handling for boot-signature timeout errors (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Update firmware names (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_bcm4377: Add BCM4388 support (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Add vendor-specific packet classification for ISO data (Bastien Nocera) [RHEL-61734]
  - Bluetooth: iso: remove unused struct 'iso_list_data' (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Remove unnecessary memset(0) calls (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Use sizeof(*pointer) instead of sizeof(type) (Bastien Nocera) [RHEL-61734]
  - Bluetooth: MGMT: Uninitialized variable in load_conn_param() (Bastien Nocera) [RHEL-61734]
  - Bluetooth/nokia: Remove unused struct 'hci_nokia_radio_hdr' (Bastien Nocera) [RHEL-61734]
  - tty: rfcomm: prefer array indexing over pointer arithmetic (Bastien Nocera) [RHEL-61734]
  - tty: rfcomm: prefer struct_size over open coded arithmetic (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Prefer array indexing over pointer arithmetic (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Prefer struct_size over open coded arithmetic (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Fix irq leak (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Print Firmware Sequencer information (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: mediatek: add MT7922 subsystem reset (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: mediatek: reset the controller before downloading the fw (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: mediatek: refactor the function btusb_mtk_reset (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: apply the common btmtk_fw_get_filename (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Refactor btintel_set_ppag() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: add the function to get the fw name (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_bcm4377: Increase boot timeout (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Handle FW Download Abort scenario (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Enable status prints for firmware download (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_bcm4377: Use correct unit for timeouts (Bastien Nocera) [RHEL-61734]
  - Bluetooth: MGMT: Make MGMT_OP_LOAD_CONN_PARAM update existing connection (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Enable Power Save feature on startup (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_event: Fix setting of unicast qos interval (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Fix REVERSE_INULL issue reported by coverity (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_bcm4377: Fix msgid release (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Add quirk to ignore reserved PHY bits in LE Extended Adv Report (Bastien Nocera) [RHEL-61734]
  - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Fix not using correct handle (Bastien Nocera) [RHEL-61734]
  - bluetooth: virtio: drop owner assignment (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Refactor and code cleanup (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Fix warning reported by sparse (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Fix not handling hdev->le_num_of_adv_sets=1 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Fix compiler warnings (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Add *setup* function to download firmware (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel_pcie: Add support for PCIe transport (Bastien Nocera) [RHEL-61734]
  - redhat/configs: Enable Intel Bluetooth PCIE drivers (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Export few static functions (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: Fix error code in qca_read_fw_build_info() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_conn: Use __counted_by() and avoid -Wfamnae warning (Bastien Nocera) [RHEL-61734]
  - LE Create Connection command timeout increased to 20 secs (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Add support for Filmore Peak2 (BE201) (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Add support for BlazarI (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_conn: Use struct_size() in hci_le_big_create_sync() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Use cmd->num_cis instead of magic number (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: clean up defines (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: drop bogus module version (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: drop bogus edl header checks (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_conn, hci_sync: Use __counted_by() to avoid -Wfamnae warnings (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_conn: Use __counted_by() to avoid -Wfamnae warning (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Sort usb_device_id table by the ID (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: Support downloading board id specific NVM for WCN7850 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Correct timeout macro argument used to receive control message (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Remove 3 repeated macro definitions (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_conn: Remove a redundant check for HFP offload (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Populate hci_set_hw_info for Intel and Realtek (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Fix the patch for MT7920 the affected to MT7921 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_bcm: Limit bcm43455 baudrate to 2000000 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_intel: Fix multiple issues reported by checkpatch.pl (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_event: Set DISCOVERY_FINDING on SCAN_ENABLED (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Add proper definitions for scan interval and window (Bastien Nocera) [RHEL-61734]
  - Bluetooth: L2CAP: Avoid -Wflex-array-member-not-at-end warnings (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Add support for MediaTek MT7922 device (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_intel: Convert to platform remove callback returning void (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_bcm: Convert to platform remove callback returning void (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btqcomsmd: Convert to platform remove callback returning void (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Add support to download intermediate loader (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Define macros for image types (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix firmware check error path (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix info leak when fetching board id (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix info leak when fetching fw build id (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: generalise device address check (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix NVM configuration parsing (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix wcn3991 device address check (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: set power_ctrl_enabled on NULL returned by gpiod_get_optional() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix NULL-deref on non-serdev setup (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix NULL-deref on non-serdev suspend (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: mediatek: Fix double free of skb in coredump (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix invalid device address check (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_event: Fix sending HCI_OP_READ_ENC_KEY_SIZE (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Fix triggering coredump implementation for QCA (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Use advertised PHYs on hci_le_ext_create_conn_sync (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Fix using the same interval and window for Coded PHY (Bastien Nocera) [RHEL-61734]
  - Bluetooth: ISO: Don't reject BT_ISO_QOS if parameters are unset (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtksdio: drop driver owner initialization (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmrvl_sdio: drop driver owner initialization (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_event: set the conn encrypted before conn establishes (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Fix not checking error on hci_cmd_sync_cancel_sync (Bastien Nocera) [RHEL-61734]
  - Bluetooth: qca: fix device-address endianness (Bastien Nocera) [RHEL-61734]
  - Bluetooth: add quirk for broken address properties (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Fix eir name length (Bastien Nocera) [RHEL-61734]
  - Bluetooth: ISO: Align broadcast sync_timeout with connection timeout (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Add new quirk for broken read key length on ATS2851 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Add support Mediatek MT7920 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btmtk: Add MODULE_FIRMWARE() for MT7922 (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Fix btnxpuart_close (Bastien Nocera) [RHEL-61734]
  - Bluetooth: fix use-after-free in accessing skb after sending it (Bastien Nocera) [RHEL-61734]
  - Bluetooth: bnep: Fix out-of-bound access (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btusb: Fix memory leak (Bastien Nocera) [RHEL-61734]
  - Bluetooth: msft: Fix memory leak (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Fix possible buffer overflow (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Use QoS to determine which PHY to scan (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Fix overwriting request callback (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sync: Use address filtering when HCI_PA_SYNC is set (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btintel: Print Firmware Sequencer information (Bastien Nocera) [RHEL-61734]
  - Bluetooth: constify the struct device_type usage (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btbcm: Use devm_kstrdup() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btbcm: Use strreplace() (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_core: Cancel request on command timeout (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Disconnect connected devices before rfkilling adapter (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Add new state HCI_POWERING_DOWN (Bastien Nocera) [RHEL-61734]
  - Bluetooth: mgmt: Remove leftover queuing of power_off work (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test (Bastien Nocera) [RHEL-61734]
  - Bluetooth: btrtl: Add the support for RTL8852BT/RTL8852BE-VT (Bastien Nocera) [RHEL-61734]
  - Bluetooth: hci_sysfs: make bt_class a static const structure (Bastien Nocera) [RHEL-61734]
  - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} (Bastien Nocera) [RHEL-61734]
  - Bluetooth: mgmt: Replace zero-length array with flexible-array member (Bastien Nocera) [RHEL-61734]
  - net: sched: fix erspan_opt settings in cls_flower (Xin Long) [RHEL-54225]
  - s390/hiperdispatch: Fix KASAN global-out-of-bounds report (Mete Durlu) [RHEL-69777]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: add missing locking for cfg80211 calls (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: ieee80211_i: Fix memory corruption bug in struct ieee80211_chanctx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: fix 6 GHz scan construction (Jose Ignacio Tornos Martinez) [RHEL-67113 RHEL-68230] {CVE-2024-53055}
  - wifi: cfg80211: clear wdev->cqm_config pointer on free (Jose Ignacio Tornos Martinez) [RHEL-66824 RHEL-67113] {CVE-2024-50235}
  - mac80211: fix user-power when emulating chanctx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - Revert "wifi: iwlwifi: remove retry loops in start" (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: don't add default link in fw restart flow (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (Jose Ignacio Tornos Martinez) [RHEL-67113 RHEL-68158] {CVE-2024-53059}
  - wifi: iwlwifi: mvm: SAR table alignment (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: don't leak a link on AP removal (Jose Ignacio Tornos Martinez) [RHEL-67113 RHEL-68167] {CVE-2024-53074}
  - wifi: rtlwifi: rtl8192du: Don't claim USB ID 0bda:8171 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: Fix the RX aggregation in USB 3 mode (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: brcm80211: BRCM_TRACING should depend on TRACING (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath11k: Fix invalid ring usage in full monitor mode (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath10k: Fix memory leak in management tx (Jose Ignacio Tornos Martinez) [RHEL-66777 RHEL-67113] {CVE-2024-50236}
  - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Jose Ignacio Tornos Martinez) [RHEL-66892 RHEL-67113] {CVE-2024-50237}
  - wifi: mac80211: Convert color collision detection to wiphy work (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: Add wiphy_delayed_work_pending() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: Do not create BSS entries for unsupported channels (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: Fix setting txpower with emulate_chanctx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - finally take no_llseek out (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - net: qrtr: Update packets cloning when broadcasting (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: do not increase mcu skb refcount if retry is not supported (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: coex: add debug message of link counts on 2/5GHz bands for wl_info v7 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: brcmfmac: cfg80211: Convert comma to semicolon (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: wilc1000: Convert using devm_clk_get_optional_enabled() in wilc_bus_probe() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: wilc1000: Convert using devm_clk_get_optional_enabled() in wilc_sdio_probe() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (Jose Ignacio Tornos Martinez) [RHEL-63924 RHEL-67113] {CVE-2024-50008}
  - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (Jose Ignacio Tornos Martinez) [RHEL-63370 RHEL-67113] {CVE-2024-47713}
  - wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: fix kernel-doc for per-link data (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7925: replace chan config with extend txpower config for clc (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7925: fix a potential array-index-out-of-bounds issue for clc (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7615: check devm_kasprintf() returned value (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7925: convert comma to semicolon (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7925: fix a potential association failure upon resuming (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: Avoid multiple -Wflex-array-member-not-at-end warnings (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7921: Check devm_kasprintf() returned value (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: check devm_kasprintf() returned value (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: avoid long MCU command timeouts during SER (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: fix uninitialized TLV data (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: always query station rx rate from firmware (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: fix rx filter setting for bfee functionality (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: shrink mt76_queue_buf (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: improve hardware restart reliability (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: reset the device after MCU timeout (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: retry mcu messages (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: set MT76_MCU_RESET early in mt7915_mac_full_reset (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: use mac80211 .sta_state op (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: change .sta_assoc callback to .sta_event (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: connac: add support for passing connection state directly (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: connac: add support for IEEE 802.11 fragmentation (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: allocate vif wcid in the same range as stations (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: add separate tx scheduling queue for off-channel tx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: handle ieee80211_radar_detected() for MLO (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211/mac80211: use proper link ID for DFS (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: handle DFS per link (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: handle DFS per link (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: move DFS related members to links[] in wireless_dev (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: trace: unlink rdev_end_cac trace event from wiphy_netdev_evt class (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: remove label usage in ieee80211_start_radar_detection() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: introduce EHT rate support in AQL airtime (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: avoid overriding direct/MBSSID BSS with per-STA profile BSS (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: skip indicating signal for per-STA profile BSSs (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: make BSS source types public (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: replace CONFIG_PM by CONFIG_PM_SLEEP (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: Avoid RCU debug splat in __cfg80211_bss_update error paths (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: partially move channel change code to core (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: fix mt76_get_rate (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7603: initialize chainmask (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7603: fix reading target power from eeprom (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7603: fix mixed declarations and code (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: connac: fix checksum offload fields of connac3 RXD (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: set IEEE80211_KEY_FLAG_GENERATE_MMIE for other ciphers (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: connac: add IEEE 802.11 fragmentation support for mt7996 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: fix handling mbss enable/disable (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath12k: Avoid -Wflex-array-member-not-at-end warnings (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath11k: Avoid -Wflex-array-member-not-at-end warnings (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - bus: mhi: host: pci_generic: Enable EDL trigger for Foxconn modems (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - bus: mhi: host: pci_generic: Update EDL firmware path for Foxconn modems (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: set correct value in beamforming mcu command for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: fix EHT beamforming capability check (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: set correct beamformee SS capability (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: fix HE and EHT beamforming capabilities (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: advertize beacon_int_min_gcd (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: fix wmm set of station interface to 3 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: fix traffic delay when switching back to working channel (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7996: use hweight16 to get correct tx antenna (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mt76: mt7915: fix oops on non-dbdc mt7986 (Jose Ignacio Tornos Martinez) [RHEL-63206 RHEL-67113] {CVE-2024-47715}
  - wifi: rtw89: avoid reading out of bounds when loading TX power FW elements (Jose Ignacio Tornos Martinez) [RHEL-64546 RHEL-67113] {CVE-2024-49928}
  - wifi: rtw89: use frequency domain RSSI (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: adjust DIG threshold to reduce false alarm (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: Convert to use jiffies macro (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: wilc1000: Re-enable RTC clock on resume (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: brcmsmac: Use kvmemdup to simplify the code (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: properly set the rates in link cmd (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: Remove unused last_sub_index from reorder buffer (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: remove mvm prefix from iwl_mvm_tx_resp* (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: s/iwl_mvm_remove_sta_cmd/iwl_remove_sta_cmd (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: STA command structure shouldn't be mvm specific (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: s/IWL_MVM_STATION_COUNT_MAX/IWL_STATION_COUNT_MAX (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: tell the firmware about CSA with mode=1 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: refactor scan channel description a bit (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: wext: Update spelling and grammar (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: add scan interval option for net-detect (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: add net-detect support for 8922ae (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: add wait for H2C of FW-IPS mode (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: fix wait condition for AOAC report request (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: assign mac_id for vif/sta and update to TX desc (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: Fix USB/SDIO devices not transmitting beacons (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: Set correct chandef when starting CAC (Jose Ignacio Tornos Martinez) [RHEL-64603 RHEL-67113] {CVE-2024-49937}
  - wifi: mac80211: scan: Use max macro (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: Check for missing VHT elements only for 5 GHz (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: fix RCU list iterations (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - bus: mhi: host: pci_generic: Add support for Netprisma LCUR57 and FCUN69 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: allow ESR when we the ROC expires (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: avoid NULL pointer dereference (Jose Ignacio Tornos Martinez) [RHEL-63991 RHEL-67113] {CVE-2024-49929}
  - wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rfkill: Correct parameter type for rfkill_set_hw_state_reason() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: remove redundant unlikely() around IS_ERR() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - net: rfkill: gpio: Do not load on Lenovo Yoga Tab 3 Pro YT3-X90 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: allow only CN mcc from WRDD (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: drop wrong STA selection in TX (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: bump FW API to 93 for BZ/SC devices (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: cleanup iwl_mvm_get_wd_timeout (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: use default command queue watchdog timeout (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: handle the new EML OMN failure notification (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: Stop processing MCC update if there was no change (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: add API for EML OMN frame failure (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: exit EMLSR if both links are missing beacons (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: handle the new missed beacons notification (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: add the new API for the missed beacons notification (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: rename iwl_missed_beacons_notif (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: Offload RLC/SMPS functionality to firmware (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: fix the comeback long retry times (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: Add non-atomic station iterator (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: lib80211: Constify struct lib80211_crypto_ops (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: lib80211: Handle const struct lib80211_crypto_ops in lib80211 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: add and improve EMLSR debug info (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: Enable channel puncturing for US/CAN from bios (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: add firmware debug points for EMLSR entry / exit (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwiif: mvm: handle the new BT notif (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: start to support the new BT profile notification (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: s/iwl_bt_coex_profile_notif/iwl_bt_coex_prof_old_notif (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: increase the time between ranging measurements (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: set the cipher for secured NDP ranging (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: Fix a race in scan abort flow (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: set ul_mu_data_disable when needed (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mei: add support for SAP version 4 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: config: label 'gl' devices as discrete (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: pcie: print function scratch before writing (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: use correct key iteration (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: remove MVM prefix from FW macros (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: add support for new REDUCE_TXPOWER_CMD versions (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: iwlwifi: mvm: prepare the introduction of V9 of REDUCED_TX_POWER (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211: don't use rate mask for offchannel TX either (Jose Ignacio Tornos Martinez) [RHEL-63376 RHEL-67113] {CVE-2024-47738}
  - wifi: mac80211: refactor block ack management code (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mac80211_hwsim: correct MODULE_PARM_DESC of multi_radio (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: introduce chip support link number and driver MLO capability (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: rename roc_entity_idx to roc_chanctx_idx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8922a: use right chanctx whenever possible in RFK flow (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852c: use right chanctx whenever possible in RFK flow (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bx: use right chanctx whenever possible in RFK flow (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852a: use right chanctx whenever possible in RFK flow (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8851b: use right chanctx whenever possible in RFK flow (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: pass chan to rfk_band_changed() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - net: Correct spelling in headers (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - bus: mhi: host: make mhi_bus_type const (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - bus: mhi: host: pci_generic: Fix the name for the Telit FE990A (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: remove unnecessary checks for valid priv (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: Fix uninitialized variable in mwifiex_cfg80211_authenticate() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: coex: Add new Wi-Fi role format condition for function using (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: coex: Bluetooth hopping map for Wi-Fi role version 7 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: coex: Update Wi-Fi role info version 7 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: coex: Update report version of Wi-Fi firmware 0.29.90.0 for RTL8852BT (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: debugfs: support multiple adapters debugging (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: remove CPT execution branch never used (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852a: adjust ANA clock to 12M (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: correct base HT rate mask for firmware (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8922a: add digital compensation to avoid TX EVM degrade (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852c: support firmware with fw_element (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (Jose Ignacio Tornos Martinez) [RHEL-64609 RHEL-67113] {CVE-2024-49938}
  - wifi: mwifiex: keep mwifiex_cfg80211_ops constant (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath12k: fix the stack frame size warning in ath12k_mac_op_hw_scan (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: add support for WPA-PSK-SHA256 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: fix key_mgmt setting (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: simplify WPA flags setting (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - Revert "wifi: ath9k: use devm for request_irq()" (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: Enable USB RX aggregation for 8822c/8822b/8821c (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: usb: Support RX aggregation (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: usb: Update the RX stats after every frame (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: usb: Init RX burst length according to USB speed (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtl8xxxu: add missing rtl8192cu USB IDs (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtl8xxxu: drop reference to staging drivers (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: add net-detect support for 8852c (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: add delay option for net-detect (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: add WoWLAN net-detect support (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: wow: implement PS mode for net-detect (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852c: support firmware format up to v1 (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath12k: match WMI BSS chan info structure with firmware definition (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath12k: fix BSS chan info request WMI command (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath12k: restore ASPM for supported hardwares only (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath9k: Remove error checks when creating debugfs entries (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath9k: use devm for gpio_request_one() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath9k: use devm for request_irq() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: correct VHT TX rate on 20MHz connection (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: add support for HW encryption in unicast management frames (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: avoid to add interface to list twice when SER (Jose Ignacio Tornos Martinez) [RHEL-64482 RHEL-67113] {CVE-2024-49939}
  - wifi: rtw89: 8922a: Add new fields for scan offload H2C command (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8922a: new implementation for RFK pre-notify H2C (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: brcmsmac: clean up unnecessary current_ampdu_cnt and related checks (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: brcmfmac: introducing fwil query functions (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: brcmfmac: fwsignal: Use struct_size() to simplify brcmf_fws_rxreorder() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: add host mlme for AP mode (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: add host mlme for client mode (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: mwifiex: increase max_num_akm_suites (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: pass chanctx_idx to rtw89_btc_{path_}phymap() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: fw: correct chan access in assoc_cmac_tbl_g7 and update_beacon_be (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: pass rtwvif to RFK scan (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: pass rtwvif to RFK channel (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: rename sub_entity to chanctx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: mcc: stop at a role holding chanctx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: chan: refine MCC re-plan flow when unassign chanctx (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: always wait for both firmware loading attempts (Jose Ignacio Tornos Martinez) [RHEL-63398 RHEL-67113] {CVE-2024-47718}
  - wifi: rtw89: fix typo of rtw89_phy_ra_updata_XXX (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 885xb: reset IDMEM mode to prevent download firmware failure (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: add support for hardware rfkill (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: add EVM statistics for 1SS rate (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: 8822c: Parse channel from IE to correct invalid hardware reports (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath9k: Use swap() to improve ath9k_hw_get_nf_hist_mid() (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath9k: use unmanaged PCI functions in ath9k_pci_owl_loader (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: 8703b: Fix reported RX band width (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: 8822c: Fix reported RX band width (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bt: add 8852BE-VT to Makefile and Kconfig (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bte: add PCI entry of 8852BE-VT (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bt: declare firmware features of RTL8852BT (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bt: add chip_ops of RTL8852BT (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bt: add chip_info of RTL8852BT (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bt: rfk: use predefined string choice for DPK enable/disable (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bt: add set_channel_rf (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: select WANT_DEV_COREDUMP (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: select WANT_DEV_COREDUMP (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: debugfs: support multiple adapters debugging (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: usb: Support USB 3 with RTL8822CU/RTL8822BU (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw89: 8852bt: rfk: Fix spelling mistake "KIP_RESOTRE" -> "KIP_RESTORE" (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: rtw88: Set efuse->ext_lna_5g - fix typo (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath12k: Support Transmit DE stats (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath11k: fix array out-of-bound access in SoC stats (Jose Ignacio Tornos Martinez) [RHEL-64581 RHEL-67113] {CVE-2024-49930}
  - wifi: ath12k: fix array out-of-bound access in SoC stats (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - wifi: ath11k: use work queue to process beacon tx event (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - Revert "wifi: ath11k: support hibernation" (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - Revert "wifi: ath11k: restore country code during resume" (Jose Ignacio Tornos Martinez) [RHEL-67113]
  - redhat/kernel.spec.template: Link rtla against in-tree libcpupower (Tomas Glozar) [RHEL-69522]
  - rtla: Documentation: Mention --deepest-idle-state (Tomas Glozar) [RHEL-69522]
  - rtla/timerlat: Add --deepest-idle-state for hist (Tomas Glozar) [RHEL-69522]
  - rtla/timerlat: Add --deepest-idle-state for top (Tomas Glozar) [RHEL-69522]
  - rtla/utils: Add idle state disabling via libcpupower (Tomas Glozar) [RHEL-69522]
  - rtla: Add optional dependency on libcpupower (Tomas Glozar) [RHEL-69522]
  - tools/build: Add libcpupower dependency detection (Tomas Glozar) [RHEL-69522]
  - redhat/kernel.spec.template: add extra flags for tools build (Tomas Glozar) [RHEL-69522]
  - tools/rtla: Use tools/build makefiles to build rtla (Tomas Glozar) [RHEL-69522]
  - of: check previous kernel's ima-kexec-buffer against memory bounds (Mamatha Inamdar) [RHEL-70361]
  - Revert "igb: Disable threaded IRQ for igb_msix_other" (Corinna Vinschen) [RHEL-49817]
  - igb: Disable threaded IRQ for igb_msix_other (Corinna Vinschen) [RHEL-49817]
  - igb: Cleanup unused declarations (Corinna Vinschen) [RHEL-49817]
  - igb: Do not bring the device up after non-fatal error (Corinna Vinschen) [RHEL-49817]
  - igb: Always call igb_xdp_ring_update_tail() under Tx lock (Corinna Vinschen) [RHEL-49817]
  - igb: Fix not clearing TimeSync interrupts for 82580 (Corinna Vinschen) [RHEL-49817]
  - igb: cope with large MAX_SKB_FRAGS (Corinna Vinschen) [RHEL-49817]
  - igb: Add MII write support (Corinna Vinschen) [RHEL-49817]
  - igb: flower: validate control flags (Corinna Vinschen) [RHEL-49817]
  - vsock: Update rx_bytes on read_skb() (Jon Maloy) [RHEL-66526] {CVE-2024-50169}
  - iavf: add support for offloading tc U32 cls filters (Michal Schmidt) [RHEL-49814]
  - iavf: refactor add/del FDIR filters (Michal Schmidt) [RHEL-49814]
  - iavf: flower: validate control flags (Michal Schmidt) [RHEL-49814]
  - iavf: RHEL only: re-add "legacy-rx" as a dummy priv flag (Michal Schmidt) [RHEL-49814]
  - iavf: kill "legacy-rx" for good (Michal Schmidt) [RHEL-49814]
  - iavf: implement modern PM ops declarations (Michal Schmidt) [RHEL-49814]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-547.el9]
changelog:
  - workqueue: Introduce from_work() helper for cleaner callback declarations (CKI Backport Bot) [RHEL-71464]
  - x86/cacheinfo: Delete global num_cache_leaves (David Arcari) [RHEL-22704]
  - cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (David Arcari) [RHEL-22704]
  - x86/pat: Simplify the PAT programming protocol (David Arcari) [RHEL-22704]
  - rh_messages.h: un-unmaintain hfi1 (Michal Schmidt) [RHEL-68505]
  - netfilter: IDLETIMER: Fix for possible ABBA deadlock (Phil Sutter) [RHEL-6041]
  - x86: fix off-by-one in access_ok() (Waiman Long) [RHEL-71045]
  - kasan: move checks to do_strncpy_from_user (Waiman Long) [RHEL-71045]
  - x86/uaccess: Zero the 8-byte get_range case on failure on 32-bit (Waiman Long) [RHEL-71045]
  - x86/uaccess: Improve the 8-byte getuser() case (Waiman Long) [RHEL-71045 RHEL-71049]
  - x86/uaccess: Fix missed zeroing of ia32 u64 get_user() range checking (Waiman Long) [RHEL-71045]
  - x86/asm: Use %c/%n instead of %P operand modifier in asm templates (Waiman Long) [RHEL-71045]
  - vfio/mlx5: Align the page tracking max message size with the device capability (CKI Backport Bot) [RHEL-67541]
  - scsi: smartpqi: update driver version to 2.1.30-031 (Don Brace) [RHEL-61191]
  - scsi: smartpqi: fix volume size updates (Don Brace) [RHEL-61191]
  - scsi: smartpqi: fix rare system hang during LUN reset (Don Brace) [RHEL-61191]
  - scsi: smartpqi: add new controller PCI IDs (Don Brace) [RHEL-61191]
  - scsi: smartpqi: add counter for parity write stream requests (Don Brace) [RHEL-61191]
  - scsi: smartpqi: correct stream detection (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Add fw log to kdump (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Update driver version to 2.1.28-025 (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Improve handling of multipath failover (Don Brace) [RHEL-61191]
  - scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Improve accuracy/performance of raid-bypass-counter (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Add new controller PCI IDs (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Replace deprecated strncpy() with strscpy() (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Replace one-element arrays with flexible-array members (Don Brace) [RHEL-61191]
  - scsi: smartpqi: Replace all non-returning strlcpy() with strscpy() (Don Brace) [RHEL-61191]
  - KVM: arm64: Pass on SVE mapping failures (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Don't map 'kvm_vgic_global_state' at EL2 with pKVM (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Just advertise SEIS as 0 when emulating ICC_CTLR_EL1 (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Initialize trap register values in hyp in pKVM (Shaoqin Huang) [RHEL-68038]
  - KVM: selftests: Don't bother deleting memslots in KVM when freeing VMs (Shaoqin Huang) [RHEL-68038]
  - KVM: selftests: Always unlink memory regions when deleting (VM free) (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: vgic: Kill VGIC_MAX_PRIVATE definition (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: vgic: Make vgic_get_irq() more robust (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Don't retire aborted MMIO instruction (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Get rid of userspace_irqchip_in_use (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Move pkvm_vcpu_init_traps() to init_pkvm_hyp_vcpu() (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Correctly access TCR2_EL1, PIR_EL1, PIRE0_EL1 with VHE (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Don't eagerly teardown the vgic on init error (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Make PIR{,E0}_EL1 save/restore conditional on FEAT_TCRX (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Make TCR2_EL1 save/restore dependent on the VM features (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Get rid of HCRX_GUEST_FLAGS (Shaoqin Huang) [RHEL-68038]
  - KVM: arm64: Correctly honor the presence of FEAT_TCRX (Shaoqin Huang) [RHEL-68038]
  - vsock: Fix sk_error_queue memory leak (Jon Maloy) [RHEL-69707] {CVE-2024-53118}
  - nvme-fabrics: fix kernel crash while shutting down controller (Ming Lei) [RHEL-69767]
  - Revert "nvme: make keep-alive synchronous operation" (Ming Lei) [RHEL-69767]
  - arm64: dts: qcom: sa8775p: Add interconnects for ethernet (Radu Rendec) [RHEL-70213]
  - arm64: dts: qcom: sa8775p-ride-r3: add new board file (Radu Rendec) [RHEL-70213]
  - arm64: dts: qcom: move common parts for sa8775p-ride variants into a .dtsi (Radu Rendec) [RHEL-70213]
  - net: stmmac: qcom-ethqos: enable SGMII loopback during DMA reset on sa8775p-ride-r3 (Radu Rendec) [RHEL-70213]
  - net: stmmac: qcom-ethqos: add support for 2.5G BASEX mode (Radu Rendec) [RHEL-70213]
  - vfio/pci: Properly hide first-in-list PCIe extended capability (Alex Williamson) [RHEL-69744]
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (CKI Backport Bot) [RHEL-69700] {CVE-2024-53113}
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CKI Backport Bot) [RHEL-69574] {CVE-2024-53104}
  - mm: resolve faulty mmap_region() error path behaviour (Herton R. Krzesinski) [RHEL-68912] {CVE-2024-53096}
  - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (Herton R. Krzesinski) [RHEL-68912]
  - parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards (Herton R. Krzesinski) [RHEL-68912]
  - prctl: generalize PR_SET_MDWE support check to be per-arch (Herton R. Krzesinski) [RHEL-68912]
  - prctl: Disable prctl(PR_SET_MDWE) on parisc (Herton R. Krzesinski) [RHEL-68912]
  - mm: refactor map_deny_write_exec() (Herton R. Krzesinski) [RHEL-68912]
  - mm: unconditionally close VMAs on error (Herton R. Krzesinski) [RHEL-68912]
  - mm: avoid unsafe VMA hook invocation when error arises on mmap hook (Herton R. Krzesinski) [RHEL-68912]
  - netlink: fix false positive warning in extack during dumps (Petr Oros) [RHEL-57756]
  - netfilter: nfnetlink: Initialise extack before use in ACKs (Petr Oros) [RHEL-57756] {CVE-2024-44945}
  - Revert "rtnetlink: add guard for RTNL" (Petr Oros) [RHEL-57756]
  - netdev-genl: Hold rcu_read_lock in napi_get (Petr Oros) [RHEL-57756]
  - netlink: terminate outstanding dump on socket close (Petr Oros) [RHEL-57756] {CVE-2024-53140}
  - net: fix crash when config small gso_max_size/gso_ipv4_max_size (Petr Oros) [RHEL-57756] {CVE-2024-50258}
  - genetlink: hold RCU in genlmsg_mcast() (Petr Oros) [RHEL-57756]
  - rtnetlink: Add bulk registration helpers for rtnetlink message handlers. (Petr Oros) [RHEL-57756]
  - netlink: specs: mptcp: fix port endianness (Petr Oros) [RHEL-57756]
  - netlink: specs: nftables: allow decode of tailscale ruleset (Petr Oros) [RHEL-57756]
  - tools/net/ynl: fix cli.py --subscribe feature (Petr Oros) [RHEL-57756]
  - netlink: specs: nftables: allow decode of default firewalld ruleset (Petr Oros) [RHEL-57756]
  - netdev-genl: Set extack and fix error on napi-get (Petr Oros) [RHEL-57756]
  - tools: ynl: error check scanf() in a sample (Petr Oros) [RHEL-57756]
  - net: netlink: Remove the dump_cb_mutex field from struct netlink_sock (Petr Oros) [RHEL-57756]
  - rtnetlink: delete redundant judgment statements (Petr Oros) [RHEL-57756]
  - tools: ynl: lift an assumption about spec file name (Petr Oros) [RHEL-57756]
  - doc/netlink/specs: add netkit support to rt_link.yaml (Petr Oros) [RHEL-57756]
  - tools: ynl: remove extraneous ; after statements (Petr Oros) [RHEL-57756]
  - net: reduce rtnetlink_rcv_msg() stack usage (Petr Oros) [RHEL-57756]
  - docs: networking: devlink: capitalise length value (Petr Oros) [RHEL-57756]
  - tools: ynl: use ident name for Family, too. (Petr Oros) [RHEL-57756]
  - tools: net: package libynl for use in selftests (Petr Oros) [RHEL-57756]
  - tcp_metrics: add netlink protocol spec in YAML (Petr Oros) [RHEL-57756]
  - tcp_metrics: add UAPI to the header guard (Petr Oros) [RHEL-57756]
  - tools: ynl: use display hints for formatting of scalar attrs (Petr Oros) [RHEL-57756]
  - netdev-genl: fix error codes when outputting XDP features (Petr Oros) [RHEL-57756]
  - net: netlink: remove the cb_mutex "injection" from netlink core (Petr Oros) [RHEL-57756]
  - rtnetlink: move rtnl_lock handling out of af_netlink (Petr Oros) [RHEL-57756]
  - tools: ynl: make user space policies const (Petr Oros) [RHEL-57756]
  - tools: ynl: make the attr and msg helpers more C++ friendly (Petr Oros) [RHEL-57756]
  - netdev: add qstat for csum complete (Petr Oros) [RHEL-57756]
  - doc: netlink: Fix op pre and post fields in generated .rst (Petr Oros) [RHEL-57756]
  - doc: netlink: Fix formatting of op flags in generated .rst (Petr Oros) [RHEL-57756]
  - doc: netlink: Don't 'sanitize' op docstrings in generated .rst (Petr Oros) [RHEL-57756]
  - doc: netlink: Fix generated .rst for multi-line docs (Petr Oros) [RHEL-57756]
  - ynl: ensure exact-len value is resolved (Petr Oros) [RHEL-57756]
  - netdev: Add queue stats for TX stop and wake (Petr Oros) [RHEL-57756]
  - netlink/specs: Add VF attributes to rt_link spec (Petr Oros) [RHEL-57756]
  - net: write once on dev->allmulti and dev->promiscuity (Petr Oros) [RHEL-57756]
  - net/core: print message for allmulticast (Petr Oros) [RHEL-57756]
  - net/core: refactor promiscuous mode message (Petr Oros) [RHEL-57756]
  - net-core: use netdev_* calls for kernel messages (Petr Oros) [RHEL-57756]
  - rtnetlink: allow rtnl_fill_link_netnsid() to run under RCU protection (Petr Oros) [RHEL-57756]
  - rtnetlink: do not depend on RTNL in rtnl_xdp_prog_skb() (Petr Oros) [RHEL-57756]
  - rtnetlink: do not depend on RTNL in rtnl_fill_proto_down() (Petr Oros) [RHEL-57756]
  - rtnetlink: do not depend on RTNL for many attributes (Petr Oros) [RHEL-57756]
  - rtnetlink: do not depend on RTNL for IFLA_TXQLEN output (Petr Oros) [RHEL-57756]
  - rtnetlink: do not depend on RTNL for IFLA_IFNAME output (Petr Oros) [RHEL-57756]
  - rtnetlink: do not depend on RTNL for IFLA_QDISC output (Petr Oros) [RHEL-57756]
  - tools: ynl: add --list-ops and --list-msgs to CLI (Petr Oros) [RHEL-57756]
  - rtnetlink: use for_each_netdev_dump() in rtnl_stats_dump() (Petr Oros) [RHEL-57756]
  - rtnetlink: change rtnl_stats_dump() return value (Petr Oros) [RHEL-57756]
  - netdev: add queue stats (Petr Oros) [RHEL-57756]
  - tools: ynl: don't append doc of missing type directly to the type (Petr Oros) [RHEL-57756]
  - selftests: drv-net: test dumping qstats per device (Petr Oros) [RHEL-57756]
  - netlink: support all extack types in dumps (Petr Oros) [RHEL-57756]
  - netlink: move extack writing helpers (Petr Oros) [RHEL-57756]
  - netdev: support dumping a single netdev in qstats (Petr Oros) [RHEL-57756]
  - tools: ynl: don't ignore errors in NLMSG_DONE messages (Petr Oros) [RHEL-57756]
  - netfilter: nfnetlink: Handle ACK flags for batch messages (Petr Oros) [RHEL-57756]
  - tools/net/ynl: Add multi message support to ynl (Petr Oros) [RHEL-57756]
  - tools/net/ynl: Fix extack decoding for directional ops (Petr Oros) [RHEL-57756]
  - doc/netlink/specs: Add draft nftables spec (Petr Oros) [RHEL-57756]
  - devlink: add a new info version tag (Petr Oros) [RHEL-57756]
  - doc/netlink/specs: Add bond support to rt_link.yaml (Petr Oros) [RHEL-57756]
  - netlink: add nlmsg_consume() and use it in devlink compat (Petr Oros) [RHEL-57756]
  - ynl: support binary and integer sub-type for indexed-array (Petr Oros) [RHEL-57756]
  - ynl: rename array-nest to indexed-array (Petr Oros) [RHEL-57756]
  - tools: ynl: copy netlink error to NlError (Petr Oros) [RHEL-57756]
  - rtnetlink: add guard for RTNL (Petr Oros) [RHEL-57756]
  - tools: ynl: add ynl_dump_empty() helper (Petr Oros) [RHEL-57756]
  - genetlink: remove linux/genetlink.h (Petr Oros) [RHEL-57756]
  - net: openvswitch: remove unnecessary linux/genetlink.h include (Petr Oros) [RHEL-57756]
  - netlink: create a new header for internal genetlink symbols (Petr Oros) [RHEL-57756]
  - doc: netlink: Update tc spec with missing definitions (Petr Oros) [RHEL-57756]
  - doc: netlink: Add hyperlinks to generated Netlink docs (Petr Oros) [RHEL-57756]
  - doc: netlink: Change generated docs to limit TOC to depth 3 (Petr Oros) [RHEL-57756]
  - tools/net/ynl: Add extack policy attribute decoding (Petr Oros) [RHEL-57756]
  - doc/netlink/specs: Add vlan attr in rt_link spec (Petr Oros) [RHEL-57756]
  - ynl: support hex display_hint for integer (Petr Oros) [RHEL-57756]
  - netlink: let core handle error cases in dump operations (Petr Oros) [RHEL-57756]
  - xfs: don't fail repairs on metadata files with no attr fork (Bill O'Donnell) [RHEL-65728]
  - xfs: fix integer overflow in xrep_bmap (Bill O'Donnell) [RHEL-65728]
  - xfs: disable sparse inode chunk alignment check when there is no alignment (Bill O'Donnell) [RHEL-65728]
  - xfs: fix error bailout in xrep_abt_build_new_trees (Bill O'Donnell) [RHEL-65728]
  - xfs: remove conditional building of rt geometry validator functions (Bill O'Donnell) [RHEL-65728]
  - xfs: reset XFS_ATTR_INCOMPLETE filter on node removal (Bill O'Donnell) [RHEL-65728]
  - xfs: read only mounts with fsopen mount API are busted (Bill O'Donnell) [RHEL-65728]
  - xfs: fix backwards logic in xfs_bmap_alloc_account (Bill O'Donnell) [RHEL-65728]
  - xfs: use the op name in trace_xlog_intent_recovery_failed (Bill O'Donnell) [RHEL-65728]
  - xfs: fix a use after free in xfs_defer_finish_recovery (Bill O'Donnell) [RHEL-65728]
  - xfs: turn the XFS_DA_OP_REPLACE checks in xfs_attr_shortform_addname into asserts (Bill O'Donnell) [RHEL-65728]
  - xfs: remove xfs_attr_sf_hdr_t (Bill O'Donnell) [RHEL-65728]
  - xfs: remove struct xfs_attr_shortform (Bill O'Donnell) [RHEL-65728]
  - xfs: use xfs_attr_sf_findname in xfs_attr_shortform_getvalue (Bill O'Donnell) [RHEL-65728]
  - xfs: remove xfs_attr_shortform_lookup (Bill O'Donnell) [RHEL-65728]
  - xfs: simplify xfs_attr_sf_findname (Bill O'Donnell) [RHEL-65728]
  - xfs: move the xfs_attr_sf_lookup tracepoint (Bill O'Donnell) [RHEL-65728]
  - xfs: return if_data from xfs_idata_realloc (Bill O'Donnell) [RHEL-65728]
  - xfs: make if_data a void pointer (Bill O'Donnell) [RHEL-65728]
  - xfs: fold xfs_rtallocate_extent into xfs_bmap_rtalloc (Bill O'Donnell) [RHEL-65728]
  - xfs: simplify and optimize the RT allocation fallback cascade (Bill O'Donnell) [RHEL-65728]
  - xfs: reorder the minlen and prod calculations in xfs_bmap_rtalloc (Bill O'Donnell) [RHEL-65728]
  - xfs: remove XFS_RTMIN/XFS_RTMAX (Bill O'Donnell) [RHEL-65728]
  - xfs: remove rt-wrappers from xfs_format.h (Bill O'Donnell) [RHEL-65728]
  - xfs: factor out a xfs_rtalloc_sumlevel helper (Bill O'Donnell) [RHEL-65728]
  - xfs: tidy up xfs_rtallocate_extent_exact (Bill O'Donnell) [RHEL-65728]
  - xfs: merge the calls to xfs_rtallocate_range in xfs_rtallocate_block (Bill O'Donnell) [RHEL-65728]
  - xfs: reflow the tail end of xfs_rtallocate_extent_block (Bill O'Donnell) [RHEL-65728]
  - xfs: invert a check in xfs_rtallocate_extent_block (Bill O'Donnell) [RHEL-65728]
  - xfs: split xfs_rtmodify_summary_int (Bill O'Donnell) [RHEL-65728]
  - xfs: move xfs_rtget_summary to xfs_rtbitmap.c (Bill O'Donnell) [RHEL-65728]
  - xfs: cleanup picking the start extent hint in xfs_bmap_rtalloc (Bill O'Donnell) [RHEL-65728]
  - xfs: indicate if xfs_bmap_adjacent changed ap->blkno (Bill O'Donnell) [RHEL-65728]
  - xfs: reflow the tail end of xfs_bmap_rtalloc (Bill O'Donnell) [RHEL-65728]
  - xfs: return -ENOSPC from xfs_rtallocate_* (Bill O'Donnell) [RHEL-65728]
  - xfs: move xfs_bmap_rtalloc to xfs_rtalloc.c (Bill O'Donnell) [RHEL-65728]
  - xfs: also use xfs_bmap_btalloc_accounting for RT allocations (Bill O'Donnell) [RHEL-65728]
  - xfs: remove the xfs_alloc_arg argument to xfs_bmap_btalloc_accounting (Bill O'Donnell) [RHEL-65728]
  - xfs: turn the xfs_trans_mod_dquot_byino stub into an inline function (Bill O'Donnell) [RHEL-65728]
  - xfs: consider minlen sized extents in xfs_rtallocate_extent_block (Bill O'Donnell) [RHEL-65728]
  - xfs/health: cleanup, remove duplicated including (Bill O'Donnell) [RHEL-65728]
  - xfs: repair quotas (Bill O'Donnell) [RHEL-65728]
  - xfs: improve dquot iteration for scrub (Bill O'Donnell) [RHEL-65728]
  - xfs: check dquot resource timers (Bill O'Donnell) [RHEL-65728]
  - xfs: check the ondisk space mapping behind a dquot (Bill O'Donnell) [RHEL-65728]
  - xfs: online repair of realtime bitmaps (Bill O'Donnell) [RHEL-65728]
  - xfs: create a new inode fork block unmap helper (Bill O'Donnell) [RHEL-65728]
  - xfs: repair the inode core and forks of a metadata inode (Bill O'Donnell) [RHEL-65728]
  - xfs: always check the rtbitmap and rtsummary files (Bill O'Donnell) [RHEL-65728]
  - xfs: check rt summary file geometry more thoroughly (Bill O'Donnell) [RHEL-65728]
  - xfs: check rt bitmap file geometry more thoroughly (Bill O'Donnell) [RHEL-65728]
  - xfs: repair problems in CoW forks (Bill O'Donnell) [RHEL-65728]
  - xfs: create a ranged query function for refcount btrees (Bill O'Donnell) [RHEL-65728]
  - xfs: refactor repair forcing tests into a repair.c helper (Bill O'Donnell) [RHEL-65728]
  - xfs: repair inode fork block mapping data structures (Bill O'Donnell) [RHEL-65728]
  - xfs: reintroduce reaping of file metadata blocks to xrep_reap_extents (Bill O'Donnell) [RHEL-65728]
  - xfs: skip the rmapbt search on an empty attr fork unless we know it was zapped (Bill O'Donnell) [RHEL-65728]
  - xfs: abort directory parent scrub scans if we encounter a zapped directory (Bill O'Donnell) [RHEL-65728]
  - xfs: zap broken inode forks (Bill O'Donnell) [RHEL-65728]
  - xfs: repair inode records (Bill O'Donnell) [RHEL-65728]
  - xfs: set inode sick state flags when we zap either ondisk fork (Bill O'Donnell) [RHEL-65728]
  - xfs: dont cast to char * for XFS_DFORK_*PTR macros (Bill O'Donnell) [RHEL-65728]
  - xfs: add missing nrext64 inode flag check to scrub (Bill O'Donnell) [RHEL-65728]
  - xfs: try to attach dquots to files before repairing them (Bill O'Donnell) [RHEL-65728]
  - xfs: disable online repair quota helpers when quota not enabled (Bill O'Donnell) [RHEL-65728]
  - xfs: repair refcount btrees (Bill O'Donnell) [RHEL-65728]
  - xfs: repair inode btrees (Bill O'Donnell) [RHEL-65728]
  - xfs: repair free space btrees (Bill O'Donnell) [RHEL-65728]
  - xfs: remove trivial bnobt/inobt scrub helpers (Bill O'Donnell) [RHEL-65728]
  - xfs: roll the scrub transaction after completing a repair (Bill O'Donnell) [RHEL-65728]
  - xfs: move the per-AG datatype bitmaps to separate files (Bill O'Donnell) [RHEL-65728]
  - xfs: create separate structures and code for u32 bitmaps (Bill O'Donnell) [RHEL-65728]
  - xfs: constrain dirty buffers while formatting a staged btree (Bill O'Donnell) [RHEL-65728]
  - xfs: move btree bulkload record initialization to ->get_record implementations (Bill O'Donnell) [RHEL-65728]
  - xfs: add debug knobs to control btree bulk load slack factors (Bill O'Donnell) [RHEL-65728]
  - xfs: read leaf blocks when computing keys for bulkloading into node blocks (Bill O'Donnell) [RHEL-65728]
  - xfs: set XBF_DONE on newly formatted btree block that are ready for writing (Bill O'Donnell) [RHEL-65728]
  - xfs: force all buffers to be written during btree bulk load (Bill O'Donnell) [RHEL-65728]
  - xfs: initialise di_crc in xfs_log_dinode (Bill O'Donnell) [RHEL-65728]
  - xfs: pass the defer ops directly to xfs_defer_add (Bill O'Donnell) [RHEL-65728]
  - xfs: pass the defer ops instead of type to xfs_defer_start_recovery (Bill O'Donnell) [RHEL-65728]
  - xfs: store an ops pointer in struct xfs_defer_pending (Bill O'Donnell) [RHEL-65728]
  - xfs: move xfs_attr_defer_type up in xfs_attr_item.c (Bill O'Donnell) [RHEL-65728]
  - xfs: consolidate the xfs_attr_defer_* helpers (Bill O'Donnell) [RHEL-65728]
  - xfs: recompute growfsrtfree transaction reservation while growing rt volume (Bill O'Donnell) [RHEL-65728]
  - xfs: move xfs_ondisk.h to libxfs/ (Bill O'Donnell) [RHEL-65728]
  - xfs: use static_assert to check struct sizes and offsets (Bill O'Donnell) [RHEL-65728]
  - xfs: extract xfs_da_buf_copy() helper function (Bill O'Donnell) [RHEL-65728]
  - xfs: update dir3 leaf block metadata after swap (Bill O'Donnell) [RHEL-65728]
  - xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real (Bill O'Donnell) [RHEL-65728]
  - xfs: clean up xfs_fsops.h (Bill O'Donnell) [RHEL-65728]
  - xfs: clean up the xfs_reserve_blocks interface (Bill O'Donnell) [RHEL-65728]
  - xfs: clean up the XFS_IOC_FSCOUNTS handler (Bill O'Donnell) [RHEL-65728]
  - xfs: clean up the XFS_IOC_{GS}ET_RESBLKS handler (Bill O'Donnell) [RHEL-65728]
  - xfs: force small EFIs for reaping btree extents (Bill O'Donnell) [RHEL-65728]
  - xfs: log EFIs for all btree blocks being used to stage a btree (Bill O'Donnell) [RHEL-65728]
  - xfs: implement block reservation accounting for btrees we're staging (Bill O'Donnell) [RHEL-65728]
  - xfs: remove unused fields from struct xbtree_ifakeroot (Bill O'Donnell) [RHEL-65728]
  - xfs: automatic freeing of freshly allocated unwritten space (Bill O'Donnell) [RHEL-65728]
  - xfs: remove __xfs_free_extent_later (Bill O'Donnell) [RHEL-65728]
  - xfs: allow pausing of pending deferred work items (Bill O'Donnell) [RHEL-65728]
  - xfs: don't append work items to logged xfs_defer_pending objects (Bill O'Donnell) [RHEL-65728]
  - xfs: make xchk_iget safer in the presence of corrupt inode btrees (Bill O'Donnell) [RHEL-65728]
  - xfs: elide ->create_done calls for unlogged deferred work (Bill O'Donnell) [RHEL-65728]
  - xfs: document what LARP means (Bill O'Donnell) [RHEL-65728]
  - xfs: don't allow overly small or large realtime volumes (Bill O'Donnell) [RHEL-65728]
  - xfs: fix 32-bit truncation in xfs_compute_rextslog (Bill O'Donnell) [RHEL-65728]
  - xfs: make rextslog computation consistent with mkfs (Bill O'Donnell) [RHEL-65728]
  - xfs: move ->iop_relog to struct xfs_defer_op_type (Bill O'Donnell) [RHEL-65728]
  - xfs: collapse the ->create_done functions (Bill O'Donnell) [RHEL-65728]
  - xfs: hoist xfs_trans_add_item calls to defer ops functions (Bill O'Donnell) [RHEL-65728]
  - xfs: clean out XFS_LI_DIRTY setting boilerplate from ->iop_relog (Bill O'Donnell) [RHEL-65728]
  - xfs: use xfs_defer_create_done for the relogging operation (Bill O'Donnell) [RHEL-65728]
  - xfs: hoist ->create_intent boilerplate to its callsite (Bill O'Donnell) [RHEL-65728]
  - xfs: collapse the ->finish_item helpers (Bill O'Donnell) [RHEL-65728]
  - xfs: hoist intent done flag setting to ->finish_item callsite (Bill O'Donnell) [RHEL-65728]
  - xfs: don't set XFS_TRANS_HAS_INTENT_DONE when there's no ATTRD log item (Bill O'Donnell) [RHEL-65728]
  - xfs: move ->iop_recover to xfs_defer_op_type (Bill O'Donnell) [RHEL-65728]
  - xfs: use xfs_defer_finish_one to finish recovered work items (Bill O'Donnell) [RHEL-65728]
  - xfs: dump the recovered xattri log item if corruption happens (Bill O'Donnell) [RHEL-65728]
  - xfs: recreate work items when recovering intent items (Bill O'Donnell) [RHEL-65728]
  - xfs: transfer recovered intent item ownership in ->iop_recover (Bill O'Donnell) [RHEL-65728]
  - xfs: pass the xfs_defer_pending object to iop_recover (Bill O'Donnell) [RHEL-65728]
  - xfs: use xfs_defer_pending objects to recover intent items (Bill O'Donnell) [RHEL-65728]
  - xfs: don't leak recovered attri intent items (Bill O'Donnell) [RHEL-65728]
  - bdev: rename freeze and thaw helpers (Bill O'Donnell) [RHEL-65728]
  - scsi: core: Fix missing FORCE for scsi_devinfo_tbl.c build rule (Ewan D. Milne) [RHEL-59053]
  - Document/kexec: generalize crash hotplug description (Baoquan He) [RHEL-58641]
  - sysfs/cpu: Make crash_hotplug attribute world-readable (Baoquan He) [RHEL-58641]
  - Documentation: kdump: clean up the outdated description (Baoquan He) [RHEL-58641]
  - s390/kexec: do not automatically select KEXEC option (Baoquan He) [RHEL-58641]
  - redhat/configs: Add new configs for crash hotplug support of kdump (Baoquan He) [RHEL-58641]
  - powerpc/85xx: fix compile error without CONFIG_CRASH_DUMP (Baoquan He) [RHEL-58641]
  - kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y (Baoquan He) [RHEL-58641]
  - fs/proc: fix softlockup in __read_vmcore (Baoquan He) [RHEL-58641]
  - crash: add prefix for crash dumping messages (Baoquan He) [RHEL-58641]
  - vmcore: replace strncpy with strscpy_pad (Baoquan He) [RHEL-58641]
  - crash: add a new kexec flag for hotplug support (Baoquan He) [RHEL-58641]
  - crash: forward memory_notify arg to arch crash hotplug handler (Baoquan He) [RHEL-58641]
  - crash: use macro to add crashk_res into iomem early for specific arch (Baoquan He) [RHEL-58641]
  - powerpc/kdump: Split KEXEC_CORE and CRASH_DUMP dependency (Baoquan He) [RHEL-58641]
  - powerpc/machdep: Remove stale functions from ppc_md structure (Baoquan He) [RHEL-58641]
  - powerpc/kexec: split CONFIG_KEXEC_FILE and CONFIG_CRASH_DUMP (Baoquan He) [RHEL-58641]
  - kexec/kdump: make struct crash_mem available without CONFIG_CRASH_DUMP (Baoquan He) [RHEL-58641]
  - arch, crash: move arch_crash_save_vmcoreinfo() out to file vmcore_info.c (Baoquan He) [RHEL-58641]
  - powerpc: add cpu_spec.cpu_features to vmcoreinfo (Baoquan He) [RHEL-58641]
  - mips, crash: wrap crash dumping code into crash related ifdefs (Baoquan He) [RHEL-58641]
  - s390, crash: wrap crash dumping code into crash related ifdefs (Baoquan He) [RHEL-58641]
  - ppc, crash: enforce KEXEC and KEXEC_FILE to select CRASH_DUMP (Baoquan He) [RHEL-58641]
  - arm64, crash: wrap crash dumping code into crash related ifdefs (Baoquan He) [RHEL-58641]
  - x86, crash: wrap crash dumping code into crash related ifdefs (Baoquan He) [RHEL-58641]
  - crash: clean up kdump related config items (Baoquan He) [RHEL-58641]
  - crash: split crash dumping code out from kexec_core.c (Baoquan He) [RHEL-58641]
  - crash: remove dependency of FA_DUMP on CRASH_DUMP (Baoquan He) [RHEL-58641]
  - crash: split vmcoreinfo exporting code out from crash_core.c (Baoquan He) [RHEL-58641]
  - kexec: split crashkernel reservation code out from crash_core.c (Baoquan He) [RHEL-58641]
  - kexec: Annotate struct crash_mem with __counted_by (Baoquan He) [RHEL-58641]
  - kexec: drop dependency on ARCH_SUPPORTS_KEXEC from CRASH_DUMP (Baoquan He) [RHEL-58641]
  - kexec: select CRYPTO from KEXEC_FILE instead of depending on it (Baoquan He) [RHEL-58641]
  - kexec: fix KEXEC_FILE dependencies (Baoquan He) [RHEL-58641]
  - kernel/Kconfig.kexec: drop select of KEXEC for CRASH_DUMP (Baoquan He) [RHEL-58641]
  - kexec: Allocate kernel above bzImage's pref_address (Baoquan He) [RHEL-58641]
  - kernel/crash_core.c: make __crash_hotplug_lock static (Baoquan He) [RHEL-58641]
  - kdump: defer the insertion of crashkernel resources (Baoquan He) [RHEL-58641]
  - crash_core: fix and simplify the logic of crash_exclude_mem_range() (Baoquan He) [RHEL-58641]
  - x86/crash: use SZ_1M macro instead of hardcoded value (Baoquan He) [RHEL-58641]
  - x86/crash: remove the unused image parameter from prepare_elf_headers() (Baoquan He) [RHEL-58641]
  - crash_core: fix the check for whether crashkernel is from high memory (Baoquan He) [RHEL-58641]
  - kdump: remove redundant DEFAULT_CRASH_KERNEL_LOW_SIZE (Baoquan He) [RHEL-58641]
  - kexec_core: fix the assignment to kimage->control_page (Baoquan He) [RHEL-58641]
  - x86/kexec: fix incorrect end address passed to kernel_ident_mapping_init() (Baoquan He) [RHEL-58641]
  - x86/kexec: fix incorrect argument passed to kexec_dprintk() (Baoquan He) [RHEL-58641]
  - x86/kexec: use pr_err() instead of kexec_dprintk() when an error occurs (Baoquan He) [RHEL-58641]
  - kexec_file: fix incorrect temp_start value in locate_mem_hole_top_down() (Baoquan He) [RHEL-58641]
  - kexec: modify the meaning of the end parameter in kimage_is_destination_range() (Baoquan He) [RHEL-58641]
  - crash_core: remove duplicated including of kexec.h (Baoquan He) [RHEL-58641]
  - x86/kexec: simplify the logic of mem_region_callback() (Baoquan He) [RHEL-58641]
  - kexec: use ALIGN macro instead of open-coding it (Baoquan He) [RHEL-58641]
  - kexec_file: load kernel at top of system RAM if required (Baoquan He) [RHEL-58641]
  - kexec: use atomic_try_cmpxchg in crash_kexec (Baoquan He) [RHEL-58641]
  - kernel: kexec: copy user-array safely (Baoquan He) [RHEL-58641]
  - crash_core.c: remove unneeded functions (Baoquan He) [RHEL-58641]
  - arm64: kdump: use generic interface to simplify crashkernel reservation (Baoquan He) [RHEL-58641]
  - x86: kdump: use generic interface to simplify crashkernel reservation code (Baoquan He) [RHEL-58641]
  - crash_core: move crashk_*res definition into crash_core.c (Baoquan He) [RHEL-58641]
  - crash_core: add generic function to do reservation (Baoquan He) [RHEL-58641]
  - crash_core: change parse_crashkernel() to support crashkernel=,high|low parsing (Baoquan He) [RHEL-58641]
  - crash_core: change the prototype of function parse_crashkernel() (Baoquan He) [RHEL-58641]
  - crash_core.c: remove unnecessary parameter of function (Baoquan He) [RHEL-58641]
  - Crash: add lock to serialize crash hotplug handling (Baoquan He) [RHEL-58641]
  - x86/crash: optimize CPU changes (Baoquan He) [RHEL-58641]
  - crash: change crash_prepare_elf64_headers() to for_each_possible_cpu() (Baoquan He) [RHEL-58641]
  - crash: hotplug support for kexec_load() (Baoquan He) [RHEL-58641]
  - x86/crash: add x86 crash hotplug support (Baoquan He) [RHEL-58641]
  - kexec: exclude elfcorehdr from the segment digest (Baoquan He) [RHEL-58641]
  - crash: add generic infrastructure for crash hotplug support (Baoquan He) [RHEL-58641]
  - crash: move a few code bits to setup support of crash hotplug (Baoquan He) [RHEL-58641]
  - kexec_lock: Replace kexec_mutex() by kexec_lock() in two comments (Baoquan He) [RHEL-58641]
  - remove ARCH_DEFAULT_KEXEC from Kconfig.kexec (Baoquan He) [RHEL-58641]
  - kexec: rename ARCH_HAS_KEXEC_PURGATORY (Baoquan He) [RHEL-58641]
  - s390/kexec: refactor for kernel/Kconfig.kexec (Baoquan He) [RHEL-58641]
  - powerpc/kexec: refactor for kernel/Kconfig.kexec (Baoquan He) [RHEL-58641]
  - mips/kexec: refactor for kernel/Kconfig.kexec (Baoquan He) [RHEL-58641]
  - arm64/kexec: refactor for kernel/Kconfig.kexec (Baoquan He) [RHEL-58641]
  - x86/kexec: refactor for kernel/Kconfig.kexec (Baoquan He) [RHEL-58641]
  - kexec: consolidate kexec and crash options into kernel/Kconfig.kexec (Baoquan He) [RHEL-58641]


author: Joseph Marrero <jmarrero@redhat.com> - 0.6.3-1
changelog:
  - Rebase to 0.6.3 which is supported upstream
    This release also includes the fix for CVE-2024-42472
    Fixes: #RHEL-56797


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-1
changelog:
  - update to 4.5 (RHEL-6522 RHEL-6520 RHEL-9969 RHEL-9971 RHEL-9973 RHEL-9975
    RHEL-12411)
  - add chronyd-restricted service (RHEL-9972)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-3
changelog:
  - don't repeat error log messages when reloading sourcedir (RHEL-51786)
  - add support for leap-seconds.list file (RHEL-53484)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-1
changelog:
  - update to 4.6.1 (RHEL-61877)
  - keep PHC refclock reachable when dropping samples due to high delay
    (RHEL-65421)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-2
changelog:
  - improve description of refresh directive (RHEL-82096)
  - improve logging of selection failures (RHEL-80388 RHEL-80413 RHEL-80415)
  - fix sourcedir reloading to not multiply sources (RHEL-95016)
  - switch from patchX to patch -P X


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Packit <hello@packit.dev> - 336.1-1
changelog:
  - storage: Fix passphrase remembering with "Reuse encryption" (rhbz#2354497)
  - Translation updates (rhbz#2354986)


author: Packit <hello@packit.dev> - 336.2-1
changelog:
  - storage: Revert "Use mdraid metadata version 1.0 when in Anaconda mode" (rhbz#2352953)
  - Translation updates (rhbz#2354986)


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Add cockpit/ws arm64 container
  - Storage: Disk Self-Test error warnings on the overview page
  - Bug fixes and translation updates


author: Ondřej Pohořelský <opohorel@redhat.com> - 1.5.7-14
changelog:
  - Rename variables in get_range()
  - Step size out fo bound handling 
  - Fix range parsing
  - Resolves: RHEL-82795


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Daniel Zatovic <dzatovic@redhat.com> - 2.7.2-1
changelog:
  - Update to cryptsetup 2.7.2
  - Use OpenSLL Argon implementation instead of the built-in one
  - Resolves: RHEL-32377


author: Ondrej Kozina <okozina@redhat.com> - 2.7.2-2
changelog:
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - patch: Abort online reencryption for misconfigured devices.
  - patch: Harden online reencryption checks in initialization phase.
  - patch: Fix detection of direct-io with suspended devices.
  - patch: Return suspended status also for unknow target types.
  - patch: Do not handle device as suspended on error.
  - Resolves: RHEL-39003 RHEL-41238


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-23
changelog:
  - RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
  - RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.2.3.3op2-34
changelog:
  - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-35
changelog:
  - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-32
changelog:
  - make up incomplete patch for host name wildcard checking (RHEL-5675)
  - eliminate use of obsolete patch syntax (RHEL-65791)
  - http2: make sure pause is done on HTTP (RHEL-85847)


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jakub Martisko <jamartis@redhat.com> - 28-6
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-25
changelog:
  - Add 0094-libmultipath-Add-max_retries-config-option.patch
    * Fixes RHEL-1729 ("Allow multipathd to set the max_retries of the
      scsi_device for paths")
  - Add 0095-libmutipath-Retain-device-size-if-sysfs_get_size-fai.patch
  - Add 0096-multipathd-check-and-update-all-paths-when-in-cli_re.patch
  - Add 0097-multipathd-move-post-reloading-commands-into-resize_.patch
  - Add 0098-multipathd-move-resize_map-to-multipathd-main.c.patch
  - Add 0099-multipathd-Add-auto_resize-config-option.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986
  - Resolves: RHEL-1729


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-26
changelog:
  - Add 0100-libmultipath-avoid-temporarily-enabling-queueing-on-.patch
  - Add 0101-multipathd-Make-sure-to-disable-queueing-if-recovery.patch
    * Fixes RHEL-17234 ("RHEL9 dm-multipath no_path_retry [retry number] is
      undone if paths are later lost for an open map.")
  - Add 0102-multipathd-remove-nopath-flushing-code-from-flush_ma.patch
  - Add 0103-multipathd-make-flush_map-delete-maps-like-the-multi.patch
  - Add 0104-multipathd-disable-queueing-when-removing-unknown-ma.patch
    * Fixes RHEL-4998 ("When remove external lun from host, rescan lun status
      will cause the OS hang and no response")
  - Resolves: RHEL-4998
  - Resolves: RHEL-17234


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-27
changelog:
  - Add 0105-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
  - Add 0106-multipathd-fix-auto-resize-configuration.patch
  - Add 0107-libmultipath-fix-displaying-auto_resize-config-setti.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-28
changelog:
  - Add 0108-libmultipath-actually-truncate-too-large-vpd-page.patch
  - Add 0109-kpartx-fix-theoretical-overflow-in-loop-device-name.patch
    * Fixes RHEL-31793 ("RHEL SAST Automation: address (selected) true positives")
  - Resolves: RHEL-31793


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-29
changelog:
  - Add 0110-libmultipath-keep-track-of-queueing-state-in-feature.patch
  - Add 0111-libmultipath-export-partmap_in_use.patch
  - Add 0112-libmultipath-change-flush_on_last_del-to-fix-a-multi.patch
  - Add 0113-libmultipath-pad-dev_loss_tmo-to-avoid-race-with-no_.patch
    * Fixes RHEL-30272
  - Add 0114-libmultipath-remove-pathgroup-wildcard-options.patch
  - Add 0115-libmultipath-print-all-values-in-snprint_failback.patch
  - Add 0116-multipathd-Stop-double-counting-map-failures-for-no_.patch
  - Add 0117-multipath-tools-man-pages-add-missing-multipathd-com.patch
  - Add 0118-libmultipath-change-the-vend-prod-rev-printing.patch
  - Add 0119-multipath-tools-man-pages-Add-format-wildcard-descri.patch
    * Fixes RHEL-8304
  - Resolves: RHEL-8304
  - Resolves: RHEL-30272


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-30
changelog:
  - Add 0120-multipath-tools-fix-multipath-ll-bug-for-Native-NVME.patch
    * Fixes RHEL-28068
  - Add 0121-multipathd-set-reply-length-to-zero-for-NULL-replies.patch
    * Fixes RHEL-44569
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-31
changelog:
  - Modify multiple tests especially medium_error_scsi_debug and squelch_scsi_id
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-32
changelog:
  - Modify bindings, find_multipaths, and user_friendly_names tests
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-35
changelog:
  - Add 0124-libmultipath-add-missing-assert-to-checkers.c.patch
  - Add 0125-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch
    * Fixes RHEL-73413
  - Add 0126-libmultipath-export-udev-pthread-cleanup-functions.patch
  - Add 0127-multipathd-set-rport-port_state-to-marginal-for-NVMe.patch
    * Fixes RHEL-67472
  - Resolves: RHEL-73413
  - Resolves: RHEL-67472


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-36
changelog:
  - Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
  - Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
  - Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
    * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-78758


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-37
changelog:
  - Add 0140-multipath-clean-up-find_multipaths-value-names.patch
  - Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
    * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
      to communicate with a process in another network namespace")
  - Fix multipath_conf_syntax OSCI test.
  - Resolves: RHEL-82307


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-38
changelog:
  - Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
  - Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
  - Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
    * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
      created externally while there are offline paths.")
  - Resolves: RHEL-82534


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-39
changelog:
  - Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
  - Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
  - Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
  - Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
  - Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
    * Fixes RHEL-103109 ("Update multipath builtin config to add new
      device defaults")
  - Resolves: RHEL-103109


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-2
changelog:
  - Allow non-zero values in unused index block entries.
  - Fix boundary check on the bitset for cached blocks.
  - Fix incorrect index_entry.nr_free on expansion affecting free space estimate.
  - Fix thin_repair checking keys on a node with a zero key.
  - Enhance error message in cache_check suggesting fix when applicable.


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-3
changelog:
  - Fix --version string compatibility with LVM tools.
  - Fix confusing Broken pipe warning when used in lvconvert --repair.


author: Marian Csontos <mcsontos@redhat.com> - 1.1.0-1
changelog:
  - Update to latest upstream release 1.1.0.
  - Support listing the highest mapped block in thin_ls.
  - Introduce thin_migrate for volume migration.
  - See CHANGES.


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.2-18.b1
changelog:
  - Fix for CVE-2022-2928
  - Fix for CVE-2022-2929
  - Use systemd-sysusers for dhcp user and group (#2095396)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Lichen Liu <lichliu@redhat.com> - 1:3.5-2
changelog:
  - Add processor support from SMBIOS-3.6.0
  - Consistently use read_file when reading from a dump file


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Pavel Valena <pvalena@redhat.com> - 057-101.git20250808
changelog:
  - fix(systemd): add missing modprobe@.service
  - fix: let check_vol_slaves_all return 1 when checks on all
  - improvement(74nvmf): lookup required NIC kernel modules for
  - fix(74nvmf): set root=nvmf
  - chore(multipath): remove `rd_NO_MULTIPATH` kernel command
  - refactor(multipath): remove custom multipathd.service
  - fix(systemd): systemd.volatile needs overlayfs kernel module
  - refactor(dracut): introduce clamp_mtimes helper function
  - fix(dracut): ensure hardlink deduplication is reproducible


author: Pavel Valena <pvalena@redhat.com> - 057-43.git20230816
changelog:
  - feat(spec): include modules for IMA
  - fix(dracut): there can be \ at the end on line in awk script
  - fix(rngd): spacing
  - fix(integrity): do not enable EVM if there is no key
  - fix(fips): include openssl's fips.so and openssl.cnf


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Petr Pisar <ppisar@redhat.com> - 37-14
changelog:
  - Fix XML ABI dumps that were generated with a faulty GCC and missed the
    variadic arguments when building without LTO (bug #1863475)


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.187-5
changelog:
  - rhbz2088774: ship /etc/profile.d/debuginfod* files even without
                 default DEBUGINFOD_URLS.


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 4.7.0-1
changelog:
  - Update to 4.7.0 (#1930632)
  - Align spec syntax with upstream spec file
  - Add 'tcl' to the BuildRequires and remove 'man' from this list
  - Fix names of 'procps-ng' and 'man-db' packages on Fedora
  - Only install manpages through make install, other docs are handled by %doc
  - Remove alternatives mechanism for manpages


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-0.1.alpha
changelog:
  - Update to 5.0.0-alpha (#1989523)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Remove createmodule.sh and createmodule.py utilities ('module sh-to-mod'
    should be used instead)
  - Remove configure options that have been made default starting version 5.0
  - Remove compat subpackage
  - Run non-regression tests in quick mode


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 (#2004402)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Configuration guide example.txt is replaced by more up to date INSTALL.txt
    document


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.3.0-2
changelog:
  - fix intermittent test failures (RHEL-82109)
  - fix source-sh test with non-default manpath (RHEL-82109)


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Kamil Dudka <kdudka@redhat.com> - 1:4.7.0-6
changelog:
  - disable -flto on ppc64le to make test-float pass (#1789115)
  - do not compile with -D__SUPPORT_SNAN__ (#1294016)


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83109


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Dave Dykstra <dwd@fedoraproject.org> - 2.9.9-7
changelog:
  - Update the Requires: fuse-common >= version to 3.4.2-4 because
    fuse-common > 3.4.2-3 is insufficient to force the new version


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-96
changelog:
  - Fixes for several CVEs
  - Resolves: CVE-2024-45779 CVE-2024-45778 CVE-2025-1118
  - Resolves: CVE-2025-0677 CVE-2024-45782 CVE-2025-0690
  - Resolves: CVE-2024-45783 CVE-2025-0624 CVE-2024-45776
  - Resolves: CVE-2025-0622 CVE-2024-45774 CVE-2024-45775
  - Resolves: CVE-2024-45781 CVE-2024-45780
  - Resolves: #RHEL-79700
  - Resolves: #RHEL-79341
  - Resolves: #RHEL-79875
  - Resolves: #RHEL-79849
  - Resolves: #RHEL-79707
  - Resolves: #RHEL-79857
  - Resolves: #RHEL-79709
  - Resolves: #RHEL-79846
  - Resolves: #RHEL-75737
  - Resolves: #RHEL-79713
  - Resolves: #RHEL-73785
  - Resolves: #RHEL-73787
  - Resolves: #RHEL-79704
  - Resolves: #RHEL-79702


author: Nicolas Frayer <nfrayer@redhat.com> 2.06-99
changelog:
  - Added the following 2 commits to optimize memory consumption
  - tpm: Disable the tpm verifier if the TPM device is not present
  - powerpc: increase MIN RMA size for CAS negotiation
  - Resolves: #RHEL-76558


author: Nicolas Frayer <nfrayer@redhat.com> 2.06-104
changelog:
  - fs/xfs: Sync with latest xfs upstream
  - Resolves: #RHEL-85960
  - (NVR bump to catch up with zstream)


author: Julien Rische <jrische@redhat.com> - 0.8.4-5
changelog:
  - Add an option for minimum lifetime
  - Resolves: rhbz#2184333
  - Remove unused patch files
  - Fix date typographical error in changelog


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Coiby Xu <coxu@redhat.com> - 1.6.2-1
changelog:
  - ima-setup: run zipl after building initramfs for s390x (RHEL-72293)
  - update to upstream 1.6.2 (RHEL-82793)


author: Coiby Xu <coxu@redhat.com> - 1.6.2-2
changelog:
  - Verify IMA signature to make sure it's correct (RHEL-105471)
  - Drop old libimaevm.so.4 (RHEL-82797)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.7-4
changelog:
  - Move texlive-tex files to more approriate location again, this
    time in sync with dropping texlive-texinfo from texlive
    Resolves: #1719379


author: Christian Kellner <ckellner@redhat.com> - 49-1
changelog:
  - New upstream release 49
  - Switch to meson build system.
  - Ship the pkg-config file.
  - Remove ldconfig scriptlets.


author: Jan Macku <jamacku@redhat.com> - 10.10-1
changelog:
  - Translated using Weblate (Friulian) (#381)
  - Translations update from Weblate (#378)
  - added veth support
  - ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon
  - ifdown removes veth pair if both peers are down
  - rename_device: also support dracut-style kernel cmdline configuration
  - spec: Mark network-scripts as deprecated
  - spec: Initscripts now requires chkconfig (#374)
  - Translations update from Weblate (#371)
  - spec: Move service script into subpackage
  - ci: Onboard initscripts to Packit
  - ci: Migrate from Travis to GH Actions


author: Jan Macku <jamacku@redhat.com> - 10.11.1-1
changelog:
  - spec: Update relation between initscripts and initscripts-service
  - spec: Replace not working awk command with sed
  - use downstream version style


author: Jan Macku <jamacku@redhat.com> - 10.11.2-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race
  - ci: Update path to csdiff repository (#391)


author: Jan Macku <jamacku@redhat.com> - 10.11.3-1
changelog:
  - Drop unnecessary obsoletes
  - spec: Move rename_device to subpackage `initscripts-rename-device`
  - ci: Update `.packit.yml` to run on `c9s`
  - ci: Use Differential ShellCheck action


author: Jan Macku <jamacku@redhat.com> - 10.11.8-1
changelog:
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - sync spec with c9s


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.el9
changelog:
  - tc: add missing separator (Andrea Claudi) [RHEL-337]
  - u32: fix TC_U32_TERMINAL printing (Andrea Claudi) [RHEL-586]


author: Andrea Claudi <aclaudi@redhat.com> - 5.13.0-5.el9
changelog:
  - Add build and runtime dependency on libbpf (Andrea Claudi) [1994520]
  - Use TC_LIB_DIR environment variable (Andrea Claudi) [1994545]
  - Re-add iproute-doc package on the specfile (Andrea Claudi) [1994581]


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Sutter <psutter@redhat.com> [1.8.10-1.el9]
changelog:
  - spec: Support for _excludedocs macro in alternatives installation (Phil Sutter) [RHEL-5810]
  - Rebase onto version 1.8.10 (Phil Sutter) [RHEL-14147]


author: Phil Cameron <pcameron@redhat.com> - 1.2.1-1
changelog:
  - Makefile: protect mandatory compile flags
  - packet capture: don't reuse socket for multiple receive functions
  - TPACKET_V[23]: continue even if mlock() fails
  - ipmon: fix division by zero
  - fix: detstats(), ifstats(): handle packets with incorrect header checksum
  - fix: positionptr(): properly allocate newly created interfaces
  - fix: detstats(): properly account non-IP packets
  - fix: properly init curses (fixes view on some utf-8 terminals)
  - fix: cidr_split_address(): fix buffer overflow
  - ipmon: printentry(): fix printing of huge values
  - build: use correct libraries (wide version of -lpanel)
  - fix unsafe handling of printf() args (RedHat Bugzilla: 1842690)
  - fix the CPU hog if the interface gets removed (RedHat Bugzilla: 1572750)
  - introduce packet capturing abstraction: add recvmmsg(), TPACKET_V2 and TPACKET_V3 mmap()ed capturing modules: this allow us to capture in multigigabit speeds
  - add partial support for IPoIB interfaces (full support cannot be done because the kernel interface doesn't give us source address) (RedHat Bugzilla: 1140211)
  - merge rvnamed-ng into iptraf-ng
  - allow scrolling with Home, End, PageUp and PageDown keys
  - show dropped packet count
  - pktsize: print in and out counters
  - ifstats: show total packet rate and packet drop across all interfaces
  - ipmon: show OSPF protocol version
  - hostmon, ipmon: update screen only when needed (vastly reduces CPU usage and also reduces packet drops)
  - update source code to compile cleanly on modern gcc
  - numerous code refactoring/cleaning up all over the source tree


author: Andrea Claudi <aclaudi@redhat.com> - 1.2.2-1.el9
changelog:
  - New version 1.2.2 (Andrea Claudi) [RHEL-77280]
  - Fix buffer overflow via ifaces.c (Andrea Claudi) [RHEL-71493]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Jan Macku <jamacku@redhat.com> - 20210202-12
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334)


author: Kairui Song <kasong@redhat.com> - 2:1.8.0-2
changelog:
  - Disable the communication socket when UI is disabled. Resolves: rhbz1951292
  - drop NoNewPrivs from irqbalance service. Resolves: rhbz1963152


author: Tao Liu <ltao@redhat.com> - 2:1.8.0-5
changelog:
  - Document migrateval. Resolves: rhbz2071959
  - Confine irqbalance to systems where it is useful. Resolves: rhbz2063930
  - Wrong EnvironmentFile in irqbalance.service. Resolves: rhbz2058509


author: Tao Liu <ltao@redhat.com> - 2:1.9.2-3
changelog:
  - Use misc/irqbalance.env as irqbalance.sysconfig
  - Use new rpm macros: autosetup and make_build
  - Use irqbalance-1.9.0-environment-file
  - Remove _hardened_build
  - Remove triggerun -- irqbalance < 2:0.56-3
  - Use SPDX licence


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-612.el9]
changelog:
  - redhat: bump RHEL_MINOR to 8 (Patrick Talbert)
  - x86/cpu: Add new Intel CPU model numbers for Wildcatlake and Novalake (David Arcari) [RHEL-95631]
  - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores (David Arcari) [RHEL-95631]
  - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105605]
  - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105598]
  - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105598]
  - net/smc: Fix lookup of netdev by using ib_device_get_netdev() (Mete Durlu) [RHEL-102713]
  - ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-104667]
  - net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-104667]
  - ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-104119]
  - ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-104119]
  - ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-104119]
  - memory: tegra: Fix indentation (Marcin Juszkiewicz) [RHEL-26426]
  - memory: tegra: Add BPMP and ICC info for DLA clients (Marcin Juszkiewicz) [RHEL-26426]
  - memory: tegra: Correct DLA client names (Marcin Juszkiewicz) [RHEL-26426]
  - soc/tegra: pmc: Add SD wake event for Tegra234 (Marcin Juszkiewicz) [RHEL-26405]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-613.el9]
changelog:
  - x86/cpu: Remove useless work in detect_tme_early() (Frank Liang) [RHEL-111095]
  - x86/cpu: Clear TME feature flag if TME is not enabled by BIOS (Frank Liang) [RHEL-111095]
  - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110206]
  - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110235]
  - Makefile: add $(srctree) to dependency of compile_commands.json target (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: scripts/gdb: bring the "abspath" back (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: Use $(obj)/%.cc to fix host C++ module builds (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: scripts/gdb: Replace missed $(srctree)/$(src) w/ $(src) (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: use $(src) instead of $(srctree)/$(src) for source directory (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: use $(obj)/ instead of $(src)/ for common pattern rules (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: do not add $(srctree) or $(objtree) to header search paths (Herton R. Krzesinski) [RHEL-107194]
  - arch: use $(obj)/ instead of $(src)/ for preprocessed linker scripts (Herton R. Krzesinski) [RHEL-107194]
  - arm64: vdso32: Remove unused vdso32-offsets.h (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: interface: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: vchiq-mmal: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: bcm2835-camera: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: bcm2835-audio: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - certs: check-in the default x509 config file (Herton R. Krzesinski) [RHEL-107194]
  - sparc: move the install rule to arch/sparc/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - riscv: move the (z)install rules to arch/riscv/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - powerpc: move the install rule to arch/powerpc/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - powerpc: make the install target not depend on any build artifact (Herton R. Krzesinski) [RHEL-107194]
  - powerpc: remove unused zInstall target from arch/powerpc/boot/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - nios2: move the install rule to arch/nios2/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - ARM: 9102/1: move theinstall rules to arch/arm/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-105063]
  - dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-105063]
  - redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-105063]
  - redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-105063]
  - dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-105063]
  - spi: Introduce spi_get_device_match_data() helper (Ivan Vecera) [RHEL-105063]
  - dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-105063]
  - dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-105063]
  - tpm_crb_ffa: Remove unused export (Marcin Juszkiewicz) [RHEL-102691]
  - redhat/configs: enable CONFIG_TCG_ARM_CRB_FFA on aarch64 (Marcin Juszkiewicz) [RHEL-102691]
  - tpm: Do not remap from ACPI resources again for Pluton TPM (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: ffa_tpm: Implement driver compliant to CRB over FF-A (Marcin Juszkiewicz) [RHEL-102691]
  - ACPICA: Add start method for ARM FF-A (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Add support for the ARM FF-A start method (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Clean-up and refactor check for idle support (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Fix an error handling path in crb_acpi_add() (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Add support for CRB devices based on Pluton (Marcin Juszkiewicz) [RHEL-102691]
  - Documentation: tpm: Add documentation for the CRB FF-A interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the missing entry in struct ffa_indirect_msg_hdr (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Move memory allocation outside the mutex locking (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix memory leak by freeing notifier callback node (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Skip Rx buffer ownership release if not acquired (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Set dma_mask for ffa devices (Marcin Juszkiewicz) [RHEL-102691] {CVE-2025-38043}
  - firmware: arm_ffa: Skip the first/partition ID when parsing vCPU list (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Explicitly cast return value from NOTIFICATION_INFO_GET (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Explicitly cast return value from FFA_VERSION before comparison (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Handle ffa_notification_get correctly at virtual FF-A instance (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Allow multiple UUIDs per partition to register SRI callback (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for handling framework notifications (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for {un,}registration of framework notifications (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Stash ffa_device instead of notify_type in notifier_cb_info (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Refactoring to prepare for framework notification support (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Remove unnecessary declaration of ffa_partitions_cleanup() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Reject higher major version as incompatible (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Upgrade FF-A version to v1.2 in the driver (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for passing UUID in FFA_MSG_SEND2 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Unregister the FF-A devices when cleaning up the partitions (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Handle the presence of host partition in the partition info (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Refactor addition of partition information into XArray (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix big-endian support in __ffa_partition_info_regs_get() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix big-endian support in __ffa_partition_info_get() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Align sync_send_receive{,2} function prototypes (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Replace UUID buffer to standard UUID format (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Replace SCMI by FF-A in the macro (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the race around setting ffa_dev->properties (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Avoid string-fortify warning caused by memcpy() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Avoid string-fortify warning in export_uuid() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fetch the Rx/Tx buffer size using ffa_features() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_YIELD in direct messaging (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_MSG_SEND_DIRECT_{REQ,RESP}2 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_PARTITION_INFO_GET_REGS (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Move the function ffa_features() earlier (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Update the FF-A command list with v1.2 additions (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Some coding style fixes (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Split bus and driver into distinct modules (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Move the FF-A v1.0 NULL UUID workaround to bus notifier (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Avoid queuing work when running on the worker queue (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix memory corruption in ffa_msg_send2() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_MSG_SEND2 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Stash the partition properties for query purposes (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix kernel warning about incorrect SRI/NPI (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for handling notification pending interrupt(NPI) (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Refactor SRI handling in prepartion to add NPI support (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Skip creation of the notification bitmaps (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the partition ID check in ffa_notification_info_get() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Handle partitions setup failures (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Use xa_insert() and check for result (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Simplify ffa_partitions_cleanup() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Check xa_load() return value (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add missing rwlock_init() for the driver partition (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add missing rwlock_init() in ffa_setup_partitions() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix ffa_notification_info_get() IDs handling (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the size of the allocation in ffa_partitions_cleanup() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix FFA notifications cleanup path (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add checks for the notification enabled state (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Setup the partitions after the notification initialisation (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Allow FF-A initialisation even when notification fails (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Upgrade the driver version to v1.1 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Update memory descriptor to support v1.1 format (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Switch to using ffa_mem_desc_offset() accessor (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Simplify the computation of transmit and fragment length (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add notification handling mechanism (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add interface to send a notification to a given partition (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add interfaces to request notification callbacks (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add schedule receiver callback mechanism (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Initial support for scheduler receiver interrupt (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the NOTIFICATION_INFO_GET interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the FFA_NOTIFICATION_GET interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the FFA_NOTIFICATION_SET interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the FFA_RUN interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the notification bind and unbind interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement notification bitmap create and destroy interfaces (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Update the FF-A command list with v1.1 additions (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Emit modalias for FF-A devices (Marcin Juszkiewicz) [RHEL-102691]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-614.el9]
changelog:
  - ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-111532]
  - EDAC/bluefield: Don't use bluefield_edac_readl() result on error (Jennifer Berringer) [RHEL-103881]
  - EDAC/bluefield: Use Arm SMC for EMI access on BlueField-2 (Jennifer Berringer) [RHEL-103881]
  - powerpc/pseries: Correct secvar format representation for static key management (Mamatha Inamdar) [RHEL-101853]
  - powerpc/secvar: Expose secvars relevant to the key management mode (Mamatha Inamdar) [RHEL-101853]
  - integrity/platform_certs: Allow loading of keys in the static key management mode (Mamatha Inamdar) [RHEL-101853]
  - s390/hypfs: Enable limited access during lockdown (Mete Durlu) [RHEL-111204]
  - s390/hypfs: Avoid unnecessary ioctl registration in debugfs (Mete Durlu) [RHEL-111204]
  - x86/CPU/AMD: Add X86_FEATURE_ZEN6 (David Arcari) [RHEL-106912]
  - x86/cpufeatures: Free up unused feature bits (David Arcari) [RHEL-106912]
  - x86/CPU/AMD: Ignore invalid reset reason value (David Arcari) [RHEL-103591]
  - PCI/ASPM: Fix link state exit during switch upstream function removal (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Fix L1SS saving (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Save parent L1SS config in pci_save_aspm_l1ss_state() (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Add notes about enabling PCI-PM L1SS to pci_enable_link_state(_locked) (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Disable L1 before disabling L1 PM Substates (Marcin Juszkiewicz) [RHEL-102694]
  - x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Avoid shadowing ret in amd_pstate_ut_check_driver() (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Disable preferred cores on designs with workload classification (David Arcari) [RHEL-105422]
  - amd-pstate-ut: Reset amd-pstate driver mode after running selftests (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Modify cppc_get_auto_sel_caps() to cppc_get_auto_sel() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Adjust return code for inline functions in !CONFIG_ACPI_CPPC_LIB (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Refactor register value get and set ABIs (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Add cppc_set_reg_val() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Extract cppc_get_reg_val_in_pcc() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Rename cppc_get_perf() to cppc_get_reg_val() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Optimize cppc_get_perf() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Add IS_OPTIONAL_CPC_REG macro to judge if a cpc_reg is optional (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Add support for the "Requested CPU Min frequency" BIOS option (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Add offline, online and suspend callbacks for amd_pstate_driver (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Move max_perf limiting in amd_pstate_update (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Use scope based cleanup for cpufreq_policy refs [partial] (David Arcari) [RHEL-105422]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-615.el9]
changelog:
  - ACPI: processor: Rescan "dead" SMT siblings during initialization (David Arcari) [RHEL-113139]
  - intel_idle: Allow loading ACPI tables for any family (David Arcari) [RHEL-113139]
  - intel_idle: Update arguments of mwait_idle_with_hints() (David Arcari) [RHEL-113139]
  - intel_idle: Rescan "dead" SMT siblings during initialization (David Arcari) [RHEL-113139]
  - x86/smp: PM/hibernate: Split arch_resume_nosmt() (David Arcari) [RHEL-113139]
  - intel_idle: Use subsys_initcall_sync() for initialization (David Arcari) [RHEL-113139]
  - intel_idle: Add C1 demotion on/off sysfs knob (David Arcari) [RHEL-113139]
  - tools/power turbostat: version 2025.09.09 (David Arcari) [RHEL-110614]
  - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (David Arcari) [RHEL-110614]
  - tools/power turbostat: standardize PER_THREAD_PARAMS (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix DMR support (David Arcari) [RHEL-110614]
  - tools/power turbostat: add format "average" for external attributes (David Arcari) [RHEL-110614]
  - tools/power turbostat: delete GET_PKG() (David Arcari) [RHEL-110614]
  - tools/power turbostat: probe and display L3 cache topology (David Arcari) [RHEL-110614]
  - tools/power turbostat: Support more than 64 built-in-counters (David Arcari) [RHEL-110614]
  - tools/power turbostat.8: Document Totl%C0, Any%C0, GFX%C0, CPUGFX% columns (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix bogus SysWatt for forked program (David Arcari) [RHEL-110614]
  - tools/power turbostat: Handle cap_get_proc() ENOSYS (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix build with musl (David Arcari) [RHEL-110614]
  - tools/power turbostat: verify arguments to params --show and --hide (David Arcari) [RHEL-110614]
  - tools/power turbostat: regression fix: --show C1E% (David Arcari) [RHEL-110614]
  - tools/power turbostat: version 2025.06.08 (David Arcari) [RHEL-110614]
  - tools/power turbostat: Add initial support for BartlettLake (David Arcari) [RHEL-110614]
  - tools/power turbostat: Add initial support for DMR (David Arcari) [RHEL-110614]
  - tools/power turbostat: Dump RAPL sysfs info (David Arcari) [RHEL-110614]
  - tools/power turbostat: Avoid probing the same perf counters (David Arcari) [RHEL-110614]
  - tools/power turbostat: Allow probing RAPL with platform_features->rapl_msrs cleared (David Arcari) [RHEL-110614]
  - tools/power turbostat: Clean up add perf/msr counter logic (David Arcari) [RHEL-110614]
  - tools/power turbostat: Introduce add_msr_counter() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Remove add_msr_perf_counter_() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Remove add_cstate_perf_counter_() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Remove add_rapl_perf_counter_() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Quit early for unsupported RAPL counters (David Arcari) [RHEL-110614]
  - tools/power turbostat: Always check rapl_joules flag (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix AMD package-energy reporting (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix RAPL_GFX_ALL typo (David Arcari) [RHEL-110614]
  - tools/power turbostat: Add Android support for MSR device handling (David Arcari) [RHEL-110614]
  - tools/power turbostat.8: pm_domain wording fix (David Arcari) [RHEL-110614]
  - tools/power turbostat.8: fix typo: idle_pct should be pct_idle (David Arcari) [RHEL-110614]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-616.el9]
changelog:
  - PM: EM: Add function for registering a PD without capacity update (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Support Clearwater Forest OOB mode (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: EAS: Increase cost for CPUs using L3 cache (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: EAS support for hybrid platforms (David Arcari) [RHEL-112493]
  - arch_topology: Relocate cpu_scale to topology.[h|c] (David Arcari) [RHEL-112493]
  - arch_topology: Make register_cpu_capacity_sysctl() tolerant to late CPUs (David Arcari) [RHEL-112493]
  - PM: EM: Introduce em_adjust_cpu_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: Move CPU capacity check to em_adjust_new_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: Fix potential division-by-zero error in em_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Address RCU-related sparse warnings (David Arcari) [RHEL-112493]
  - PM: EM: Consify two parameters of em_dev_register_perf_domain() (David Arcari) [RHEL-112493]
  - PM: EM: use kfree_rcu() to simplify the code (David Arcari) [RHEL-112493]
  - PM: EM: Slightly reduce em_check_capacity_update() overhead (David Arcari) [RHEL-112493]
  - PM: EM: Drop unused parameter from em_adjust_new_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: Move sched domains rebuild function from schedutil to EM (David Arcari) [RHEL-112493]
  - PM: EM: Add min/max available performance state limits (David Arcari) [RHEL-112493]
  - PM: EM: Refactor em_adjust_new_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: fix wrong utilization estimation in em_cpu_energy() (David Arcari) [RHEL-112493]
  - PM: EM: Force device drivers to provide power in uW (David Arcari) [RHEL-112493]
  - PM: EM: Fix nr_states warnings in static checks (David Arcari) [RHEL-112493]
  - PM: EM: Add em_dev_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Remove old table (David Arcari) [RHEL-112493]
  - PM: EM: Change debugfs configuration to use runtime EM table data (David Arcari) [RHEL-112493]
  - PM: EM: Optimize em_cpu_energy() and remove division (David Arcari) [RHEL-112493]
  - PM: EM: Support late CPUs booting and capacity adjustment (David Arcari) [RHEL-112493]
  - PM: EM: Add performance field to struct em_perf_state and optimize (David Arcari) [RHEL-112493]
  - PM: EM: Add em_perf_state_from_pd() to get performance states table (David Arcari) [RHEL-112493]
  - PM: EM: Introduce em_dev_update_perf_domain() for EM updates (David Arcari) [RHEL-112493]
  - PM: EM: Add functions for memory allocations for new EM tables (David Arcari) [RHEL-112493]
  - PM: EM: Use runtime modified EM for CPUs energy estimation in EAS (David Arcari) [RHEL-112493]
  - PM: EM: Introduce runtime modifiable table (David Arcari) [RHEL-112493]
  - PM: EM: Split the allocation and initialization of the EM table (David Arcari) [RHEL-112493]
  - PM: EM: Check if the get_cost() callback is present in em_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Introduce em_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Refactor em_pd_get_efficient_state() to be more flexible (David Arcari) [RHEL-112493]
  - PM: EM: Find first CPU active while updating OPP efficiency (David Arcari) [RHEL-112493]
  - PM: EM: Extend em_cpufreq_update_efficiencies() argument list (David Arcari) [RHEL-112493]
  - PM: EM: Add missing newline for the message log (David Arcari) [RHEL-112493]
  - PM: EM: fix memory leak with using debugfs_lookup() (David Arcari) [RHEL-112493]
  - PM: EM: fix kernel-doc comments (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Populate the cpu_capacity sysfs entries (David Arcari) [RHEL-112493]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-617.el9]
changelog:
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113331] {CVE-2025-38718}
  - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-109212]
  - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-109212]
  - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID (David Arcari) [RHEL-23894]
  - drm/virtio: implement virtio_gpu_shutdown (Gerd Hoffmann) [RHEL-109504]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-618.el9]
changelog:
  - x86/hyperv: Fix kdump on Azure CVMs (Vitaly Kuznetsov) [RHEL-70228]
  - hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: add support of multiple ports (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: add additional port counters (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-109583]
  - net: mana: fix spelling for mana_gd_deregiser_irq() (Maxim Levitsky) [RHEL-109583]
  - net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-109583]
  - net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-109583]
  - net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-109583]
  - net: mana: Allocate MSI-X vectors dynamically (Maxim Levitsky) [RHEL-109583]
  - net: mana: Allow irq_setup() to skip cpus for affinity (Maxim Levitsky) [RHEL-109583]
  - net: mana: explain irq_setup() algorithm (Maxim Levitsky) [RHEL-109583]
  - PCI: hv: Allow dynamic MSI-X vector allocation (Maxim Levitsky) [RHEL-109583]
  - PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Maxim Levitsky) [RHEL-109583]
  - net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: Add device statistics support (Maxim Levitsky) [RHEL-109583]
  - net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-109583]
  - net: mana: Fix warnings for missing export.h header inclusion (Maxim Levitsky) [RHEL-109583]
  - net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-109583]
  - tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-101033]
  - watchdog/hpwdt: Support Suspend and Resume (Joseph Szczypek) [RHEL-104148]
  - watchdog/hpwdt: Remove unused variable (Joseph Szczypek) [RHEL-104148]
  - watchdog/hpwdt: Remove redundant test. (Joseph Szczypek) [RHEL-104148]
  - watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO (Joseph Szczypek) [RHEL-104148]
  - NFSv4/flexfiles: Fix layout merge mirror check. (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Clear NFS_CAP_OPEN_XOR and NFS_CAP_DELEGTIME if not supported (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set (Benjamin Coddington) [RHEL-108616]
  - NFS: Fix a race when updating an existing write (Benjamin Coddington) [RHEL-108616]
  - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: call xs_sock_process_cmsg for all cmsg (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Don't clear capabilities that won't be reset (Benjamin Coddington) [RHEL-108616]
  - sunrpc: fix handling of server side tls alerts (Benjamin Coddington) [RHEL-108616]
  - NFS: Fix the setting of capabilities when automounting a new filesystem (Benjamin Coddington) [RHEL-108616]
  - sunrpc: fix client side handling of tls alerts (Benjamin Coddington) [RHEL-108616]
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (Benjamin Coddington) [RHEL-108616]
  - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Benjamin Coddington) [RHEL-108616]
  - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (Benjamin Coddington) [RHEL-108616]
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Benjamin Coddington) [RHEL-108616]
  - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Benjamin Coddington) [RHEL-108616]
  - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Benjamin Coddington) [RHEL-108616]
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Benjamin Coddington) [RHEL-108616]
  - nfsd: use threads array as-is in netlink interface (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls (Benjamin Coddington) [RHEL-108616]
  - nfs: ignore SB_RDONLY when remounting nfs (Benjamin Coddington) [RHEL-108616]
  - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() (Benjamin Coddington) [RHEL-108616]
  - NFSv4/pnfs: Reset the layout state after a layoutreturn (Benjamin Coddington) [RHEL-108616]
  - svcrdma: Reduce the number of rdma_rw contexts per-QP (Benjamin Coddington) [RHEL-108616]
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (Benjamin Coddington) [RHEL-108616]
  - NFSD: unregister filesystem in case genl_register_family() fails (Benjamin Coddington) [RHEL-108616]
  - nfs: handle failure of nfs_get_lock_context in unlock path (Benjamin Coddington) [RHEL-108616]
  - nfs: add missing selections of CONFIG_CRC32 (Benjamin Coddington) [RHEL-108616]
  - nfs: Add missing release on error in nfs_lock_and_join_requests() (Benjamin Coddington) [RHEL-108616]
  - NFS: Shut down the nfs_client only after all the superblocks (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Avoid unnecessary scans of filesystems for delayed delegations (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Avoid unnecessary scans of filesystems for expired delegations (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Avoid unnecessary scans of filesystems for returning delegations (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Don't trigger uneccessary scans for return-on-close delegations (Benjamin Coddington) [RHEL-108616]
  - NFSD: Fix callback decoder status codes (Benjamin Coddington) [RHEL-108616]
  - NFSD: Never return NFS4ERR_FILE_OPEN when removing a directory (Benjamin Coddington) [RHEL-108616]
  - nfsd: move error choice for incorrect object types to version-specific code. (Benjamin Coddington) [RHEL-108616]
  - nfsd: be more systematic about selecting error codes for internal use. (Benjamin Coddington) [RHEL-108616]
  - nfsd: Move error code mapping to per-version proc code. (Benjamin Coddington) [RHEL-108616]
  - NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() (Benjamin Coddington) [RHEL-108616]
  - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up (Benjamin Coddington) [RHEL-108616]
  - nfsd: fix management of listener transports (Benjamin Coddington) [RHEL-108616]
  - NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (Benjamin Coddington) [RHEL-108616]
  - sunrpc: suppress warnings for unused procfs functions (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Fix a deadlock when recovering state on a sillyrenamed file (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: Prevent looping due to rpc_signal_task() races (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: convert RPC_TASK_* constants to enum (Benjamin Coddington) [RHEL-108616]
  - NFS: Adjust delegated timestamps for O_DIRECT reads and writes (Benjamin Coddington) [RHEL-108616]
  - NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (Benjamin Coddington) [RHEL-108616]
  - NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (Benjamin Coddington) [RHEL-108616]
  - NFSD: Insulate nfsd4_encode_read_plus_data() from page boundaries in the encode buffer (Benjamin Coddington) [RHEL-108616]
  - NFSD: Insulate nfsd4_encode_read_plus() from page boundaries in the encode buffer (Benjamin Coddington) [RHEL-108616]
  - NFSD: Insulate nfsd4_encode_read() from page boundaries in the encode buffer (Benjamin Coddington) [RHEL-108616]
  - NFSD: Fix CB_GETATTR status fix (Benjamin Coddington) [RHEL-108616]
  - NFSD: fix decoding in nfs4_xdr_dec_cb_getattr (Benjamin Coddington) [RHEL-108616]
  - nfsd: fix legacy client tracking initialization (Benjamin Coddington) [RHEL-108616]
  - nfs: clear SB_RDONLY before getting superblock (Benjamin Coddington) [RHEL-108616]
  - nfs: ignore SB_RDONLY when mounting nfs (Benjamin Coddington) [RHEL-108616]
  - platform/x86/amd/hsmp: Ensure success even if hwmon registration fails (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Enhance the print messages to prevent confusion (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use IS_ENABLED() instead of IS_REACHABLE() (David Arcari) [RHEL-102859]
  - x86/platform/amd: replace down_timeout() with down_interruptible() (David Arcari) [RHEL-102859]
  - x86/platform/amd: move final timeout check to after final sleep (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: fix building with CONFIG_HWMON=m (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: acpi: Add sysfs files to display HSMP telemetry (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Report power via hwmon sensors (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use a single DRIVER_VERSION for all hsmp modules (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers (David Arcari) [RHEL-102859]
  - x86/platform/amd: Move the <asm/amd_node.h> header to <asm/amd/node.h> (David Arcari) [RHEL-102859]
  - x86/platform/amd: Clean up the <asm/amd/hsmp.h> header guards a bit (David Arcari) [RHEL-102859]
  - x86/platform/amd: Move the <asm/amd_hsmp.h> header to <asm/amd/hsmp.h> (David Arcari) [RHEL-102859]
  - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE (David Arcari) [RHEL-102859]
  - x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (David Arcari) [RHEL-102859]
  - x86/amd_node: Use defines for SMN register offsets (David Arcari) [RHEL-102859]
  - x86/amd_node: Remove dependency on AMD_NB (David Arcari) [RHEL-102859]
  - x86/amd_node: Update __amd_smn_rw() error paths (David Arcari) [RHEL-102859]
  - x86/amd_nb: Move SMN access code to a new amd_node driver (David Arcari) [RHEL-102859]
  - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() (David Arcari) [RHEL-102859]
  - x86/amd_nb: Simplify function 3 search (David Arcari) [RHEL-102859]
  - x86/amd_nb: Use topology info to get AMD node count (David Arcari) [RHEL-102859]
  - x86/amd_nb: Simplify root device search (David Arcari) [RHEL-102859]
  - x86/amd_nb: Simplify function 4 search (David Arcari) [RHEL-102859]
  - x86: Start moving AMD node functionality out of AMD_NB (David Arcari) [RHEL-102859]
  - x86/amd_nb: Clean up early_is_amd_nb() (David Arcari) [RHEL-102859]
  - x86/amd_nb: Restrict init function to AMD-based systems (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h (David Arcari) [RHEL-102859]
  - x86/amd_nb: Enhance SMN access error checking (David Arcari) [RHEL-102859]
  - hwmon: (k10temp) Check return value of amd_smn_read() (David Arcari) [RHEL-102859]
  - EDAC/amd64: Remove unused register accesses (David Arcari) [RHEL-102859]
  - EDAC/amd64: Check return value of amd_smn_read() (David Arcari) [RHEL-102859]
  - x86/amd_nb: Check for invalid SMN reads (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI IDs for AMD family 0x1a (David Arcari) [RHEL-102859]
  - platform/x86: amd: Use *-y instead of *-objs in Makefiles [partial] (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Add support for HSMP protocol version 7 messages (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Change the error type (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Add new error code and error logs (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use dev_groups in the driver structure (David Arcari) [RHEL-102859]
  - sysfs: Fix crash on empty group attributes array (David Arcari) [RHEL-102859]
  - sysfs: Introduce a mechanism to hide static attribute_groups (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use name space while exporting module symbols (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers (David Arcari) [RHEL-102859]
  - redhat/configs: Enable CONFIG_AMD_HSMP_ACPI and CONFIG_AMD_HSMP_PLAT on RHEL (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Move ACPI code to acpi.c (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Move platform device specific code to plat.c (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Move structure and macros to header file (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Create wrapper function init_acpi() (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Create hsmp/ directory (David Arcari) [RHEL-102859]
  - Documentation/x86/amd/hsmp: Updating urls (David Arcari) [RHEL-102859]
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Florian Westphal) [RHEL-106430] {CVE-2025-38472}
  - s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113557] {CVE-2025-39694}
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (Hangbin Liu) [RHEL-111150] {CVE-2025-38550}
  - devlink: add reserved fields to devlink_*_ops (Petr Oros) [RHEL-111906]
  - ixgbe: prevent from unwanted interface name changes (CKI Backport Bot) [RHEL-109607]
  - devlink: let driver opt out of automatic phys_port_name generation (CKI Backport Bot) [RHEL-109607]
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109528] {CVE-2025-38500}
  - dpll: add reserved fields to dpll_device_ops and dpll_pin_ops structs (Ivan Vecera) [RHEL-111904]
  - ice: use fixed adapter index for E825C embedded devices (Michal Schmidt) [RHEL-104010]
  - net: openvswitch: remove misbehaving actions length check (Aaron Conole) [RHEL-83440]
  - irdma: free iwdev->rf after removing MSI-X (Kamal Heib) [RHEL-103278 RHEL-95816]
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113332] {CVE-2025-38718}
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112247] {CVE-2023-53125}
  - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112247] {CVE-2023-53125}
  - cpufreq: Move endif to the end of Kconfig file (Mark Langsdorf) [RHEL-112816]
  - cpufreq: Move CPPC configs to common Kconfig and add RISC-V (Mark Langsdorf) [RHEL-112816]
  - HID: core: Harden s32ton() against conversion to 0 bits (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - HID: simplify snto32() (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - redhat: set defaults for RHEL 9.7 (Augusto Caringi)
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112783] {CVE-2025-38352}
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110312] {CVE-2025-38396}
  - idpf: convert control queue mutex to a spinlock (Michal Schmidt) [RHEL-106051] {CVE-2025-38392}
  - redhat/configs: Enable CONFIG_MITIGATION_TSA for x86 (Waiman Long) [RHEL-83897]
  - x86/process: Move the buffer clearing before MONITOR (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/microcode/AMD: Add TSA microcode SHAs (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - KVM: SVM: Advertise TSA CPUID bits to guests (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Rename MDS machinery to something more generic (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/idle: Use MONITOR and MWAIT mnemonics in <asm/mwait.h> (Waiman Long) [RHEL-83897]
  - x86/idle: Remove .s output beautifying delimiters from simpler asm() templates (Waiman Long) [RHEL-83897]
  - x86/idle: Standardize argument types for MONITOR{,X} and MWAIT{,X} instruction wrappers on 'u32' (Waiman Long) [RHEL-83897]
  - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and  prefer_mwait_c1_over_halt() (Waiman Long) [RHEL-83897]
  - x86/bugs: Rename mmio_stale_data_clear to cpu_buf_vm_clear (Waiman Long) [RHEL-83897]
  - x86/microcode: Consolidate the loader enablement checking (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-83897] {CVE-2025-22047}
  - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section() signature (Waiman Long) [RHEL-83897]
  - x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove ret local var in early_apply_microcode() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Return bool from find_blobs_in_containers() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-83897]
  - x86/CPU/AMD: Terminate the erratum_1386_microcode array (Waiman Long) [RHEL-83897] {CVE-2024-56721}
  - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-83897]
  - x86/cpu: Fix formatting of cpuid_bits[] in scattered.c (Waiman Long) [RHEL-83897]
  - x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-83897]
  - x86/bugs: Use code segment selector for VERW operand (Waiman Long) [RHEL-83897] {CVE-2024-50072}
  - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-83897]
  - x86/CPU/AMD: Improve the erratum 1386 workaround (Waiman Long) [RHEL-83897]
  - x86: Add a comment about the "magic" behind shadow sti before mwait (Waiman Long) [RHEL-83897]
  - x86/bugs: Revert "Reverse instruction order of CLEAR_CPU_BUFFERS" (Waiman Long) [RHEL-83897]
  - scsi: mpt3sas: Fix a fw_event memory leak (Tomas Henzl) [RHEL-108656]
  - Revert "drm/gem-dma: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - Revert "drm/gem-framebuffer: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - Revert "drm/prime: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - drm/framebuffer: Acquire internal references on GEM handles (Robert Foss) [RHEL-106696]
  - drm/gem: Acquire references on GEM handles for framebuffers (CKI Backport Bot) [RHEL-106696] {CVE-2025-38449}
  - Revert "e1000e: change k1 configuration on MTP and later platforms" (Michal Schmidt) [RHEL-110519]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-619.el9]
changelog:
  - platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (David Arcari) [RHEL-110754]
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114337] {CVE-2025-39698}
  - bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ (Viktor Malik) [RHEL-100278]
  - mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109448]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-620.el9]
changelog:
  - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107304] {CVE-2025-38498}
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107304] {CVE-2025-38498}
  - selftests: netfilter: skip br_netfilter queue tests if kernel is tainted (Waiman Long) [RHEL-107520]
  - fhandle: do_handle_open() should get FD with user flags (Waiman Long) [RHEL-107520]
  - Documentation/sysctl: coredump: add %F for pidfd number (Waiman Long) [RHEL-107520]
  - pidfs: never refuse ppid == 0 in PIDFD_GET_INFO (Waiman Long) [RHEL-107520]
  - fs/fhandle.c: fix a race in call of has_locked_children() (Waiman Long) [RHEL-107520] {CVE-2025-38306}
  - coredump: hand a pidfd to the usermode coredump helper (Waiman Long) [RHEL-107520]
  - coredump: fix error handling for replace_fd() (Waiman Long) [RHEL-107520]
  - pidfs: move O_RDWR into pidfs_alloc_file() (Waiman Long) [RHEL-107520]
  - pidfs/selftests: ensure correct headers for ioctl handling (Waiman Long) [RHEL-107520]
  - selftests/pidfd: fix header inclusion (Waiman Long) [RHEL-107520]
  - pidfs: improve ioctl handling (Waiman Long) [RHEL-107520]
  - selftests: remove unneeded include (Waiman Long) [RHEL-107520]
  - pidfs: allow bind-mounts (Waiman Long) [RHEL-107520]
  - pidfs: lookup pid through rbtree (Waiman Long) [RHEL-107520]
  - pidfs: check for valid ioctl commands (Waiman Long) [RHEL-107520]
  - pidfs: implement file handle support (Waiman Long) [RHEL-107520]
  - exportfs: add permission method (Waiman Long) [RHEL-107520]
  - fhandle: pull CAP_DAC_READ_SEARCH check into may_decode_fh() (Waiman Long) [RHEL-107520]
  - exportfs: add open method (Waiman Long) [RHEL-107520]
  - fhandle: simplify error handling (Waiman Long) [RHEL-107520]
  - pseudofs: add support for export_ops (Waiman Long) [RHEL-107520]
  - pidfs: support FS_IOC_GETVERSION (Waiman Long) [RHEL-107520]
  - pidfs: remove 32bit inode number handling (Waiman Long) [RHEL-107520]
  - pidfs: rework inode number allocation (Waiman Long) [RHEL-107520]
  - fs: fix is_mnt_ns_file() (Waiman Long) [RHEL-107520]
  - pidfd: add ioctl to retrieve pid info (Waiman Long) [RHEL-107520]
  - pidfs: check for valid pid namespace (Waiman Long) [RHEL-107520]
  - rbtree: provide rb_find_rcu() / rb_find_add_rcu() (Waiman Long) [RHEL-107520]
  - file: add fput() cleanup helper (Waiman Long) [RHEL-107520]
  - libfs: fix get_stashed_dentry() (Waiman Long) [RHEL-107520] {CVE-2024-46801}
  - pidfs: add selftests for new namespace ioctls (Waiman Long) [RHEL-107520]
  - pidfs: handle kernels without namespaces cleanly (Waiman Long) [RHEL-107520]
  - pidfs: when time ns disabled add check for ioctl (Waiman Long) [RHEL-107520]
  - pidfs: allow retrieval of namespace file descriptors (Waiman Long) [RHEL-107520]
  - nsfs: add open_namespace() (Waiman Long) [RHEL-107520]
  - nsproxy: add helper to go from arbitrary namespace to ns_common (Waiman Long) [RHEL-107520]
  - nsproxy: add a cleanup helper for nsproxy (Waiman Long) [RHEL-107520]
  - file: add take_fd() cleanup helper (Waiman Long) [RHEL-107520]
  - path: add cleanup helper (Waiman Long) [RHEL-107520]
  - fhandle: relax open_by_handle_at() permission checks (Waiman Long) [RHEL-107520]
  - fs/pidfs: make 'lsof' happy with our inode changes (Waiman Long) [RHEL-107520]
  - selftests: pidfd: ksft_exit functions do not return (Waiman Long) [RHEL-107520]
  - fs: Annotate struct file_handle with __counted_by() and use struct_size() (Waiman Long) [RHEL-107520]
  - selftests/pidfd: Fix wrong expectation (Waiman Long) [RHEL-107520]
  - selftests/pidfd: Fix config for pidfd_setns_test (Waiman Long) [RHEL-107520]
  - pidfs: remove config option (Waiman Long) [RHEL-107520]
  - libfs: improve path_from_stashed() (Waiman Long) [RHEL-107520]
  - libfs: add stashed_dentry_prune() (Waiman Long) [RHEL-107520]
  - libfs: improve path_from_stashed() helper (Waiman Long) [RHEL-107520]
  - pidfs: convert to path_from_stashed() helper (Waiman Long) [RHEL-107520]
  - nsfs: convert to path_from_stashed() helper (Waiman Long) [RHEL-107520]
  - libfs: add path_from_stashed() (Waiman Long) [RHEL-107520]
  - pidfd: add pidfs (Waiman Long) [RHEL-107520]
  - pidfd: move struct pidfd_fops (Waiman Long) [RHEL-107520]
  - pidfd: allow to override signal scope in pidfd_send_signal() (Waiman Long) [RHEL-107520]
  - pidfd: change pidfd_send_signal() to respect PIDFD_THREAD (Waiman Long) [RHEL-107520]
  - signal: fill in si_code in prepare_kill_siginfo() (Waiman Long) [RHEL-107520]
  - selftests: add ESRCH tests for pidfd_getfd() (Waiman Long) [RHEL-107520]
  - pidfd: getfd should always report ESRCH if a task is exiting (Waiman Long) [RHEL-107520]
  - pidfd: clone: allow CLONE_THREAD | CLONE_PIDFD together (Waiman Long) [RHEL-107520]
  - pidfd: change do_notify_pidfd() to use __wake_up(poll_to_key(EPOLLIN)) (Waiman Long) [RHEL-107520]
  - pid: kill the obsolete PIDTYPE_PID code in transfer_pid() (Waiman Long) [RHEL-107520]
  - pidfd: kill the no longer needed do_notify_pidfd() in de_thread() (Waiman Long) [RHEL-107520]
  - pidfd_poll: report POLLHUP when pid_task() == NULL (Waiman Long) [RHEL-107520]
  - pidfd: implement PIDFD_THREAD flag for pidfd_open() (Waiman Long) [RHEL-107520]
  - pidfd: don't do_notify_pidfd() if !thread_group_empty() (Waiman Long) [RHEL-107520]
  - pidfd: cleanup the usage of __pidfd_prepare's flags (Waiman Long) [RHEL-107520]
  - fork: Using clone_flags for legacy clone check (Waiman Long) [RHEL-107520]
  - __kill_pgrp_info: simplify the calculation of return value (Waiman Long) [RHEL-107520]
  - selftests/pidfd: Fix ksft print formats (Waiman Long) [RHEL-107520]
  - fs: convert core infrastructure to new timestamp accessors (Waiman Long) [RHEL-107520]
  - fs: new accessor methods for atime and mtime (Waiman Long) [RHEL-107520]
  - nsproxy: Convert nsproxy.count to refcount_t (Waiman Long) [RHEL-107520]
  - kernfs: convert to ctime accessor functions (Waiman Long) [RHEL-107520]
  - selftest: pidfd: Omit long and repeating outputs (Waiman Long) [RHEL-107520]
  - convert setns(2) to fdget()/fdput() (Waiman Long) [RHEL-107520]
  - fs: consolidate duplicate dt_type helpers (Waiman Long) [RHEL-107520]
  - Update relatime comments to include equality (Waiman Long) [RHEL-107520]
  - fork: use pidfd_prepare() (Waiman Long) [RHEL-107520]
  - pid: add pidfd_prepare() (Waiman Long) [RHEL-107520]
  - fork: allow CLONE_NEWTIME in clone3 flags (Waiman Long) [RHEL-107520]
  - selftests: pidfd: Fix incorrect kernel headers search path (Waiman Long) [RHEL-107520]
  - core_pattern: add CPU specifier (Waiman Long) [RHEL-107520]
  - selftests/pidfd_test: Remove the erroneous ',' (Waiman Long) [RHEL-107520]
  - selftests: pidfd: Fix compling warnings (Waiman Long) [RHEL-107520]
  - ksefltests: pidfd: Fix wait_states: Test terminated by timeout (Waiman Long) [RHEL-107520]
  - fork: remove duplicate included header files (Waiman Long) [RHEL-107520]
  - signal: Drop signals received after a fatal signal has been processed (Waiman Long) [RHEL-107520]
  - signal: Guarantee that SIGNAL_GROUP_EXIT is set on process exit (Waiman Long) [RHEL-107520]
  - signal: Ensure SIGNAL_GROUP_EXIT gets set in do_group_exit (Waiman Long) [RHEL-107520]
  - dynamic_dname(): drop unused dentry argument (Waiman Long) [RHEL-107520]
  - fork: Explicitly set PF_KTHREAD (Waiman Long) [RHEL-107520]
  - selftests: fix an unused variable warning in pidfd selftest (Waiman Long) [RHEL-107520]
  - selftests: fixup build warnings in pidfd / clone3 tests (Waiman Long) [RHEL-107520]
  - pidfd: fix test failure due to stack overflow on some arches (Waiman Long) [RHEL-107520]
  - kernel/fork.c: unshare(): use swap() to make code cleaner (Waiman Long) [RHEL-107520]
  - kernel/fork.c: unexport get_{mm,task}_exe_file (Waiman Long) [RHEL-107520]
  - kernel/pid.c: implement additional checks upon pidfd_create() parameters (Waiman Long) [RHEL-107520]
  - arm64: debug: remove debug exception registration infrastructure (Luis Claudio R. Goncalves) [RHEL-65658]
  - trap: cleanup trap_init() (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split bkpt32 exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split brk64 exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split hardware watchpoint exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split single stepping exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: refactor reinstall_suspended_bps() (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split hardware breakpoint exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: entry: Add entry and exit functions for debug exceptions (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: remove break/step handler registration infrastructure (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: call step handlers statically (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: call software breakpoint handlers statically (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: kretprobes: acquire the regs via a BRK exception (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: kprobes: Return DBG_HOOK_ERROR if kprobes can not handle a BRK (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: Return early when break handler is found on linked-list (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: refactor aarch32_break_handler() (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: clean up single_step_handler logic (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (Jeremy Linton) [RHEL-108306]
  - arm64: errata: Expand speculative SSBS workaround once more (Jeremy Linton) [RHEL-108306]
  - arm64: errata: Expand speculative SSBS workaround (again) (Jeremy Linton) [RHEL-108306]
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (Jeremy Linton) [RHEL-108306]
  - arm64: cputype: Add Neoverse-N3 definitions (Jeremy Linton) [RHEL-108306]
  - arm64: cputype: Add Cortex-A725 definitions (Jeremy Linton) [RHEL-108306]
  - arm64: cputype: Add Cortex-X1C definitions (Jeremy Linton) [RHEL-108306]
  - EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh (Joel Savitz) [RHEL-102251]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-621.el9]
changelog:
  - platform/x86: ideapad-laptop: pass a correct pointer to the driver data (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Avoid initializing on non-ACPI platforms (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Simplify error flow in amd_pmf_init_smart_pc() (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Prevent amd_pmf_tee_deinit() from running twice (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Use device managed allocations (David Arcari) [RHEL-105420]
  - drivers/platform/x86/amd: pmf: Check for invalid Smart PC Policies (David Arcari) [RHEL-105420]
  - drivers/platform/x86/amd: pmf: Check for invalid sideloaded Smart PC Policies (David Arcari) [RHEL-105420]
  - platform/x86: amd: pmf: Fix STT limits (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: convert timeouts to secs_to_jiffies() (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Fix missing hidden options for Smart PC (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: fix cleanup in amd_pmf_init_smart_pc() (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Update PMF Driver for Compatibility with new PMF-TA (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Propagate PMF-TA return codes (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Add balanced-performance to hidden choices (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Add 'quiet' to hidden choices (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Initialize and clean up `cb_mutex` (David Arcari) [RHEL-105420]
  - ACPI: platform-profile: Fix CFI violation when accessing sysfs files (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add support for hidden choices (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Fix memory leak in profile_class_is_visible() (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Improve platform_profile_unregister() (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add a prefix to log messages (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add documentation (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Clean platform_profile_handler (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Move platform_profile_handler (David Arcari) [RHEL-105420]
  - platform/x86: thinkpad_acpi: Fix registration of tpacpi platform driver (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Remove platform_profile_handler from exported symbols (David Arcari) [RHEL-105420]
  - platform/x86: thinkpad_acpi: Use devm_platform_profile_register() (David Arcari) [RHEL-105420]
  - platform/x86: hp-wmi: Use devm_platform_profile_register() (David Arcari) [RHEL-105420]
  - platform/x86: ideapad-laptop: Use devm_platform_profile_register() (David Arcari) [RHEL-105420]
  - platform/surface: surface_platform_profile: Use devm_platform_profile_register() (David Arcari) [RHEL-105420]
  - platform/x86: amd: pmf: sps: Use devm_platform_profile_register() (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add `probe` to platform_profile_ops (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add `ops` member to handlers (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Remove platform_profile_handler from callbacks (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Let drivers set drvdata to the class device (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Get SRA sensor data from AMD SFH driver (David Arcari) [RHEL-105420]
  - HID: amd_sfh: Fix SRA sensor when it's the only sensor (David Arcari) [RHEL-105420]
  - HID: amd_sfh: Add support to export device operating states (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Switch to guard(mutex) (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Enable Custom BIOS Inputs for PMF-TA (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Drop all quirks (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Replace *class_dev member with class_dev (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add devm_platform_profile_register() (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Allow multiple handlers (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Notify class device from platform_profile_notify() (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Check all profile handler to calculate next (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Make sure all profile handlers agree on profile (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add concept of a "custom" profile (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Only show profiles common for all handlers (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Notify change events on register and unregister (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add profile attribute for class interface (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add choices attribute for class interface (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add name attribute to class interface (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Create class for ACPI platform profile (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Use `scoped_cond_guard` (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Use guard(mutex) for register/unregister (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Move matching string for new profile out of mutex (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Move sanity check out of the mutex (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Pass the profile handler into platform_profile_notify() (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add platform handler argument to platform_profile_remove() (David Arcari) [RHEL-105420]
  - ACPI: add missing MODULE_DESCRIPTION() macros (David Arcari) [RHEL-105420]
  - ACPI: platform_profile: Add device pointer into platform profile handler (David Arcari) [RHEL-105420]
  - ACPI: platform-profile: Add a name member to handlers (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Switch to platform_get_resource() and devm_ioremap_resource() (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Use dev_err_probe() to simplify error handling (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Add SMU metrics table support for 1Ah family 60h model (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Add quirk for TUF Gaming A14 (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Make ASUS GA403 quirk generic (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Update SMU metrics table for 1AH family series (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Add support for notifying Smart PC Solution updates (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Fix to Update HPD Data When ALS is Disabled (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Add new ACPI ID AMDI0107 (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Add quirk for ROG Ally X (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Use existing input event codes to update system states (David Arcari) [RHEL-105420]
  - platform/x86/amd/pmf: Use memdup_user() (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Add new ACPI ID AMDI0105 (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Add quirk for ROG Zephyrus G14 (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Add infrastructure for quirking supported funcs (David Arcari) [RHEL-105420]
  - platform/x86/amd: pmf: Decrease error message to debug (David Arcari) [RHEL-105420]
  - powercap: Switch to use hrtimer_setup() (David Arcari) [RHEL-111365]
  - PM: EM: Rework the depends on for CONFIG_ENERGY_MODEL (David Arcari) [RHEL-111365]
  - powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed (David Arcari) [RHEL-111365]
  - powercap: intel_rapl_msr: Add PL4 support for Panther Lake (David Arcari) [RHEL-111365]
  - powercap: intel_rapl: Add support for Bartlett Lake platform (David Arcari) [RHEL-111365]
  - kernel.spec: replace '=' with space in argument of kernel-install (Li Tian) [RHEL-114361]
  - net/mlx5: Not returning mlx5_link_info table when speed is unknown (Li Tian) [RHEL-114363]
  - arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS (Jerome Marchand) [RHEL-101598]
  - ftrace: Remove unused global 'ftrace_direct_func_count' (Jerome Marchand) [RHEL-101598]
  - ftrace: Remove unused list 'ftrace_direct_funcs' (Jerome Marchand) [RHEL-101598]
  - tracing: Fix HAVE_DYNAMIC_FTRACE_WITH_REGS ifdef (Jerome Marchand) [RHEL-101598]
  - ftrace: Fix DIRECT_CALLS to use SAVE_REGS by default (Jerome Marchand) [RHEL-101598]
  - samples: ftrace: Replace bti assembly with hint for older compiler (Jerome Marchand) [RHEL-101598]
  - arm64: avoid executing padding bytes during kexec / hibernation (Jerome Marchand) [RHEL-101598]
  - arm64: ftrace: Add direct call trampoline samples support (Jerome Marchand) [RHEL-101598]
  - samples: ftrace: Save required argument registers in sample trampolines (Jerome Marchand) [RHEL-101598]
  - arm64: ftrace: Simplify get_ftrace_plt (Jerome Marchand) [RHEL-101598]
  - arm64: ftrace: Add direct call support (Jerome Marchand) [RHEL-101598]
  - ftrace: Make DIRECT_CALLS work WITH_ARGS and !WITH_REGS (Jerome Marchand) [RHEL-101598]
  - ftrace: Store direct called addresses in their ops (Jerome Marchand) [RHEL-101598]
  - ftrace: Rename _ftrace_direct_multi APIs to _ftrace_direct APIs (Jerome Marchand) [RHEL-101598]
  - ftrace: Remove the legacy _ftrace_direct API (Jerome Marchand) [RHEL-101598]
  - ftrace: Replace uses of _ftrace_direct APIs with _ftrace_direct_multi (Jerome Marchand) [RHEL-101598]
  - ftrace: Let unregister_ftrace_direct_multi() call ftrace_free_filter() (Jerome Marchand) [RHEL-101598]
  - arm64: Implement HAVE_DYNAMIC_FTRACE_WITH_CALL_OPS (Jerome Marchand) [RHEL-101598]
  - arm64: ftrace: Update stale comment (Jerome Marchand) [RHEL-101598]
  - arm64: Extend support for CONFIG_FUNCTION_ALIGNMENT (Jerome Marchand) [RHEL-101598]
  - Compiler attributes: GCC cold function alignment workarounds (Jerome Marchand) [RHEL-101598]
  - ftrace: Add DYNAMIC_FTRACE_WITH_CALL_OPS (Jerome Marchand) [RHEL-101598]
  - ftrace: arm64: remove static ftrace (Jerome Marchand) [RHEL-101598]
  - ftrace: arm64: move from REGS to ARGS (Jerome Marchand) [RHEL-101598]
  - ftrace: abstract DYNAMIC_FTRACE_WITH_ARGS accesses (Jerome Marchand) [RHEL-101598]
  - ftrace: rename ftrace_instruction_pointer_set() -> ftrace_regs_set_instruction_pointer() (Jerome Marchand) [RHEL-101598]
  - ftrace: pass fregs to arch_ftrace_set_direct_caller() (Jerome Marchand) [RHEL-101598]
  - arm64: ftrace: remove redundant label (Jerome Marchand) [RHEL-101598]
  - arm64/ftrace: Make function graph use ftrace directly (Jerome Marchand) [RHEL-101598]
  - arm64: Improve HAVE_DYNAMIC_FTRACE_WITH_REGS selection for clang (Jerome Marchand) [RHEL-101598]
  - tracing: Use linker magic instead of recasting ftrace_ops_list_func() (Jerome Marchand) [RHEL-101598]
  - ice: fix NULL access of tx->in_use in ice_ll_ts_intr (Petr Oros) [RHEL-84608]
  - ice: fix NULL access of tx->in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-84608]
  - platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list (David Arcari) [RHEL-102860]
  - platform/x86/amd: pmc: Drop SMU F/W match for Cezanne (David Arcari) [RHEL-102860]
  - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list (David Arcari) [RHEL-102860]
  - Move FCH header to a location accessible by all archs (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list (David Arcari) [RHEL-102860]
  - platform/x86/amd: pmc: Clear metrics table at start of cycle (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie 14XA (GX4HRXL) (David Arcari) [RHEL-102860]
  - platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep cycles (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: fix leak in probe() (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Use managed APIs for mutex (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Remove unnecessary line breaks (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Move macros and structures to the PMC header file (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Notify user when platform does not support s0ix transition (David Arcari) [RHEL-102860]
  - platform/x86: amd: Use *-y instead of *-objs in Makefiles [partial] (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (David Arcari) [RHEL-102860]
  - platform/x86/amd: pmc: Use guard(mutex) (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Add STB support for AMD Desktop variants (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Update S2D message id for 1Ah Family 70h model (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Update IP information structure for newer SoCs (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Use ARRAY_SIZE() to fill num_ips information (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Isolate STB code changes to a new file (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Define enum for S2D/PMC msg_port and add helper function (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Update function names to align with new STB file (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Move STB functionality to a new file for better code organization (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Move STB block into amd_pmc_s2d_init() (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Extend support for PMC features on new AMD platform (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Fix SMU command submission path on new AMD platform (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Send OS_HINT command for new AMD platform (David Arcari) [RHEL-102860]
  - platform/x86/amd: pmc: Add new ACPI ID AMDI000B (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Fix implicit declaration error on i386 (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Extend Framework 13 quirk to more BIOSes (David Arcari) [RHEL-102860]
  - platform/x86/amd/pmc: Add AMD MP2 STB functionality (David Arcari) [RHEL-102860]
  - redhat/configs: enable CONFIG_AMD_MP2_STB (David Arcari) [RHEL-102860]
  - RAS/AMD/FMPM: Get masked address (Aristeu Rozanski) [RHEL-87600]
  - RAS/AMD/ATL: Include row[13] bit in row retirement (Aristeu Rozanski) [RHEL-87600]
  - power: supply: core: Use blocking_notifier_call_chain to avoid RCU complaint (Mark Langsdorf) [RHEL-36251]


author: Tao Liu <ltao@redhat.com> - 2.0.29-2
changelog:
  - Re-introduce vmcore creation notification to kdump
  - Revert "Introduce vmcore creation notification to kdump"
  - Add kdump dracut config
  - kdump-lib-initramfs: Improve mount point retrieval logic


author: Tao Liu <ltao@redhat.com> - 2.0.29-3
changelog:
  - fadump: fix passing additional parameters for capture kernel
  - fadump: pass additional parameters for capture kernel


author: Tao Liu <ltao@redhat.com> - 2.0.29-6
changelog:
  - 99-kdump.conf: Omit rdma module
  - Fallback to get NIC driver by /sys/class/net/NIC/device/driver/module
  - Note user-specified crashkernel value will be overwritten by default value


author: Tao Liu <ltao@redhat.com> - 2.0.29-7
changelog:
  - 99-kdump.conf: Omit clevis related dracut modules
  - kdump-lib.sh: rounded up the total_mem to 128M in get_system_size
  - kdump-lib.sh: Adjust default crashkernel reservation for x86_64 and s390x
  - doc/kdump.conf: correctly align the options


author: Tao Liu <ltao@redhat.com> - 2.0.29-8
changelog:
  - kdumpctl: check and generate /etc/vconsole.conf
  - kdump-lib.sh: Reserve crashkernel by default for systems with 1G-2G memory


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-5
changelog:
  - resolves: RHEL-101761 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-4.el9)


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Evan Goode <egoode@redhat.com> - 0.69.0-16
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-95006)


author: Pino Toscano <ptoscano@redhat.com> 1.29.34-1
changelog:
  - Update TESTING.md (mhorky@redhat.com)
  - Improved debug print of http traffic, when proxy is used (jhnidek@redhat.com)
  - ENT-5544: Remove Jenkins jobs, Containers (mhorky@redhat.com)
  - ENT-5549: Remove unused code from entcertlib (mhorky@redhat.com)
  - ENT-5549: Fix issues found when type-hinting (mhorky@redhat.com)
  - ENT-5549: Fix return code handling of CLI (mhorky@redhat.com)
  - ENT-5549: Fix found type hint issues (mhorky@redhat.com)
  - ENT-5549: Fix object instantiation in EntitlementDirectory
    (mhorky@redhat.com)
  - ENT-5549: Refactor ProductDirectory (mhorky@redhat.com)
  - ENT-5549: Change internal implementation for some Cache methods
    (mhorky@redhat.com)
  - ENT-5549: Clean up _sync_with_server arguments of cache objects
    (mhorky@redhat.com)
  - ENT-5549: Remove 'autoheal' argument from Action clients (mhorky@redhat.com)
  - Refactored code a little bit (jhnidek@redhat.com)
  - 2093291: Make locking more reliable (jhnidek@redhat.com)
  - test: add simple test for 2178610 (ptoscano@redhat.com)
  - Small improvement of debugging of http traffic (jhnidek@redhat.com)
  - 2093883: Fix issue with race condition in rhsm.service (jhnidek@redhat.com)
  - 2178610: do not collect unentitled products in SCA mode (ptoscano@redhat.com)
  - 2174297: register: do a simple strip() on environment(s) input
    (ptoscano@redhat.com)
  - Stop subclassing 'object' (ptoscano@redhat.com)
  - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com)
  - tests: Install dnf-plugins-core every time (mhorky@redhat.com)
  - 2169251: connection: restore UEPConnection.getJob() (ptoscano@redhat.com)
  - ENT-5106: Type-hint subscription_manager/ files (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.41-1
changelog:
  - feat: update man page with deprecation notices (jajerome@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - feat: Deprecate 'syspurpose addons' (mhorky@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Deprecate import command (zpetrace@redhat.com)
  - fix: 1.29 modify section about remove command in man page
    (jhnidek@redhat.com)
  - feat: 1.29 Deprecate redeem sub-command (jhnidek@redhat.com)
  - fix: Reformated man page of subscription-manager (jhnidek@redhat.com)
  - fix: [1.29] Remove command should not be primary command (jhnidek@redhat.com)
  - feat: deprecate autosubscribe/auto-attach register options
    (jajerome@redhat.com)
  - feat: deprecate attach/auto-attach modules (jajerome@redhat.com)
  - docs: deprecate attach/auto-attach in man page (jajerome@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat: 1.29 Deprecate remove sub-command (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora latest
    (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora rawhide
    (jhnidek@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.43-1
changelog:
  - [1.29] feat/cct-868: Subset of list command options marked as deprecated *
    Options --available, --all, --ondate, --servicelevel --no-overlap --match-
    install, --pool-only, --afterdate were marked as deprecated in ListCommand
    definition of their help string. (mgrunwal@redhat.com)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - docs: update proxy details in man page (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.44-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.45-1
changelog:
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.46-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - ci: use the right distro for coverage reporting (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.47-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: [1.29] Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - feat: [1.29] Call random.seed() at begining of auto-register
    (jhnidek@redhat.com)
  - feat: [1.29] Better control over auto-reg waiting game (jhnidek@redhat.com)
  - fix: [1.29] Enable content during auto-registration v2 (jhnidek@redhat.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Jiri Pirko <jiri@resnulli.us> - 1.31-1
changelog:
  1.31 release
  utils/bond2team: remove TYPE in ifcfg file
  utils/bond2team: keep delivering config to file if stdout not supplied
  teamd/lacp: silence ignore none LACP frames
  teamd: fix ctx->hwaddr value assignment
  Send LACP PDU right after the Actor state has been changed
  Skip setting the same hwaddr to a lag port if not needed
  Make all netlink socket RCVBUF sizes configurable
  Don't return an error when timerfd socket return 0
  Fix ifinfo_link_with_port race condition with newlink
  teamd: fix possible race in master ifname callback


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: RHEL Packaging Agent <jotnar@redhat.com> - 0.3.24-1
changelog:
  - Rebase to 0.3.24
  - Add missing libzstd-devel BuildRequires
  - Add missing files to the %files tests section
  - Resolves: RHEL-116442


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Peter Jones <pjones@redhat.com> - 2:0.5.0-3
changelog:
  - Add support for "mokutil --list-sbat-revocations" and
    "mokutil --set-sbat-policy"
    Related: CVE-2022-28737


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Phil Sutter <psutter@redhat.com> [1.0.9-4.el9]
changelog:
  - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
  - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-3.3
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-73344, upgrade openCryptoki
  - Resolves: RHEL-90590, basic support of AES-GCM
  - Resolves: RHEL-72965, cca token support cipher keys
  - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75762, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
  - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104602


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Fix pkcsslotd fails to start in FIPS
  - Drop tier1 test as it mostly provides duplicate results
  - Enable ci test for FIPS mode
    Resolves: RHEL-109050


